src/HOL/Tools/SMT/z3_proof_tools.ML
author boehmes
Wed Dec 15 08:39:24 2010 +0100 (2010-12-15)
changeset 41123 3bb9be510a9d
parent 40806 59d96f777da3
child 41172 a17c2d669c40
permissions -rw-r--r--
tuned
boehmes@36898
     1
(*  Title:      HOL/Tools/SMT/z3_proof_tools.ML
boehmes@36898
     2
    Author:     Sascha Boehme, TU Muenchen
boehmes@36898
     3
boehmes@36898
     4
Helper functions required for Z3 proof reconstruction.
boehmes@36898
     5
*)
boehmes@36898
     6
boehmes@36898
     7
signature Z3_PROOF_TOOLS =
boehmes@36898
     8
sig
boehmes@41123
     9
  (*accessing and modifying terms*)
boehmes@36898
    10
  val term_of: cterm -> term
boehmes@36898
    11
  val prop_of: thm -> term
boehmes@36898
    12
  val as_meta_eq: cterm -> cterm
boehmes@36898
    13
boehmes@41123
    14
  (*theorem nets*)
boehmes@40164
    15
  val thm_net_of: ('a -> thm) -> 'a list -> 'a Net.net
boehmes@40164
    16
  val net_instance': ((thm -> thm option) -> 'a -> 'a option) -> 'a Net.net ->
boehmes@40164
    17
    cterm -> 'a option
boehmes@36898
    18
  val net_instance: thm Net.net -> cterm -> thm option
boehmes@36898
    19
boehmes@41123
    20
  (*proof combinators*)
boehmes@36898
    21
  val under_assumption: (thm -> thm) -> cterm -> thm
boehmes@36898
    22
  val with_conv: conv -> (cterm -> thm) -> cterm -> thm
boehmes@36898
    23
  val discharge: thm -> thm -> thm
boehmes@36898
    24
  val varify: string list -> thm -> thm
boehmes@36898
    25
  val unfold_eqs: Proof.context -> thm list -> conv
boehmes@36898
    26
  val match_instantiate: (cterm -> cterm) -> cterm -> thm -> thm
boehmes@36898
    27
  val by_tac: (int -> tactic) -> cterm -> thm
boehmes@36898
    28
  val make_hyp_def: thm -> Proof.context -> thm * Proof.context
boehmes@36899
    29
  val by_abstraction: bool * bool -> Proof.context -> thm list ->
boehmes@36899
    30
    (Proof.context -> cterm -> thm) -> cterm -> thm
boehmes@36898
    31
boehmes@41123
    32
  (*a faster COMP*)
boehmes@36898
    33
  type compose_data
boehmes@36898
    34
  val precompose: (cterm -> cterm list) -> thm -> compose_data
boehmes@36898
    35
  val precompose2: (cterm -> cterm * cterm) -> thm -> compose_data
boehmes@36898
    36
  val compose: compose_data -> thm -> thm
boehmes@36898
    37
boehmes@41123
    38
  (*unfolding of 'distinct'*)
boehmes@36898
    39
  val unfold_distinct_conv: conv
boehmes@36898
    40
boehmes@41123
    41
  (*simpset*)
boehmes@36899
    42
  val add_simproc: Simplifier.simproc -> Context.generic -> Context.generic
boehmes@36898
    43
  val make_simpset: Proof.context -> thm list -> simpset
boehmes@36898
    44
end
boehmes@36898
    45
boehmes@36898
    46
structure Z3_Proof_Tools: Z3_PROOF_TOOLS =
boehmes@36898
    47
struct
boehmes@36898
    48
boehmes@40662
    49
structure U = SMT_Utils
boehmes@36899
    50
structure I = Z3_Interface
boehmes@36899
    51
boehmes@36898
    52
boehmes@36898
    53
boehmes@36898
    54
(* accessing terms *)
boehmes@36898
    55
boehmes@40579
    56
val dest_prop = (fn @{const Trueprop} $ t => t | t => t)
boehmes@36898
    57
boehmes@36898
    58
fun term_of ct = dest_prop (Thm.term_of ct)
boehmes@36898
    59
