Shout-out to Sai, who hacked across the stack -- writing OCaml for MirageOS unikernels, hacking on the OCaml and Clang compilers, hacking linkers, hacking firmware to get bare-metal setup, and hacking Bluespec to extend the Shakti RISC-V processor with security extensions!
1/ Our paper on end-to-end compartmentalisation for mixed safe/unsafe language systems got accepted at AsiaCCS 2026. FIDES enforces function-level isolation across OCaml and C with just 2 custom RISC-V instructions. No MMU or OS required.