What's the difference with this https://sel4.systems/?
CertiKOS is using a DSL approach if it's same as paper I'm remembering. They design languages or proving techniques ideal to the type of thing they're working on: memory management, I/O, etc. They prove each individual component as easily as they can. Then they have some way of modeling the system as a whole and/or integrating those. Too early to judge but they seem more productive than L4 project was due to tooling benefits.
A comparison of the performance of seL4 and mC2 is
not straightforward since the verified mC2 kernel
runs on a multicore x86 platform, while the verified
seL4 kernel runs on ARMv6 and ARMv7 hardware and
only supports single-core