fun prop_of thm = dest_prop (Thm.prop_of thm)
boehmes@36898
    60
boehmes@40663
    61
fun as_meta_eq ct = uncurry U.mk_cequals (Thm.dest_binop (U.dest_cprop ct))
boehmes@36898
    62
boehmes@36898
    63
boehmes@36898
    64
boehmes@36898
    65
(* theorem nets *)
boehmes@36898
    66
boehmes@40164
    67
fun thm_net_of f xthms =
boehmes@40164
    68
  let fun insert xthm = Net.insert_term (K false) (Thm.prop_of (f xthm), xthm)
boehmes@40164
    69
  in fold insert xthms Net.empty end
boehmes@36898
    70
boehmes@36898
    71
fun maybe_instantiate ct thm =
boehmes@36898
    72
  try Thm.first_order_match (Thm.cprop_of thm, ct)
boehmes@36898
    73
  |> Option.map (fn inst => Thm.instantiate inst thm)
boehmes@36898
    74
boehmes@40164
    75
fun net_instance' f net ct =
boehmes@40806
    76
  let
boehmes@40806
    77
    val xthms = Net.match_term net (Thm.term_of ct)
boehmes@40806
    78
    fun first_of f ct = get_first (f (maybe_instantiate ct)) xthms 
boehmes@40806
    79
    fun first_of' f ct =
boehmes@40806
    80
      let val thm = Thm.trivial ct
boehmes@40806
    81
      in get_first (f (try (fn rule => rule COMP thm))) xthms end
boehmes@40806
    82
  in (case first_of f ct of NONE => first_of' f ct | some_thm => some_thm) end
boehmes@40164
    83
val net_instance = net_instance' I
boehmes@36898
    84
boehmes@36898
    85
boehmes@36898
    86
boehmes@36898
    87
(* proof combinators *)
boehmes@36898
    88
boehmes@36898
    89
fun under_assumption f ct =
boehmes@40663
    90
  let val ct' = U.mk_cprop ct
boehmes@36898
    91
  in Thm.implies_intr ct' (f (Thm.assume ct')) end
boehmes@36898
    92
boehmes@36898
    93
fun with_conv conv prove ct =
boehmes@36898
    94
  let val eq = Thm.symmetric (conv ct)
boehmes@36898
    95
  in Thm.equal_elim eq (prove (Thm.lhs_of eq)) end
boehmes@36898
    96
boehmes@36898
    97
fun discharge p pq = Thm.implies_elim pq p
boehmes@36898
    98
boehmes@36898
    99
fun varify vars = Drule.generalize ([], vars)
boehmes@36898
   100
boehmes@36898
   101
fun unfold_eqs _ [] = Conv.all_conv
boehmes@36898
   102
  | unfold_eqs ctxt eqs =
wenzelm@36936
   103
      Conv.top_sweep_conv (K (Conv.rewrs_conv eqs)) ctxt
boehmes@36898
   104
boehmes@36898
   105
fun match_instantiate f ct thm =
boehmes@36898
   106
  Thm.instantiate (Thm.match (f (Thm.cprop_of thm), ct)) thm
boehmes@36898
   107
boehmes@36898
   108
fun by_tac tac ct = Goal.norm_result (Goal.prove_internal [] ct (K (tac 1)))
boehmes@36898
   109
boehmes@41123
   110
(*
boehmes@41123
   111
   |- c x == t x ==> P (c x)
boehmes@41123
   112
  ---------------------------
boehmes@41123
   113
      c == t |- P (c x)
boehmes@41123
   114
*) 
boehmes@36898
   115
fun make_hyp_def thm ctxt =
boehmes@36898
   116
  let
boehmes@36898
   117
    val (lhs, rhs) = Thm.dest_binop (Thm.cprem_of thm 1)
boehmes@36898
   118
    val (cf, cvs) = Drule.strip_comb lhs
boehmes@40662
   119
    val eq = U.mk_cequals cf (fold_rev Thm.cabs cvs rhs)
boehmes@36898
   120
    fun apply cv th =
boehmes@36898
   121
      Thm.combination th (Thm.reflexive cv)
boehmes@36898
   122
      |> Conv.fconv_rule (Conv.arg_conv (Thm.beta_conversion false))
boehmes@36898
   123
  in
boehmes@36898
