Real CPython
Not a Python-to-JS transpile. CPython 3.14 built for wasm32-wasip2, with the whole stdlib, C-extension surface intact.
Sandboxed by design
No dlopen, no host escape. Every OS-shaped call goes through a WIT capability boundary — digest-trusted, swappable, auditable.
Ships anywhere wasmtime runs
Edge, plugin, lambda, audit sandbox — one composed component (pylon.wasm) that runs under any WASI Preview 2 component runtime.
Quickstart
brew install tegmentum/tap/pylon
pylon -c "print(1 + 1)"
# => 2
More install channels — tarball, install script, pip wheel, Docker image — on the quickstart page.