@article{Klein_AKMMO_17,
    author           = {Klein, Gerwin and Andronick, June and Keller, Gabriele and Matichuk, Daniel and Murray, Toby and
                        O'Connor, Liam},
    date             = {2017-9-4},
    doi              = {https://doi.org/10.1098/rsta.2015.0404},
    issue            = {2104},
    journal          = {Philosophical Transactions of the Royal Society A},
    keywords         = {{seL4}, proof engineering, code/proof co-generation, {Cogent}, {Isabelle}/{HOL}},
    month            = sep,
    pages            = {1-23},
    paperurl         = {https://trustworthy.systems/publications/full_text/Klein_AKMMO_17.pdf},
    publisher        = {The Royal Society Publishing},
    title            = {Provably Trustworthy Systems},
    volume           = {375},
    year             = {2017}
  }