lh-l4v/proof/drefine
David Greenaway df8237c08a drefine: Isabelle 2014 changes. 2014-09-24 12:21:10 +10:00
..
ADT_DR.thy some of the global Isabelle2014 renames 2014-08-09 15:39:20 +10:00
Arch_DR.thy Merge branch 'master' into 'isabelle-2014'. 2014-09-23 14:31:33 +10:00
CNode_DR.thy Merge branch 'master' into 'isabelle-2014'. 2014-09-23 14:31:33 +10:00
Corres_D.thy Fix Access, InfoFlow and DRefine. 2014-08-13 16:45:40 +10:00
Finalise_DR.thy drefine: Isabelle 2014 changes. 2014-09-24 12:21:10 +10:00
Include_D.thy comment cleanup 2014-07-22 18:10:20 +02:00
Intent_DR.thy Merge 'master' into 'isabelle-2014'. 2014-09-17 14:21:13 +10:00
Interrupt_DR.thy Merge 'master' into 'isabelle-2014'. 2014-09-17 14:21:13 +10:00
Ipc_DR.thy Fix Access, InfoFlow and DRefine. 2014-08-13 16:45:40 +10:00
KHeap_DR.thy drefine: More updates for Isabelle 2014. 2014-09-18 11:04:47 +10:00
Lemmas_D.thy Some more cleanup of drefine. 2014-07-23 15:29:20 +10:00
MoreCorres.thy Import release snapshot. 2014-07-14 21:32:44 +02:00
MoreHOL.thy Import release snapshot. 2014-07-14 21:32:44 +02:00
README.md misc: Proofing and formatting of README.md files. 2014-07-28 13:15:48 +10:00
Refine_D.thy page_map_unmap_cancel : cdl spec changed and drefine fixed. 2014-09-05 14:48:22 +10:00
Schedule_DR.thy Fix Access, InfoFlow and DRefine. 2014-08-13 16:45:40 +10:00
StateTranslationProofs_DR.thy Fix Access, InfoFlow and DRefine. 2014-08-13 16:45:40 +10:00
StateTranslation_D.thy Merge branch 'master' into 'isabelle-2014'. 2014-09-23 14:31:33 +10:00
Syscall_DR.thy Merge branch 'master' into 'isabelle-2014'. 2014-09-23 14:31:33 +10:00
Tcb_DR.thy Merge branch 'master' into 'isabelle-2014'. 2014-09-23 14:31:33 +10:00
Untyped_DR.thy Merge 'master' into 'isabelle-2014'. 2014-09-17 14:21:13 +10:00

README.md

CapDL Refinement Proof

This proof establishes that seL4's abstract specification is a formal refinement (i.e. a correct implementation) of its capDL specification. It is described as part of an ICFEM '13 paper.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b DRefine

Important Theories

The top-level theory where the refinement statement is established over the entire kernel is Refine_D; the state-relation that relates the state-spaces of the two specifications is defined in StateTranslation_D and the basic correspondence property proved over each kernel function is defined in Corres_D.