Certifying a File System Using Crash Hoare Logic: Correctness in the Presence of Crashes
This paper introduces Crash Hoare logic, which extends traditional Hoare logic with a crash condition, a recovery procedure, and logical address spaces for specifying disk states at different abstraction levels.
