Qubes OS would work great too. I just prefer Debian, so I've hacked together a poor-man's sandbox on that platform. While it doesn't provide the degree of host-level isolation that Qubes does, I think it's pretty effective for what this RFC is about.