Stainless

Verification framework for a subset of the Scala programming language. Supports contract-driven verification as well as termination checking of higher-order functional programs with local imperative features (see Pure Scala and Imperative for more details about the supported fragment).

Documentation

To get started, see videos:

• Tutorials from EPFL Course: Getting Started, Tutorial 1 Tutorial 2 Tutorial 3 Tutorial 4, Assertions, Unfolding, Dispenser Example
• Viktor's keynote at Lambda Days 2020
• Viktor's keynote at ScalaDays 2017 Copenhagen

Or documentation chapters, such as:

• Documentation
• Introduction to Stainless
• Installation
• Getting Started
• Command-line Options
• Tutorial
• Stainless EPFL Page

Development

To build the project, run sbt universal:stage. If all goes well, a binary gets generated: frontends/scalac/target/universal/stage/bin/stainless-scalac. More information is available in the documentation links.

Other Links

• Stainless Website: https://stainless.epfl.ch
• EPFL-LARA Website: https://lara.epfl.ch/w/

License

Stainless is released under the Apache 2.0 license. See the LICENSE file for more information.

Relation to Inox

Stainless relies on Inox to solve the various queries stemming from program verification. Inox supports model-complete queries in a feature-rich fragment that lets Stainless focus on program transformations and soundness of both contract and termination checking.

Relation to Leon

The Stainless/Inox stack has grown out of the Leon codebase and subsumes the verification and termination checking features of Leon. The new projects aim to provide a more stable and principled implementation of the verification techniques underlying Leon. Feature-wise, Stainless has already outgrown Leon verification and provides new features such as higher-order contracts and contract-based termination checking.