N. Jomaa, P. Torrini, D. Nowak, G. Grimaud, and S. Hym, “Proof-Oriented Design of a Separation Kernel with Minimal Trusted Computing Base”, eceasst, vol. 76, May 2019.