Microsoft cross-platform sandboxed execution container provides policy-driven layered isolation for untrusted code, offering multiple backends and containment controls for security-conscious developers and platforms.