4 ms·I suspect seL4 could be proven correct only because it uses simple lifetime patterns.by GoblinSlayer 2y agoI suspect seL4 could be proven correct only because it uses simple lifetime patterns.