saywa
tawasuyu's web server: it serves signed versions and runs WebAssembly functions with declared capabilities.
saywa is tawasuyu's web server. It serves each site from a signed tree and, for the little that has to run, it executes WebAssembly functions that can only do what they were granted.
On this wiki's machine
saywa has already replaced the web server, the git forge, the proxy and the PHP interpreter. This wiki's search is one of its functions: it reads the index qhatu published along with the site, and there is no search server to attack.
What its log sees —a burst of errors on a site, abuse that the ban cuts off— goes into the task inbox on its own, as a signed minga issue.