Formal Modelling and Proof in the CHERI Design and Implementation Process