A formally verified execution layer where if a proof is accepted, the corresponding execution is semantically valid under a mechanized formal specification.