7ad3ef3b3e | ||
---|---|---|
.. | ||
document | ||
README.md | ||
Separation.thy | ||
Syscall_S.thy |
README.md
Separation Kernel Bisimilarity
This proof establishes that seL4, if configured fully statically with 1-level CSpaces and notification caps only, is bi-similar to a static separation kernel that has no other system calls than signalling notifications.
Building
To build from the l4v/
directory, run:
./isabelle/bin/isabelle build -d . -v -b Bisim
Important Theories
Theory Separation
defines static configurations, and
theory Syscall_S
contains the proof that this is equivalent
to a static kernel.
The definition of a static kernel API can be found in the spec
directory
under sep-abstract
.