Ironclad: Unix-like operating system kernel written in SPARK and Ada