The key contributions of EROS are formal verification … First, the primary system architecture is uncompromisingly principle-driven. … is a small, internally consistent architecture whose behavior … architects had prior experience as processor architects. … very little performance is lost in translating abstractions … [into hardware implementations].
Google-1
Google-2
Copyright clearance needed for quotation.