Split gives two seL4 workers private configuration snapshots through a userspace pager that copies shared pages on first write and scrubs discarded frames before reuse, with an Isabelle model exported to OCaml for checking guest memory operations.

https://github.com/user-attachments/assets/7301c6cf-f13c-49f5-9c92-14049c07c3ef