ByNobleID
    Securing Verified IO Programs Against Unverified Code in F* | NobleID