Meanwhile, a Very Smart Guy
TM at Azul Systems says your runtime needs to be protected because shit happens:
For your application you probably don’t even need separate user and supervisor modes since all executable code is generated by your just-in-time compiler from a safe language.
That’s the theory but the practice is a little different: JVM’s crash and 1 crashing JVM should not bring down the whole box. So we in fact have a user/kernel split and it’s saved our butts any number of times.
http://www.azulsystems.com/blog/cliff/2008-11-18-brief-conversation-david-moonWant to prove your runtime implementation is correct? See you again in five years; let us know how it went.