In an oxide episode there were some mentions of reading off data lines but I just don’t think that’s practical.
The reduced attack service is cool but not at the expense of my visibility and liveness of the system
You could make the argument that Rust w/ its memory safety is a candidate, but w/ Rust it's still entirely possible and fairly easy to break out of that. And Rust/Cargo applications have a habit of using a bazillion third party deps that you then need to keep a close eye on.
Use Rust and the chances of an application overflow drop off a cliff. The debug-ability also increases the surface for bugs themselves. The majority of cases we're talking about chips that can comfortably be hardware-simulated. And/or all you need is some way for a dev machine to edit memory and an AI can work through the night to explore a configuration space much larger than you would ever have.
people always talk about losing the excellent debugging facilities that linux gives you. if a service crashes in a big cloud environment what is that you do now that works so well. do you think its intractable to implement that in a single-process kernel?