~/talk

Verifying non-terminating programs with IO in F*

on YouTube 19m
Talkat HOPE 2022 · on Sunday, 2022-09-11· [security]

speakers

name:Cezar-Constantin Andrici
links:none on file
name:Théo Winterhalter
bluesky:theowinterhalter.bsky.social
name:Cătălin Hriţcu
links:none on file
name:Exequiel Rivas
links:none on file

resources

video:https://youtu.be/i6gfZteKAAw
slides:none on file

summary

Defines an F effect that specifies IO for both terminating and potentially non-terminating programs, implements an example echo server and most of a simple web server, and proves the echo’s traces are exactly a read then a write with the same message using SMT automation. Verification uses a specification monad with infinite traces encoded as streams, adds Tau markers to force productivity, and relies on a sub-effecting lift* from terminating IO to non-terminating IO; divergence equivalence proofs still need more manual tuning.

AI-written summary · about

chapters (5)

  1. 0:00Start
  2. 3:26What Is a Trace
  3. 11:24How To Verify the Loop
  4. 16:29Sub-Effecting
  5. 17:10Conclusions

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.