On 12 Jun 2015, at 19:10 , Harry Butterworth <heb1001@gmail.com> wrote:

It would be particularly neat to do a fault-tolerant implementation of the seL4 API and a refinement proof that it implemented the spec when the number of concurrent failures was limited.


do you mean something like this? https://ssrg.nicta.com.au/projects/TS/cots.pml

Gernot



The information in this e-mail may be confidential and subject to legal professional privilege and/or copyright. National ICT Australia Limited accepts no liability for any damage caused by this email or its attachments.