google/gvisor ? reverse-engineered prompt

Build me a container sandbox tool that gives applications a strong layer of isolation from the host machine, while still letting them run like normal Linux apps. I want it to behave like a Linux like environment in userspace, so existing container workflows still work, especially with Docker and Kubernetes.

It should include a command line runtime that can launch sandboxed containers, plus the supporting pieces needed to make that runtime work reliably. Make it feel like a real open source project with clear docs, tests, and a straightforward way to build and run it on Linux, and if possible keep the code in Go. It’s fine to look up current docs online if you need to.

Please set it up so I can build a release style bundle, run unit tests and integration tests, and try it locally with standard container tooling. If there are parts that need platform specific support or extra binaries, wire those in too, but keep the main user experience simple.