See Markus Ottela&#x27;s Tinfoil Chat. He incorporated many suggestions from several of us in high-assurance security. Only guy doing FOSS to do that IIRC.<p>It&#x27;s Python since he&#x27;s not a system programmer. A port to a safe subset of C or SPARK Ada on stripped BSD or microkernel is necessary before I&#x27;d start trusting it.