CoGENT: Verifying High-Assurance File System Implementations
Formal verification of a realistic compiler