History

Gerwin Klein e7f6e97c6b cleanup: remove stray diagnostic commands and comments Signed-off-by: Gerwin Klein <gerwin.klein@data61.csiro.au>		2020-06-08 20:41:10 +08:00
..
ARM	cleanup: remove stray diagnostic commands and comments	2020-06-08 20:41:10 +08:00
ARM_HYP	arm-hyp refine: fix PageTableDuplicates	2020-06-08 20:41:10 +08:00
RISCV64	riscv cleanup: remove stray diagnostic commands	2020-06-08 20:41:10 +08:00
X64	cleanup: remove stray diagnostic commands and comments	2020-06-08 20:41:10 +08:00
Move_R.thy	licenses: convert license tags to SPDX	2020-03-13 14:38:24 +08:00
README.md	license: provide documentation under CC-BY-SA-4.0	2020-03-16 14:19:15 +08:00

README.md

Design Spec Refinement Proof

This proof establishes that seL4's design specification is a formal refinement (i.e. a correct implementation) of its abstract specification. This proof also interweaves the definition and proofs of the global invariant for the design specification, and builds on the Abstract Spec Invariant Proof. It is described in the TPHOLS '08 paper.

Building

Make sure that the L4V_ARCH environment variable is set to the desired target architecture. If in doubt, use L4V_ARCH=ARM.

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b Refine

Important Theories

The top-level theory where the refinement statement is established over the entire kernel is Refine; the state-relation that relates the state-spaces of the two specifications is defined in StateRelation and the basic correspondence property proved over each kernel function is defined in Corres.