NEWS
author wenzelm
Wed Apr 13 18:34:22 2005 +0200 (2005-04-13)
changeset 15703 727ef1b8b3ee
parent 15696 1da4ce092c0b
child 15724 1b89c781a7ec
permissions -rw-r--r--
*** empty log message ***
wenzelm@5363
     1
Isabelle NEWS -- history user-relevant changes
wenzelm@5363
     2
==============================================
wenzelm@2553
     3
wenzelm@14655
     4
New in this Isabelle release
wenzelm@14655
     5
----------------------------
wenzelm@14655
     6
wenzelm@14655
     7
*** General ***
wenzelm@14655
     8
wenzelm@15703
     9
* ML: The type Library.option is no more, along with the exception
skalberg@15531
    10
  Library.OPTION: Isabelle now uses the standard option type.  The
skalberg@15531
    11
  functions the, is_some, is_none, etc. are still in Library, but
skalberg@15531
    12
  the constructors are now SOME and NONE instead of Some and None.
wenzelm@15703
    13
  They raise the exception Option.
wenzelm@15703
    14
wenzelm@15703
    15
* ML: The exception LIST is no more, the standard exceptions Empty and
skalberg@15570
    16
  Subscript, as well as Library.UnequalLengths are used instead.  This
skalberg@15570
    17
  means that function like Library.hd and Library.tl are gone, as the
skalberg@15570
    18
  standard hd and tl functions suffice.
skalberg@15570
    19
skalberg@15570
    20
  A number of functions, specifically those in the LIBRARY_CLOSED
skalberg@15570
    21
  signature, are now no longer exported to the top ML level, as they
skalberg@15570
    22
  are variants of standard functions.  The following suggests how
skalberg@15570
    23
  one can translate existing code:
skalberg@15570
    24
skalberg@15570
    25
    the x = valOf x
skalberg@15570
    26
    if_none x y = getOpt(x,y)
skalberg@15570
    27
    is_some x = isSome x
skalberg@15570
    28
    apsome f x = Option.map f x
skalberg@15570
    29
    rev_append xs ys = List.revAppend(xs,ys)
skalberg@15570
    30
    nth_elem(i,xs) = List.nth(xs,i)
skalberg@15570
    31
    last_elem xs = List.last xs
skalberg@15570
    32
    flat xss = List.concat xss
skalberg@15570
    33
    seq fs = app fs
skalberg@15570
    34
    partition P xs = List.partition P xs
skalberg@15570
    35
    filter P xs = List.filter P xs
skalberg@15570
    36
    mapfilter f xs = List.mapPartial f xs
skalberg@15570
    37
skalberg@15570
    38
  The final four functions, take, drop, foldl, and foldr, are somewhat
skalberg@15570
    39
  more complicated (especially the semantics of take and drop differ
skalberg@15570
    40
  from the standard).
skalberg@15570
    41
skalberg@15570
    42
  A simple solution to broken code is to include "open Library" at the
skalberg@15570
    43
  beginning of a structure.  Everything after that will be as before.
skalberg@15531
    44
nipkow@15130
    45
* Theory headers: the new header syntax for Isar theories is
nipkow@15130
    46
nipkow@15130
    47
  theory <name>
nipkow@15148
    48
  imports <theory1> ... <theoryn>
nipkow@15130
    49
  begin
nipkow@15130
    50
nipkow@15148
    51
  optionally also with a "files" section. The syntax
nipkow@15130
    52
nipkow@15130
    53
  theory <name> = <theory1> + ... + <theoryn>:
nipkow@15130
    54
nipkow@15130
    55
  will still be supported for some time but will eventually disappear.
nipkow@15130
    56
  The syntax of old-style theories has not changed.
nipkow@15130
    57
berghofe@15475
    58
* Theory loader: parent theories can now also be referred to via
berghofe@15475
    59
  relative and absolute paths.
berghofe@15475
    60
ballarin@15103
    61
* Provers/quasi.ML:  new transitivity reasoners for transitivity only
ballarin@15103
    62
  and quasi orders.
ballarin@15103
    63
ballarin@15076
    64
* Provers/trancl.ML:  new transitivity reasoner for transitive and
ballarin@15076
    65
  reflexive-transitive closure of relations.
ballarin@15076
    66
webertj@15163
    67
* Provers/blast.ML:  new reference depth_limit to make blast's depth
webertj@15163
    68
  limit (previously hard-coded with a value of 20) user-definable.
webertj@15163
    69
paulson@15481
    70
* Provers: new version of the subst method, for single-step rewriting: it now
paulson@15481
    71
  works in bound variable contexts. New is subst (asm), for rewriting an
paulson@15481
    72
  assumption. Thanks to Lucas Dixon! INCOMPATIBILITY: may rewrite a different
paulson@15481
    73
  subterm than the original subst method, which is still available under the
paulson@15481
    74
  name simplesubst.
paulson@15481
    75
paulson@15454
    76
* Pure: thin_tac now works even if the assumption being deleted contains !! or ==>. 
paulson@15454
    77
  More generally, erule now works even if the major premise of the elimination rule
paulson@15454
    78
  contains !! or ==>.
paulson@15454
    79
wenzelm@14655
    80
* Pure: considerably improved version of 'constdefs' command.  Now
wenzelm@14731
    81
  performs automatic type-inference of declared constants; additional
wenzelm@14731
    82
  support for local structure declarations (cf. locales and HOL
wenzelm@14731
    83
  records), see also isar-ref manual.  Potential INCOMPATIBILITY: need
wenzelm@14731
    84
  to observe strictly sequential dependencies of definitions within a
wenzelm@14731
    85
  single 'constdefs' section; moreover, the declared name needs to be
wenzelm@14731
    86
  an identifier.  If all fails, consider to fall back on 'consts' and
wenzelm@14731
    87
  'defs' separately.
wenzelm@14655
    88
wenzelm@14698
    89
* Pure: improved indexed syntax and implicit structures.  First of
wenzelm@14731
    90
  all, indexed syntax provides a notational device for subscripted
wenzelm@14731
    91
  application, using the new syntax \<^bsub>term\<^esub> for arbitrary
wenzelm@14731
    92
  expressions.  Secondly, in a local context with structure
wenzelm@14731
    93
  declarations, number indexes \<^sub>n or the empty index (default
wenzelm@14731
    94
  number 1) refer to a certain fixed variable implicitly; option
wenzelm@14731
    95
  show_structs controls printing of implicit structures.  Typical
wenzelm@14731
    96
  applications of these concepts involve record types and locales.
wenzelm@14731
    97
wenzelm@14795
    98
* Pure: clear separation of logical types and nonterminals, where the
wenzelm@14795
    99
  latter may only occur in 'syntax' specifications or type
wenzelm@14795
   100
  abbreviations.  Before that distinction was only partially
wenzelm@14795
   101
  implemented via type class "logic" vs. "{}".  Potential
wenzelm@14795
   102
  INCOMPATIBILITY in rare cases of improper use of 'types'/'consts'
wenzelm@14795
   103
  instead of 'nonterminals'/'syntax'.  Some very exotic syntax
wenzelm@14816
   104
  specifications may require further adaption (e.g. Cube/Base.thy).
wenzelm@14816
   105
wenzelm@14854
   106
* Pure: removed obsolete type class "logic", use the top sort {}
wenzelm@14854
   107
  instead.  Note that non-logical types should be declared as
wenzelm@14854
   108
  'nonterminals' rather than 'types'.  INCOMPATIBILITY for new
wenzelm@14854
   109
  object-logic specifications.
wenzelm@14854
   110
wenzelm@15022
   111
* Pure: print_tac now outputs the goal through the trace channel.
wenzelm@15022
   112
wenzelm@15022
   113
* Pure: reference Namespace.unique_names included.  If true the
wenzelm@15022
   114
  (shortest) namespace-prefix is printed to disambiguate conflicts (as
wenzelm@15022
   115
  yet). If false the first entry wins (as during parsing). Default
wenzelm@15022
   116
  value is true.
