wasm-component-model
Provider-neutral, capability-secured portable agent reference runtime: signed agent envelopes, host-enforced permits, Wasm capsule execution, and checkpoint-based migration.