 22 May, 2016 6 commits


Robbert Krebbers authored
Initial commit by Amin Timany.

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

 20 May, 2016 3 commits


Robbert Krebbers authored

Robbert Krebbers authored
I have introduced the following definition to avoid many case analyses where both branches had nearly identical proofs. Definition uPred_always_if {M} (p : bool) (P : uPred M) : uPred M := (if p then □ P else P)%I.

Robbert Krebbers authored

 19 May, 2016 1 commit


Ralf Jung authored

 13 May, 2016 2 commits
 10 May, 2016 10 commits


Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored
And make constants P for which we do not want of_val P to reduce Opaque.

Robbert Krebbers authored
through definitions.

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored
This is more consistent with wp_cas_fail.

Robbert Krebbers authored

 09 May, 2016 1 commit


Robbert Krebbers authored

 07 May, 2016 4 commits


Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

 06 May, 2016 12 commits


Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored
We may want to do the same for iIntros ? and iDestruct "H" as {?} "H", but that requires more work. However, I do not think I want to rely on names chosen this way.

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

Robbert Krebbers authored

 04 May, 2016 1 commit


Janno authored
