The "Provably Secure Operating System"
See PSOS Revisited at www.csl.sri.com 
This has nothing, as far as I can tell, to do with the the Real Time Operating System pSOS, currently sold by Wind River Systems (which they bought, picked out some technology, and discarded in favor of WRS's own product Vx Works)
See original on c2.com