If you have serious attack surface minimisation goals you need to embrace FOGAs. LLM coded unikernels have way too much bloat.

The Zynq UltraScale+ parts pair a hard ARM CPU with FPGA fabric. You can progressively isolate fast path and high security components in logic. LLMs are getting quite good at using synthesis tools.

https://www.amd.com/en/products/system-on-modules/kria/k26/k...