I built exactly this at work over the past few months, sadly not open source though. It uses Cedar policies for process lifecycle, network activity (at basically every layer), filesystem access, credential usage through brokers, and so on, with context injected into every evaluation, and cgroup freezer on Linux for stop-and-escalate-to-user. Maybe I should use this as evidence of demand for us to open source it...