Run any OCI/Docker image as a hardware-isolated microVM on macOS HVF (Linux KVM and Windows WHP in progress). Single library API, zero flags for the common case, sub-100 ms cold-restore from snapshot.
// PORT TARGET: devices/src/virtio/vsock/reaper.rs
// Source size: 74 LOC
// Status: skeleton (no impl)
//// background thread that scans muxer for closed proxies and removes them. Avoids per-event reap cost in the hot path