European. Cloud‑native.
Verifiable all the way down.

from std.cap_net import net_root
from net.http_server import new_server,
    server_get, serve

# A cloud-native HTTP service in 12 lines

fn handle_user(body: str, headers: str) -> str:
    id = http_param("id")
    return "{\"id\":" + id + "}"

fn main():
    net = net_root()   # only main mints it
    server = new_server(net, 8080)
    http_route_handler("GET", "/users/:id", handle_user)
    server_get(server, "/health", "{\"status\":\"ok\"}")
    serve(server)

from std.cap_ai import ai_root, ai_complete
from std.untrusted import untrusted_validate_length

# Model output is Untrusted<str> at the source.
# EU AI Act audit logging is automatic.

fn answer(ai: Cap<Ai>, question: str) -> Result<str>:
    reply = ai_complete(ai, "mistral", question)

    # Straight to a sink would be E0303.
    return untrusted_validate_length(reply, 1, 4000)

fn main():
    ai = ai_root()   # only main mints it
    print(answer(ai, "How do I deploy?"))

from std.cap_container import container_root,
    cc_pull, cc_run, cc_wait_ready, cc_logs, cc_stop
from std.cap_time import time_root

# Nothing on the host but this binary,
# a 5.15 kernel and libc.

fn main():
    c     = container_root()
    clock = time_root()

    cc_pull(c, "debian:bookworm-slim")
    id = cc_run(c, "debian:bookworm-slim")

    cc_wait_ready(c, id)
    print(cc_logs(c, id))
    cc_stop(clock, c, id)

# A module without Cap<Container> cannot
# start a container at all: E0404.

from std.cap_process import process_root
from std.cap_fs import fs_root
from sys.microvm_orchestrate import vm_spawn,
    vm_stats, vm_wait, vm_audit_verify

fn main():
    p  = process_root()
    fs = fs_root()

    # One OS process per tenant, each with its own
    # cgroup, Landlock scope and seccomp jailer.
    t = vm_spawn(p, fs, "vm_runner", [], "tenant-a",
                 512 * 1024 * 1024, 100, 128,
                 "/var/log/vm.audit")

    print(vm_stats(fs, t))
    vm_wait(p, fs, t, "/var/log/vm.audit")
    vm_audit_verify(fs, "/var/log/vm.audit")