hypertalk
A shell scripting language for when machines write the scripts and humans only review them. No interpolation, so injection is unrepresentable. Capability manifest, business-rule policy engine and a kernel-held sandbox — checked before anything runs.