EwoK: secure embedded micro-kernel using SPARK/Ada formal verification
github.com