Formal Verification, Microkernel, Capability Security, Isabelle/HOL

Assumptions
theprogrammersparadox.blogspot.com·4d·