@article{Klein_AKMMO_17, doi = {https://doi.org/10.1098/rsta.2015.0404}, publisher = {The Royal Society Publishing}, month = sep, journal = {Philosophical Transactions of the Royal Society A}, paperurl = {https://trustworthy.systems/publications/csiro_full_text/Klein_AKMMO_17.pdf}, year = {2017}, issue = {2104}, keywords = {{seL4}, proof engineering, code/proof co-generation, {Cogent}, {Isabelle}/{HOL}}, volume = {375}, title = {Provably Trustworthy Systems}, pages = {1-23}, author = {Klein, Gerwin and Andronick, June and Keller, Gabriele and Matichuk, Daniel and Murray, Toby and O'Connor, Liam}, date = {2017-9-4} }