[Microsoft Research's] Singularity is written almost entirely in Sing#, … whose semantics are defined by formal, written contracts. … a single virtual address space. This design leads … it eliminates kernel traps and context switches. … [Singularity] forbids dynamic process extensions. … [Loadable modules] must run as separate processes, completely walled … The trusted code [for Singularity] includes the hardware abstraction …
Google-1
Google-2
Copyright clearance needed for quotation.