Text this: Formal Models of Operating System Kernels