History

Michael McInerney c13432b0c4 misc updates for Isabelle2019		2019-06-14 11:41:20 +10:00
..
CreateIRQCaps_SI.thy	sys-init: fix proofs for a changed lemma name	2019-04-05 12:13:45 +11:00
CreateObjects_SI.thy	capdl: remove redundant definition `opt_object`	2019-02-28 14:34:01 +11:00
DuplicateCaps_SI.thy	sysinit: implement support for shared frames	2019-02-19 14:47:00 +11:00
ExampleSpecIRQ_SI.thy	misc updates for Isabelle2019	2019-06-14 11:41:20 +10:00
ExampleSpec_SI.thy	misc updates for Isabelle2019	2019-06-14 11:41:20 +10:00
InitCSpace_SI.thy	misc updates for Isabelle2019	2019-06-14 11:41:20 +10:00
InitIRQ_SI.thy	capdl: remove redundant definition `opt_object`	2019-02-28 14:34:01 +11:00
InitTCB_SI.thy	misc updates for Isabelle2019	2019-06-14 11:41:20 +10:00
InitVSpace_SI.thy	misc updates for Isabelle2019	2019-06-14 11:41:20 +10:00
Makefile	Import release snapshot.	2014-07-14 21:32:44 +02:00
Mapped_Separating_Conjunction.thy	lib + sysinit: whitespace cleanup; renamed lookup_obj	2019-02-19 15:43:10 +11:00
ObjectInitialised_SI.thy	capdl: remove redundant definition `opt_object`	2019-02-28 14:34:01 +11:00
Proof_SI.thy	lib + sysinit: whitespace cleanup; renamed lookup_obj	2019-02-19 15:43:10 +11:00
README.md	misc: Proofing and formatting of README.md files.	2014-07-28 13:15:48 +10:00
ROOT	lib: sep_tactics cleanup; session cleanup + organisation	2019-02-19 15:38:37 +11:00
RootTask_SI.thy	capdl: remove redundant definition `opt_object`	2019-02-28 14:34:01 +11:00
StartThreads_SI.thy	capdl: remove redundant definition `opt_object`	2019-02-28 14:34:01 +11:00
SysInit_SI.thy	misc updates for Isabelle2019	2019-06-14 11:41:20 +10:00
WellFormed_SI.thy	misc updates for Isabelle2019	2019-06-14 11:41:20 +10:00
tests.xml	lib: make Lib session a test dependency	2018-08-20 09:06:34 +10:00

README.md

CapDL User-level system initialiser

This contains a formalised algorithm and the proof of correctness of a user-level system initialiser that uses capDL to specify the state of the resultant system.

It builds on the CapDL API Proofs, and uses a separation logic defined for capDL.

The system initialiser and the proof are described in the ICFEM '13 paper and Andrew Boyton's PhD thesis.

Building

To build from the l4v/ directory, run:

make SysInit

To build the example capDL specifications, from the l4v/ directory, run:

make SysInitExamples

Important Theories

The specification for the algorithm of the system initialiser is in SysInit_SI.
The top-level statement of the correctness of the system-initialiser is found in Proof_SI.
The definition of what it means for an object to be initialised (object_initialised and (irq_initialised) is found in ObjectInitialised_SI.
Only "well-formed" capDL specifications can be initialised. The definition of well-formed is located in WellFormed_SI.
Two example capDL specifications that are "well-formed" are found in ExampleSpec_SI and ExampleSpecIRQ_SI. The former is a simple capDL spec, and the latter a more complicated specifications with IRQ support.