To clarify: capabilities-based OS != verified correct software.

But there's much synergy there. Each enhances the other.