Look up CHERI processor and CHERIBSD at Cambridge. Look up Gaisler Leon3&#x2F;4 SOC. License them, port CHERI tech to Leon, add capability-aware IOMMU, add TRNG, add ROM for main bootloader, fab the joker, and you got critical part of a secure computer. Clone Tandem Nonstop lockstep tech if you want fault-tolerance.<p>And there you go. A secure PC for only a few million dollars with BSD support. Optionally port EROS microkernel w&#x2F; jVPS filesystem for stronger solution.