I would like something Unix-y and Linux-compatible that follows the principle of least authority.

Linux namespaces and cgroups and seccomp are a mess ... but actually they are probably more functional than what OS X or Windows provides.

I wonder if we can do better. But maybe not in this project?