My main ask is whether this provides the "hard" isolation types (io, mostly, and gpu). It sounds really cool.

Now that I'm looking at it, I don't think this provides any kind of isolation. That's not what it's for. It's for distributing packaged programs.