Crafting a Usable Microkernel, Processor, and I/O System with Strict and Provable Information Flow Security