GitLab

It is not non-expansive, so not a function we should use.

This commit reverts cdce49a7, which turns out to be no longer useful,
and which I thus no longer wish to maintain.

And make it Typeclasses Opaque to ensure that we indeed do not do
so using the proof mode.

Prove some properties about it, and define timeless in terms of it,
and factor this notion out of raw view shifts.

show that even \later^n False is inconsistent (for any fixed n); properly use pvs in counter_examples

This is more consistent with the proofmode, where we also call it pure.

be the same as ↔.

This is a fairly intrusive change, but at least makes notations more
consistent, and often shorter because fewer parentheses are needed. Note
that viewshifts already had the same precedence as →.

Based on an idea and WIP commits of J-H. Jourdan: the core of a CMRA
A is now a partial function A → option A.

TODO: define sum CMRA
TODO: remove one shot CMRA and define it in terms of sum

We git this from monotonicity now.

- Make the carrier argument of the constructors for the canonical structures
  cofeT and cmraT explicit. This way we make sure the carrier is properly
  exposed, instead of some alias of the carrier.
- Make derived constructions (such as discreteC and discreteR) notations
  instead of definitions. This is yet again to make sure that the carrier is
  properly exposed.
- Turn DRA into a canonical structure (it used to be a type class).

This fixes some issues, notably it fixes some broken rewrites in algebra/sts
and it makes canonical structures work properly with dec_agree.

I have introduced the following definition to avoid many case
analyses where both branches had nearly identical proofs.

Definition uPred_always_if {M} (p : bool) (P : uPred M) : uPred M :=
  (if p then □ P else P)%I.

This reverts commit 3cc38ff6.

The reverted pure hypotheses and variables appear in the wrong order.