Pošljite SMS: Formal refinement for operating system kernels / Iain D. Craig.