SABRE: Deterministic Post-Silicon Microarchitectural Audit via Symmetric Control Flow Isolation

This paper presents SABRE (Symmetric Architecture & Boundary Risk Evaluator), a deterministic bare-metal diagnostic framework designed for high-precision microarchitectural metrology on modern out-of-order processors. While traditional post-speculative hardware security evaluations rely on probabilistic fuzzing that suffers from severe environmental noise—such as arithmetic calculation bias, spatial prefetcher triggers, and frontend instruction cache decoding noise—SABRE introduces Symmetric Control Flow Isolation (SCFI). By forcing the CPU to execute mathematically identical machine instruction sequences in both low and high-entropy evaluation campaigns, SABRE isolates pure speculative execution delays with nanosecond-level precision. Evaluated on Intel Xeon (Sandy Bridge-EP) and AMD EPYC (Zen 3) microarchitectures, the framework successfully detects Reorder Buffer (ROB) saturation cliffs and quantifies genuine cross-thread ROB partitioning under SMT/Hyper-Threading contention directly on host silicon without relying on statistical noise-filtering classifiers.