//core/hardware_out_streams
//core/hardware_out_streams/auditory
//core/hardware_out_streams/visual
//core/hardware_out_streams/internet
//core/hardware_out_streams/system_internal //fans
//core/hardware_out_streams/
//users/
//users/default //contains files every account will have
//users/default/programs
//users/default/programs/
//users/default/programs//executables //executables can access libraries from the core and any in or inherited libraries from the profile and libraries in its folder.
//users/default/programs//libraries
//users/default/programs//
//a program MUST exist only in its folder and may not have any components in ANY other folder. Write permissions must be defined during install and be approved by the system and the user, or root. Read permissions?
//users/default/libraries
//users/default/personal
//users/default/personal/ //typical
//users/root //profile to be inherited when a user or the system invoke root
//users/root/programs
//users/root/programs/
//users/root/libraries
//users/root/personal
//users/system //the system has its own account!
//users/group0 //administrators
//users/group0/default
//users/group0/
//users/group0//
//users/group
//users/group/default
//users/group/
//each numbered group has its own set of defined limits

I don't know much about the symbolic relation to files in the FS to their data, but if its fully symbolic, it would be very flexible.

I would like it if programs run with absolute minimum permissions by default and can only go up to the user's permissions with the user explicitly giving that permission. e.g. a text editor at install would have to be given permission to read and write from the user's personal folder, and if denied it can only access its own folder for saving documents.