Each workload gets real hardware isolation — its own kernel on Hypervisor.framework (macOS), KVM (Linux), or the Windows Hypervisor Platform (Windows). libkrun VMM with custom kernel: libkrunfw. Pack it into a .smolmachine and it runs anywhere the host architecture matches, with zero dependencies.
Images use the OCI format — the same open standard Docker uses. Any image on Docker Hub, ghcr.io, or other OCI registries can be pulled and booted as a microVM. No Docker daemon required.
As a data point, Purism has worked on USA supply chain for their cell phone (Librem 5), and currently ships with mixed-origin parts. "We use US companies with US fabrication whenever possible. Most distributors are based in the US with the exception of large integrated circuits that are made in a variety of countries where those companies do fabrication (US, Taiwan, South Korea, Japan); an example is the NXP CPU we use from their fabrication in South Korea." <https://puri.sm/products/librem-5-usa/#table-of-origin>
WASHINGTON, March 23, 2026—Today, the Federal Communications Commission updated its Covered List to include all consumer-grade routers produced in foreign countries. Routers are the boxes in every home that connect computers, phones, and smart devices to the internet. This followed a determination by a White House-convened Executive Branch interagency body with appropriate national security expertise that such routers “pose unacceptable risks to the national security of the United States or the safety and security of United States persons.”