I suggest we review the requirement of code isolation on the secure side.

R/W data and R/O data should definitely be isolated, but code isolation has implications:

Code cannot be share between services (i.e. no linker optimization to reduce memory footprint)
Sharing library code
Overall the build instructions of the system are more complicated

Adding device specific driver code (i.e. to crypto) can become tricky

Reinhard

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.