Comment by phkahler

"The world's first operating-system kernel with an end-to-end proof of implementation correctness and security enforcement."

And as soon as one person makes a commit, that proof is invalid right?