Strong Formal Verification For RISC V: From Instruction Set Manual To RTL
summary
Claims a full machine-checked refinement from the RISC‑V ISA to RTL using a Coq proof assistant guided framework and a Bluespec-like language that compiles to RTL with a formally verified compiler planned. Delivers two implemented RISC‑V cores so far: a 32‑bit microcontroller-class core proved correct, and a 64‑bit desktop-class core in progress that can run a Linux boot prefix against the formal spec. Proves a two‑level cache coherent memory for any number and size of caches and composes component proofs into system‑level guarantees.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:59A Cartoon View of Digital Hardware Design
- 3:13Analyze Isolated Components
- 4:08Start Over For Each Design
- 6:03The Big Ideas (from Bluespec)
- 10:08Some Example Kami Code (simple FIFO)
- 11:11An Example Kami Proof (pipelined processor)
- 15:46Some Useful Refinement Tactics
- 17:50Key Ingredient
- 20:54The Promise of this Approach
related talks
31mFormal Specification
18mRISC-V Spotlight: Improving RISC-V Quality with Verification Standards and Advanc...
17mDemo: RISC-V Models for Verification, Software Development and Architectural Explor...
02h 49mA Tour of the RISC V ISA Formal Specification
09mBreaking the RISC-V Processor Customization Barrier with Formal Verification
32mFormal Specification of the RISC-V Instruction Set Architecture
21mThe New Verification Ecosystem that Supports RISC-V Verification fo...
20mRISC V Software State of the Union
