System calls
__wasi_args_get()
command line args should not be ambient. The data is static, but it is still about the outside world, and one system might want to deny or virtualize it for a subsystem.
__wasi_args_sizes_get()
__wasi_clock_res_get()
OMG the clock should not be ambient. Neither should anything else that enables the code to sense duration. Clock id is a type, not a cap to a particular time service.
__wasi_clock_time_get()
__wasi_environ_get()
Same as command line arguments, but should be separately reified.