NetBSD Jails offer a novel approach to lightweight, kernel-enforced isolation, bridging the gap between simple chroot environments and full virtualization like Xen. This experimental prototype runs multiple workloads on a single host with strong process isolation, system hardening profiles, supervised service execution, and unified lifecycle management. Crucially, the isolation and policy enforcement are built directly into the NetBSD kernel security framework, avoiding external runtime layers.

The goal is practical, operator-friendly isolation with minimal dependencies, no external control services, and explicit operational boundaries. Security depends on kernel correctness, and stronger trust separation might still require virtualization like Xen. The project provides source access and an experimental ISO build for testing.