History

Gerwin Klein 8d12d8e4be licenses: tag .md and document file		2020-03-02 18:52:15 +08:00
..
AbstractSeparationHelpers_SD.thy	globally use session-qualified imports; add Lib session	2018-08-20 09:06:34 +10:00
AbstractSeparation_SD.thy	sep-capDL: delete sep_state_irq_map print transl	2019-02-19 14:25:10 +11:00
Frame_SD.thy	capdl: remove redundant definition `opt_object`	2019-02-28 14:34:01 +11:00
Helpers_SD.thy	capdl: remove redundant definition `opt_object`	2019-02-28 14:34:01 +11:00
Lookups_D.thy	access-control, capDL-api, drefine, infoflow, sep-capDL, capDL: update for Isabelle2019	2019-06-13 16:22:33 +10:00
README.md	licenses: tag .md and document file	2020-03-02 18:52:15 +08:00
Sep_Tactic_Helper.thy	globally use session-qualified imports; add Lib session	2018-08-20 09:06:34 +10:00
Separation_SD.thy	Isabelle2018: SepDSpec	2018-08-20 09:06:37 +10:00
Types_SD.thy	capdl: remove redundant definition `opt_object`	2019-02-28 14:34:01 +11:00

README.md

CapDL Separation Logic Proof

This proof defines a separation logic for the capDL kernel specification. It builds on a generic separation algebra, described in the ITP 2012 paper.

The separation logic is defined on a lifted heap where we lift the object heap and IRQ table into an object-component heap and an IRQ table heap. This gives us a separation algebra with a capability-level of granularity.

This separation logic is used by the CapDL API Proofs and the system initialiser specification.

This separation logic is described in the ICFEM '13 paper and Andrew Boyton's PhD thesis.

Building

To build from the l4v/ directory, run:

    ./isabelle/bin/isabelle build -d . -v -b SepDSpec

Important Theories

The definitions of heap disjunction, heap addition and showing that they produce a separation algebra is found in AbstractSeparation_SD.
The "arrows" are defined in Separation_SD.
The "frame rule" for specific leaf functions is defined in Frame_SD. This "frame rule" is different from the traditional frame rule as we use a shallow embedding.