What led us here
Microkernels, eBPF, WebAssembly, LoRa mesh and confidential computing are usually filed as five unrelated hobbies. They are one argument, running for about a decade, about where you put a boundary and what it costs to cross it.
wasm
WASI starts with no ambient authority
The interesting part of WebAssembly outside the browser has little to do with portability. A module arrives with no ambient authority at all; it gets handles, not a filesystem.
