Comment World's First Formally-Proven OS Kernel - NOT (Score 3, Informative) 517
Do some research Guys...
Honywell SCOMP Early 1980s Was intended to me a secure front-end to Multics.
Verified by NSA et all as part of the first Orange-book A1 level certification.
For the time it was a magnificent bit of work.