schirmer@15018
   117
wenzelm@15033
   118
* Pure: tuned internal renaming of symbolic identifiers -- attach
wenzelm@15033
   119
  primes instead of base 26 numbers.
wenzelm@15033
   120
berghofe@15475
   121
* Pure: new flag show_var_qmarks to control printing of leading
berghofe@15475
   122
  question marks of variable names.
berghofe@15475
   123
wenzelm@14816
   124
* Pure/Syntax: inner syntax includes (*(*nested*) comments*).
wenzelm@14816
   125
wenzelm@14816
   126
* Pure/Syntax: pretty pinter now supports unbreakable blocks,
wenzelm@14816
   127
  specified in mixfix annotations as "(00...)".
wenzelm@14816
   128
wenzelm@14816
   129
* Pure/Syntax: 'advanced' translation functions (parse_translation
wenzelm@14816
   130
  etc.) may depend on the signature of the theory context being
wenzelm@14816
   131
  presently used for parsing/printing, see also isar-ref manual.
wenzelm@14816
   132
wenzelm@15033
   133
* Pure/Simplifier: simplification procedures may now take the current
wenzelm@15033
   134
  simpset into account (cf. Simplifier.simproc(_i) / mk_simproc
wenzelm@15033
   135
  interface), which is very useful for calling the Simplifier
wenzelm@15033
   136
  recursively.  Minor INCOMPATIBILITY: the 'prems' argument of
wenzelm@15033
   137
  simprocs is gone -- use prems_of_ss on the simpset instead.
wenzelm@15033
   138
  Moreover, the low-level mk_simproc no longer applies Logic.varify
wenzelm@15033
   139
  internally, to allow for use in a context of fixed variables.
wenzelm@15033
   140
nipkow@15406
   141
* Pure/Simplifier: Command "find_rewrites" takes a string and lists all
wenzelm@15703
   142
  equality theorems (not just those declared as simp!) whose left-hand
nipkow@15406
   143
  side matches the term given via the string. In PG the command can be
nipkow@15406
   144
  activated via Isabelle -> Show me -> matching rewrites.
nipkow@15406
   145
wenzelm@15703
   146
* Isar debugging: new reference Toplevel.debug; default false.
ballarin@15528
   147
  Set to make printing of exceptions THM, TERM, TYPE and THEORY more verbose.
ballarin@15528
   148
  
ballarin@15127
   149
* Locales:
ballarin@15127
   150
  - "includes" disallowed in declaration of named locales (command "locale").
ballarin@15206
   151
  - Fixed parameter management in theorem generation for goals with "includes".
ballarin@15206
   152
    INCOMPATIBILITY: rarely, the generated theorem statement is different.
berghofe@15475
   153
ballarin@15696
   154
* Locales:  new commands for the interpretation of locale expressions
ballarin@15696
   155
  in theories (interpretation) and proof contexts (interpret).  These take an
ballarin@15696
   156
  instantiation of the locale parameters and compute proof obligations from
ballarin@15696
   157
  the instantiated specification.  After the obligations have been discharged,
ballarin@15696
   158
  the instantiated theorems of the locale are added to the theory or proof
ballarin@15696
   159
  context.  Interpretation is smart in that already active interpretations
ballarin@15696
   160
  do not occur in proof obligations, neither are instantiated theorems stored
ballarin@15696
   161
  in duplicate.
ballarin@15696
   162
  Use print_interps to inspect active interpretations of a particular locale.
ballarin@15696
   163
wenzelm@15703
   164
* Isar: new syntax 'name(i-j, i-, i, ...)' for referring to specific
wenzelm@15703
   165
  selections of theorems in named facts via indices.
wenzelm@15703
   166
wenzelm@15703
   167
wenzelm@15703
   168
*** Document preparation ***
wenzelm@15703
   169
wenzelm@15703
   170
* New antiquotations @{lhs thm} and @{rhs thm} printing the lhs/rhs of
wenzelm@15703
   171
  definitions, equations, inequations etc.
wenzelm@15703
   172
wenzelm@15703
   173
* Antiquotations now provide the option 'locale=NAME' to specify an
wenzelm@15703
   174
  alternative context used for evaluating and printing the subsequent
wenzelm@15703
   175
  argument, as in @{thm [locale=LC] fold_commute}, for example.
wenzelm@15703
   176
wenzelm@15703
   177
* Commands 'display_drafts' and 'print_drafts' perform simple output
wenzelm@15703
   178
  of raw sources.  Only those symbols that do not require additional
wenzelm@15703
   179
  LaTeX packages (depending on comments in isabellesym.sty) are
wenzelm@15703
   180
  displayed properly, everything else is left verbatim.  We use
wenzelm@15703
   181
  isatool display and isatool print as front ends; these are subject
wenzelm@15703
   182
  to the DVI/PDF_VIEWER and PRINT_COMMAND settings, respectively.
wenzelm@15703
   183
wenzelm@15703
   184
* Proof scripts as well as some other commands such as ML or
wenzelm@15703
   185
  parse/print_translation can now be hidden in the document.  Hiding
wenzelm@15703
   186
  is enabled by default, and can be disabled either via the option '-H
wenzelm@15703
   187
  false' of isatool usedir or by resetting the reference variable
wenzelm@15703
   188
  IsarOutput.hide_commands. Additional commands to be hidden may be
wenzelm@15703
   189
  declared using IsarOutput.add_hidden_commands.
wenzelm@15703
   190
berghofe@15475
   191
schirmer@14700
   192
*** HOL ***
schirmer@14700
   193
nipkow@15242
   194
* Datatype induction via method `induct' now preserves the name of the
nipkow@15242
   195
  induction variable. For example, when proving P(xs::'a list) by induction
nipkow@15242
   196
  on xs, the induction step is now P(xs) ==> P(a#xs) rather than
nipkow@15242
   197
  P(list) ==> P(a#list) as previously.
nipkow@15242
   198
wenzelm@14731
   199
* HOL/record: reimplementation of records. Improved scalability for
wenzelm@14731
   200
  records with many fields, avoiding performance problems for type
wenzelm@14731
   201
  inference. Records are no longer composed of nested field types, but
wenzelm@14731
   202
  of nested extension types. Therefore the record type only grows
wenzelm@14731
   203
  linear in the number of extensions and not in the number of fields.
wenzelm@14731
   204
  The top-level (users) view on records is preserved.  Potential
wenzelm@14731
   205
  INCOMPATIBILITY only in strange cases, where the theory depends on
wenzelm@14731
   206
  the old record representation. The type generated for a record is
wenzelm@14731
   207
  called <record_name>_ext_type.
wenzelm@14731
   208
wenzelm@15022
   209
* HOL/record: Reference record_quick_and_dirty_sensitive can be
wenzelm@15022
   210
  enabled to skip the proofs triggered by a record definition or a
wenzelm@15022
   211
  simproc (if quick_and_dirty is enabled). Definitions of large
wenzelm@15022
   212
  records can take quite long.
wenzelm@15022
   213
wenzelm@15022
   214
* HOL/record: "record_upd_simproc" for simplification of multiple
wenzelm@15022
   215
  record updates enabled by default.  Moreover, trivial updates are
wenzelm@15022
   216
  also removed: r(|x := x r|) = r.  INCOMPATIBILITY: old proofs break
wenzelm@15022
   217
  occasionally, since simplification is more powerful by default.
schirmer@15012
   218
wenzelm@14878
   219
* HOL: symbolic syntax of Hilbert Choice Operator is now as follows:
wenzelm@14878
   220
wenzelm@14878
   221
  syntax (epsilon)
wenzelm@14878
   222
    "_Eps" :: "[pttrn, bool] => 'a"    ("(3\<some>_./ _)" [0, 10] 10)
wenzelm@14878
   223
wenzelm@14878
   224
  The symbol \<some> is displayed as the alternative epsilon of LaTeX
wenzelm@14878
   225
  and x-symbol; use option '-m epsilon' to get it actually printed.
