Thomas Sewell 59ea0fe460 Assertions to lean on abstract refinement. ... We can't prove that the caller cap must be a reply cap or that the frames mapped in an arbitrary address space are backed by caps without appealing to the abstract invariants, which means yet more assertions in haskell and work in the abstract/haskell refinement.		2015-07-14 14:15:27 +10:00
..
Data	removed ancient arch tags	2014-07-19 10:48:49 +02:00
SEL4	Assertions to lean on abstract refinement.	2015-07-14 14:15:27 +10:00
Simulation	Release snapshot	2014-07-18 05:03:59 +10:00
SEL4.lhs	expose more api and make haskell translator happy	2015-05-19 19:23:06 +10:00