ArchitectureKernel-independent FIPS architectureTechnical deep-dive into Chainguard's kernel-independent FIPS implementation using userspace entropy sources