wasm-sandbox
Ephemeral, stateless, capability-bound execution for untrusted AI and agent-generated code.