Have a look at:
Modula-3 + Spin
Oberon + Oberon System
Spec# + Singularity
Haskell + Home
OCaml + Mirage
Have a look at:
Modula-3 + Spin
Oberon + Oberon System
Spec# + Singularity
Haskell + Home
OCaml + Mirage