A Lisp Way to Type Theory and Formal Proofs (2017) [pdf]
Looks neat but no mention of ACL2 in project about LISP and proving? Come on, now! I wonder if the author investigated it. If so, why not use it or improve it. So far, it's one of most successful in terms of industrial use with SPIN being other one (TLA+ doing similar stuff now).https://www.cs.utexas.edu/users/moore/acl2/Far as TCB, Jared Davis, who used ACL2 on x86 processors, built a self-verifying prover for a logic going in ACL2's direction. It was verified to assembly using Magnus Myreen's techniques.https://www.cs.utexas.edu/~jared/milawa/Web/