Separation kernel technology