npub1sdtvw8y3yhksws5jf8ttl45vru06krpuuus2fys3u5exucvc4ywquf96z3 (npub1sdt…96z3) npub178rvtslm3qykq8uy5afswta2qz5pk9atjxsepht4x8ldddssp6kq4sqekt (npub178r…qekt) Our group at SDC - essentially David Kaufman, Frank Heinrich, & myself, working under Gerry Cole and Clark Weissman - did much of the design & I led the software implementation group. The formal verification of code stuff was mostly under the guidance of our peer group at SDC under Mav Schaeffer (sp), John Schied, & Val Schorre (sp).
Unfortunately we were never allowed to talk about our work. But we did invent a lot of stuff, like crypto key management, tagged VLANs, block chaining etc.
Later on Frank Heinrich and I worked with Peter Neuman to try to turn his Provably Secure Operating System capability design into a working system. (We ended up tossing Peter's permanent capability system in favor of one with garbage collection of no longer referenced capabilities.) We actually got pretty deep into reworking a Univac computer into support the capability system we wanted (and I designed all of the necessary capability/access list caching to make it run a usable speed.)