Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

setup, mock and rules for SafeMigration, SafeToL2Migration and SafeToL2Setup #1

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

hristo-grigorov
Copy link
Collaborator

Hi @jhoenicke ,

Following our brainstorming session for different rules, I prepared the following setup and rules.

I also added run links at the top of each spec file.
Those include runs of all the rules (both with and without sanity basic).

All the rules pass successfully.

Please review and advise if any changes should be made.

Thank you.

Copy link

@jhoenicke jhoenicke left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overall it looks good. Running with sanity advanced would give me a bit more confidence that there are not some paths pruned because of linking/dispatcher issues.

"optimistic_loop": true,
"process": "emv",
"prover_args": [
" -smt_groundQuantifiers false"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need the quantifier options? If not, we could just not set the prover args.

This also applies to the other conf files.

"loop_iter": "3",
"msg": "SafeMigration",
"optimistic_hashing": true,
"optimistic_loop": true,

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We could try without optimistic_loop here. I think there are no loops or unbounded hashing, so if we can prove it without, it would be better.

This also applies to the other conf files.

"prover_args": [
" -smt_groundQuantifiers false"
],
"rule_sanity": "basic",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you try with advanced sanity? The basic sanity will not check if the functions always revert, because you call them with @withreverted.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants