Can you break this "safe" interpreter?

May I humbly suggest that you incorporate LFE code? I mean Lisp is way better at that whole macro expansion thing anyway. I mean rather than trying to write a “safe” interpreter in Elixir, call out to LFE code and use that to generate the BEAM code.

Just a suggestion, of course.