Iain D. Craig

• Formal Refinement for Operating System Kernels