 13 Sep, 2019 1 commit


JacquesHenri Jourdan authored
The general idea is to first import/export modules which are further than the current one, and then import/export modules which are close dependencies. This commit tries to use the same order of imports for every file, and describes the convention in ProofGuide.md. There is one exception, where we do not follow said convention: in program_logic/weakestpre.v, using that order would break printing of texan triples (??).

 09 Jul, 2019 1 commit


Dan Frumin authored

 01 Jul, 2019 2 commits
 29 Jun, 2019 1 commit


Ralf Jung authored
This also gets rid of [val_for_compare]normalization; instead we introduce a [LitErased] literal that is suited for use by erasure theorems.

 24 Jun, 2019 5 commits
 16 Jun, 2019 1 commit


Robbert Krebbers authored
Used the following script: sed ' s/\bCofeMor/OfeMor/g; s/\c>/\d>/g; s/\bcFunctor/oFunctor/g; s/\bCFunctor/OFunctor/g; s/\b\%CF/\%OF/g; s/\bconstCF/constOF/g; s/\bidCF/idOF/g s/\bdiscreteC/discreteO/g; s/\bleibnizC/leibnizO/g; s/\bunitC/unitO/g; s/\bprodC/prodO/g; s/\bsumC/sumO/g; s/\bboolC/boolO/g; s/\bnatC/natO/g; s/\bpositiveC/positiveO/g; s/\bNC/NO/g; s/\bZC/ZO/g; s/\boptionC/optionO/g; s/\blaterC/laterO/g; s/\bofe\_fun/discrete\_fun/g; s/\bdiscrete\_funC/discrete\_funO/g; s/\bofe\_morC/ofe\_morO/g; s/\bsigC/sigO/g; s/\buPredC/uPredO/g; s/\bcsumC/csumO/g; s/\bagreeC/agreeO/g; s/\bauthC/authO/g; s/\bnamespace_mapC/namespace\_mapO/g; s/\bcmra\_ofeC/cmra\_ofeO/g; s/\bucmra\_ofeC/ucmra\_ofeO/g; s/\bexclC/exclO/g; s/\bgmapC/gmapO/g; s/\blistC/listO/g; s/\bvecC/vecO/g; s/\bgsetC/gsetO/g; s/\bgset\_disjC/gset\_disjO/g; s/\bcoPsetC/coPsetO/g; s/\bgmultisetC/gmultisetO/g; s/\bufracC/ufracO/g s/\bfracC/fracO/g; s/\bvalidityC/validityO/g; s/\bbi\_ofeC/bi\_ofeO/g; s/\bsbi\_ofeC/sbi\_ofeO/g; s/\bmonPredC/monPredO/g; s/\bstateC/stateO/g; s/\bvalC/valO/g; s/\bexprC/exprO/g; s/\blocC/locO/g; ' i $(find theories name "*.v")

 14 Jun, 2019 1 commit


Ralf Jung authored

 13 Jun, 2019 1 commit


Ralf Jung authored

 03 Jun, 2019 1 commit


Rodolphe Lepigre authored

 02 Jun, 2019 1 commit


Ralf Jung authored

 01 Jun, 2019 1 commit


Ralf Jung authored

 31 May, 2019 1 commit


Amin Timany authored

 28 May, 2019 1 commit


Robbert Krebbers authored

 25 Apr, 2019 1 commit


Robbert Krebbers authored

 24 Apr, 2019 1 commit


Robbert Krebbers authored

 20 Mar, 2019 1 commit


Dan Frumin authored

 26 Nov, 2018 1 commit


Robbert Krebbers authored

 29 Oct, 2018 1 commit


JacquesHenri Jourdan authored
We add a specific constructor to the type of expressions for injecting values in expressions. The advantage are :  Values can be assumed to be always closed when performing substitutions (even though they could contain free variables, but it turns out it does not cause any problem in the proofs in practice). This means that we no longer need the `Closed` typeclass and everything that comes with it (all the reflectionbased machinery contained in tactics.v is no longer necessary). I have not measured anything, but I guess this would have a significant performance impact.  There is only one constructor for values. As a result, the AsVal and IntoVal typeclasses are no longer necessary: an expression which is a value will always unify with `Val _`, and therefore lemmas can be stated using this constructor. Of course, this means that there are two ways of writing such a thing as "The pair of integers 1 and 2": Either by using the value constructor applied to the pair represented as a value, or by using the expression pair constructor. So we add reduction rules that transform reduced pair, injection and closure expressions into values. At first, this seems weird, because of the redundancy. But in fact, this has some meaning, since the machine migth actually be doing something to e.g., allocate the pair or the closure. These additional steps of computation show up in the proofs, and some additional wp_* tactics need to be called.

 18 Oct, 2018 5 commits
 11 Oct, 2018 1 commit


Ralf Jung authored

 05 Oct, 2018 8 commits


Ralf Jung authored

Ralf Jung authored

Ralf Jung authored

Marianna Rapoport authored

Marianna Rapoport authored
 Removing head of list of observations after each reduction step in definition of wp  Adding support for observations to state_interp and world  Applying Ralf's suggestions to previous commit (e.g. replacing /\ and > with unicode characters)

Marianna Rapoport authored

Marianna Rapoport authored
 Added my version of increment.v for practicing working with logically atomic triples  Added implementation of coinflip spec from Turon et al. (POPL'13) with an assumed spec for prophecy variables

Ralf Jung authored

 04 Oct, 2018 1 commit


JacquesHenri Jourdan authored

 30 Jun, 2018 2 commits