This repository holds the code and proofs of a formally verified, userland, job-based, earliest deadline first scheduler running on top of the Pip kernel. You can find more about the Pip protokernel at its website (https://pip.univ-lille.fr). This scheduler features a formally proven election function written in Gallina (the specification language of the Coq Proof Assistant). The repository also hold sources for a program (back-end) that acts as a simulation of the scheduler, that prints relevant information regarding the internal state of the election function.