The XR_EXT_win32_appcontainer_compatible extension.

To minimize opportunities for malicious manipulation, a common practice on the Windows OS is to isolate the application process in an {url-appcontainer-isolation}[AppContainer execution environment]. In order for a runtime to work properly in such an application process, the runtime must properly {url-appcontainer-impl}[set ACL to device resources and cross process resources].

An application running in an AppContainer process can request for a runtime to enable such AppContainer compatibility by adding EXT_WIN32_APPCONTAINER_COMPATIBLE_EXTENSION_NAME to enabledExtensionNames of XrInstanceCreateInfo when calling CreateInstance. If the runtime is not capable of running properly within the AppContainer execution environment, it must return ERROR_EXTENSION_NOT_PRESENT.

If the runtime supports this extension, it can further inspect the capability based on the connected device. If the XR system cannot support an AppContainer execution environment, the runtime must return ERROR_FORM_FACTOR_UNAVAILABLE when the application calls GetSystem.

If the call to GetSystem successfully returned with a valid XrSystemId, the application can rely on the runtime working properly in the AppContainer execution environment.