[nilslice]

Oh, and here's an example (test) showing how to construct a "manifest" to control the cpu/memory limits: https://github.com/extism/extism/blob/main/python/tests/test...

cpu is really controlled by # milliseconds until the wasm code is trapped.

[simonw]

That looks like exactly the level of control I've been hoping for in terms of sandboxing. This is really promising!