Function evaluate 

pub fn evaluate(
    prog: &[Insn],
    arch: u32,
    nr: u32,
    args: [u64; 6],
) -> Result<u32, String>

Runs prog on one syscall the way the kernel does and returns the SECCOMP_RET_* value. Supports only the opcodes program emits.