This has been attempted many times with python, and always been a failure because of the dynamism of the language, even by big actors.

The solution, therefor, as always been to use the OS tooling for that. Even the .Net ecosystem eventually went into that direction.

The JS ecosystem is making that mistake right now, and will of course, deprecate this API in 10 years after they realize they can't make it secure either unless they basically reimplement BSD jails entirely.