Matthew Brecknell
41d4aa4f1d
Isabelle2016-1: update references to renamed constants and facts
2017-01-05 14:23:05 +11:00
Matthew Brecknell
4905a589bf
trivial: remove some uses of find_theorems
2016-12-13 22:10:31 +11:00
Xin,Gao
8f3a4dee31
SELFOUR-421: merge with master, fix wholesystem proofs
2016-09-22 19:23:19 +10:00
Matthew Brecknell
0e5ffd1ea0
arch_split: requalify abstract theories
2016-04-27 18:46:16 +10:00
Matthew Brecknell
57c29692d0
arch_split: SysInitExamples checking
2016-04-26 09:27:46 +10:00
Gerwin Klein
0f2d557679
terminology in comments: async ep -> notifications
2015-11-24 16:58:22 +13:00
Joel Beeren
457a55a831
add arch_tcb object to C, rename aep -> ntfn
2015-11-20 16:02:13 +11:00
Daniel Matichuk
c8d0692008
sys-init now checks
2015-09-22 12:14:27 +10:00
Gerwin Klein
c7cccbf7ce
sys-init: Isabelle2015 update
2015-05-14 18:43:29 +02:00
Andrew Boyton
66ea3fa808
sys-init: Label all limitations of the system initialiser with "LIMITATION".
2014-10-31 14:56:35 +11:00
Andrew Boyton
ea58753cd7
Merge branch 'cdl_page_map_cancel'
...
Merge in the setting of registers and the starting of threads in the system initialser.
2014-09-18 17:21:17 +10:00
Andrew Boyton
2b7b258997
sys-init: Prove the starting of threads is done correctly.
...
We no longer assume the starting of threads, but prove it correct
(assuming the behaviour of the scheduler).
2014-09-18 12:30:04 +10:00
Andrew Boyton
7167ea42ac
CapDL: Made IRQ Nodes a new object type, not a small CNode.
...
IRQ Nodes are now their own object type in capDL. This makes it much easier
to distinguish between "real" CNodes and IRQ Nodes.
Updated:
* the capDL refinement,
* the access proofs, and
* the system initialiser.
2014-09-09 14:07:50 +10:00
Gerwin Klein
2a03e81df4
Import release snapshot.
2014-07-14 21:32:44 +02:00