From Supervisor Mode to Distributed Enforcement: A History of Hardware-Enforced Platform Security

Abstract

This author preprint presents a structured historical comparison of eight families of hardware-enforced platform security mechanisms. It proposes the concept of a distributed enforcement fabric: a topology in which security-relevant events, names, policies, evidence, and lifecycle transitions are distributed across heterogeneous platform components. The analysis uses manuals, original research papers, standards, and historical studies. Its five comparative operations—naming, mediating, measuring, remembering, and erasing—connect dissimilar mechanisms without reducing platform security to cryptography or treating its history as linear progress. The accompanying reproducible materials ZIP contains the permitted structured pilot corpus, synthesis matrix, source-and-claim register, search strategy, data dictionary, methodology, README, license, and SHA-256 manifest. It excludes primary-source scans, proprietary documentation, unpublished reviews, personal material, secrets, and generated dependencies.