IOPMP, which stands for Input/Output Physical Memory Protection, is a mechanism that provides access control over system address space by I/O agents to protect multiple security domains with separate access controls. The IOPMP mechanism is designed to prevent unauthorized access to memory by I/O agents such as DMA or GPU, which are connected to the bus fabric. This will be a Non-ISA specification and will support the following capabilities listed in the [IOPMP Charter].

Plan:

https://docs.google.com/document/d/1PrxwaoT8QhDUbOr3sQ8pG-1bpMaoELOq1BXcPTGl2HA/edit

Status:
https://docs.google.com/spreadsheets/d/1Zo4_eqHGZ3h7rEMcxnnCjQK2BpJ2u6exK0b8Laulw8M/edit#gid=1421035361