1. 29 Nov, 2017 1 commit
  2. 25 Oct, 2017 4 commits
  3. 17 Sep, 2017 1 commit
  4. 17 Aug, 2017 2 commits
  5. 08 Jun, 2017 2 commits
  6. 07 Apr, 2017 1 commit
  7. 24 Mar, 2017 1 commit
    • Robbert Krebbers's avatar
      Generic big operators that are no longer tied to CMRAs. · 6fbff46e
      Robbert Krebbers authored
      Instead, I have introduced a type class `Monoid` that is used by the big operators:
      
          Class Monoid {M : ofeT} (o : M → M → M) := {
            monoid_unit : M;
            monoid_ne : NonExpansive2 o;
            monoid_assoc : Assoc (≡) o;
            monoid_comm : Comm (≡) o;
            monoid_left_id : LeftId (≡) monoid_unit o;
            monoid_right_id : RightId (≡) monoid_unit o;
          }.
      
      Note that the operation is an argument because we want to have multiple monoids over
      the same type (for example, on `uPred`s we have monoids for `∗`, `∧`, and `∨`). However,
      we do bundle the unit because:
      
      - If we would not, the unit would appear explicitly in an implicit argument of the
        big operators, which confuses rewrite. By bundling the unit in the `Monoid` class
        it is hidden, and hence rewrite won't even see it.
      - The unit is unique.
      
      We could in principle have big ops over setoids instead of OFEs. However, since we do
      not have a canonical structure for bundled setoids, I did not go that way.
      6fbff46e
  8. 09 Feb, 2017 3 commits
  9. 27 Jan, 2017 1 commit
  10. 05 Jan, 2017 1 commit
  11. 03 Jan, 2017 1 commit
  12. 09 Dec, 2016 2 commits
  13. 29 Nov, 2016 2 commits
  14. 28 Nov, 2016 2 commits
    • Robbert Krebbers's avatar
      Simplify proof of auth_local_update. · ce32b224
      Robbert Krebbers authored
      Also, use explicit unfolding lemmas for auth_valid and auth_validN.
      The `Arguments valid _ _ !_ /` hack did not really work when one
      has to deal with the valid instance of the cmra, which underneath also
      includes a `cmra_valid`. Declaring a similar Arguments for `cmra_valid`
      is a bad idea, it will also end up unfold stuff for the exclusive and
      option CMRA.
      ce32b224
    • Ralf Jung's avatar
      Add a local update for auth (needed for nested auth) · 692b8570
      Ralf Jung authored
      Proof was done by Hai & me
      692b8570
  15. 25 Nov, 2016 1 commit
  16. 22 Nov, 2016 1 commit
  17. 25 Oct, 2016 1 commit
  18. 06 Oct, 2016 1 commit
  19. 05 Oct, 2016 1 commit
  20. 03 Oct, 2016 1 commit
  21. 28 Sep, 2016 1 commit
  22. 20 Sep, 2016 1 commit
  23. 09 Sep, 2016 1 commit
  24. 01 Sep, 2016 1 commit
  25. 20 Aug, 2016 1 commit
    • Robbert Krebbers's avatar
      Remove the requirement that the unit of a CMRA is timeless. · 7975f872
      Robbert Krebbers authored
      This requirement was useful in Iris 2.0: in order to ensure that ownership of
      the physical state was timeless, we required the ghost CMRA to have a timeless
      unit. To avoid having additional type class parameters, or having to extend the
      algebraic hierarchy, we required the units of any CMRA to be timeless.
      
      In Iris 3.0, this issue no longer applies: ownership of the physical state is
      ghost ownership in the global CMRA, whose unit is always timeless.
      
      Thanks to Jeehoon Kang for spotting this unnecessary requirement.
      7975f872
  26. 14 Aug, 2016 1 commit
  27. 04 Aug, 2016 1 commit
  28. 28 Jul, 2016 1 commit
  29. 27 Jul, 2016 1 commit
  30. 25 Jul, 2016 1 commit