[ebb_earl_co]

The text says that it uses OS-level tools, specifically bubble wrap on Linux.

[afshinmeh]

That's right. It uses the same kernel mechanisms as Docker, the runtime is different though (bwrap on linux, seatbelt on mac, etc.)