cool idea. honestly this sounds like a paas built on kubernetes. k8s has the security context, network policies, and resource constraints you’re looking for, and provides an api for orchestrating workloads across nodes. - you could use nostr notes as workload definitions - you could use zaps to fund execution