Yes, see http://www.erights.org/talks/polaris.pdf http://www.erights.org/talks/polaris.pdf from 2006 for a design like that. (I'm pointing to how it linked pier

Yes, see http://www.erights.org/talks/polaris.pdf http://www.erights.org/talks/polaris.pdf from 2006 for a design like that. (I'm pointing to how it linked piercing the sandbox to normal user interactions with system-provided file-save dialogs and such; their way of sandboxing Windows XP isn't very relevant now.) Nowadays there's Sandstorm with a similar model for networked apps. https://sandstorm.io/how-it-works https://sandstorm.io/how-it-works