Part2: A VM with No Kernel: A Minimal Syscall Shim and a Hypervisor Backstop · HackerTrans