FormalModesofOperatingSystemKernels