The Design of a Verifiable Operating System Kernel ID TR-79-15 Authors T. Lockhart Publishing date January 1979