A security mechanism for separating running programs which provides a tightly-controlled set of resources for guest programs to run in?
Jailbreaker
Sandbox
Separator
Domain