Combining this with ksql(3), we're able to use a stdio pledge for our entire application, guaranteeing the separation between ksql(3) and our application—and thus our roles.

In both cases, the system is terminated on errors: in the first case, ksql(3) will abort. In the second case, a pledge violation occurs.