Comprehensive Formal Verification of an OS Microkernel [pdf]courses.cs.washington.edu1 pointitsspring6 years ago