Functional correctness proof for MCS seL4 completed on RISC-V
Proofcraft achieved a significant milestone in the seL4 verification roadmap that was years in the making: the MCS configuration of seL4, providing support for mixed-criticality systems, is now proved to be correct on RISC-V.
This configuration is the largest new seL4 feature, indispensable for mixed criticality real-time applications such as automotive use cases. It contains wide-ranging changes to the kernel's implementation and API. Its verification therefore required considerable effort and has been a priority in the seL4 roadmap for a long time.
Proofcraft has now completed the verification of functional correctness for seL4 with MCS. Functional correctness is the largest and most central proof in the seL4 verification stack. The proof targets the RISC-V architecture and will now be ported to the Arm 64-bit architecture, as part of DARPA's PROVERS program.