wenzelm@14878
   226
  Moreover, the mathematically important symbolic identifier
wenzelm@14878
   227
  \<epsilon> becomes available as variable, constant etc.
wenzelm@14878
   228
nipkow@15361
   229
* HOL: "x > y" abbreviates "y < x" and "x >= y" abbreviates "y <= x".
nipkow@15361
   230
  Similarly for all quantifiers: "ALL x > y" etc.
nipkow@15361
   231
  The x-symbol for >= is \<ge>.
nipkow@15356
   232
nipkow@15534
   233
* HOL/Set: "{x:A. P}" abbreviates "{x. x:A & P}"
nipkow@15534
   234
           (and similarly for "\<in>" instead of ":")
nipkow@15534
   235
nipkow@15046
   236
* HOL/SetInterval: The syntax for open intervals has changed:
nipkow@15046
   237
nipkow@15046
   238
  Old         New
nipkow@15046
   239
  {..n(}   -> {..<n}
nipkow@15046
   240
  {)n..}   -> {n<..}
nipkow@15046
   241
  {m..n(}  -> {m..<n}
nipkow@15046
   242
  {)m..n}  -> {m<..n}
nipkow@15046
   243
  {)m..n(} -> {m<..<n}
nipkow@15046
   244
nipkow@15046
   245
  The old syntax is still supported but will disappear in the future.
nipkow@15046
   246
  For conversion use the following emacs search and replace patterns:
nipkow@15046
   247
nipkow@15046
   248
  {)\([^\.]*\)\.\.  ->  {\1<\.\.}
nipkow@15046
   249
  \.\.\([^(}]*\)(}  ->  \.\.<\1}
nipkow@15046
   250
nipkow@15046
   251
  They are not perfect but work quite well.
nipkow@15046
   252
nipkow@15073
   253
* HOL: The syntax for 'setsum', summation over finite sets, has changed:
nipkow@15073
   254
nipkow@15073
   255
  The syntax for 'setsum (%x. e) A' used to be '\<Sum>x:A. e'
nipkow@15073
   256
  and is now either 'SUM x:A. e' or '\<Sum>x\<in>A. e'.
nipkow@15073
   257
nipkow@15073
   258
  There is new syntax for summation over finite sets:
nipkow@15046
   259
nipkow@15050
   260
  '\<Sum>x | P. e'    is the same as  'setsum (%x. e) {x. P}'
nipkow@15050
   261
  '\<Sum>x=a..b. e'   is the same as  'setsum (%x. e) {a..b}'
nipkow@15050
   262
  '\<Sum>x=a..<b. e'  is the same as  'setsum (%x. e) {a..<b}'
nipkow@15050
   263
  '\<Sum>x<k. e'      is the same as  'setsum (%x. e) {..<k}'
nipkow@15046
   264
nipkow@15046
   265
  Function 'Summation' over nat is gone, its syntax '\<Sum>i<k. e'
nipkow@15046
   266
  now translates into 'setsum' as above.
nipkow@15046
   267
nipkow@15319
   268
* HOL: Finite set induction: In Isar proofs, the insert case is now
nipkow@15319
   269
  "case (insert x F)" instead of the old counterintuitive "case (insert F x)".
nipkow@15319
   270
nipkow@15200
   271
* HOL/Simplifier:
nipkow@15200
   272
nipkow@15200
   273
  - Is now set up to reason about transitivity chains involving "trancl"
nipkow@15200
   274
  (r^+) and "rtrancl" (r^*) by setting up tactics provided by
nipkow@15200
   275
  Provers/trancl.ML as additional solvers.  INCOMPATIBILITY: old proofs break
nipkow@15200
   276
  occasionally as simplification may now solve more goals than previously.
nipkow@15200
   277
nipkow@15200
   278
  - Converts x <= y into x = y if assumption y <= x is present.  Works for
nipkow@15200
   279
  all partial orders (class "order"), in particular numbers and sets. For
nipkow@15200
   280
  linear orders (e.g. numbers) it treats ~ x < y just like y <= x.
wenzelm@15089
   281
schirmer@15423
   282
  - Simproc for "let x = a in f x"
schirmer@15423
   283
  If a is a free or bound variable or a constant then the let is unfolded.
schirmer@15423
   284
  Otherwise first a is simplified to a', and then f a' is simplified to
schirmer@15423
   285
  g. If possible we abstract a' from g arriving at "let x = a' in g' x",
schirmer@15423
   286
  otherwise we unfold the let and arrive at g. The simproc can be 
schirmer@15423
   287
  enabled/disabled by the reference use_let_simproc. Potential
schirmer@15423
   288
  INCOMPATIBILITY since simplification is more powerful by default.
schirmer@15423
   289
 
wenzelm@14655
   290
wenzelm@14682
   291
*** HOLCF ***
wenzelm@14682
   292
wenzelm@14682
   293
* HOLCF: discontinued special version of 'constdefs' (which used to
wenzelm@14731
   294
  support continuous functions) in favor of the general Pure one with
wenzelm@14731
   295
  full type-inference.
wenzelm@14682
   296
wenzelm@14682
   297
paulson@14885
   298
*** ZF ***
paulson@14885
   299
wenzelm@15089
   300
* ZF/ex/{Group,Ring}: examples in abstract algebra, including the
wenzelm@15089
   301
  First Isomorphism Theorem (on quotienting by the kernel of a
wenzelm@15089
   302
  homomorphism).
wenzelm@15089
   303
wenzelm@15089
   304
* ZF/Simplifier: install second copy of type solver that actually
wenzelm@15089
   305
  makes use of TC rules declared to Isar proof contexts (or locales);
wenzelm@15089
   306
  the old version is still required for ML proof scripts.
paulson@14885
   307
paulson@14885
   308
wenzelm@15703
   309
*** System ***
wenzelm@15703
   310
wenzelm@15703
   311
* HOL: isatool dimacs2hol converts files in DIMACS CNF format
wenzelm@15703
   312
  (containing Boolean satisfiability problems) into Isabelle/HOL
wenzelm@15703
   313
  theories.
wenzelm@15703
   314
wenzelm@15703
   315
* isatool usedir: option -f allows specification of the ML file to be
wenzelm@15703
   316
  used by Isabelle; default is ROOT.ML.
wenzelm@15703
   317
wenzelm@15703
   318
* ISABELLE_DOC_FORMAT setting specifies preferred document format (for
wenzelm@15703
   319
  isatool doc, isatool mkdir, display_drafts etc.).
wenzelm@15703
   320
wenzelm@15703
   321
wenzelm@15703
   322
*** ML ***
wenzelm@15703
   323
wenzelm@15703
   324
* Pure: output via the Isabelle channels of writeln/warning/error
wenzelm@15703
   325
  etc. is now passed through Output.output, with a hook for arbitrary
wenzelm@15703
   326
  transformations depending on the print_mode (cf. Output.add_mode --
wenzelm@15703
   327
  the first active mode that provides a output function wins).
wenzelm@15703
   328
  Already formatted output may be embedded into further text via
wenzelm@15703
   329
  Output.raw; the result of Pretty.string_of/str_of and derived
wenzelm@15703
   330
  functions (string_of_term/cterm/thm etc.) is already marked raw to
wenzelm@15703
   331
  accommodate easy composition of diagnostic messages etc.
wenzelm@15703
   332
  Programmers rarely need to care about Output.output or Output.raw at
wenzelm@15703
   333
  all, with some notable exceptions: Output.output is required when
wenzelm@15703
   334
  bypassing the standard channels (writeln etc.), or in token
wenzelm@15703
   335
  translations to produce properly formatted results; Output.raw is
wenzelm@15703
   336
  required when capturing already output material that will eventually
wenzelm@15703
   337
  be presented to the user a second time.  For the default print mode,
wenzelm@15703
   338
  both Output.output and Output.raw have no effect.
