de0u apologies here is the roadmap I was referencing.
The roadmap can be broken down into several phases:
Near-term enhancements: Check the issue trackers for planned improvements and features. The majority of open issues are concrete and actionable.
Hypervisor integration: Deploy and integrate a hypervisor like Xen to leverage it for reinforcing existing security boundaries. Linux would run inside virtual machines at this stage.
Sandbox reinforcement: Replace Linux inside the sandboxes with a compatibility layer like gVisor, which would need to be ported to arm64 and given a new backend alongside the existing KVM backend.
Phasing out Linux: Over the long term (many years), Linux can be phased out completely, along with the usage of virtualization.
Hardware and firmware security: While currently limited to research and submitting suggestions and bug reports upstream, GrapheneOS aims to move into the hardware space in the long term.
I know these are far off I was just trying to envision it. I was struggling to conceptualize it and the implications of it.