The latter, in the sense that it has been scaled down significantly to make verification possible.
As soon as you start adding stuff or running it in a different hardware the verification will no longer apply, so why bother?
As soon as you start adding stuff or running it in a different hardware the verification will no longer apply, so why bother?
I was considering seL4 for a hobby project (having worked with L4Ka:Pistachio a long time ago), but didn't dig deep enough to spot these problems.