Running Python code in a sandbox with MicroPython and WASM
Simon Willison released an alpha package, micropython-wasm, that runs MicroPython code inside a WebAssembly sandbox via wasmtime. It enforces memory/CPU limits, restricts file and network access, and supports persistent state and host functions for safely executing untrusted code in Python applications.