The word “isolation” gets used loosely. A Docker container is “isolated.” A microVM is “isolated.” A WebAssembly module is “isolated.” But these are fundamentally different things, with different boundaries, different attack surfaces, and different failure modes. I wanted to write down my learnings on what each layer actually provides, because I think the distinctions matter and allow you to make informed decisions for the problems you are looking to solve.
我在《把离线AI智能体装进口袋里》（The Dawn of Offline AI Agents in Your Pocket）一文中对此进行了详细阐述。但文章中的示例更像是Demo，而非生产解决方案。像 Gemma 3n 这样的模型虽然能够很好地处理函数调用，但它们体积过大：无法集成到应用程序包中，需要单独下载，即使在旗舰机型上推理速度也很慢。在低端设备上，它们根本无法运行。而较小的型号则经常出现故障，难以记住工具。，更多细节参见快连下载安装
即将倒闭的大富豪夜总会门前，印度阿差哥脸上写满愁容（图：南方人物周刊记者 方迎忠），这一点在同城约会中也有详细论述
Фото: Clodagh Kilcoyne / Reuters