sandboxing

Microsoft eXecution Container (MXC)

An open-source, MIT-licensed SDK from Microsoft for running untrusted code — such as model output, plugins, and tools — in sandboxed containers on Windows, Linux, and macOS. It provides multiple containment backends, from OS-native process sandboxes to full virtual machines, behind a unified containment model, with policy-driven controls for filesystem, network, and UI access, and Rust, .NET, and Node SDKs.