Policy-Carrying Data: A Privacy Abstraction for Attaching Terms of Service to Mobile Data
seL4: formal verification of an OS kernel