Runs in early boot and forms part of the Trusted Computing Base
Requires deterministic behavior and tight control of memory layout
Minimal runtime footprint — no allocator/GC, predictable timing
Mature embedded toolchains and debug tooling for bring-up
Assembly used sparingly for reset, traps, and constant-time primitives