 This has led to what is referred to as "third-generation microkernels",
characterised by a security-oriented API with resource access controlled by capabilities, virtualization as a first-class concern, novel approaches to kernel resource management,
and a design goal of suitability for formal analysis, besides the usual goal of high performance.Examples are Coyotos, , Nova,
Redox and Fiasco.OC.In the case of seL4, complete formal verification of the implementation has been achieved, i.e.