History

Gerwin Klein c826b33b88 bisim: Bisim session for ARM, X64, RISCV64 ARM_HYP would be possible, but require arch split for hyp-faults.		2019-11-15 12:04:50 +11:00
..
document	Removes all trailing whitespaces	2017-07-12 15:13:51 +10:00
README.md	terminology in comments: async ep -> notifications	2015-11-24 16:58:22 +13:00
Separation.thy	global: isabelle update_cartouches	2019-06-14 11:41:21 +10:00
Syscall_S.thy	bisim: Bisim session for ARM, X64, RISCV64	2019-11-15 12:04:50 +11:00

README.md

Separation Kernel Bisimilarity

This proof establishes that seL4, if configured fully statically with 1-level CSpaces and notification caps only, is bi-similar to a static separation kernel that has no other system calls than signalling notifications.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b Bisim

Important Theories

Theory Separation defines static configurations, and theory Syscall_S contains the proof that this is equivalent to a static kernel.

The definition of a static kernel API can be found in the spec directory under sep-abstract.