#popek and goldberg #virtualization requirements #operating systems #formal requirements