Modelling AMULET1 in CCS

Describes some of the work completed on the specification and property checking of AMULETI, an industrial strength asynchronous microprocessor. The approaches to formal descriptions of AMULETI in CCS have been sketched at two levels of abstraction: the instruction level (for the whole micro) and at the register transfer level for each floor plan element. The specifications are sufficiently detailed to reproduce (the known) deadlocks in earlier designs and to verify that the final version is deadlock and livelock free and possesses appropriate safety and liveness properties