Unikernel

A single-address-space image that compiles an application with only the OS library functions it needs into a minimal, fast-booting VM, yielding a tiny attack surface for disposable agent workloads.

grounded in: Latest-trends themes 'Sandboxing/isolation for AI agents' (disposable contained environments over real machines) plus 'build-it-from-scratch' minimalism; connects to systems-level memory-bug concerns