A small real-time kernel proven correct

A novel computer architecture for hard real-time environments is being developed. Part of the architecture is an operating system kernel supporting the real-time features of an extended version of the real-time programming language PEARL. The formal verification of a stripped-down version of this real-time kernel using a mechanical theorem prover is presented. Since the author is aiming at a formal verification of the complete kernel, he gives an outline of what still has to be done.<
>