wenzelm@15703
   339
wenzelm@15703
   340
* Provers: Simplifier and Classical Reasoner now support proof context
wenzelm@15703
   341
  dependent plug-ins (simprocs, solvers, wrappers etc.).  These extra
wenzelm@15703
   342
  components are stored in the theory and patched into the
wenzelm@15703
   343
  simpset/claset when used in an Isar proof context.  Context
wenzelm@15703
   344
  dependent components are maintained by the following theory
wenzelm@15703
   345
  operations:
wenzelm@15703
   346
wenzelm@15703
   347
    Simplifier.add_context_simprocs
wenzelm@15703
   348
    Simplifier.del_context_simprocs
wenzelm@15703
   349
    Simplifier.set_context_subgoaler
wenzelm@15703
   350
    Simplifier.reset_context_subgoaler
wenzelm@15703
   351
    Simplifier.add_context_looper
wenzelm@15703
   352
    Simplifier.del_context_looper
wenzelm@15703
   353
    Simplifier.add_context_unsafe_solver
wenzelm@15703
   354
    Simplifier.add_context_safe_solver
wenzelm@15703
   355
wenzelm@15703
   356
    Classical.add_context_safe_wrapper
wenzelm@15703
   357
    Classical.del_context_safe_wrapper
wenzelm@15703
   358
    Classical.add_context_unsafe_wrapper
wenzelm@15703
   359
    Classical.del_context_unsafe_wrapper
wenzelm@15703
   360
wenzelm@15703
   361
  IMPORTANT NOTE: proof tools (methods etc.) need to use
wenzelm@15703
   362
  local_simpset_of and local_claset_of to instead of the primitive
wenzelm@15703
   363
  Simplifier.get_local_simpset and Classical.get_local_claset,
wenzelm@15703
   364
  respectively, in order to see the context dependent fields!
wenzelm@15703
   365
wenzelm@15703
   366
wenzelm@14655
   367
wenzelm@14606
   368
New in Isabelle2004 (April 2004)
wenzelm@14606
   369
--------------------------------
wenzelm@13280
   370
skalberg@14171
   371
*** General ***
skalberg@14171
   372
ballarin@14398
   373
* Provers/order.ML:  new efficient reasoner for partial and linear orders.
ballarin@14398
   374
  Replaces linorder.ML.
ballarin@14398
   375
wenzelm@14606
   376
* Pure: Greek letters (except small lambda, \<lambda>), as well as Gothic
wenzelm@14606
   377
  (\<aa>...\<zz>\<AA>...\<ZZ>), calligraphic (\<A>...\<Z>), and Euler
skalberg@14173
   378
  (\<a>...\<z>), are now considered normal letters, and can therefore
skalberg@14173
   379
  be used anywhere where an ASCII letter (a...zA...Z) has until
skalberg@14173
   380
  now. COMPATIBILITY: This obviously changes the parsing of some
skalberg@14173
   381
  terms, especially where a symbol has been used as a binder, say
skalberg@14173
   382
  '\<Pi>x. ...', which is now a type error since \<Pi>x will be parsed
skalberg@14173
   383
  as an identifier.  Fix it by inserting a space around former
skalberg@14173
   384
  symbols.  Call 'isatool fixgreek' to try to fix parsing errors in
skalberg@14173
   385
  existing theory and ML files.
skalberg@14171
   386
paulson@14237
   387
* Pure: Macintosh and Windows line-breaks are now allowed in theory files.
paulson@14237
   388
wenzelm@14731
   389
* Pure: single letter sub/superscripts (\<^isub> and \<^isup>) are now
wenzelm@14731
   390
  allowed in identifiers. Similar to Greek letters \<^isub> is now considered
wenzelm@14731
   391
  a normal (but invisible) letter. For multiple letter subscripts repeat
wenzelm@14731
   392
  \<^isub> like this: x\<^isub>1\<^isub>2.
kleing@14233
   393
kleing@14333
   394
* Pure: There are now sub-/superscripts that can span more than one
kleing@14333
   395
  character. Text between \<^bsub> and \<^esub> is set in subscript in
wenzelm@14606
   396
  ProofGeneral and LaTeX, text between \<^bsup> and \<^esup> in
wenzelm@14606
   397
  superscript. The new control characters are not identifier parts.
kleing@14333
   398
schirmer@14561
   399
* Pure: Control-symbols of the form \<^raw:...> will literally print the
wenzelm@14606
   400
  content of "..." to the latex file instead of \isacntrl... . The "..."
wenzelm@14606
   401
  may consist of any printable characters excluding the end bracket >.
schirmer@14361
   402
paulson@14237
   403
* Pure: Using new Isar command "finalconsts" (or the ML functions
paulson@14237
   404
  Theory.add_finals or Theory.add_finals_i) it is now possible to
paulson@14237
   405
  declare constants "final", which prevents their being given a definition
paulson@14237
   406
  later.  It is useful for constants whose behaviour is fixed axiomatically
skalberg@14224
   407
  rather than definitionally, such as the meta-logic connectives.
skalberg@14224
   408
wenzelm@14606
   409
* Pure: 'instance' now handles general arities with general sorts
wenzelm@14606
   410
  (i.e. intersections of classes),
skalberg@14503
   411
kleing@14547
   412
* Presentation: generated HTML now uses a CSS style sheet to make layout
wenzelm@14731
   413
  (somewhat) independent of content. It is copied from lib/html/isabelle.css.
kleing@14547
   414
  It can be changed to alter the colors/layout of generated pages.
kleing@14547
   415
wenzelm@14556
   416
ballarin@14175
   417
*** Isar ***
ballarin@14175
   418
ballarin@14508
   419
* Tactic emulation methods rule_tac, erule_tac, drule_tac, frule_tac,
ballarin@14508
   420
  cut_tac, subgoal_tac and thin_tac:
ballarin@14175
   421
  - Now understand static (Isar) contexts.  As a consequence, users of Isar
ballarin@14175
   422
    locales are no longer forced to write Isar proof scripts.
ballarin@14175
   423
    For details see Isar Reference Manual, paragraph 4.3.2: Further tactic
ballarin@14175
   424
    emulations.
ballarin@14175
   425
  - INCOMPATIBILITY: names of variables to be instantiated may no
ballarin@14211
   426
    longer be enclosed in quotes.  Instead, precede variable name with `?'.
ballarin@14211
   427
    This is consistent with the instantiation attribute "where".
ballarin@14211
   428
ballarin@14257
   429
* Attributes "where" and "of":
ballarin@14285
   430
  - Now take type variables of instantiated theorem into account when reading
ballarin@14285
   431
    the instantiation string.  This fixes a bug that caused instantiated
ballarin@14285
   432
    theorems to have too special types in some circumstances.
ballarin@14285
   433
  - "where" permits explicit instantiations of type variables.
ballarin@14257
   434
wenzelm@14556
   435
* Calculation commands "moreover" and "also" no longer interfere with
wenzelm@14556
   436
  current facts ("this"), admitting arbitrary combinations with "then"
wenzelm@14556
   437
  and derived forms.
kleing@14283
   438
ballarin@14211
   439
* Locales:
ballarin@14211
   440
  - Goal statements involving the context element "includes" no longer
ballarin@14211
   441
    generate theorems with internal delta predicates (those ending on
ballarin@14211
   442
    "_axioms") in the premise.
ballarin@14211
   443
    Resolve particular premise with <locale>.intro to obtain old form.
ballarin@14211
   444
  - Fixed bug in type inference ("unify_frozen") that prevented mix of target
ballarin@14211
   445
    specification and "includes" elements in goal statement.
ballarin@14254
   446
  - Rule sets <locale>.intro and <locale>.axioms no longer declared as
ballarin@14254
   447
    [intro?] and [elim?] (respectively) by default.
ballarin@14508
   448
  - Experimental command for instantiation of locales in proof contexts:
ballarin@14551
   449
        instantiate <label>[<attrs>]: <loc>
ballarin@14508
   450
    Instantiates locale <loc> and adds all its theorems to the current context
ballarin@14551
   451
    taking into account their attributes.  Label and attrs are optional
ballarin@14551
   452
    modifiers, like in theorem declarations.  If present, names of
ballarin@14551
   453
    instantiated theorems are qualified with <label>, and the attributes
ballarin@14551
   454
    <attrs> are applied after any attributes these theorems might have already.
