This is wild -> github.com/microsoft/wa... "A security-oriented runtime that runs WebAssembly Components via MCP" It seems those WASM components get distributed as OCI images.