Z‑Jail delivers a zero‑dependency, multi‑layer Linux sandbox for native code
Z‑Jail is a ~130 KB, single‑binary sandbox for Linux that layers seven hardening mechanisms—namespaces, pivot_root, capability drops, no‑new‑privs, seccomp‑BPF whitelist, audit logging, and more—without any external dependencies. It targets CI pipelines, CTF challenges, and lightweight code evaluation where full VM isolation is overkill.