Picokernel Witness Update