SeL4 is verified on RISC-V
> This means that it is proved to be bug-free relative to a specification formulated in a mathematical logicBut, but, but ... has the specification been proved to be bug-free?As in does the specification meet eg a set of security constraints?