Applications will each have their own namespace, and will only have access to user files if given the right to, on a per directory/file basis

This is a very nice approach. You should mention it on the main page of your OS site.