CHERI: A Hybrid Capability-System Architecture for Scalable Software Compartmentalization
Dune: safe user-level access to privileged CPU features