This count includes the SVA VM run-time system and the passes that we added to the compiler to enforce our security guarantees. Overall, we believe that the complexity and attack surface of Virtual Ghost are far smaller than modern pro- duction hypervisors like XenServer but approximately com- parable to a minimal hypervisor.