Backlog
Why?
Wasm may not provide ideal isolation on some environments. Wrapping Wasm runtime with a Unikernel and running in a VM may be a good approach, for the server or cloud side. From Wikipedia: A unikernel is a computer program statically linked with the operating system code on which it depends. Unikernels are built with a specialized compiler that identifies the operating system services that a program uses and links it with one or more library operating systems that provide them. Such a program requires no separate operating system and can run instead as the guest of a hypervisor.
What?
Evaluate unikernels and benchmark running inside VMM, like KVM.