[PyroLagus]

I'd say Genode fits the bill. The cool thing is that parent processes have complete control over the services their children access and can block them, replace them, delegate them, etc.

https://genode.org/