Describir: A Contribution to Techniques for Building Dependable Operating Systems