Skip to content

Conversation

@Xaphiosis
Copy link
Member

🦆🦆🦆 This PR has the same diff-reducing tech as the TcbAcc_R PR, copied instructions:

In real life, I did the usual addition of Schedule_R, hierarchy update, arch-split and then update. However, since the arch-split part first splits AARCH64, then takes the AARCH64 version of ArchSchedule_R and only fixes what broke, we ended up with a small(er) diff there (again).

Please review commit-by commit with the following notes:

  • [squash] PR: copy AARCH64 version into Schedule_R - same as last time: stop Schedule_R looking like a wall of green (no need to review)
  • aarch64 refine: arch-split Schedule_R - this is the main bulk of the arch-split, dealing with AARCH64
  • [squash] copy AARCH64 ArchSchedule_R to other arches - wipes the body (not the header!) of other arches' ArchSchedule_R with a copy of the AARCH64 version with AARCH64 appropriately substituted (as @corlewis requested last time) - (mostly pointless to review)
  • `[squash] refine: arch-split Schedule_R (other arches) - result of fixing up the ArchSchedule_R of other architectures - shows diff to AARCH64, small for this PR
  • refine+crefine: update for ... arch-split

Reminder: DO NOT MERGE squashed version if it still says aarch64 refine: arch-split

Stats: 30 files changed, 3108 insertions(+), 10756 deletions(-)
Total: 7648 lines removed

In preparation for arch-split.
Create Schedule_R.thy and update import hierarchy.

Signed-off-by: Rafal Kolanski <[email protected]>
For PR review: minimise diff

Signed-off-by: Rafal Kolanski <[email protected]>
With s/AARCH64/<arch>/
For PR

Signed-off-by: Rafal Kolanski <[email protected]>
Weaken preconditions of setVMRoot_corres for ARM+ARM_HYP+X64: remove
redundancy and use cross lemmas.

Signed-off-by: Rafal Kolanski <[email protected]>
@Xaphiosis Xaphiosis requested review from corlewis and lsf37 December 18, 2025 06:32
@Xaphiosis Xaphiosis added the arch-split splitting proofs into generic and architecture dependent label Dec 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

arch-split splitting proofs into generic and architecture dependent

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant