2 ms·A Million Lines of Proof About a Moving Target - seL4: Experiences in a Decade2 points by matt_d 7y ago