Project Hliðskjálf

Bare-metal Type-1.5 Rust hypervisor for immutable defense of EOL x86_64 hosts.

An ultra-lightweight Type-1.5 thin hypervisor in bare-metal no_std Rust and assembly. Live-virtualizes a running host into a hardware-enforced Ring-1 sandbox with EPT write-protection of critical kernel structures, built for retrofitting security onto Windows 10 and other EOL systems without a reboot.

Highlights

• On-the-fly VT-x initialization and control-register manipulation via inline assembly
• Multi-tier EPT identity mappings that trap unauthorized kernel writes as VM-exits
• Timing-instruction virtualization to resist sandbox detection with a <10MB footprint