Brad Campbell

I can try. In this scenario there are two trusted signers, CompanyA and CompanyB. The kernel runs apps from both of them, but assigns a different range of shortids to...

> A single company could have multiple certificates. I'm using "company" as short hand. You can replace that with "signing entity" if you want. > The signature isn't valid though,...

Allowing the checker to explicitly communicate with the appid assigner helps with implementing complex appid assignment policies. Today, `Compress` only gets the process binary and (in part 1 of this...

> Also, why a `usize`? It seems very C-like to pass a arbitrary value around like that. Espicially one that changes bit widths if Tock is ported to a 64-bit...

I added the struct. Also, how big of a deal is using the nonzerousize? I switched back to a usize because not being able to use 0 seems like a...

I agree this seems like a great experimental feature. But I don't think we can say much about upstream until we better understand what APIs are needed and how it...

Can you outline what you are trying to achieve? It seems like something like this might work? Feels like we need multiple virtualization layers to support both kernel and userspace...

> has too much overhead In terms of latency? Or memory use? --- It sounds like you need a new capsule, once which uses the `I2CMaster` interface, but then allows...

> How about a second instance of the system call driver? AFAIK they were always assumed to be duplicable and can be instantiated at a second syscall driver number. This...

What should we do with this PR? Is it helpful to serve as a placeholder? Or close it? I think the intent is completely fine, but we want to preserve...