EROS-OS.org
Extremely Reliable OS. Small, secure, real-time microkernel with orthogonal persistence: pull the plug and restart with never a problem. Related to, and working with, ERights.org on E programming language. [Open source, GPL]

EROS: A Fast Capability System
This capability-based OS for commodity processors uses a one level storage model; store persistence is transparent to applications. Surprisingly, performance of this very high security system matches normal OSs. [ResearchIndex] You Would also find info related to Jonathan S. Shapiro, Jonathan M. Smith, David J. Farber http www cs cmu edu People bumba filing cabinet papers sosp ps gz EROS: a fast capability system14 and 17th ACM Symposium Operating Principles 99 Charleston USA December 1999 and much more.

EROS: A Principle-Driven Operating System from the Ground Up
Abstract of article by Jonathan S. Shapiro, Norm Hardy; published by IEEE Computer Society. [IEEE Software] (February, 2002)

KeyKOS
Persistent, pure capability, microkernel OS. EROS's famous predecessor.

The EROS Alternative
Shapiro interview in 'Open-Source Security' issue. Of open source OSs, most people think only Linux and OpenBSD. But another open-source OS's architecture may be more secure than either of them. [Information Security Magazine] (February, 2000)

Verifying Operating System Security
A confined program is one unable to leak information to an unauthorized party or modify unauthorized resources, an essential feature of any secure component based system. A proof of correctness of EROS architecture for confinement. [ResearchIndex] You Would also find info related to J. S. Shapiro, S. Weber http www cis upenn edu techreports MS ps Verifying Operating System Security19 and Technical CIS97 26 University of Pennsylvania Philadelphia PA USA 1997 15 and much more.