lh-l4v/proof
Joel Beeren b352769016 SELFOUR-276: Prove refinement to Haskell for MCP
Also includes fixes to specs and invariants, and initial progress
towards C refinement.

A thread's maximum controlled priority (MCP) determines the maximum
thread priority or MCP it can assign to another thread (or itself).
2016-10-05 02:43:41 +11:00
..
access-control SELFOUR-421: fix coding style 2016-09-22 19:23:28 +10:00
asmrefine verification update for seL4 arm_hyp merge to master 2016-06-22 22:28:36 +10:00
bisim add workaround for building documents with TeX Live 2016 [VER-622] 2016-07-22 07:48:08 +10:00
capDL-api SELFOUR-421: merge and fix up to ArmConfidentiality proof 2016-09-22 19:21:56 +10:00
crefine SELFOUR-276: Prove refinement to Haskell for MCP 2016-10-05 02:43:41 +11:00
drefine SELFOUR-421: fix coding style 2016-09-22 19:23:28 +10:00
infoflow SELFOUR-421: fix coding style 2016-09-22 19:23:28 +10:00
invariant-abstract SELFOUR-276: Prove refinement to Haskell for MCP 2016-10-05 02:43:41 +11:00
refine SELFOUR-276: Prove refinement to Haskell for MCP 2016-10-05 02:43:41 +11:00
sep-capDL SELFOUR-421: fix coding style 2016-09-22 19:23:28 +10:00
Makefile avoid `make` warning, remove SimplExportOnly from HEAPS 2015-11-20 16:02:14 +11:00
README.md integrate separation kernel config proofs 2014-08-13 22:08:46 +10:00
ROOT autolevity: remove AutoLevity test sessions 2016-06-23 14:02:40 +10:00
tests.xml regression: bump timeouts further. All timeouts now multiples of 1hr. 2016-02-22 17:38:35 +11:00

README.md

Formal Proofs about seL4

This directory contains the formal proofs about seL4, which mostly prove properties about the various seL4 specifications.

Each such proof lives in its own subdirectory: