Running the manual: An approach to highassurance microkernel development (2006)

by P Derrin, K Elphinstone, G Klein, D Cock, M M T Chakravarty
Venue:in Proc. ACM SIGPLAN Haskell Workshop