2 ms·SeL4: The proof of functional correctness for the 64-bit Arm architecture2 points by nabla9 3y ago