It's an interesting project. I like the concept of having a security mindset from the start:

Quote:Each program runs in a dedicated sandbox and gets granted only those access rights and resources that are needed for its specific purpose.

I see this as the way forward, the principle of least privilege and isolation, every OS is including some form of sandboxing and delimitations between programs. If you think about it, it's the evolution of the separation in virtual memory using hardware mechanisms to protect cross-pollination and stuff like chroot, towards more advanced things like mandatory access control. I'm thinking of things like pleged and unveil on OpenBSD and seccomp on Linux.