Huge progress has been made.
Implemented by dracut module cold-boot-attack-defense (by security-misc).
Will in near future be available for Kicksecure hosts. Should be easy to port to other Linux distributions.
See design documentation, review welcome:
More documentation, call for testers coming in near future.