Rust separation-kernel Type-1 hypervisor from Syswonder, descended from Jailhouse and RVM1.5. Static partitioning of hardware into isolated zones, no CPU scheduler, no overcommit, virtio trampoline for paravirtual I/O.
Rust Type-1 hypervisor built as an application of the ArceOS unikernel: vCPUs are scheduled as ArceOS tasks, and the hypervisor is a thin shell over a stack of arceos-hypervisor crates (axvm, axvcpu, axaddrspace, axdevice, axhvc).
AWS’s Rust microVM (~50 KLoC) on KVM, the production substrate for AWS Lambda and Fargate. The reference for what a VMM looks like when its requirements are aggressively bounded; jailer + Rust + minimal device set as defense in depth.