Work

Auto-active verification of distributed systems and specification refinements with Why3-do

Year: 2025

Type: article

Abstract: In this paper, we introduce a novel approach for rigorously verifying safety properties of state machine specifications. Our method leverages an auto-active verifier and centers around the use of action functions annotated with contracts. These contracts facilitate inductive invariant checking, ensuring correctness during system execution. Our approach is further supported by the Why3-do library, which extends the Why3 tool's capabilities to verify concurrent and distributed algorithms using state machines. Two distinctive features of Why3-do are: (i) it supports specification refinement through refinement mappings, enabling hierarchical reasoning about distributed algorithms; and (ii) it can be easily extended to make verifying specific classes of systems more convenient. In particular, the library contains models allowing for message-passing algorithms to be described with programmed handlers , assuming different network semantics. A gallery of examples, all verified with Why3 using SMT solvers as proof tools, is also described in the paper. It contains several auto-actively verified concurrent and distributed algorithms, including the Paxos consensus algorithm.

Source: Science of Computer Programming

DOI: 10.1016/j.scico.2025.103352

Authors: Cláudio Belo Lourenço, Jorge Sousa Pinto

Institutions: Huawei Technologies (United Kingdom), Institute for Systems Engineering and Computers, INESC TEC, University of Minho

Language: English

Topic: Formal Methods in Verification

Subfield: Computational Theory and Mathematics

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

Estimated APC paid: $2,600

Funders: École Normale Supérieure, Centre National de la Recherche Scientifique, Fundação para a Ciência e a Tecnologia