4 ms·Correctness Proofs for Device Drivers in Embedded Systems (2010) [pdf]2 points by vg_head 5y ago