We report on the formal verification of a microkernel’s temporal property, namely that its multi-priority process scheduler guarantees progress, i. e., strong fairness. This paper summarizes parts of a journal article [2]. Our microkernel Vamos provides an infrastructure for a dynamically changing number of processes, for memory virtualization, for inter-process communication (IPC), and for use...