History

Michael Norrish 2f39375ee4 Modifies proofs partially working At the moment, if there is a specification and DONT_TRANSLATE, the automatic proofs only work if the specification is that no globals are modified. Work on JIRA VER-464		2015-11-19 11:27:05 +11:00
..
asmrefine	Fiddling const global unfold in graph refine.	2015-08-18 17:24:23 +10:00
autocorres	autocorres: restore simplifier tracing functionality.	2015-10-26 14:18:10 +11:00
c-parser	Modifies proofs partially working	2015-11-19 11:27:05 +11:00
haskell-translator	priority-bitmap: haskell translator: translate FiniteBits class	2015-09-28 08:09:07 +10:00
proofcount	more Isabelle2015 update; AInvs up to (excluding) Syscall_AI	2015-04-18 21:51:26 +01:00
README.md	Added new proofcount tool to "tools" and removed old one from "lib".	2015-02-11 17:46:34 +11:00
ROOTS	Import release snapshot.	2014-07-14 21:32:44 +02:00
tests.xml	Import release snapshot.	2014-07-14 21:32:44 +02:00

Proof Tools

This directory contains proof tools, most of which are used in one or more of the seL4 proofs. Each has its own directory:

asmrefine - Generic Isabelle/HOL part of the binary verification tool, for use in the seL4 Assembly Refinement Proof.
autocorres - Tool for easing manual proofs about C code, described in this PLDI '14 paper.
c-parser - Tool for translating C code into Isabelle/HOL, used to give seL4's C code its semantics in e.g. the seL4 C Refinement Proof.
haskell-translator - Tool for translating Haskell into Isabelle/HOL, used to generate the seL4 design specification.
proofcount - Tool for collecting metrics from finished proofs.