What about Tropic?
A good change. But far from ready. Security ICs take years to develop and perfect. And in the end, you still cannot verify code running on it, the only difference being NDAd documentation and architecture which makes little difference to the end user.