Add support for enabling Windows Protected Process Light (PPL) on the current process

[userwnt]

Feature or enhancement

Proposal:

Feature request / Enhancement

Summary

Windows PPL is critical for security-sensitive applications. Currently,
enabling PPL for the current Python process or a child process requires
lengthy, fragile ctypes code. I'd like to request built-in support.

Proposed APIs

1. Command-line flag (for the current Python process)

python -X ppl=antimalware myscript.py

2. As a module (for both current and child processes)

import ppl

# Enable PPL on the current process
ppl.protect_current("antimalware")

# Launch a PPL-protected child process
proc = ppl.Popen(["my_app.exe"], protection_level="antimalware")

Supported levels

· "antimalware" (signer level 3)
· "windows" (signer level 4)
· "winTcb" (signer level 6)

### Has this already been discussed elsewhere?

No response given

### Links to previous discussion of this feature:

_No response_

[StanFromIreland]

Hello, please open a thread with your idea in the Ideas category of the Python discourse. Note that adding a new module is a significant change, and requires a PEP.