~/talks

Peter Sewell

what they talk about

all 8 in the filters

where they keep going back

all 7 in the filters

on a stage with

all 32 in the filters

who talks about the same things

titleconferencedate
Combining Agentic AI and Lightweight Formal Methods To Find Bugs in a Production(…)PAgE 20262026-06-15
Combines the executable-spec framework for Android pKVM with an OpenAI Codex-based agent that writes ambient-C ghost code and tests, running for about one…
Talk on
Code-Specify-Test-Debug-Prove: Flexibly Integrating Separation Logic Specification into(…)PLDI 20262026-06-15
Integrates CN separation logic into runtime checks, unit and SMT-based random generator testing, and final machine-checked proofs, all on the real-world PKVM…
Talk on
ArchSem: Reusable Rigorous Semantics of Relaxed ArchitecturesPOPL 20262026-01-11
A reusable framework composes ISA pseudo-code from Sail with concurrency interpreters in Rock via a freemonad of 15 algebraic effects, ingesting the full ARM…
Talk on
Production Language Specification - Requirements for Multiple UsagesRPLS 20252025-06-17
Argues that one meta-language cannot serve all needs and surveys concrete tooling: LATeX/OCaml/Isabelle/HOL backends from LEM, a domain‑specific Sale front end…
Talk on
Morello-Cerise: A Proof of Strong Encapsulation for the Arm Morello Capability Hardware(…)PLDI 20252025-06-16
Proves that an encapsulated C-style component running on Arm Morello maintains a mod-64 accumulator invariant against arbitrary untrusted code, by mechanising…
Talk on
A CHERI C Memory Model for Verified Temporal SafetyCPP 20252025-01-20
Defines a CHERI C object memory model that implements a new PNVI-CHERI provenance scheme, encodes five revocation strategies, and plugs into the Cerberus…
Talk on
Fulminate: Testing CN Separation-Logic Specifications in CPOPL 20252025-01-19
Fulminate translates CN separation-logic annotations into executable C checks that enforce ownership ghost state and explicit ownership transfer at runtime…
Talk on
Keynote: Can we reason about the security of concurrent systems code?PriSC 20242024-01-20
Goal is to verify Google’s PKVM hypervisor running on ARM, not just papers: ARM semantics is captured in 420,000 lines of ARM spec (Sail/ASL), the hypervisor…
Talk on
WelcomeThe Future of Weak Memory 20242024-01-15
Program opens by defining weak versus strong memory and lists concrete agenda items: empirical validation of memory persistency models, tooling for checking…
Organiser on
An Axiomatic Basis for Computer Programming on the Relaxed Arm-A Architecture: T...POPL 20242024-01-14
Claims a new separation logic AxSL for the Arm‑A user‑mode axiomatic model that lets relaxed reads/writes transfer resources when they induce ordering…
Talk on
CN: Verifying Systems C Code with Separation-Logic Refinement TypesPOPL 20232023-01-15
CN is a separation-logic refinement type system for ISO C that uses a Cerberus translation to a core language, implements resource types as first-class…
Talk
VIP: Verifying Real-World C Idioms with Integer-Pointer CastsPOPL 20222022-01-16
Presents VIP, a memory-object model that proves compatible with PNVI while making integer→pointer casts verifiable by adding an explicit provenance-copying…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.