An x86_64 operating system, from the bootloader up.
A framekernel in Rust with its own TCP stack, ACPI interpreter, display driver and compositor. One crate holds every line of unsafe, and Verus proves the invariants underneath it. The docs site explains how those gates work and what still breaks.

