project-oak / silveroak

Formal specification and verification of hardware, especially for security and privacy.
Apache License 2.0
123 stars 20 forks source link

Add concrete instantiations to abstract example #934

Closed jadephilipoom closed 2 years ago

jadephilipoom commented 2 years ago

The double_minimum example from #932 tests that the invariant infrastructure can handle an abstract subcircuit by assuming that it exists and matches a certain specification, then proving that if those assumptions hold the double_minimum circuit is correct. However, I think it's also important to test that the infrastructure can nicely handle actually instantiating those proofs with concrete subcircuits, which is what this PR adds.