Presented at ASE on October 15, this March 23 paper prepares helper lemmas from annotated programs, then adapts or proves more during proof search. The Rocq/AutoRocq implementation uses Frama-C/WP conditions. Evaluation includes modules from larger systems; it does not certify those entire systems.

Paper · Implementation · Conference entry