Policy-driven, layered isolation and containment - View it on GitHub