ΜQC: a property-based testing framework for L4 microkernels. (2018)