Delusional boot: securing hypervisors without massive re-engineering
seL4: formal verification of an OS kernel