Running the manual: an approach to high-assurance microkernel development, in (2006)

by P Derrin, K Elphinstone, G Klein, D Cock, M M T Chakravarty
Venue:Haskell’06: Proceedings of the 2006 ACM SIGPLAN workshop on Haskell, ACM