Correctness by construction: developing a commercial secure system | IEEE Journals & Magazine | IEEE Xplore