4 ms·

but does the hardware? Formally proven code does not prevent you from hardware bugs like rowhammer.