Title: The formal specification of a safety kernel