An analysis of Spectre and software isolation is here:
https://arxiv.org/abs/1902.05178
Reply on news.ycombinator.com