I'm wondering if, in this day and age of multiprocessing chips, you shouldn't just have an entire core dedicated to running the OS with its own exclusive on-chip memory for OS code and data, while the user-space companion cores completely lack even the transistors for privileged execution. Save on all the privilege-level-managing logic and all??
Biting the hand that feeds IT
