 28 Sep, 2016 3 commits


Robbert Krebbers authored
This allows us to factor out properties about connectives that commute with the big operators.

Robbert Krebbers authored

Robbert Krebbers authored

 27 Sep, 2016 3 commits


Robbert Krebbers authored
This way we can use uPred_valid for validity of uPreds, which more sense.

Robbert Krebbers authored

Robbert Krebbers authored

 15 Sep, 2016 1 commit


JacquesHenri Jourdan authored

 13 Sep, 2016 1 commit


JacquesHenri Jourdan authored

 05 Sep, 2016 1 commit


Robbert Krebbers authored

 31 Aug, 2016 5 commits


Robbert Krebbers authored

Robbert Krebbers authored
Annoyingly, this requires one to prove the following in the model: (∀ x : A, ■ φ x) ⊢ ■ (∀ x : A, φ x)

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

 30 Aug, 2016 4 commits


Robbert Krebbers authored
Thanks to Ranald Clouston for suggesting the axiom: ▷ P ⊢ ▷ False ∨ (▷ False → P) This axiom is used to prove timeless of implication, wand and forall. Timelessness of the pure and ownM connectives is still proven in the model, but we first state the property in a way that it does not involved derived notions (like the except_last modality).

Robbert Krebbers authored
It is unused, and ownM_empty is stronger.

Robbert Krebbers authored

Robbert Krebbers authored
For that we need a slightly stronger property for distributing a later over an existential quantifier.

 25 Aug, 2016 2 commits


Robbert Krebbers authored
Following the time anology of later, the stepindex 0 corresponds does not correspond to 'now', but rather to the end of time (i.e. 'last').

Robbert Krebbers authored

 24 Aug, 2016 1 commit


Robbert Krebbers authored

 14 Aug, 2016 1 commit


Robbert Krebbers authored
This is more consistent with the definition of the extension order, which is also defined in terms of an existential.

 11 Aug, 2016 1 commit


Robbert Krebbers authored
It is not nonexpansive, so not a function we should use.

 08 Aug, 2016 2 commits


Robbert Krebbers authored
This commit reverts cdce49a7, which turns out to be no longer useful, and which I thus no longer wish to maintain.

Robbert Krebbers authored

 05 Aug, 2016 2 commits


Robbert Krebbers authored
And make it Typeclasses Opaque to ensure that we indeed do not do so using the proof mode.

Robbert Krebbers authored

 04 Aug, 2016 4 commits


Robbert Krebbers authored

Robbert Krebbers authored
Prove some properties about it, and define timeless in terms of it, and factor this notion out of raw view shifts.

Ralf Jung authored
show that even \later^n False is inconsistent (for any fixed n); properly use pvs in counter_examples

Ralf Jung authored

 27 Jul, 2016 3 commits


Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

 25 Jul, 2016 2 commits


Ralf Jung authored

Robbert Krebbers authored

 21 Jul, 2016 1 commit


Ralf Jung authored

 02 Jul, 2016 1 commit


Robbert Krebbers authored

 24 Jun, 2016 1 commit


Robbert Krebbers authored

 23 Jun, 2016 1 commit


Robbert Krebbers authored
This is more consistent with the proofmode, where we also call it pure.
