Vivien Rindisbacher, Evan Johnson, Nico Lehmann, Tyler Potyondy, Pat Pannuto, Stefan Savage, Deian Stefan, and Ranjit Jhala. ✓Tock: Verified Isolation in a Production Embedded OS SOSP 25 [ code ]