adbrucker
/
lh-l4v
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
lh-l4v/proof/capDL-api
History
Michael McInerney 356e91c9fa access-control, capDL-api, drefine, infoflow, sep-capDL, capDL: update for Isabelle2019 2019-06-13 16:22:33 +10:00
..
API_DP.thy Add a top-level file for the capDL API proofs. 2014-07-24 19:56:24 +10:00
Arch_DP.thy Removes all trailing whitespaces 2017-07-12 15:13:51 +10:00
CNode_DP.thy access-control, capDL-api, drefine, infoflow, sep-capDL, capDL: update for Isabelle2019 2019-06-13 16:22:33 +10:00
IRQ_DP.thy access-control, capDL-api, drefine, infoflow, sep-capDL, capDL: update for Isabelle2019 2019-06-13 16:22:33 +10:00
Invocation_DP.thy capdl: remove redundant definition `opt_object` 2019-02-28 14:34:01 +11:00
KHeap_DP.thy capdl: remove redundant definition `opt_object` 2019-02-28 14:34:01 +11:00
Kernel_DP.thy access-control, capDL-api, drefine, infoflow, sep-capDL, capDL: update for Isabelle2019 2019-06-13 16:22:33 +10:00
ProofHelpers_DP.thy Base ASpec + machine on OptionMonad_ND; fix proof fallout 2018-10-25 12:54:02 +11:00
README.md misc: Proofing and formatting of README.md files. 2014-07-28 13:15:48 +10:00
RWHelper_DP.thy Isabelle2018: DSpecProofs 2018-08-20 09:06:37 +10:00
Retype_DP.thy capdl: remove redundant definition `opt_object` 2019-02-28 14:34:01 +11:00
Sep_Tactic_Examples.thy globally use session-qualified imports; add Lib session 2018-08-20 09:06:34 +10:00
TCB_DP.thy access-control, capDL-api, drefine, infoflow, sep-capDL, capDL: update for Isabelle2019 2019-06-13 16:22:33 +10:00

README.md

CapDL API Proofs

This proof develops a formal API description for a number of the seL4 system calls, of the capDL kernel specification. This API description is a set of lemmas describing the behaviour of various system calls in terms of a separation logic defined over that kernel specification.

When reasoning about system calls this proof treats the kernel like a library invoked directly from user-space and does not reason about scheduling. These proofs are used by the system initialiser proof, as described in the ICFEM '13 paper and Andrew Boyton's PhD thesis.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b DSpecProofs

Important Theories

The top-level theory is API_DP. The seL4 API and kernel model are located in Kernel_DP.