- Feb 18, 2015
- Feb 17, 2015
- Feb 16, 2015
-
-
David Swasey authored
Simplified adv, defining it with ownL. Proof of concept for a friendly interface that (if it works) lets the user set up an invariant and prove view shifts and atomic triples for primitive reductions, rather than work in the model. (It should work, but I have to merge my two proofs to make sure.)
-
- Feb 15, 2015
- Feb 14, 2015
- Feb 13, 2015
-
-
David Swasey authored
-
Ralf Jung authored
-
Ralf Jung authored
improve n[] notation for nonexpansive maps: the proof of Proper is no longer required, it can be derived from nonexpansiveness
-
- Feb 11, 2015
- Feb 09, 2015
- Feb 05, 2015
-
-
Ralf Jung authored
-
Ralf Jung authored
This reverts commit 608fe86e22b912d9d591cd2d0c4e2943b1abe6ce.
-
David Swasey authored
-
David Swasey authored
-
David Swasey authored
-
Ralf Jung authored
-
Ralf Jung authored
-
David Swasey authored
-
- Feb 04, 2015
-
-
David Swasey authored
-
Ralf Jung authored
-
David Swasey authored
protocols where I want to prove something called robust safety. Ironically, to even state robust safety requires Hoare triples that don't imply safety. So Iris supports both {P} e {Q} (implying safety) and [P] e [Q] (not). I'll add a rule for forgetting about safety: {P} e {Q} — Unsafe [P] e [Q] some time soon. Aside: I'm an SSReflect weenie and know next to nothing about the usual Coq tactics. My proof script changes likely reflect that fact.
-
David Swasey authored
-
David Swasey authored
-
- Feb 03, 2015
-
-
Ralf Jung authored
-
- Feb 02, 2015
-
-
Ralf Jung authored
-