lh-l4v/proof/drefine
Gerwin Klein a424d55e3e licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
..
Arch_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
CNode_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Corres_D.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Finalise_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Include_D.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Intent_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Interrupt_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Ipc_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
KHeap_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Lemmas_D.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
MoreCorres.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
MoreHOL.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
README.md licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Refine_D.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Schedule_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
StateTranslationProofs_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
StateTranslation_D.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Syscall_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Tcb_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00
Untyped_DR.thy licenses: convert license tags to SPDX 2020-03-13 14:38:24 +08:00

README.md

CapDL Refinement Proof

This proof establishes that seL4's abstract specification is a formal refinement (i.e. a correct implementation) of its capDL specification. It is described as part of an ICFEM '13 paper.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b DRefine

Important Theories

The top-level theory where the refinement statement is established over the entire kernel is Refine_D; the state-relation that relates the state-spaces of the two specifications is defined in StateTranslation_D and the basic correspondence property proved over each kernel function is defined in Corres_D.