GitLab

Add both non-expansive and contractive functors, and bundle them for the general Iris instance as well as the global functor construction

This allows us to move the \later in the user-defined functor to any place we want.
In particular, we can now have "\later (iProp -> iProp)" in the ghost CMRA.

This cleans up some ad-hoc stuff and prepares for a generalization
of saved propositions.

This avoids ambiguity with P and Q that we were using before for both
uPreds/iProps and indexed uPreds/iProps.

It is doing much more than just dealing with ∈, it solves all kinds
of goals involving set operations (including ≡ and ⊆).

Now that there is more of it, it deserves its own place :).

Also, put stuff in a section.

Also, make our redefinition of done more robust under different
orders of Importing modules.

change statement of inv-open lemmas such that they do not force the invariant, and the 'inner step', to appear right next to each other

Also do some minor clean up.

Introduce the notion of "Frame Shift Assertions", and use to prove the rules about inv and auth at once for pvs and wp

Yeah, the name is horrible... but on the plus side, I think it should be possible to show that atomic triples and atomic shifts are also frame shift assertions, and then we get all this stuff for them for free.

Actual proofs will end up using own and inv, and none of the notions defined in ownership.v