   124
    yield_singleton Assumption.add_assumes eq ctxt
boehmes@36898
   125
    |>> Thm.implies_elim thm o fold apply cvs
boehmes@36898
   126
  end
boehmes@36898
   127
boehmes@36898
   128
boehmes@36898
   129
boehmes@36898
   130
(* abstraction *)
boehmes@36898
   131
boehmes@36898
   132
local
boehmes@36898
   133
boehmes@36898
   134
fun abs_context ctxt = (ctxt, Termtab.empty, 1, false)
boehmes@36898
   135
boehmes@36898
   136
fun context_of (ctxt, _, _, _) = ctxt
boehmes@36898
   137
boehmes@36899
   138
fun replace (_, (cv, ct)) = Thm.forall_elim ct o Thm.forall_intr cv
boehmes@36898
   139
boehmes@36898
   140
fun abs_instantiate (_, tab, _, beta_norm) =
boehmes@36899
   141
  fold replace (Termtab.dest tab) #>
boehmes@36898
   142
  beta_norm ? Conv.fconv_rule (Thm.beta_conversion true)
boehmes@36898
   143
boehmes@36899
   144
fun lambda_abstract cvs t =
boehmes@36898
   145
  let
boehmes@36899
   146
    val frees = map Free (Term.add_frees t [])
boehmes@36899
   147
    val cvs' = filter (fn cv => member (op aconv) frees (Thm.term_of cv)) cvs
boehmes@36899
   148
    val vs = map (Term.dest_Free o Thm.term_of) cvs'
boehmes@36899
   149
  in (Term.list_abs_free (vs, t), cvs') end
boehmes@36898
   150
boehmes@36898
   151
fun fresh_abstraction cvs ct (cx as (ctxt, tab, idx, beta_norm)) =
boehmes@36899
   152
  let val (t, cvs') = lambda_abstract cvs (Thm.term_of ct)
boehmes@36898
   153
  in
boehmes@36898
   154
    (case Termtab.lookup tab t of
boehmes@36899
   155
      SOME (cv, _) => (Drule.list_comb (cv, cvs'), cx)
boehmes@36898
   156
    | NONE =>
boehmes@36898
   157
        let
boehmes@36898
   158
          val (n, ctxt') = yield_singleton Variable.variant_fixes "x" ctxt
boehmes@40663
   159
          val cv = U.certify ctxt'
boehmes@40663
   160
            (Free (n, map U.typ_of cvs' ---> U.typ_of ct))
boehmes@36899
   161
          val cu = Drule.list_comb (cv, cvs')
boehmes@36898
   162
          val e = (t, (cv, fold_rev Thm.cabs cvs' ct))
boehmes@36898
   163
          val beta_norm' = beta_norm orelse not (null cvs')
boehmes@36899
   164
        in (cu, (ctxt', Termtab.update e tab, idx + 1, beta_norm')) end)
boehmes@36898
   165
  end
boehmes@36898
   166
boehmes@36898
   167
fun abs_comb f g cvs ct =
boehmes@36898
   168
  let val (cf, cu) = Thm.dest_comb ct
boehmes@36898
   169
  in f cvs cf ##>> g cvs cu #>> uncurry Thm.capply end
boehmes@36898
   170
boehmes@36899
   171
fun abs_arg f = abs_comb (K pair) f
boehmes@36899
   172
boehmes@36899
   173
fun abs_args f cvs ct =
boehmes@36899
   174
  (case Thm.term_of ct of
boehmes@36899
   175
    _ $ _ => abs_comb (abs_args f) f cvs ct
boehmes@36899
   176
  | _ => pair ct)
boehmes@36899
   177
boehmes@36898
   178
fun abs_list f g cvs ct =
boehmes@36898
   179
  (case Thm.term_of ct of
boehmes@36898
   180
    Const (@{const_name Nil}, _) => pair ct
boehmes@36898
   181
  | Const (@{const_name Cons}, _) $ _ $ _ =>
boehmes@36898
   182
      abs_comb (abs_arg f) (abs_list f g) cvs ct
boehmes@36898
   183
  | _ => g cvs ct)
boehmes@36898
   184
boehmes@36898
   185
fun abs_abs f cvs ct =
boehmes@36898
   186
  let val (cv, cu) = Thm.dest_abs NONE ct
boehmes@36898
