Philip Derrin Kevin Elphinstone Gerwin Klein David Cock Manuel M. T. Chakravarty Running the manual: an approach to high-assurance microkernel development. 60-71 2006 conf/haskell/2006 Haskell http://doi.acm.org/10.1145/1159842.1159850 db/conf/haskell/haskell2006.html#DerrinEKCC06