I think the only solution you want to use are AppContainers. AppJailLauncher (our code) wraps them to make taking advantage of AppContainers easier.

I think the one other useful sandboxing-related tool for Windows comes from Project 0, and they are for assessing the security of a product that uses one: https://github.com/google/sandbox-attacksurface-analysis-too...

Do you know of any good starting points for documentation/information for AppContainers? I'm finding it hard sifting through irrelevant news articles and somewhat-relevant-but-still-irrelevant microsoft/docker marketing statements

Both AppJailLauncher and AppJailLauncher-rs have a good overview of how to use them in their source code!

Not a Windows expert, but: are you looking for different libraries using the same ACL mechanism? Windows isn't Linux, you're not going to find ten different incompatible sandboxing mechanisms...