(In the tradition of celebrating technical success even when associated with commercial failure, and because Michael mentioned the machine and I already had some materials...)
32-bit micro from Royal Signals & Radar Establishment (RSRE), "Verifiable Integrated Processor for Enhanced Reliability" or VIPER
A fifth the complexity of its peers
And yet, "several million transistors" (Really??
Citation.)
Designed in HOL
Programmed in Newspeak
There's a machine description in Appendix 1 (page 19) of
The VIPER Microprocessor (J Kershaw, November 1987) where we learn it just has A X Y and PC, all 32 bits, and a 20 bit address range - so 20 bit addresses fit in the one-word instructions.
It also has a single one-bit flag as the status register.
There's a hint that addition might be slower than a logic operation!
The doc tells us about simulating the device in Algol68 at 50 instructions per second on a VAX. And a microprogrammed emulator thingy by Gemini Systems Inc. running at 200,000 IPS. And that took only 168 instructions on the Gemini! Chip design is in ELLA (I think I might remember that from my Plessey days.)
The fangs of the VIPER (Nature, August 1991)
Quote:
VIPER is the first commercially available microprocessor whose design is claimed to have been proven correct. The controversy provoked by the claim reveals fundamental disagreement about the meaning of 'proof'.
See also
here, page 86.
At last, the guaranteed fault-free chip. New Scientist, 3 October 1985
Quote:
PRODUCTION work should begin next week on the first 32-bit chip in the world with a design that has been proved mathematically to be correct. ... The RSRE's scientists have designed a new software language to work alongside the Viper chips. The language, called NewSpeak, does not allow a programmer to design a program that has errors in it ... And why is it called NewSpeak? It was designed in 1984.
Attachment:
Viper-NS-1.png
But it ended badly:
Quote:
Last month, a small computer consultancy in Worcester went the way of
many others in the current recession, and called in the liquidators.
But the closure of Charter Technologies is not just another hard-luck story:
it contains tough lessons for any company contemplating doing business with
the Ministry of Defence.
New Scientist 13 July 1991More info here:
Hardware Implementation, Processors and EMC (Prof. Chris Johnson, School of Computing Science, University of Glasgow)
and here:
Microprocessor Based Protection Systems Andrew Churchley (Ed.) 1991