Re: seL4 kernel is formally verified