Given the new “router ban”, and how it’s all because of security, it occurs to me that an Ada implementation of the requisite standards/protocols, proved with SPARK and leveraging Annex H’s Inspection_Point and Reviewable pragmas would go a long way to addressing the problems — bonus points if it’s bare-metal, foregoing even an OS.
(The way to hit all the problems would be to VHDL the components, too. On that thought, see this thread.)