Microsoft's MXC provides SDKs for containing untrusted code across operating systems

Microsoft's MXC repository offers a system for running untrusted code, including model output and plugins, in isolated workloads on Windows, Linux and macOS. Rust, .NET and Node SDKs let applications specify a workload command and containment rules; MXC validates the request, selects a backend and launches the workload. The system supports filesystem permissions, outbound network controls and restrictions on clipboard, display and graphical interface access. Its containment options range from operating-system process sandboxes to virtual machines. Host filtering depends on the backend, and audit mode disables all sandbox security for the workload being analyzed.