Xen Hypercall Filter

Is there an equivalent tool like gVisor for the Xen? a hypercall filter?

Is there a way of blocking or filtering hypercalls?

This is in no way specific to Qubes OS. Please ask in Xen forums.