Run any OCI/Docker image as a hardware-isolated microVM on macOS HVF (Linux KVM and Windows WHP in progress). Single library API, zero flags for the common case, sub-100 ms cold-restore from snapshot.
// macOS lacks epoll. This module exposes a Subscriber /
// EventManager surface for the device layer, backed by kqueue
// (libc::kqueue / kevent) underneath. The device-side code stays
// portable; only this shim has to know about the host primitive.