Genode OS: A tool kit for highly secure special-purpose operating systems
An obligatory mention when we talk about secure operating systems is the seL4 microkernel (<a href="https://github.com/seL4/seL4" rel="nofollow">https://github.com/seL4/seL4</a>) where they have formally verified every line of code using the proof assistant Isabelle/HOL.