Proving the Correctness of GNAT Light Runtime Library
summary
Covers the use of SPARK (a formally analyzable Ada subset) to prove correctness properties of GNAT's light runtime library — the small Ada runtime used for embedded and certified systems (bare-metal or with an OS). Describes applying proof to about 30 of the ~180 runtime units (I/O, numerics, text, memory), what was proven (absence of runtime errors and conformance to functional specs), and bugs found/fixed during that effort.
AI-written summary · about
related talks
06mEmbedded Executive LIVE
02mexplains Ada's shrinking footprints
01h 00mDealing with Embedded Limitations
14mAdaptive Shielding via Parametric Safety Proofs
05mTrust In Soft at embedded world North America 2026
38mFormal Verification of Embedded Linux Systems Using Trace-Base...
12mLightning Talk: From Hardware Simulation to Real Devices with WebAssembly Using TinyGo
07mA Small Update On TinyGo