Formal CHERI: rigorous engineering and design-time proof of

Formal CHERI: rigorous engineering and design-time proof of full-scale architecture security properties