CONCEPT: Security access for apps

You can make settings in the app permission to access to the functions of reading and writing files, Internet access, as well as to the registry. This approach allows users to restrict access to questionable applications without additional software and be truly protected. You can also make a control parameter in which a user box asking for permission settings will be called when you run any application.

Sandbox mode saves the register file and write files next to the application. For example, if a program wants to write a file in the system, it writes a file to my folder (% APPFOLDER%\Windows\System32\...). Similarly, the registry (%APPFOLDER%\Registry\HKEY_LOCAL_MACHINE\...).

Sandbox & clear mode enables read and write access to your directory, but removes all after the launch.

If these modes, the program cause other programs, they are assigned are the same access settings.

UPD:
Maybe in first run, in the setup wizard, can ask question about safety for user: secure way to run all the applications (the default) or always ask when you start a new application, or user self-monitors safety applications.