multikernel/sandlock

**Brief summary (2‑3 sentences)** multikernel / sandlock is a lightweight, process‑based AI sandbox for Linux that runs without containers, VMs, or root privile