一句话:提出架构通用框架 ArchSem,模块化组合 ISA 与并发模型,并在 Rocq/Isabelle 中实例化 Arm/RISC-V 以支持严格验证。
主流架构(Arm、x86、RISC-V)是编译器与系统软件的语义基础,但现有 ISA 与宽松内存语义模型难以同时保留指令集、并发模型和系统特性以供基础形式验证,已有证明助手工作常需简化 ISA 或并发模型。本文提出 ArchSem:一个架构通用语义框架,以“指令语义效应”为接口模块化组合 ISA 与并发模型,并解决可复用模型定义及 Rocq/Isabelle 工程问题。作者将其实例化到 Arm-A、RISC-V 与多种并发模型,并用 Rocq、Isabelle 与纸面证明混合验证 Arm 某配置具备可证明的虚拟内存抽象。AxSL 程序逻辑在此前版本上的可靠性证明进一步佐证其可用性,为生产级架构规范上的验证奠定基础。
The specifications of mainstream processor architectures, such as Arm, x86, and RISC-V, underlie modern computing, as the targets of compilers, operating systems, and hypervisors. However, despite extensive research and tooling for instruction-set architecture (ISA) and relaxed-memory semantics, recently including systems features, there still do not exist integrated mathematical models that suffice for foundational formal verification, of concurrent architecture properties or of systems software. Previous proof-assistant work has had to substantially simplify the ISA semantics, the concurrency model, or both. We present ArchSem, an architecture-generic framework for architecture semantics, modularly combining ISA and concurrency models along a tractable interface of instruction-semantics effects, that covers a range of systems aspects. To do so, one has to handle many issues that were previously unclear, about the architectures themselves, the interface, the proper definition of reusable models, and the Rocq and Isabelle idioms required to make it usable. We instantiate it to the Arm-A and RISC-V instruction-set architectures and multiple concurrency models. We demonstrate usability for proof, despite the scale, by establishing that the Arm architecture (in a particular configuration) provides a provable virtual memory abstraction, with a combination of Rocq, Isabelle, and paper proof. Previous work provides further confirmation of usability: the AxSL program logic for Arm relaxed concurrency was proved sound above an earlier version of ArchSem. This establishes a basis for future proofs of architecture properties and systems software, above production architecture specifications.
@article{PeramiBCLLAS26,
title = {ArchSem: Reusable Rigorous Semantics of Relaxed Architectures},
author = {Thibaut Pérami and Thomas Bauereiss and Brian Campbell and Zongyuan Liu and Nils Lauermann and Alasdair Armstrong and Peter Sewell},
journal = {Proceedings of the ACM on Programming Languages},
volume = {10},
number = {POPL},
year = {2026},
doi = {10.1145/3776650}
}