MicroVMs

Isolation boundaries, Firecracker internals and disposable machines. What changes when every workload gets its own kernel instead of sharing one.