 15 Feb, 2016 3 commits
 14 Feb, 2016 26 commits


Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored
This is shorter and more consistent with naming elsewhere.

Robbert Krebbers authored
This makes the proofs a lot nicer. I tried factoring out some properties about finite maps, but this was not entirely satisfactory. It would be nice to generalize from_heap_None and heap_singleton_inv_l somehow.

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored
This works better with class interference.

Robbert Krebbers authored

Ralf Jung authored

Ralf Jung authored

Ralf Jung authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Ralf Jung authored

Ralf Jung authored

Ralf Jung authored

Ralf Jung authored

Ralf Jung authored

 13 Feb, 2016 11 commits