Idea from Adam for how to prove high-level interpreter is ok Allow running after a crash (including a crash during recovery)
Idea from Adam for how to prove high-level interpreter is ok
Allow running after a crash (including a crash during recovery)

mit-pdos/fscq-impl,mit-pdos/fscq-impl,mit-pdos/fscq-impl,mit-pdos/fscq-impl,mit-pdos/fscq-impl