ballarin@14551
   455
      If the locale has assumptions, a chained fact of the form
ballarin@14508
   456
    "<loc> t1 ... tn" is expected from which instantiations of the parameters
ballarin@14551
   457
    are derived.  The command does not support old-style locales declared
ballarin@14551
   458
    with "locale (open)".
ballarin@14551
   459
      A few (very simple) examples can be found in FOL/ex/LocaleInst.thy.
ballarin@14175
   460
ballarin@14175
   461
* HOL: Tactic emulation methods induct_tac and case_tac understand static
ballarin@14175
   462
  (Isar) contexts.
ballarin@14175
   463
wenzelm@14556
   464
kleing@14136
   465
*** HOL ***
kleing@14136
   466
kleing@14624
   467
* Proof import: new image HOL4 contains the imported library from
kleing@14624
   468
  the HOL4 system with about 2500 theorems. It is imported by
kleing@14624
   469
  replaying proof terms produced by HOL4 in Isabelle. The HOL4 image
kleing@14624
   470
  can be used like any other Isabelle image.  See
kleing@14624
   471
  HOL/Import/HOL/README for more information.
kleing@14624
   472
ballarin@14398
   473
* Simplifier:
ballarin@14398
   474
  - Much improved handling of linear and partial orders.
ballarin@14398
   475
    Reasoners for linear and partial orders are set up for type classes
ballarin@14398
   476
    "linorder" and "order" respectively, and are added to the default simpset
ballarin@14398
   477
    as solvers.  This means that the simplifier can build transitivity chains
ballarin@14398
   478
    to solve goals from the assumptions.
ballarin@14398
   479
  - INCOMPATIBILITY: old proofs break occasionally.  Typically, applications
ballarin@14398
   480
    of blast or auto after simplification become unnecessary because the goal
ballarin@14398
   481
    is solved by simplification already.
ballarin@14398
   482
wenzelm@14731
   483
* Numerics: new theory Ring_and_Field contains over 250 basic numerical laws,
paulson@14389
   484
    all proved in axiomatic type classes for semirings, rings and fields.
paulson@14389
   485
paulson@14389
   486
* Numerics:
paulson@14389
   487
  - Numeric types (nat, int, and in HOL-Complex rat, real, complex, etc.) are
wenzelm@14731
   488
    now formalized using the Ring_and_Field theory mentioned above.
paulson@14389
   489
  - INCOMPATIBILITY: simplification and arithmetic behaves somewhat differently
paulson@14389
   490
    than before, because now they are set up once in a generic manner.
wenzelm@14731
   491
  - INCOMPATIBILITY: many type-specific arithmetic laws have gone.
paulson@14480
   492
    Look for the general versions in Ring_and_Field (and Power if they concern
paulson@14480
   493
    exponentiation).
paulson@14389
   494
paulson@14401
   495
* Type "rat" of the rational numbers is now available in HOL-Complex.
paulson@14389
   496
schirmer@14255
   497
* Records:
schirmer@14255
   498
  - Record types are now by default printed with their type abbreviation
schirmer@14255
   499
    instead of the list of all field types. This can be configured via
schirmer@14255
   500
    the reference "print_record_type_abbr".
wenzelm@14731
   501
  - Simproc "record_upd_simproc" for simplification of multiple updates added
schirmer@14255
   502
    (not enabled by default).
schirmer@14427
   503
  - Simproc "record_ex_sel_eq_simproc" to simplify EX x. sel r = x resp.
schirmer@14427
   504
    EX x. x = sel r to True (not enabled by default).
schirmer@14255
   505
  - Tactic "record_split_simp_tac" to split and simplify records added.
wenzelm@14731
   506
kleing@14136
   507
* 'specification' command added, allowing for definition by
skalberg@14224
   508
  specification.  There is also an 'ax_specification' command that
skalberg@14224
   509
  introduces the new constants axiomatically.
kleing@14136
   510
nipkow@14375
   511
* arith(_tac) is now able to generate counterexamples for reals as well.
nipkow@14375
   512
ballarin@14399
   513
* HOL-Algebra: new locale "ring" for non-commutative rings.
ballarin@14399
   514
paulson@14243
   515
* HOL-ex: InductiveInvariant_examples illustrates advanced recursive function
kleing@14610
   516
  definitions, thanks to Sava Krsti\'{c} and John Matthews.
kleing@14610
   517
wenzelm@14731
   518
* HOL-Matrix: a first theory for matrices in HOL with an application of
kleing@14610
   519
  matrix theory to linear programming.
kleing@14136
   520
nipkow@14380
   521
* Unions and Intersections:
nipkow@15119
   522
  The latex output syntax of UN and INT has been changed
nipkow@15119
   523
  from "\Union x \in A. B" to "\Union_{x \in A} B"
nipkow@15119
   524
  i.e. the index formulae has become a subscript.
nipkow@15119
   525
  Similarly for "\Union x. B", and for \Inter instead of \Union.
nipkow@14380
   526
kleing@14418
   527
* Unions and Intersections over Intervals:
wenzelm@14731
   528
  There is new short syntax "UN i<=n. A" for "UN i:{0..n}. A". There is
wenzelm@14731
   529
  also an x-symbol version with subscripts "\<Union>\<^bsub>i <= n\<^esub>. A"
kleing@14418
   530
  like in normal math, and corresponding versions for < and for intersection.
kleing@14418
   531
nipkow@15677
   532
* HOL/List: Ordering "lexico" is renamed "lenlex" and the standard
nipkow@15677
   533
  lexicographic dictonary ordering has been added as "lexord".
nipkow@15677
   534
paulson@14401
   535
* ML: the legacy theory structures Int and List have been removed. They had
paulson@14401
   536
  conflicted with ML Basis Library structures having the same names.
nipkow@14380
   537
webertj@14464
   538
* 'refute' command added to search for (finite) countermodels.  Only works
webertj@14464
   539
  for a fragment of HOL.  The installation of an external SAT solver is
webertj@14464
   540
  highly recommended.  See "HOL/Refute.thy" for details.
webertj@14464
   541
berghofe@14602
   542
* 'quickcheck' command: Allows to find counterexamples by evaluating
berghofe@14602
   543
  formulae under an assignment of free variables to random values.
berghofe@14602
   544
  In contrast to 'refute', it can deal with inductive datatypes,
berghofe@14602
   545
  but cannot handle quantifiers. See "HOL/ex/Quickcheck_Examples.thy"
berghofe@14602
   546
  for examples.
webertj@14464
   547
wenzelm@14606
   548
oheimb@14536
   549
*** HOLCF ***
oheimb@14536
   550
oheimb@14536
   551
* Streams now come with concatenation and are part of the HOLCF image
oheimb@14536
   552
wenzelm@14572
   553
wenzelm@14572
   554
kleing@14136
   555
New in Isabelle2003 (May 2003)
wenzelm@14606
   556
------------------------------
kleing@14136
   557
wenzelm@13280
   558
*** General ***
wenzelm@13280
   559
berghofe@13618
   560
* Provers/simplifier:
berghofe@13618
   561
nipkow@13781
   562
  - Completely reimplemented method simp (ML: Asm_full_simp_tac):
berghofe@13618
   563
    Assumptions are now subject to complete mutual simplification,
berghofe@13618
   564
    not just from left to right. The simplifier now preserves
berghofe@13618
   565
    the order of assumptions.
berghofe@13618
   566
berghofe@13618
   567
    Potential INCOMPATIBILITY:
berghofe@13618
   568
nipkow@13781
   569
    -- simp sometimes diverges where the old version did
nipkow@13781
   570
       not, e.g. invoking simp on the goal
berghofe@13618
   571
berghofe@13618
   572
        [| P (f x); y = x; f x = f y |] ==> Q
berghofe@13618
   573
nipkow@13781
   574
       now gives rise to the infinite reduction sequence
nipkow@13781
   575
nipkow@13781
   576
        P(f x) --(f x = f y)--> P(f y) --(y = x)--> P(f x) --(f x = f y)--> ...