   187
  in f (cv :: cvs) cu #>> Thm.cabs cv end
boehmes@36898
   188
boehmes@36898
   189
val is_atomic = (fn _ $ _ => false | Abs _ => false | _ => true)
boehmes@36898
   190
boehmes@36898
   191
fun abstract (ext_logic, with_theories) =
boehmes@36898
   192
  let
boehmes@36898
   193
    fun abstr1 cvs ct = abs_arg abstr cvs ct
boehmes@36898
   194
    and abstr2 cvs ct = abs_comb abstr1 abstr cvs ct
boehmes@36898
   195
    and abstr3 cvs ct = abs_comb abstr2 abstr cvs ct
boehmes@36898
   196
    and abstr_abs cvs ct = abs_arg (abs_abs abstr) cvs ct
boehmes@36898
   197
boehmes@36898
   198
    and abstr cvs ct =
boehmes@36898
   199
      (case Thm.term_of ct of
boehmes@40579
   200
        @{const Trueprop} $ _ => abstr1 cvs ct
boehmes@40579
   201
      | @{const "==>"} $ _ $ _ => abstr2 cvs ct
boehmes@40579
   202
      | @{const True} => pair ct
boehmes@40579
   203
      | @{const False} => pair ct
boehmes@40579
   204
      | @{const Not} $ _ => abstr1 cvs ct
boehmes@40579
   205
      | @{const HOL.conj} $ _ $ _ => abstr2 cvs ct
boehmes@40579
   206
      | @{const HOL.disj} $ _ $ _ => abstr2 cvs ct
boehmes@40579
   207
      | @{const HOL.implies} $ _ $ _ => abstr2 cvs ct
haftmann@38864
   208
      | Const (@{const_name HOL.eq}, _) $ _ $ _ => abstr2 cvs ct
boehmes@40681
   209
      | Const (@{const_name distinct}, _) $ _ =>
boehmes@36898
   210
          if ext_logic then abs_arg (abs_list abstr fresh_abstraction) cvs ct
boehmes@36898
   211
          else fresh_abstraction cvs ct
boehmes@36898
   212
      | Const (@{const_name If}, _) $ _ $ _ $ _ =>
boehmes@36898
   213
          if ext_logic then abstr3 cvs ct else fresh_abstraction cvs ct
boehmes@36898
   214
      | Const (@{const_name All}, _) $ _ =>
boehmes@36898
   215
          if ext_logic then abstr_abs cvs ct else fresh_abstraction cvs ct
boehmes@36898
   216
      | Const (@{const_name Ex}, _) $ _ =>
boehmes@36898
   217
          if ext_logic then abstr_abs cvs ct else fresh_abstraction cvs ct
boehmes@36899
   218
      | t => (fn cx =>
boehmes@36899
   219
          if is_atomic t orelse can HOLogic.dest_number t then (ct, cx)
boehmes@36899
   220
          else if with_theories andalso
boehmes@36899
   221
            I.is_builtin_theory_term (context_of cx) t
boehmes@36899
   222
          then abs_args abstr cvs ct cx
boehmes@36899
   223
          else fresh_abstraction cvs ct cx))
boehmes@36898
   224
  in abstr [] end
boehmes@36898
   225
boehmes@40579
   226
val cimp = Thm.cterm_of @{theory} @{const "==>"}
boehmes@40579
   227
boehmes@36898
   228
fun with_prems thms f ct =
boehmes@40579
   229
  fold_rev (Thm.mk_binop cimp o Thm.cprop_of) thms ct
boehmes@36898
   230
  |> f
boehmes@36898
   231
  |> fold (fn prem => fn th => Thm.implies_elim th prem) thms
boehmes@36898
   232
boehmes@36898
   233
in
boehmes@36898
   234
boehmes@36899
   235
fun by_abstraction mode ctxt thms prove = with_prems thms (fn ct =>
boehmes@36899
   236
  let val (cu, cx) = abstract mode ct (abs_context ctxt)
boehmes@36898
   237
  in abs_instantiate cx (prove (context_of cx) cu) end)
boehmes@36898
   238
boehmes@36898
   239
end
boehmes@36898
   240
boehmes@36898
   241
