The SECD Microprocessor

"The SECD Microprocessor" is a substantial case study in hardware specification and verification. The subject is a silicon implementation of Landin's SECD machine, which is transformed into a layout, formally specified, and partially verified using the HOL proof assistant. It is important as a nontrivial worked example, clearly describing the organization and execution of the correctness of proof, and by making the sources available, will be helpful to those considering the use of or learning about the application of formal methods. The architecture is designed to provide support for functional progamming, with complex machine instruction semantics to support recursive definitions and function calls. This considerably raises the complexity of the state transitions to be verified, and an abstract data type and operations are introduced to express the specification. "The SECD Microprocessor" illustrates what formal methods can achieve today, not only by an expert, but by anyone prepared to carefully consider the problems at hand.