Island sandboxing tool

This project develops a Linux-native sandboxing tool, based on the Landlock security module in the Linux kernel. Current sandboxing on Linux doesn't have much of a middle ground between a chroot (which changes the apparent root directory for the current running process and its children but is easy for programmes to escape), and a full virtual machine / container environment. Island would require no privileges and ensure robust security via context-driven sandboxing. The main innovation is context-driven sandboxing, where security profiles are applied automatically based on the current working directory or other contextual cues. Key features include seamless shell integration, a dedicated declarative configuration format, automated profile management, advanced environment isolation, and auto-completion for profiles and commands. The expected outcome is a user-friendly, flexible, and secure tool that streamlines command execution, policy management, and environment handling for modern Linux environments.