We've discussed just simple things like just giving people a wasm sandbox, but also more complex ideas like trying to constrain extensibility such that "policies" end up being code that generates a "virtual graph" that is also time-stamped like everything else in the system.