History

Gerwin Klein 3960115459 lib+proofs+sys-init+tools: proof updates for Fun_Pred_Syntax Signed-off-by: Gerwin Klein <gerwin.klein@proofcraft.systems>		2023-01-09 14:54:11 +11:00
..
API_DP.thy	licenses: convert license tags to SPDX	2020-03-13 14:38:24 +08:00
Arch_DP.thy	isabelle-2021: update DSpecProofs	2021-09-30 16:53:17 +10:00
CNode_DP.thy	capDL-api: proof updates for Isabelle2020	2020-10-27 15:52:31 +10:00
IRQ_DP.thy	lib+proofs+sys-init+tools: proof updates for Fun_Pred_Syntax	2023-01-09 14:54:11 +11:00
Invocation_DP.thy	isabelle-2021: update DSpecProofs	2021-09-30 16:53:17 +10:00
KHeap_DP.thy	isabelle-2021: update DSpecProofs	2021-09-30 16:53:17 +10:00
Kernel_DP.thy	licenses: convert license tags to SPDX	2020-03-13 14:38:24 +08:00
ProofHelpers_DP.thy	licenses: convert license tags to SPDX	2020-03-13 14:38:24 +08:00
README.md	READMEs: fix publication links	2021-08-25 11:22:05 +10:00
RWHelper_DP.thy	capDL-api: proof updates for Isabelle2020	2020-10-27 15:52:31 +10:00
Retype_DP.thy	isabelle2021-1: DSpecProofs	2022-03-29 08:38:25 +11:00
Sep_Tactic_Examples.thy	lib + proof: Isabelle2020 Method.NO_CONTEXT_TACTIC rename	2020-10-27 15:52:31 +10:00
TCB_DP.thy	isabelle-2021: update DSpecProofs	2021-09-30 16:53:17 +10:00

README.md

CapDL API Proofs

This proof develops a formal API description for a number of the seL4 system calls, of the capDL kernel specification. This API description is a set of lemmas describing the behaviour of various system calls in terms of a separation logic defined over that kernel specification.

When reasoning about system calls this proof treats the kernel like a library invoked directly from user-space and does not reason about scheduling. These proofs are used by the system initialiser proof, as described in the ICFEM '13 paper and Andrew Boyton's PhD thesis.

Building

To build from the l4v/ directory, run:

./isabelle/bin/isabelle build -d . -v -b DSpecProofs

Important Theories

The top-level theory is API_DP. The seL4 API and kernel model are located in Kernel_DP.