nipkow@13781
   577
nipkow@13781
   578
       Using "simp (asm_lr)" (ML: Asm_lr_simp_tac) instead often solves this
nipkow@13781
   579
       kind of problem.
nipkow@13781
   580
nipkow@13781
   581
    -- Tactics combining classical reasoner and simplification (such as auto)
nipkow@13781
   582
       are also affected by this change, because many of them rely on
nipkow@13781
   583
       simp. They may sometimes diverge as well or yield a different numbers
nipkow@13781
   584
       of subgoals. Try to use e.g. force, fastsimp, or safe instead of auto
nipkow@13781
   585
       in case of problems. Sometimes subsequent calls to the classical
nipkow@13781
   586
       reasoner will fail because a preceeding call to the simplifier too
nipkow@13781
   587
       eagerly simplified the goal, e.g. deleted redundant premises.
berghofe@13618
   588
berghofe@13618
   589
  - The simplifier trace now shows the names of the applied rewrite rules
berghofe@13618
   590
nipkow@13829
   591
  - You can limit the number of recursive invocations of the simplifier
nipkow@13829
   592
    during conditional rewriting (where the simplifie tries to solve the
nipkow@13829
   593
    conditions before applying the rewrite rule):
nipkow@13829
   594
    ML "simp_depth_limit := n"
nipkow@13829
   595
    where n is an integer. Thus you can force termination where previously
nipkow@13829
   596
    the simplifier would diverge.
nipkow@13829
   597
ballarin@13835
   598
  - Accepts free variables as head terms in congruence rules.  Useful in Isar.
nipkow@13829
   599
ballarin@13938
   600
  - No longer aborts on failed congruence proof.  Instead, the
ballarin@13938
   601
    congruence is ignored.
ballarin@13938
   602
berghofe@14008
   603
* Pure: New generic framework for extracting programs from constructive
berghofe@14008
   604
  proofs. See HOL/Extraction.thy for an example instantiation, as well
berghofe@14008
   605
  as HOL/Extraction for some case studies.
berghofe@14008
   606
nipkow@13868
   607
* Pure: The main goal of the proof state is no longer shown by default, only
nipkow@13868
   608
the subgoals. This behaviour is controlled by a new flag.
ballarin@13835
   609
   PG menu: Isabelle/Isar -> Settings -> Show Main Goal
nipkow@13815
   610
(ML: Proof.show_main_goal).
nipkow@13815
   611
nipkow@13815
   612
* Pure: You can find all matching introduction rules for subgoal 1, i.e. all
nipkow@13815
   613
rules whose conclusion matches subgoal 1:
nipkow@13815
   614
      PG menu: Isabelle/Isar -> Show me -> matching rules
nipkow@13815
   615
The rules are ordered by how closely they match the subgoal.
nipkow@13815
   616
In particular, rules that solve a subgoal outright are displayed first
nipkow@13815
   617
(or rather last, the way they are printed).
nipkow@13815
   618
(ML: ProofGeneral.print_intros())
nipkow@13815
   619
nipkow@13815
   620
* Pure: New flag trace_unify_fail causes unification to print
nipkow@13781
   621
diagnostic information (PG: in trace buffer) when it fails. This is
nipkow@13781
   622
useful for figuring out why single step proofs like rule, erule or
nipkow@13781
   623
assumption failed.
nipkow@13781
   624
nipkow@13815
   625
* Pure: Locale specifications now produce predicate definitions
wenzelm@13410
   626
according to the body of text (covering assumptions modulo local
wenzelm@13410
   627
definitions); predicate "loc_axioms" covers newly introduced text,
wenzelm@13410
   628
while "loc" is cumulative wrt. all included locale expressions; the
wenzelm@13410
   629
latter view is presented only on export into the global theory
wenzelm@13410
   630
context; potential INCOMPATIBILITY, use "(open)" option to fall back
wenzelm@13410
   631
on the old view without predicates;
wenzelm@13410
   632
wenzelm@13459
   633
* Pure: predefined locales "var" and "struct" are useful for sharing
wenzelm@13459
   634
parameters (as in CASL, for example); just specify something like
wenzelm@13459
   635
``var x + var y + struct M'' as import;
wenzelm@13459
   636
wenzelm@13463
   637
* Pure: improved thms_containing: proper indexing of facts instead of
wenzelm@13463
   638
raw theorems; check validity of results wrt. current name space;
wenzelm@13463
   639
include local facts of proof configuration (also covers active
wenzelm@13541
   640
locales), cover fixed variables in index; may use "_" in term
wenzelm@13541
   641
specification; an optional limit for the number of printed facts may
wenzelm@13541
   642
be given (the default is 40);
wenzelm@13541
   643
wenzelm@13541
   644
* Pure: disallow duplicate fact bindings within new-style theory files
wenzelm@13541
   645
(batch-mode only);
wenzelm@13540
   646
wenzelm@13463
   647
* Provers: improved induct method: assumptions introduced by case
wenzelm@13463
   648
"foo" are split into "foo.hyps" (from the rule) and "foo.prems" (from
wenzelm@13463
   649
the goal statement); "foo" still refers to all facts collectively;
wenzelm@13463
   650
paulson@13550
   651
* Provers: the function blast.overloaded has been removed: all constants
paulson@13550
   652
are regarded as potentially overloaded, which improves robustness in exchange
paulson@13550
   653
for slight decrease in efficiency;
paulson@13550
   654
nipkow@13781
   655
* Provers/linorder: New generic prover for transitivity reasoning over
nipkow@13781
   656
linear orders.  Note: this prover is not efficient!
nipkow@13781
   657
wenzelm@13522
   658
* Isar: preview of problems to finish 'show' now produce an error
wenzelm@13522
   659
rather than just a warning (in interactive mode);
wenzelm@13522
   660
wenzelm@13280
   661
nipkow@13158
   662
*** HOL ***
nipkow@13158
   663
nipkow@13899
   664
* arith(_tac)
nipkow@13899
   665
nipkow@13899
   666
 - Produces a counter example if it cannot prove a goal.
nipkow@13899
   667
   Note that the counter example may be spurious if the goal is not a formula
nipkow@13899
   668
   of quantifier-free linear arithmetic.
nipkow@13899
   669
   In ProofGeneral the counter example appears in the trace buffer.
nipkow@13899
   670
nipkow@13899
   671
 - Knows about div k and mod k where k is a numeral of type nat or int.
nipkow@13899
   672
nipkow@13899
   673
 - Calls full Presburger arithmetic (by Amine Chaieb) if quantifier-free
nipkow@13899
   674
   linear arithmetic fails. This takes account of quantifiers and divisibility.
wenzelm@14731
   675
   Presburger arithmetic can also be called explicitly via presburger(_tac).
nipkow@13899
   676
nipkow@13899
   677
* simp's arithmetic capabilities have been enhanced a bit: it now
nipkow@13899
   678
takes ~= in premises into account (by performing a case split);
nipkow@13899
   679
nipkow@13899
   680
* simp reduces "m*(n div m) + n mod m" to n, even if the two summands
nipkow@13899
   681
are distributed over a sum of terms;
nipkow@13899
   682
ballarin@13735
   683
* New tactic "trans_tac" and method "trans" instantiate
ballarin@13735
   684
Provers/linorder.ML for axclasses "order" and "linorder" (predicates
wenzelm@14731
   685
"<=", "<" and "=").
