adbrucker
/
lh-l4v
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
lh-l4v/proof/drefine
History
Santiago Bautista ab259704c7 access+infoflow+drefine: update for new definition of `idle_tcb_at` 
* Context :

 We would like to prove that, for ARM_HYP architecture,
  the current vcpu is always the vcpu associated to the current thread.
 See issue https://jira.csiro.au/browse/VER-770
  and PR 291 http://bitbucket.keg.ertos.in.nicta.com.au/projects/SEL4/repos/l4v/pull-requests/291

 In this process, we changed the definition of `idle_tcb_at`

* In this commit :

 Update some proofs in access, infoflow and drefine to take
  the new definition of `idle_tcb_at` into account.
 		2018-10-31 18:04:59 +11:00
..
Arch_DR.thy access+infoflow+drefine: update for new definition of `idle_tcb_at` 2018-10-31 18:04:59 +11:00
CNode_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Corres_D.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Finalise_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Include_D.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Intent_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Interrupt_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Ipc_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
KHeap_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Lemmas_D.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
MoreCorres.thy globally use session-qualified imports; add Lib session 2018-08-20 09:06:34 +10:00
MoreHOL.thy globally use session-qualified imports; add Lib session 2018-08-20 09:06:34 +10:00
README.md misc: Proofing and formatting of README.md files. 2014-07-28 13:15:48 +10:00
Refine_D.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Schedule_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
StateTranslationProofs_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
StateTranslation_D.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Syscall_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Tcb_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00
Untyped_DR.thy reduce DRefine dependencies from Refine to AInvs 2018-10-22 13:21:11 +11:00

README.md

CapDL Refinement Proof

This proof establishes that seL4's abstract specification is a formal refinement (i.e. a correct implementation) of its capDL specification. It is described as part of an ICFEM '13 paper.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b DRefine

Important Theories

The top-level theory where the refinement statement is established over the entire kernel is Refine_D; the state-relation that relates the state-spaces of the two specifications is defined in StateTranslation_D and the basic correspondence property proved over each kernel function is defined in Corres_D.