After some initial work, here’s how my sandbox replacement sydbox looks:
It Works!
Looks cool, don’t you think? ;)
Right now, it only works fine on amd64.
There are some issues to fix on x86. I wish I had access to a non-hardened x86 box…