boehmes@36898
   242
boehmes@36898
   243
(* a faster COMP *)
boehmes@36898
   244
boehmes@36898
   245
type compose_data = cterm list * (cterm -> cterm list) * thm
boehmes@36898
   246
boehmes@36898
   247
fun list2 (x, y) = [x, y]
boehmes@36898
   248
boehmes@36898
   249
fun precompose f rule = (f (Thm.cprem_of rule 1), f, rule)
boehmes@36898
   250
fun precompose2 f rule = precompose (list2 o f) rule
boehmes@36898
   251
boehmes@36898
   252
fun compose (cvs, f, rule) thm =
boehmes@36898
   253
  discharge thm (Thm.instantiate ([], cvs ~~ f (Thm.cprop_of thm)) rule)
boehmes@36898
   254
boehmes@36898
   255
boehmes@36898
   256
boehmes@36898
   257
(* unfolding of 'distinct' *)
boehmes@36898
   258
boehmes@36898
   259
local
boehmes@36898
   260
  val set1 = @{lemma "x ~: set [] == ~False" by simp}
boehmes@36898
   261
  val set2 = @{lemma "x ~: set [x] == False" by simp}
boehmes@36898
   262
  val set3 = @{lemma "x ~: set [y] == x ~= y" by simp}
boehmes@36898
   263
  val set4 = @{lemma "x ~: set (x # ys) == False" by simp}
boehmes@36898
   264
  val set5 = @{lemma "x ~: set (y # ys) == x ~= y & x ~: set ys" by simp}
boehmes@36898
   265
boehmes@36898
   266
  fun set_conv ct =
wenzelm@36936
   267
    (Conv.rewrs_conv [set1, set2, set3, set4] else_conv
boehmes@36898
   268
    (Conv.rewr_conv set5 then_conv Conv.arg_conv set_conv)) ct
boehmes@36898
   269
boehmes@40681
   270
  val dist1 = @{lemma "distinct [] == ~False" by (simp add: distinct_def)}
boehmes@40681
   271
  val dist2 = @{lemma "distinct [x] == ~False" by (simp add: distinct_def)}
boehmes@40681
   272
  val dist3 = @{lemma "distinct (x # xs) == x ~: set xs & distinct xs"
boehmes@40274
   273
    by (simp add: distinct_def)}
boehmes@36898
   274
boehmes@36898
   275
  fun binop_conv cv1 cv2 = Conv.combination_conv (Conv.arg_conv cv1) cv2
boehmes@36898
   276
in
boehmes@36898
   277
fun unfold_distinct_conv ct =
wenzelm@36936
   278
  (Conv.rewrs_conv [dist1, dist2] else_conv
boehmes@36898
   279
  (Conv.rewr_conv dist3 then_conv binop_conv set_conv unfold_distinct_conv)) ct
boehmes@36898
   280
end
boehmes@36898
   281
boehmes@36898
   282
boehmes@36898
   283
boehmes@36898
   284
(* simpset *)
boehmes@36898
   285
boehmes@36898
   286
local
boehmes@36898
   287
  val antisym_le1 = mk_meta_eq @{thm order_class.antisym_conv}
boehmes@36898
   288
  val antisym_le2 = mk_meta_eq @{thm linorder_class.antisym_conv2}
boehmes@36898
   289
  val antisym_less1 = mk_meta_eq @{thm linorder_class.antisym_conv1}
boehmes@36898
   290
  val antisym_less2 = mk_meta_eq @{thm linorder_class.antisym_conv3}
boehmes@36898
   291
boehmes@36898
   292
  fun eq_prop t thm = HOLogic.mk_Trueprop t aconv Thm.prop_of thm
boehmes@36898
   293
  fun dest_binop ((c as Const _) $ t $ u) = (c, t, u)
boehmes@36898
   294
    | dest_binop t = raise TERM ("dest_binop", [t])
boehmes@36898
   295
boehmes@36898
   296
  fun prove_antisym_le ss t =
boehmes@36898
   297
    let
boehmes@36898
   298
      val (le, r, s) = dest_binop t
boehmes@36898
   299
      val less = Const (@{const_name less}, Term.fastype_of le)
boehmes@36898
   300
      val prems = Simplifier.prems_of_ss ss
boehmes@36898
   301
    in
boehmes@36898
