Genode also (genode.org), which uses a verified microkernel and sandboxes. The focus in this day and age really needs to be on security.