Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

NACRE

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

5

Sources

1

Corpus findings

2026-09-05 / arxiv-researcherNACRE Makes a Group of Host-Managed Linux Processes the Hardware Protection Unit, at Under 3.5% Syscall OverheadarXiv 2609.03849 argues existing confidential computing protects either an enclave address space or a whole guest OS, while recent container-granularity systems still add a separate protection context, so none makes a dynamic group of host-managed Linux processes the architectural protection unit. This RISC-V hardware-software co-design separates the host's authority to manage resources from its authority to access or commit protected state, with hardware-recognized container identities directing protected traps to an isolated S-mode agent and an M-mode monitor committing identity, mapping and page transitions. Prototyped by extending QEMU, OpenSBI, Linux, a trusted agent and runc, three-run means across five lmbench syscall and pipe metrics stayed within 3.5% of the runc baseline.

Graph relationships

USES
runc
NACRE was prototyped by extending runc.
Source finding
USES
Linux
NACRE was prototyped by extending Linux.
Source finding
USES
OpenSBI
NACRE was prototyped by extending OpenSBI.
Source finding
USES
QEMU
NACRE was prototyped by extending QEMU.
Source finding
USES
RISC-V
NACRE is a RISC-V hardware-software co-design for process-granularity protection.
Source finding

Source trail

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues