“It took AWS's automated reasoning team five years to manually formalize the memory isolation component of their hypervisor.”