History

Japheth Lim 36fc7f1dd7 autocorres: remove type restriction in WordAbstract rule. The restriction in corresTA_L2_call (?ex was always unified to "id") caused corresTA_L2_call' (which produces uglier output) to be used in situations where the first rule should have sufficed. Reported by Lars Noschinski.		2015-08-31 16:00:44 +10:00
..
asmrefine	Fiddling const global unfold in graph refine.	2015-08-18 17:24:23 +10:00
autocorres	autocorres: remove type restriction in WordAbstract rule.	2015-08-31 16:00:44 +10:00
c-parser	remove NonDetMonad from C-Parser import chain	2015-07-09 14:47:25 +10:00
haskell-translator	small fixes on haskell translator and haskell spec templates	2015-05-28 11:30:22 +10:00
proofcount	more Isabelle2015 update; AInvs up to (excluding) Syscall_AI	2015-04-18 21:51:26 +01:00
README.md	Added new proofcount tool to "tools" and removed old one from "lib".	2015-02-11 17:46:34 +11:00
ROOTS	Import release snapshot.	2014-07-14 21:32:44 +02:00
tests.xml	Import release snapshot.	2014-07-14 21:32:44 +02:00

Proof Tools

This directory contains proof tools, most of which are used in one or more of the seL4 proofs. Each has its own directory:

asmrefine - Generic Isabelle/HOL part of the binary verification tool, for use in the seL4 Assembly Refinement Proof.
autocorres - Tool for easing manual proofs about C code, described in this PLDI '14 paper.
c-parser - Tool for translating C code into Isabelle/HOL, used to give seL4's C code its semantics in e.g. the seL4 C Refinement Proof.
haskell-translator - Tool for translating Haskell into Isabelle/HOL, used to generate the seL4 design specification.
proofcount - Tool for collecting metrics from finished proofs.