GoKawiilProofcraft completes formal proof for dynamic seL4 domain scheduling
Proofcraft has implemented and formally verified a new domain scheduling API for the seL4 microkernel, removing the requirement for a single fixed, compiled-in schedule to maintain information flow security proofs. The API lets systems load semi-static domain schedules that can change across runtime phases, such as longer time slices during boot and shorter ones during normal operation. This capability is now included and proven in seL4 15.0.0.
GoKawiil's interpretation of the reporting above, not reported fact.
Previously, enforcing strict information flow isolation in seL4 meant committing to one rigid timing schedule for the life of the system, which was impractical for real deployments and hard to integrate with SDK tooling like Microkit. By allowing flexible, provably secure scheduling phases, seL4 becomes far more usable for real-world secure systems that need different timing behavior during boot versus operation, without sacrificing its formal security guarantees.
- Proofcraft added and formally verified a semi-static domain scheduling API for seL4.
- The change removes seL4's prior requirement of one fixed compiled-in schedule for information flow security proofs.
- The new API is available in seL4 15.0.0 and supports SDK frameworks like Microkit.
Raspberry Pi 4 Model B (4GB) — The Raspberry Pi 4 is one of the most accessible AArch64 boards for experimenting with seL4 and microkernel builds like Microkit, so you can try the verified kernel on real hardware. It's a cheap, well-documented 64-bit Arm platform with plenty of community support for low-level OS tinkering.
See Raspberry Pi 4 Model B (4GB) on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: proofcraft.systems, 2026-08-24
Published there as: “SeL4 security proofs now complete on AArch64”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.