What I ended up with turned out to be a lot like Spin, but with some key differences and additions.
- one-off 'job' support. - QEMU and native binary support. (QEMU is probably broken right now, but would not be hard to round-out support for it) - mesh networking. adding new nodes involves setting the owner key and pointing it to a bootstrap peer - Built-in UI. Every node on the mesh can serve a management interface - Run now, codify later. Making config changes can be done in the UI and push to TOML when you're happy with it.
So in addition to hard isolation and resource quotas with WASI and QEMU, you can also use the system like a distributed computing mesh and submit jobs to it. I've been using it to make linux builds of itself on my linux machine automatically.
The README goes into a lot more depth.
I hope you feel inspired by this idea, and I really hope a real Rust dev will want to redesign it to be production ready.