Part2: A VM with No Kernel: A Minimal Syscall Shim and a Hypervisor Backstop | Dark Hacker News