- Jul 11, 2016
-
-
Jacques-Henri Jourdan authored
-
Jacques-Henri Jourdan authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
This class whose name is horrible and purpose is arbitrary seems to be a leftover of some experiment with ch2o, a long time a ago.
-
Ralf Jung authored
-
Ralf Jung authored
-
- Jul 06, 2016
-
-
Jacques-Henri Jourdan authored
-
- Jul 05, 2016
-
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
- Jul 04, 2016
-
-
Jacques-Henri Jourdan authored
-
Robbert Krebbers authored
-
- Jul 03, 2016
-
-
Ralf Jung authored
-
Ralf Jung authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
That way type class search becomes more predictable.
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
- Jul 02, 2016
-
-
Jacques-Henri Jourdan authored
-
Jacques-Henri Jourdan authored
Lifting lemmas : make the initial state appear under an existential under the view shift. This is still sound, but slightly more expressive.
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
- Jul 01, 2016
-
-
Robbert Krebbers authored
-
Jacques-Henri Jourdan authored
-
Jacques-Henri Jourdan authored
-
Robbert Krebbers authored
This may save the need to seal off some stuff.
-
Jacques-Henri Jourdan authored
New lemma : cmra_update_valid0. This let us prove a FP update using the additionnal hypothesis that the source is valid at step 0.
-
Jacques-Henri Jourdan authored
-
- Jun 30, 2016
-
-
Robbert Krebbers authored
-
Robbert Krebbers authored
-
Robbert Krebbers authored
In particular, it no longer uses set_solver (which made it often slow or diverge) but a more specific lemma about subseteq.
-
Robbert Krebbers authored
In noticed in Amin's development that importing the proof mode often turns length into String.length. The weird thing is that before importing the proof mode, it refers to List.length, and when importing just the proof mode, it refers to List.length too. However, in some combinations of imports, it seems to result in it refering to String.length...
-