adbrucker
/
lh-l4v
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
lh-l4v/proof/drefine
History
Matthew Brecknell 84d2889d45 Isabelle2016: merge master into 2016 2016-02-19 16:17:26 +11:00
..
Arch_DR.thy Isabelle2016: merge master into 2016 2016-02-16 12:52:24 +11:00
CNode_DR.thy Isabelle2016: merge master into 2016 2016-02-19 16:17:26 +11:00
Corres_D.thy more fixes in DRefine: some changes in proofs involving uint / unat 2016-01-28 14:07:42 +11:00
Finalise_DR.thy Isabelle2016: merge master into 2016 2016-02-16 12:52:24 +11:00
Include_D.thy comment cleanup 2014-07-22 18:10:20 +02:00
Intent_DR.thy add arch_tcb object to C, rename aep -> ntfn 2015-11-20 16:02:13 +11:00
Interrupt_DR.thy Isabelle2016: merge master into 2016 2016-02-19 16:17:26 +11:00
Ipc_DR.thy arch_split: DRefine now builds 2016-01-25 18:42:27 +11:00
KHeap_DR.thy Isabelle2016: merge master into 2016 2016-02-16 12:52:24 +11:00
Lemmas_D.thy Some more cleanup of drefine. 2014-07-23 15:29:20 +10:00
MoreCorres.thy 2015 update for DRefine 2015-05-13 09:52:32 +02:00
MoreHOL.thy Import release snapshot. 2014-07-14 21:32:44 +02:00
README.md misc: Proofing and formatting of README.md files. 2014-07-28 13:15:48 +10:00
Refine_D.thy 2015 update for DRefine 2015-05-13 09:52:32 +02:00
Schedule_DR.thy arch_split: DRefine now builds 2016-01-25 18:42:27 +11:00
StateTranslationProofs_DR.thy Isabelle2016: merge master into 2016 2016-02-16 12:52:24 +11:00
StateTranslation_D.thy l4v-sabre: change type of irq to be 10 word 2016-02-17 11:18:02 +11:00
Syscall_DR.thy l4v-sabre: change type of irq to be 10 word 2016-02-17 11:18:02 +11:00
Tcb_DR.thy msi: Restructure IOAPIC, MSI interrupts for x86, fix up ARM proofs for new API 2016-02-02 15:57:28 +11:00
Untyped_DR.thy arch_split: DRefine now builds 2016-01-25 18:42:27 +11:00

README.md

CapDL Refinement Proof

This proof establishes that seL4's abstract specification is a formal refinement (i.e. a correct implementation) of its capDL specification. It is described as part of an ICFEM '13 paper.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b DRefine

Important Theories

The top-level theory where the refinement statement is established over the entire kernel is Refine_D; the state-relation that relates the state-spaces of the two specifications is defined in StateTranslation_D and the basic correspondence property proved over each kernel function is defined in Corres_D.