These final changes complete the SEL4GraphRefine process. Some cleanup remains to be done, especially in SEL4GlobalsSwap, but the process is now mature and working, and the testing code in SEL4GraphRefine can be discarded. Success depends on seL4 commit 97d6bc96d54f1f0beafb25033b03b57ba54a5113 which is compatible with crefine and will be included in the repo manifest immediately. |
||
---|---|---|
.. | ||
access-control | ||
asmrefine | ||
bisim | ||
capDL-api | ||
crefine | ||
drefine | ||
infoflow | ||
invariant-abstract | ||
refine | ||
sep-capDL | ||
Makefile | ||
README.md | ||
ROOT | ||
tests.xml |
README.md
Formal Proofs about seL4
This directory contains the formal proofs about seL4, which mostly prove properties about the various seL4 specifications.
Each such proof lives in its own subdirectory:
access-control
- Access Control Proofasmrefine
- Assembly Refinement Proofbisim
- Bisimilarity of seL4 with a static Separation KernelcapDL-api
- CapDL API Proofscrefine
- C Refinement Proofdrefine
- CapDL Refinement Proofinfoflow
- Confidentiality Proofinvariant-abstract
- Abstract Spec Invariant Proofrefine
- Design Spec Refinement Proofsep-capDL
- CapDL Separation Logic Proof