Formal Refinement for Operating System Kernels

This book was written as a companion to my book on modelling operating system kernels. It is intended to demonstrate that the formal derivation of kernels is possible (and, actually, quite easy, or so I have found thus far). Itisimportantforthereadertounderstandthattherefinementscontained in this book are not the only ones I have performed of microkernels. To date, I have refined four microkernels down to executable code and have now p- duced a kit of formally specified components that can be composed to form kernels. The first kernel included in this book is just one example of this work. The second kernel, the Separation Kernel, is new and was partly constructed out of the kit of parts (and the reader will see reuse in its specification and refinement) and was included for specific reasons that will become clear anon. Bothkernelstooklessthanthreemonths’workingtimetoproduce(theactual time is rather hard to calculate because of frequent interruptions). Previous experience in refining kernels also paid o? in the sense that there was l- tle revision involved in their specification or refinement; the usual process of yo-yoing between levels of the derivation was absent. This appears to be an inevitable consequence of experience.