Congratulations on being the only person in this thread with two feet on the ground. Interesting discussion, nonetheless. But purely academic.
http://nativeclient.googlecode.com/svn/data/site/pnacl.pdf
Summary: Send LLVM bytecode to the browser, and enforce sandboxing by inspecting the compiled code.