ACRFence is classified as partially targeting unknown-safe execution for A1; the proposed attack was validated, but the system was not implemented.

来源：paper:PDF p. 7, Table 3, ACRFence row; Markdown block p7-b65