Capability-Machine Formalism and Endorsement Relations
Cerise, the CHERI-C Coq memory model, and capability-safety logical relations as the formal model behind handle-based runtimes.
14 notes
Cerise, the CHERI-C Coq memory model, and capability-safety logical relations as the formal model behind handle-based runtimes.
Iris-based separation logics with space credits, tracing GC, and the 2025 IrisFit + Nextgen-Modality lines.
Stacked Borrows, the 2025 Tree Borrows replacement, and the trajectory of NLL / two-phase formalisation.
The bootstrapping verified ML compiler, its 2024 PLDI agenda, and the FM-JIT verified-JIT effort that builds on it.
The production-grade formally verified C compiler, the CompCertO / Owlang line, and why it matters for JIT verification.
Rust verification by functional translation: compile Rust to a pure lambda calculus, verify there.
AWS's bit-precise bounded model checker for Rust, deployed in CI on Firecracker and the standard library.
A deductive verifier for safe Rust that compiles to Why3 and discharges to off-the-shelf SMT solvers.
Microsoft Research's SMT-backed Rust verifier, the leading tool for verified systems software at scale in 2025-2026.
Foundational separation-logic verification of Rust's safe / unsafe core, and its 2024-2026 RefinedRust successor.
RustBelt/Iris, Verus, Creusot, Kani, Aeneas, CompCert, CakeML, Stacked/Tree Borrows, separation logic for managed heaps, capability-machine logics.
Logic programming, type systems, verification, model checking, and program synthesis.
Logic programming, type systems, verification, model checking, and program synthesis.
How to make computational results repeatable, checkable, and trustworthy.