- Nov 06, 2023
-
-
Ralf Jung authored
-
- Sep 26, 2023
- Aug 29, 2023
-
-
Ralf Jung authored
-
- Mar 18, 2023
-
-
Ralf Jung authored
-
- Aug 03, 2022
-
-
Ralf Jung authored
-
- May 24, 2022
-
-
- Jul 26, 2021
-
-
Ralf Jung authored
-
- Jul 19, 2021
-
-
Ralf Jung authored
-
- Jun 02, 2021
-
-
Ralf Jung authored
-
- May 20, 2021
-
-
Ralf Jung authored
-
- May 09, 2021
-
-
Ralf Jung authored
-
- May 07, 2021
- Jan 17, 2021
-
-
Robbert Krebbers authored
that performs `wp_pure` in small steps until the lemma matches the goal.
-
- Dec 16, 2020
-
-
Simon Friis Vindum authored
-
Simon Friis Vindum authored
-
- Nov 11, 2020
-
-
Ralf Jung authored
-
- Sep 10, 2020
-
-
Ralf Jung authored
-
- Mar 16, 2020
-
-
- remove "odd" comment - move atomic triples to bi_scope
-
- Feb 18, 2020
-
-
Robbert Krebbers authored
-
- Sep 13, 2019
-
-
Jacques-Henri Jourdan authored
The general idea is to first import/export modules which are further than the current one, and then import/export modules which are close dependencies. This commit tries to use the same order of imports for every file, and describes the convention in ProofGuide.md. There is one exception, where we do not follow said convention: in program_logic/weakestpre.v, using that order would break printing of texan triples (??).
-
- Jun 24, 2019
- Jun 14, 2019
-
-
Ralf Jung authored
-
- Feb 16, 2019
-
-
Ralf Jung authored
-
- Jan 24, 2019
- Jan 19, 2019
-
-
Ralf Jung authored
-
- Oct 29, 2018
-
-
Jacques-Henri Jourdan authored
-
Jacques-Henri Jourdan authored
We add a specific constructor to the type of expressions for injecting values in expressions. The advantage are : - Values can be assumed to be always closed when performing substitutions (even though they could contain free variables, but it turns out it does not cause any problem in the proofs in practice). This means that we no longer need the `Closed` typeclass and everything that comes with it (all the reflection-based machinery contained in tactics.v is no longer necessary). I have not measured anything, but I guess this would have a significant performance impact. - There is only one constructor for values. As a result, the AsVal and IntoVal typeclasses are no longer necessary: an expression which is a value will always unify with `Val _`, and therefore lemmas can be stated using this constructor. Of course, this means that there are two ways of writing such a thing as "The pair of integers 1 and 2": Either by using the value constructor applied to the pair represented as a value, or by using the expression pair constructor. So we add reduction rules that transform reduced pair, injection and closure expressions into values. At first, this seems weird, because of the redundancy. But in fact, this has some meaning, since the machine migth actually be doing something to e.g., allocate the pair or the closure. These additional steps of computation show up in the proofs, and some additional wp_* tactics need to be called.
-
- Jul 13, 2018
- Jul 02, 2018
-
-
Ralf Jung authored
-
- Jun 30, 2018
-
-
Ralf Jung authored
-