' Verifiable C
Andrew W. Appel, Lennart Beringer, and Qinxiang Cao

Verified Software Toolchain
 

Version 1.1.1 (2021-06-07 13:49, Coq 8.13)
Compatible with VST 2.8 (June 2021).