After looking at so many options, that is also my take.

These should be decoupled.

Maybe I need nono in one context and smolvm in another or both.

I would not want to trust the harness to self policy.