發送短信: A formal CHERI-C memory model