adbrucker
/
lh-l4v
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
lh-l4v/proof/drefine
History
Victor Phan 1689dd94fe cleanup 
arm ainvs: cleanup

Abbreviate Hoare triples that do not care about the return value and
whose pre and post conditions are the same.

x64 ainvs: cleanup

ainvs: cleanup

x64 ainvs: cleanup

drefine: cleanup
 		2019-04-18 14:32:08 +10:00
..
Arch_DR.thy drefine: update for new definition of set_object 2019-04-18 14:32:08 +10:00
CNode_DR.thy drefine: update for new definition of set_object 2019-04-18 14:32:08 +10:00
Corres_D.thy drefine: update for new definition of set_object 2019-04-18 14:32:08 +10:00
Finalise_DR.thy cleanup 2019-04-18 14:32:08 +10:00
Include_D.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Intent_DR.thy cleanup 2019-04-18 14:32:08 +10:00
Interrupt_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Ipc_DR.thy cleanup 2019-04-18 14:32:08 +10:00
KHeap_DR.thy cleanup 2019-04-18 14:32:08 +10:00
Lemmas_D.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
MoreCorres.thy globally use session-qualified imports; add Lib session 2018-08-20 09:06:34 +10:00
MoreHOL.thy globally use session-qualified imports; add Lib session 2018-08-20 09:06:34 +10:00
README.md misc: Proofing and formatting of README.md files. 2014-07-28 13:15:48 +10:00
Refine_D.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Schedule_DR.thy drefine: update for new definition of set_object 2019-04-18 14:32:08 +10:00
StateTranslationProofs_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
StateTranslation_D.thy dspec, drefine: fix for GrantReply (SELFOUR-6) 2018-12-10 20:01:38 +11:00
Syscall_DR.thy drefine: update for new definition of set_object 2019-04-18 14:32:08 +10:00
Tcb_DR.thy drefine: update for new definition of set_object 2019-04-18 14:32:08 +10:00
Untyped_DR.thy capdl: remove redundant definition `opt_object` 2019-02-28 14:34:01 +11:00

README.md

CapDL Refinement Proof

This proof establishes that seL4's abstract specification is a formal refinement (i.e. a correct implementation) of its capDL specification. It is described as part of an ICFEM '13 paper.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b DRefine

Important Theories

The top-level theory where the refinement statement is established over the entire kernel is Refine_D; the state-relation that relates the state-spaces of the two specifications is defined in StateTranslation_D and the basic correspondence property proved over each kernel function is defined in Corres_D.