On: Show HN: Nucleus – A security-hardened, Nix-native container runtime

[mpalmer]

    If your mental model is "run my image instead of docker run," this won't fit. If it's "run untrusted or ephemeral workloads with stronger, auditable isolation on a single host," that's the target.

This in particular is barely coherent.