   302
      (case find_first (eq_prop (le $ s $ r)) prems of
boehmes@36898
   303
        NONE =>
boehmes@36898
   304
          find_first (eq_prop (HOLogic.mk_not (less $ r $ s))) prems
boehmes@36898
   305
          |> Option.map (fn thm => thm RS antisym_less1)
boehmes@36898
   306
      | SOME thm => SOME (thm RS antisym_le1))
boehmes@36898
   307
    end
boehmes@36898
   308
    handle THM _ => NONE
boehmes@36898
   309
boehmes@36898
   310
  fun prove_antisym_less ss t =
boehmes@36898
   311
    let
boehmes@36898
   312
      val (less, r, s) = dest_binop (HOLogic.dest_not t)
boehmes@36898
   313
      val le = Const (@{const_name less_eq}, Term.fastype_of less)
boehmes@36898
   314
      val prems = prems_of_ss ss
boehmes@36898
   315
    in
boehmes@36898
   316
      (case find_first (eq_prop (le $ r $ s)) prems of
boehmes@36898
   317
        NONE =>
boehmes@36898
   318
          find_first (eq_prop (HOLogic.mk_not (less $ s $ r))) prems
boehmes@36898
   319
          |> Option.map (fn thm => thm RS antisym_less2)
boehmes@36898
   320
      | SOME thm => SOME (thm RS antisym_le2))
boehmes@36898
   321
  end
boehmes@36898
   322
  handle THM _ => NONE
boehmes@36899
   323
boehmes@36899
   324
  val basic_simpset = HOL_ss addsimps @{thms field_simps}
boehmes@36899
   325
    addsimps [@{thm times_divide_eq_right}, @{thm times_divide_eq_left}]
boehmes@36899
   326
    addsimps @{thms arith_special} addsimps @{thms less_bin_simps}
boehmes@36899
   327
    addsimps @{thms le_bin_simps} addsimps @{thms eq_bin_simps}
boehmes@36899
   328
    addsimps @{thms add_bin_simps} addsimps @{thms succ_bin_simps}
boehmes@36899
   329
    addsimps @{thms minus_bin_simps} addsimps @{thms pred_bin_simps}
boehmes@36899
   330
    addsimps @{thms mult_bin_simps} addsimps @{thms iszero_simps}
boehmes@36899
   331
    addsimps @{thms array_rules}
boehmes@37151
   332
    addsimps @{thms z3div_def} addsimps @{thms z3mod_def}
boehmes@36899
   333
    addsimprocs [
wenzelm@38715
   334
      Simplifier.simproc_global @{theory} "fast_int_arith" [
boehmes@36899
   335
        "(m::int) < n", "(m::int) <= n", "(m::int) = n"] (K Lin_Arith.simproc),
wenzelm@38715
   336
      Simplifier.simproc_global @{theory} "antisym_le" ["(x::'a::order) <= y"]
boehmes@36899
   337
        (K prove_antisym_le),
wenzelm@38715
   338
      Simplifier.simproc_global @{theory} "antisym_less" ["~ (x::'a::linorder) < y"]
boehmes@36899
   339
        (K prove_antisym_less)]
boehmes@36899
   340
boehmes@36899
   341
  structure Simpset = Generic_Data
boehmes@36899
   342
  (
boehmes@36899
   343
    type T = simpset
boehmes@36899
   344
    val empty = basic_simpset
boehmes@36899
   345
    val extend = I
boehmes@36899
   346
    val merge = Simplifier.merge_ss
boehmes@36899
   347
  )
boehmes@36898
   348
in
boehmes@36898
   349
boehmes@36899
   350
fun add_simproc simproc = Simpset.map (fn ss => ss addsimprocs [simproc])
boehmes@36899
   351
boehmes@36899
   352
fun make_simpset ctxt rules =
boehmes@36899
   353
  Simplifier.context ctxt (Simpset.get (Context.Proof ctxt)) addsimps rules
boehmes@36898
   354
boehmes@36898
   355
end
boehmes@36898
   356
boehmes@36898
   357
end