GitLab

This version allows one to either close or cancel the invariant after opening it.

The closing view shift's LHS mask is now universally quantified, which
makes it easier to execute the closing view shift.

This is a substitute for !136.

The finiteness was needed to have the axiom of choice over the domain. This axiom is not needed if cmra_extend is in Type.

Revert "Remove the domain finiteness hypothesis for the function CMRA, and put cmra_extend in Type."

This reverts commit fa897ff5.

The finiteness was needed to have the axiom of choice over the domain. This axiom is not needed if cmra_extend is in Type.

This partially solves #112.

This used to be done by using `ElimModal` in backwards direction. Having
a separate type class for this gets rid of some hacks:

- Both `Hint Mode`s in forward and backwards direction for `ElimModal`.
- Weird type class precedence hacks to make sure the right instance is picked.
  These were needed because using `ElimModal` in backwards direction caused
  ambiguity.

This was an oversight in !63.

restriction in uPred_closed.

To be consistent with the lemma for the persistence modality.

In same spirit as the other 'primitive' types like `option`, `prod`, ...