I don't know why you are being modded down. It's indeed possible to avoid ever generating speculative fetches to sensitive data by simply ensuring the indexed

I don't know why you are being modded down. It's indeed possible to avoid ever generating speculative fetches to sensitive data by simply ensuring the indexed access can't ever reach outside the sandbox in the first place, not even in any possible speculated case. Just don't use conditionals and branches to do that, but something else. Like MMU to move data out of range or bitwise AND clamping