There's been quite a few of these systems over time. Especially sold commercially. IBM System/38, evolved into AS/400 and IBM i, is one of architectures descri

There's been quite a few of these systems over time. Especially sold commercially. IBM System/38, evolved into AS/400 and IBM i, is one of architectures described in this book: https://homes.cs.washington.edu/~levy/capabook/ https://homes.cs.washington.edu/~levy/capabook/ Far as language-based security, the first mainframe for businesses used a high-level language combined with a CPU that dynamically checked the programs. Still sold by Unisys but I doubt hardware checks still exist. http://www.smecc.org/The%20Architecture%20%20of%20the%20Burroughs%20B-5000.htm http://www.smecc.org/The%20Architecture%20%20of%20the%20Burr... The Flex Machine implemented capabilities and trusted procedures in the microcode: https://en.wikipedia.org/wiki/Flex_machine https://en.wikipedia.org/wiki/Flex_machine ASOS supported a mix of methods where each app was Ada for its safety features but a MLS kernel modeled in Gypsy separated various security levels: https://pdfs.semanticscholar.org/42a4/e6f812538c18461277c58a8464d2aa0c551f.pdf https://pdfs.semanticscholar.org/42a4/e6f812538c18461277c58a... SAFE explored tagging at CPU level which got commercialized as CoreGuard or Inherently Secure Processor: http://www.crash-safe.org/papers.html http://www.crash-safe.org/papers.html https://www.draper.com/explore-solutions/inherently-secure-processor https://www.draper.com/explore-solutions/inherently-secure-p... In embedded, there's Java processors that run bytecode natively with some support for separation. They blur the line between VM's and native apps: http://ajile.com/index.php?option=com_content&view=article&id=4&Itemid=5 http://ajile.com/index.php?option=com_content&view=article&i...