A Formal Correctness Proof for an EDF Scheduler Implementation | IEEE Conference Publication | IEEE Xplore