Munal OS: Software-defined isolation via WASM

Munal OS is a Rust unikernel that strips away the bootloader and page mapping. It replaces the MMU with a WASM engine to handle security boundaries between the kernel and applications. This is a bold bet on software-defined isolation. I am curious about the performance overhead of the WASM runtime compared to traditional page tables. Are there benchmarks showing the latency impact? It would be useful to see how this approach handles memory fragmentation without a traditional virtual memory system.

Source

A Rust OS that replaces virtual memory with WASM sandboxing