A kvm hypervisor is not perfect, as sandbox escape was demonstrated even with https://qubes-os.org/ https://qubes-os.org/ . On modern AMD/Intel/ARM64 consumer

A kvm hypervisor is not perfect, as sandbox escape was demonstrated even with https://qubes-os.org/ https://qubes-os.org/ . On modern AMD/Intel/ARM64 consumer processors it is not possible to completely prevent bleeding keys across regions. Only the old Sun systems with hardware encrypted mmu pages could actually enforce context isolation. If performance is not important, and people are dealing with something particularly nasty... than running an emulator on another architecture is a better solution. For example, MacOS M4 with a read-only windows amd64 backing-image guest OS is a common configuration. https://github.com/86Box/86Box/releases https://github.com/86Box/86Box/releases https://github.com/Moonif/MacBox/releases https://github.com/Moonif/MacBox/releases Best of luck =3