wenzelm@14731
   686
wenzelm@14731
   687
* function INCOMPATIBILITIES: Pi-sets have been redefined and moved from main
paulson@13587
   688
HOL to Library/FuncSet; constant "Fun.op o" is now called "Fun.comp";
paulson@13587
   689
wenzelm@13443
   690
* 'typedef' command has new option "open" to suppress the set
wenzelm@13443
   691
definition;
wenzelm@13443
   692
wenzelm@13522
   693
* functions Min and Max on finite sets have been introduced (theory
wenzelm@13522
   694
Finite_Set);
nipkow@13492
   695
wenzelm@13443
   696
* attribute [symmetric] now works for relations as well; it turns
wenzelm@13443
   697
(x,y) : R^-1 into (y,x) : R, and vice versa;
wenzelm@13443
   698
nipkow@13613
   699
* induct over a !!-quantified statement (say !!x1..xn):
nipkow@13613
   700
  each "case" automatically performs "fix x1 .. xn" with exactly those names.
nipkow@13613
   701
nipkow@13899
   702
* Map: `empty' is no longer a constant but a syntactic abbreviation for
nipkow@13899
   703
%x. None. Warning: empty_def now refers to the previously hidden definition
nipkow@13899
   704
of the empty set.
nipkow@13899
   705
ballarin@14018
   706
* Algebra: formalization of classical algebra.  Intended as base for
ballarin@14018
   707
any algebraic development in Isabelle.  Currently covers group theory
ballarin@14018
   708
(up to Sylow's theorem) and ring theory (Universal Property of
ballarin@14018
   709
Univariate Polynomials).  Contributions welcome;
paulson@13960
   710
paulson@13960
   711
* GroupTheory: deleted, since its material has been moved to Algebra;
paulson@13960
   712
wenzelm@14731
   713
* Complex: new directory of the complex numbers with numeric constants,
wenzelm@14731
   714
nonstandard complex numbers, and some complex analysis, standard and
paulson@13966
   715
nonstandard (Jacques Fleuriot);
paulson@13966
   716
paulson@13966
   717
* HOL-Complex: new image for analysis, replacing HOL-Real and HOL-Hyperreal;
paulson@13966
   718
wenzelm@14731
   719
* Hyperreal: introduced Gauge integration and hyperreal logarithms (Jacques
paulson@13966
   720
Fleuriot);
paulson@13960
   721
wenzelm@13549
   722
* Real/HahnBanach: updated and adapted to locales;
wenzelm@13549
   723
ballarin@13995
   724
* NumberTheory: added Gauss's law of quadratic reciprocity (by Avigad,
ballarin@13995
   725
Gray and Kramer);
paulson@13872
   726
paulson@13872
   727
* UNITY: added the Meier-Sanders theory of progress sets;
paulson@13872
   728
kleing@14011
   729
* MicroJava: bytecode verifier and lightweight bytecode verifier
kleing@14011
   730
as abstract algorithms, instantiated to the JVM;
kleing@14011
   731
schirmer@14010
   732
* Bali: Java source language formalization. Type system, operational
schirmer@14010
   733
semantics, axiomatic semantics. Supported language features:
schirmer@14010
   734
classes, interfaces, objects,virtual methods, static methods,
schirmer@14010
   735
static/instance fields, arrays, access modifiers, definite
schirmer@14010
   736
assignment, exceptions.
wenzelm@13549
   737
kleing@14011
   738
wenzelm@13549
   739
*** ZF ***
wenzelm@13549
   740
webertj@15154
   741
* ZF/Constructible: consistency proof for AC (Gdel's constructible
wenzelm@13549
   742
universe, etc.);
wenzelm@13549
   743
paulson@13872
   744
* Main ZF: virtually all theories converted to new-style format;
nipkow@13518
   745
wenzelm@13280
   746
wenzelm@13478
   747
*** ML ***
wenzelm@13478
   748
wenzelm@13478
   749
* Pure: Tactic.prove provides sane interface for internal proofs;
wenzelm@13478
   750
omits the infamous "standard" operation, so this is more appropriate
wenzelm@13478
   751
than prove_goalw_cterm in many situations (e.g. in simprocs);
wenzelm@13478
   752
wenzelm@13478
   753
* Pure: improved error reporting of simprocs;
wenzelm@13478
   754
wenzelm@13478
   755
* Provers: Simplifier.simproc(_i) provides sane interface for setting
wenzelm@13478
   756
up simprocs;
wenzelm@13478
   757
wenzelm@13478
   758
kleing@13953
   759
*** Document preparation ***
kleing@13953
   760
kleing@13953
   761
* uses \par instead of \\ for line breaks in theory text. This may
kleing@13953
   762
shift some page breaks in large documents. To get the old behaviour
kleing@13953
   763
use \renewcommand{\isanewline}{\mbox{}\\\mbox{}} in root.tex.
kleing@13953
   764
wenzelm@14731
   765
* minimized dependencies of isabelle.sty and isabellesym.sty on
kleing@13953
   766
other packages
kleing@13953
   767
kleing@13953
   768
* \<euro> now needs package babel/greek instead of marvosym (which
kleing@13953
   769
broke \Rightarrow)
kleing@13953
   770
wenzelm@14731
   771
* normal size for \<zero>...\<nine> (uses \mathbf instead of
kleing@13954
   772
textcomp package)
kleing@13953
   773
wenzelm@13280
   774
wenzelm@14572
   775
wenzelm@12984
   776
New in Isabelle2002 (March 2002)
wenzelm@12984
   777
--------------------------------
wenzelm@11474
   778
wenzelm@11572
   779
*** Document preparation ***
wenzelm@11572
   780
wenzelm@11842
   781
* greatly simplified document preparation setup, including more
wenzelm@11842
   782
graceful interpretation of isatool usedir -i/-d/-D options, and more
wenzelm@11842
   783
instructive isatool mkdir; users should basically be able to get
wenzelm@12899
   784
started with "isatool mkdir HOL Test && isatool make"; alternatively,
wenzelm@12899
   785
users may run a separate document processing stage manually like this:
wenzelm@12899
   786
"isatool usedir -D output HOL Test && isatool document Test/output";
wenzelm@11842
   787
wenzelm@11842
   788
* theory dependency graph may now be incorporated into documents;
wenzelm@11842
   789
isatool usedir -g true will produce session_graph.eps/.pdf for use
wenzelm@11842
   790
with \includegraphics of LaTeX;
wenzelm@11842
   791
wenzelm@11864
   792
* proper spacing of consecutive markup elements, especially text
wenzelm@11864
   793
blocks after section headings;
wenzelm@11864
   794
wenzelm@11572
   795
* support bold style (for single symbols only), input syntax is like
wenzelm@11572
   796
this: "\<^bold>\<alpha>" or "\<^bold>A";
wenzelm@11572
   797
wenzelm@11814
   798
* \<bullet> is now output as bold \cdot by default, which looks much
wenzelm@11572
   799
better in printed text;
wenzelm@11572
   800
wenzelm@11712
   801
* added default LaTeX bindings for \<tturnstile> and \<TTurnstile>;
wenzelm@11712
   802
note that these symbols are currently unavailable in Proof General /
wenzelm@12769
   803
X-Symbol; new symbols \<zero>, \<one>, ..., \<nine>, and \<euro>;
wenzelm@12690
   804
wenzelm@12690
   805
* isatool latex no longer depends on changed TEXINPUTS, instead
wenzelm@12690
   806
isatool document copies the Isabelle style files to the target
wenzelm@12690
   807
location;
wenzelm@11712
   808
wenzelm@11572
   809
wenzelm@11633
   810
*** Isar ***
wenzelm@11633
   811
wenzelm@12312
   812
* Pure/Provers: improved proof by cases and induction;
wenzelm@12280
   813
  - 'case' command admits impromptu naming of parameters (such as
wenzelm@12280
   814
    "case (Suc n)");
wenzelm@12280
   815
  - 'induct' method divinates rule instantiation from the inductive
wenzelm@12280
   816
    claim; no longer requires excessive ?P bindings for proper
wenzelm@12280
   817
    instantiation of cases;
wenzelm@12280
   818
  - 'induct' method properly enumerates all possibilities of set/type
wenzelm@12280
   819
    rules; as a consequence facts may be also passed through *type*
wenzelm@12280
   820
    rules without further ado;
wenzelm@12280
   821
  - 'induct' method now derives symbolic cases from the *rulified*
wenzelm@12280
