A Formal Model for Capability Machines
capability hardware enhanced risc instructions : cheri instruction - set architecture ( version 7 ) .