LALR(1) parser generator that builds canonical LR(1) item sets

OCaml tooling for tracing Xen guest address translation

SMT x86_64 TSO model checking and minimum fence synthesis

Verified pixel compiler for TempleOS in Isabelle/HOL

seL4 pager with proven memory isolation and frame reuse

Verified branch relaxing assembler in Isabelle/HOL with provably minimal bytecode layouts