Interesting project, so thought it’s worth mentioning/discussing.
We understand the complexity of code and policy as the most fundamental security problem shared by modern general-purpose operating systems. Because of high functional demands and dynamic workloads, however, this complexity cannot be avoided. But it can be organized. Genode is a novel OS architecture that is able to master complexity by applying a strict organizational structure to all software components including device drivers, system services, and applications. The Genode OS framework is an open-source tool kit for building highly secure component-based operating systems. It scales from embedded devices to dynamic general-purpose computing.
Because operating systems without applications are barely useful, compatibility to existing applications is a major concern. In the past, the concern of losing compatibility often prevented design legacies to be disposed of. Modern virtualization technology is the key to overcome this problem. In an preliminary study, a user-level version of the Linux kernel (L4Linux) was successfully ported to the Genode OS Framework running on a L4 kernel. This study suggests that Genode combined with an appropriate kernel or hypervisor is suited as a virtual-machine hosting platform… Genode not only facilitates the use of virtual machines for application compatibility but also the re-use of existing device drivers.
General overview: Genode - General overview
Architecture: Genode - Genode architecture documents
It has a flagship distro called SculptOS that runs on PCs and Pinephones. It’s been reviewed by Distrowatch.
Genode OS Framework has a very clean and though out design and also has excellent documentation.