COGENT: Certified Compilation for a Functional Systems Language
seL4: formal verification of an OS kernel