WasmEdge Sandboxing Mechanism

[Mohamad-Jaafar NEHME]

Hi there,

Trying to figure out the WasmEdge underlying infrastructure, I read some documentations around. However, I found the definition a bit obscure:

WasmEdge, formerly SSVM, is an open source WebAssembly VM optimized for the modern cloud and edge devices.

My understanding is that it's a bare WASM runtime with a set of plugins/tools (not a VM). This runtime is compatible (or can be executed) in a set of containers/VMs.

So, is WasmEdge a Virtual Machine? Does it have one under the hood (in its core)? Does it implement any sandboxing mechanism?

I honestly searched a lot, digged into the code but can't find any WasmEdge sandbox.

I would appreciate any clarification here. Pointing to the VM architecture illustration or to a detailed VM documentation would be appreciated as well.

Thank you,