@article{Klein_AKMMO_17, author = {Klein, Gerwin and Andronick, June and Keller, Gabriele and Matichuk, Daniel and Murray, Toby and O'Connor, Liam}, date = {2017-9-4}, doi = {https://doi.org/10.1098/rsta.2015.0404}, issue = {2104}, journal = {Philosophical Transactions of the Royal Society A}, keywords = {{seL4}, proof engineering, code/proof co-generation, {Cogent}, {Isabelle}/{HOL}}, month = sep, pages = {1-23}, paperurl = {https://trustworthy.systems/publications/full_text/Klein_AKMMO_17.pdf}, publisher = {The Royal Society Publishing}, title = {Provably Trustworthy Systems}, volume = {375}, year = {2017} }