The foundations of a provably secure operating system (PSOS) (1979) [pdf]