SVA-OS provides operations that the kernel uses to insert and remove page table entries at each level of a multi-level page table and ensures that they do not violate internal consistency of the page tables or the in- tegrity of SVA code and data. Virtual Ghost augments these operations to also enforce the MMU mapping constraints described in Section 4.3.2.