https://platoaistream.com/plato-data/formal-processor-model-providing-secure-speculation-for-the-constant-time-policy/