A Rust-based bare-metal kernel implementing zero-trust execution, cryptographic self-measurement and capability enforced isolation forming the core of the NØNOS operating system.