nix-housing: live inside a sandbox

Hi,

I've built a data-isolation tool based on Landlock (via go-landlock):
https://codeberg.org/decentstates/nix-housing

It is different from existing tools in that:
- It is made for creating environments with mutually exclusive data
  access.
- Programs and program configuration is combined with sandboxing.
- Made to integrate at the WM level.

It is closest to Island, which was my starting point in creating this
tool.

Here are some blog posts explaining it:
- https://decentstat.es/posts/shai-halud-nix-housing/
- https://decentstat.es/posts/nix-housing/

It is tied into nix but the concept should be translatable.

Small nixos discourse discussion here:
https://discourse.nixos.org/t/nix-housing-live-inside-a-sandbox-better-hygiene-for-your-shell/79501


Disclaimer:
Non-vibecoded, I wrote the code 90% myself, trying to keep it minimal
and simple, with the main exception being wayland-security-context.c
which I plan on auditing later.


Regards,
decentstates