lh-l4v/proof
Michael McInerney 36135c5654 arm_hyp ainvs: add valid_cur_vcpu invariant
This invariant states that the current active vcpu is
equal to the vcpu of the current thread

Signed-off-by: Michael McInerney <m.mcinerney@unsw.edu.au>
2022-03-28 11:04:05 +10:30
..
access-control spec+proof: use generated config constants 2021-12-23 14:54:13 +11:00
asmrefine asmrefine: use "Kernel_C" prefix for SEL4SimplExport 2022-02-22 18:24:02 +11:00
bisim isabelle-2021: update Bisim 2021-09-30 16:53:17 +10:00
capDL-api isabelle-2021: update DSpecProofs 2021-09-30 16:53:17 +10:00
crefine arm_hyp ainvs+refine+crefine: update for change to associate_vcpu_tcb 2022-03-08 21:49:10 +10:30
dpolicy various: resolve some new fixmes 2021-11-12 09:39:16 +11:00
drefine spec+proof: use generated config constants 2021-12-23 14:54:13 +11:00
infoflow spec+proof: use generated config constants 2021-12-23 14:54:13 +11:00
invariant-abstract arm_hyp ainvs: add valid_cur_vcpu invariant 2022-03-28 11:04:05 +10:30
refine arm_hyp ainvs+refine+crefine: update for change to associate_vcpu_tcb 2022-03-08 21:49:10 +10:30
sep-capDL word_lib: remove unused theories 2021-09-30 16:53:17 +10:00
Makefile asmrefine: SimplExportOnly renamed 2020-11-09 21:07:44 +11:00
README.md license: provide documentation under CC-BY-SA-4.0 2020-03-16 14:19:15 +08:00
ROOT proof/ROOT infoflow arch split 2021-10-05 08:46:11 +11:00
tests.xml regression: increase CRefine timeout 2020-11-26 00:31:04 +11:00

README.md

Formal Proofs about seL4

This directory contains the formal proofs about seL4, which mostly prove properties about the various seL4 specifications.

Each such proof lives in its own subdirectory: