Building a Windows-native ACL sandbox for self-hosted LLM agents (and what still fails)

Disclosure: I used AI to help polish the English in this post. The architecture, code, and testing...