Z-Jail

Z-Jail is a lightweight multi-layer sandbox for executing native code on Linux, designed for scenarios such as CI pipelines and CTF challenges. It features seven ordered isolation layers that enforce security measures like namespaces, capability dropping, seccomp-BPF syscall whitelisting, and auditing with JSON logging, all within a compact ~81 KiB binary and without external dependencies. This makes Z-Jail a unique solution that balances minimalism and robust security for code execution environments.