I would recommend nono - it's practically 0 seconds of latency, developed by the creator of sigstore which is used by google, github, and secures a lot of the open source software supply chain.

What I like most is, its like a runtime `nono run ... agent` and there is not managing vms, containers ,mounts.