seL4 on AArch64 is now verified for functional correctness