lh-l4v/proof/invariant-abstract
Gerwin Klein ead3e6fdc4 aspec: message_info_to_data is mostly arch independent
Factored out msg_label_bits, which is the only architecture specific part.
2018-08-06 11:22:51 +10:00
..
ARM aspec: message_info_to_data is mostly arch independent 2018-08-06 11:22:51 +10:00
ARM_HYP aspec: message_info_to_data is mostly arch independent 2018-08-06 11:22:51 +10:00
X64 aspec: message_info_to_data is mostly arch independent 2018-08-06 11:22:51 +10:00
ADT_AI.thy aspec/ainvs: move TLS/ipc buffer FIXME to appropriate position in ADT_AI 2018-08-06 11:22:49 +10:00
AInvs.thy x64 ainvs: proof update for user_context refactor 2018-03-08 18:41:28 +11:00
AInvsPre.thy x64: merge master 2017-07-21 11:27:12 +10:00
Arch_AI.thy Genericise deletion actions that occur after empty_slot 2018-02-23 09:12:55 +11:00
BCorres2_AI.thy arm: revise scheduler / fastpath / scheduler bitmaps (SELFOUR-242) 2017-11-27 22:05:34 +11:00
BCorres_AI.thy Proof update for crunch changes 2018-04-04 14:13:55 +10:00
Bits_AI.thy Isabelle2017: update AInvs for RC0 2017-10-30 12:23:26 +11:00
CNodeInv_AI.thy x64: Add IOPortControlCaps to control IO port allocation 2018-04-19 05:27:06 +10:00
CSpaceInvPre_AI.thy Genericise deletion actions that occur after empty_slot 2018-02-23 09:12:55 +11:00
CSpaceInv_AI.thy ainvs: Remove unnecessary crunches and whitespace 2018-06-27 11:48:56 +10:00
CSpacePre_AI.thy x64: Add IOPortControlCaps to control IO port allocation 2018-04-19 05:27:06 +10:00
CSpace_AI.thy x64: Add IOPortControlCaps to control IO port allocation 2018-04-19 05:27:06 +10:00
DetSchedAux_AI.thy Proof update for crunch changes 2018-04-04 14:13:55 +10:00
DetSchedDomainTime_AI.thy Proof update for crunch changes 2018-04-04 14:13:55 +10:00
DetSchedInvs_AI.thy Removes all trailing whitespaces 2017-07-12 15:13:51 +10:00
DetSchedSchedule_AI.thy Repair proofs for wpsimp/crunch changes. 2018-08-03 18:25:30 +10:00
Deterministic_AI.thy x64: Add IOPortControlCaps to control IO port allocation 2018-04-19 05:27:06 +10:00
Detype_AI.thy x64: Add IOPortControlCaps to control IO port allocation 2018-04-19 05:27:06 +10:00
EmptyFail_AI.thy Proof update for crunch changes 2018-04-04 14:13:55 +10:00
Finalise_AI.thy Repair proofs for wpsimp/crunch changes. 2018-08-03 18:25:30 +10:00
Include_AI.thy Proof update for crunch changes 2018-04-04 14:13:55 +10:00
InterruptAcc_AI.thy x64: Add IOPortControlCaps to control IO port allocation 2018-04-19 05:27:06 +10:00
Interrupt_AI.thy Proof update for crunch changes 2018-04-04 14:13:55 +10:00
InvariantsPre_AI.thy x64: more abstract specs and invariants for ASIDs 2018-07-05 16:23:15 +10:00
Invariants_AI.thy ainvs: Add itcb_arch to the itcb projection 2018-06-27 11:48:56 +10:00
IpcCancel_AI.thy Repair proofs for wpsimp/crunch changes. 2018-08-03 18:25:30 +10:00
Ipc_AI.thy ainvs: Remove unnecessary crunches and whitespace 2018-06-27 11:48:56 +10:00
KHeapPre_AI.thy ainvs: integrate all architectures 2017-08-09 16:57:39 +10:00
KHeap_AI.thy x64: Add IOPortControlCaps to control IO port allocation 2018-04-19 05:27:06 +10:00
KernelInitSepProofs_AI.thy Isabelle2016-1: update references to renamed constants and facts 2017-01-05 14:23:05 +11:00
KernelInitSep_AI.thy Isabelle2016-1: update references to renamed constants and facts 2017-01-05 14:23:05 +11:00
KernelInit_AI.thy SELFOUR-421: fix coding style 2016-09-22 19:23:28 +10:00
LevityCatch_AI.thy Removes all trailing whitespaces 2017-07-12 15:13:51 +10:00
README.md misc: Proofing and formatting of README.md files. 2014-07-28 13:15:48 +10:00
Retype_AI.thy x64: Add IOPortControlCaps to control IO port allocation 2018-04-19 05:27:06 +10:00
Schedule_AI.thy arm: revise scheduler / fastpath / scheduler bitmaps (SELFOUR-242) 2017-11-27 22:05:34 +11:00
SubMonad_AI.thy repairing AInvs: checks up to the middle of VSpace_AI 2016-01-12 18:10:36 +11:00
Syscall_AI.thy Repair proofs for wpsimp/crunch changes. 2018-08-03 18:25:30 +10:00
TcbAcc_AI.thy Repair proofs for wpsimp/crunch changes. 2018-08-03 18:25:30 +10:00
Tcb_AI.thy Repair proofs for wpsimp/crunch changes. 2018-08-03 18:25:30 +10:00
Untyped_AI.thy ainvs: Remove unnecessary crunches and whitespace 2018-06-27 11:48:56 +10:00
VSpaceEntries_AI.thy Isabelle2017: update AInvs for RC0 2017-10-30 12:23:26 +11:00
VSpacePre_AI.thy x64: Add IOPortControlCaps to control IO port allocation 2018-04-19 05:27:06 +10:00
VSpace_AI.thy x64: merge master 2017-07-21 11:27:12 +10:00

README.md

Abstract Spec Invariant Proof

This proof defines and proves the global invariants of seL4's abstract specification. The invariants are phrased and proved using a monadic Hoare logic described in a TPHOLS '08 paper.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b AInvs

Important Theories

The top-level theory where the invariants are proved over the kernel is Syscall_AI; the bottom-level theory where they are defined is Invariants_AI.