https://github.com/oro-os/kernel
It's a user-less, capability-less microkernel design that enforces access control via the kernel's entity hierarchy. Shared memory ports with various levels of safety are the primary form of IPC, typed at the kernel level.
Currently undergoing later stages of the kernel efficacy stage; if I can prove the design I'll do a more formal writeup. It's been a project in my head for about 8 years and in the editor for about 4 now.
https://rtic.rs/ is a pretty cool idea for an embedded RTOS (sort of).
Honestly though there's still stuff in Plan 9 that is way more advanced than what Linux does, e.g. https://9p.io/sys/doc/lexnames.html
https://redox-os.org/It's funny because I want this when I write applications. Each library should run in its own sandbox, and by default they shouldn't be able to touch each other's data.
[0]: https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/
[1]: https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-949.pdf
https://learning-0mq-with-pyzmq.readthedocs.io/en/latest/pyzmq/patterns/pair.htmlRedox has delivered these existing ideas in a manner that will soon enough be (if not already) suitable for production use and available to package for casual non-hacker users. If there is another project that has also done this in a non-academic way, I'd like to see it.