Light Lean proofs about low-level machine behavior.
🚧 Status: under construction. 🚧
Right now, it models a couple instructions for AArch64 and x86_64, then proves a tiny specification (isZero) against those models.
- A small
Word64spec (isZeroSpec) - AArch64 model and proof for
isZero - x86_64 model and proof for
isZero - Simple tests that reuse a shared
IsZeroImplinterface
Lightmode/IsZero.lean: spec and supporting lemmasLightmode/AArch64/*: AArch64 core model + proofLightmode/X86_64/*: x86_64 core model + proofLightmode/Tests.lean: shared interface + proof-driven tests
- Install Lean 4:
- Build the project:
lake build
- This is not a full ISA model.
- This is not a verified compiler pipeline.
Apache-2.0. See LICENSE.