I'm wondering, for example, if the branch predictor could take the page table/TLB into account, thus preventing one process from poisoning its predictions for another process.

(Also, I know bumpkiss about CPU design. I actually managed to fail a college class on it. True story.)