Abstract Virtual memory is an essential mechanism for enforcing security boundaries, but its relaxed-memory concurrency semantics has not previously been investigated in detail. The concurrent systems code managing virtual left on entirely informal basis, and OS hypervisor verification had to make major simplifying assumptions. We explore the design space relaxed Armv8-A architecture, support f...