copilot: A stream DSL for writing embedded C programs.

[ bsd3, embedded, language, library ] [ Propose Tags ]

This package is the main entry-point for using Copilot.

Copilot is a stream (i.e., infinite lists) domain-specific language (DSL) in Haskell that compiles into embedded C. Copilot contains an interpreter, multiple back-end compilers, and other verification tools. A tutorial, bug reports, and todos are available at

Examples are available at

[Skip to Readme]




Maintainer's Corner

Package maintainers

For package maintainers and hackage trustees


  • No Candidates
Versions [RSS] 0.21, 0.22, 0.23, 0.25, 0.26, 0.27, 0.28, 1.0, 1.0.1, 1.0.2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1, 3.0, 3.0.1, 3.1, 3.2, 3.2.1, 3.3, 3.4, 3.5, 3.6, 3.7, 3.8, 3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.16.1, 3.17, 3.18, 3.18.1, 3.19, 3.19.1
Dependencies base (>=4.0 && <5), copilot-c99 (>=2.2.1), copilot-cbmc (>=2.2.1), copilot-core (>=2.2.1), copilot-language (>=2.2.1), copilot-libraries (>=2.2.1), copilot-sbv (>=2.2.1), copilot-theorem (>=2.2.1), directory (>=1.2.1), random [details]
License BSD-3-Clause
Author Nis Nordby Wegmann, Lee Pike, Robin Morisset, Sebastian Niller, Alwyn Goodloe
Maintainer Lee Pike <>
Category Language, Embedded
Home page
Source repo head: git clone git://
Uploaded by agoodloe at 2017-07-12T16:40:38Z
Distributions LTSHaskell:3.19.1
Reverse Dependencies 6 direct, 0 indirect [details]
Executables copilot-regression
Downloads 27048 total (130 in the last 30 days)
Rating 2.0 (votes: 1) [estimated by Bayesian average]
Your Rating
  • λ
  • λ
  • λ
Status Docs available [build log]
Last success reported on 2017-07-12 [all 1 reports]

Readme for copilot-2.2.1

[back to package description]

Build Status

Copilot: a stream DSL

Copilot is a stream (i.e., infinite lists) domain-specific language (DSL) in Haskell that compiles into embedded C. Copilot is similar in spirit to languages like Lustre. Copilot contains an interpreter, multiple back-end compilers, and other verification tools.


Copilot is comprised of a number of sub-projects which are automatically installed when you install Copilot from Hackage, as described below. (These are tracked as Git submodules in Copilot.)

  • copilot-language The front-end of Copilot defining the user language.

  • copilot-libraries User-supplied libraries for Copilot, including linear-temporal logic, fault-tolerant voting, regular expressions, etc.

  • copilot-core The core language, which efficiently represents Copilot expressions. The core is only of interest to implementers wishing to add a new back-end to Copilot.

  • copilot-cbmc A tool to generate a driver using CBMC, a third-party tool (see Dependencies below) that proves that the code generated by different C back-ends is equivalent. Currently, this includes the C99 back-end and the SBV back-end.

  • copilot-c99 A back-end that translates to Atom to generate hard real-time C code.

Optionally, you may which also to install

  • copilot-sbv Another back-end that translates to SBV, using its code generator to generate hard real-time C code as well. The ad

  • copilot-discussion Contains a tutorial, todos, and other items regarding the Copilot system.

Sources for each package are available on Github as well. Just go to Github and search for the package of interest. Feel free to fork!

Comments, bug reports, and patches are always welcome. Send them to leepike @


Please see the files under the Examples directory for a number of examples showing the syntax, use of libraries, and use of the interpreter and back-ends. The examples is the best way to start.


  • From Hackage:

    The Copilot library is cabalized. Assuming you have cabal and the GHC compiler installed (the Haskell Platform is the easiest way to obtain these), it should merely be a matter of running

         cabal install copilot

    with an Internet connection. Please see the INSTALL file for installation details.

  • From GitHub:

         git clone
         git submodule update --init
         make test

Once the installation is done, you can run the executable XXX which will execute the regression test suite for sbv on your machine.

Note there is a TravisCI build (linked to at the top of this README) if you have trouble building/installing.


copilot-cbmc depends on the C model-checker, CBMC. CBMC is a bounded model-checker for C code. We use CBMC to prove that two back-ends generating C generate semantically equivalent C, to help detect bugs in C back-ends.

For compiling it with CompCert (activated by default for SBV backend), you need to install it, with its Standard C library ( ).

Copyright, License

Copilot is distributed with the BSD3 license. The license file contains the BSD3 verbiage.


Copilot was developed, in part, with support from NASA's Aviation Safety Program, Contract #NNL08AD13T. Copilot was developed jointly by Galois, Inc. and the National Institute of Aerospace.

The following people have contributed to Copilot: Lee Pike, Nis Wegmann, Sebastian Niller, Robin Morisset, Alwyn Goodloe, and Levent Erkok.