An interactive theorem prover contains a logical foundation and a checker program known as a kernel that verifies adherence to that foundation