Wasmtime
Wasmtime is the Bytecode Alliance's standalone WebAssembly runtime with WASI, the component model, ahead-of-time compilation, and multi-language embedding APIs.
Why use it
It can isolate mods, rule scripts, and user code inside native services with controlled permissions and resources.
Where it fits
Find engines, frameworks, code libraries, version control, and production automation.
What to check
A sandbox is not a complete security boundary; configure WASI capabilities, fuel, and memory limits explicitly.