   822
    rule (before it used to rulify cases stemming from the internal
wenzelm@12280
   823
    atomized version); this means that the context of a non-atomic
wenzelm@12280
   824
    statement becomes is included in the hypothesis, avoiding the
wenzelm@12280
   825
    slightly cumbersome show "PROP ?case" form;
wenzelm@12280
   826
  - 'induct' may now use elim-style induction rules without chaining
wenzelm@12280
   827
    facts, using ``missing'' premises from the goal state; this allows
wenzelm@12280
   828
    rules stemming from inductive sets to be applied in unstructured
wenzelm@12280
   829
    scripts, while still benefitting from proper handling of non-atomic
wenzelm@12280
   830
    statements; NB: major inductive premises need to be put first, all
wenzelm@12280
   831
    the rest of the goal is passed through the induction;
wenzelm@12280
   832
  - 'induct' proper support for mutual induction involving non-atomic
wenzelm@12280
   833
    rule statements (uses the new concept of simultaneous goals, see
wenzelm@12280
   834
    below);
wenzelm@12853
   835
  - append all possible rule selections, but only use the first
wenzelm@12853
   836
    success (no backtracking);
wenzelm@11995
   837
  - removed obsolete "(simplified)" and "(stripped)" options of methods;
wenzelm@12754
   838
  - undeclared rule case names default to numbers 1, 2, 3, ...;
wenzelm@12754
   839
  - added 'print_induct_rules' (covered by help item in recent Proof
wenzelm@12754
   840
    General versions);
wenzelm@11995
   841
  - moved induct/cases attributes to Pure, methods to Provers;
wenzelm@11995
   842
  - generic method setup instantiated for FOL and HOL;
wenzelm@11986
   843
wenzelm@12163
   844
* Pure: support multiple simultaneous goal statements, for example
wenzelm@12163
   845
"have a: A and b: B" (same for 'theorem' etc.); being a pure
wenzelm@12163
   846
meta-level mechanism, this acts as if several individual goals had
wenzelm@12163
   847
been stated separately; in particular common proof methods need to be
wenzelm@12163
   848
repeated in order to cover all claims; note that a single elimination
wenzelm@12163
   849
step is *not* sufficient to establish the two conjunctions, so this
wenzelm@12163
   850
fails:
wenzelm@12163
   851
wenzelm@12163
   852
  assume "A & B" then have A and B ..   (*".." fails*)
wenzelm@12163
   853
wenzelm@12163
   854
better use "obtain" in situations as above; alternative refer to
wenzelm@12163
   855
multi-step methods like 'auto', 'simp_all', 'blast+' etc.;
wenzelm@12163
   856
wenzelm@12078
   857
* Pure: proper integration with ``locales''; unlike the original
webertj@15154
   858
version by Florian Kammller, Isar locales package high-level proof
wenzelm@12078
   859
contexts rather than raw logical ones (e.g. we admit to include
wenzelm@12280
   860
attributes everywhere); operations on locales include merge and
wenzelm@12964
   861
rename; support for implicit arguments (``structures''); simultaneous
wenzelm@12964
   862
type-inference over imports and text; see also HOL/ex/Locales.thy for
wenzelm@12964
   863
some examples;
wenzelm@12078
   864
wenzelm@12707
   865
* Pure: the following commands have been ``localized'', supporting a
wenzelm@12707
   866
target locale specification "(in name)": 'lemma', 'theorem',
wenzelm@12707
   867
'corollary', 'lemmas', 'theorems', 'declare'; the results will be
wenzelm@12707
   868
stored both within the locale and at the theory level (exported and
wenzelm@12707
   869
qualified by the locale name);
wenzelm@12707
   870
wenzelm@12964
   871
* Pure: theory goals may now be specified in ``long'' form, with
wenzelm@12964
   872
ad-hoc contexts consisting of arbitrary locale elements. for example
wenzelm@12964
   873
``lemma foo: fixes x assumes "A x" shows "B x"'' (local syntax and
wenzelm@12964
   874
definitions may be given, too); the result is a meta-level rule with
wenzelm@12964
   875
the context elements being discharged in the obvious way;
wenzelm@12964
   876
wenzelm@12964
   877
* Pure: new proof command 'using' allows to augment currently used
wenzelm@12964
   878
facts after a goal statement ('using' is syntactically analogous to
wenzelm@12964
   879
'apply', but acts on the goal's facts only); this allows chained facts
wenzelm@12964
   880
to be separated into parts given before and after a claim, as in
wenzelm@12964
   881
``from a and b have C using d and e <proof>'';
wenzelm@12078
   882
wenzelm@11722
   883
* Pure: renamed "antecedent" case to "rule_context";
wenzelm@11722
   884
wenzelm@12964
   885
* Pure: new 'judgment' command records explicit information about the
wenzelm@12964
   886
object-logic embedding (used by several tools internally); no longer
wenzelm@12964
   887
use hard-wired "Trueprop";
wenzelm@12964
   888
wenzelm@11738
   889
* Pure: added 'corollary' command;
wenzelm@11738
   890
wenzelm@11722
   891
* Pure: fixed 'token_translation' command;
wenzelm@11722
   892
wenzelm@11899
   893
* Pure: removed obsolete 'exported' attribute;
wenzelm@11899
   894
wenzelm@11933
   895
* Pure: dummy pattern "_" in is/let is now automatically lifted over
wenzelm@11933
   896
bound variables: "ALL x. P x --> Q x" (is "ALL x. _ --> ?C x")
wenzelm@11899
   897
supersedes more cumbersome ... (is "ALL x. _ x --> ?C x");
wenzelm@11899
   898
wenzelm@11952
   899
* Pure: method 'atomize' presents local goal premises as object-level
wenzelm@11952
   900
statements (atomic meta-level propositions); setup controlled via
wenzelm@11952
   901
rewrite rules declarations of 'atomize' attribute; example
wenzelm@11952
   902
application: 'induct' method with proper rule statements in improper
wenzelm@11952
   903
proof *scripts*;
wenzelm@11952
   904
wenzelm@12106
   905
* Pure: emulation of instantiation tactics (rule_tac, cut_tac, etc.)
wenzelm@12106
   906
now consider the syntactic context of assumptions, giving a better
wenzelm@12106
   907
chance to get type-inference of the arguments right (this is
wenzelm@12106
   908
especially important for locales);
wenzelm@12106
   909
wenzelm@12312
   910
* Pure: "sorry" no longer requires quick_and_dirty in interactive
wenzelm@12312
   911
mode;
wenzelm@12312
   912
wenzelm@12405
   913
* Pure/obtain: the formal conclusion "thesis", being marked as
wenzelm@12405
   914
``internal'', may no longer be reference directly in the text;
wenzelm@12405
   915
potential INCOMPATIBILITY, may need to use "?thesis" in rare
wenzelm@12405
   916
situations;
wenzelm@12405
   917
wenzelm@12405
   918
* Pure: generic 'sym' attribute which declares a rule both as pure
wenzelm@12405
   919
'elim?' and for the 'symmetric' operation;
wenzelm@12405
   920
wenzelm@12877
   921
* Pure: marginal comments ``--'' may now occur just anywhere in the
wenzelm@12877
   922
text; the fixed correlation with particular command syntax has been
wenzelm@12877
   923
discontinued;
wenzelm@12877
   924
berghofe@13023
   925
* Pure: new method 'rules' is particularly well-suited for proof
berghofe@13023
   926
search in intuitionistic logic; a bit slower than 'blast' or 'fast',
berghofe@13023
   927
but often produces more compact proof terms with less detours;
berghofe@13023
   928
wenzelm@12364
   929
* Pure/Provers/classical: simplified integration with pure rule
wenzelm@12364
   930
attributes and methods; the classical "intro?/elim?/dest?"
wenzelm@12364
   931
declarations coincide with the pure ones; the "rule" method no longer
wenzelm@12364
   932
includes classically swapped intros; "intro" and "elim" methods no
wenzelm@12364
   933
longer pick rules from the context; also got rid of ML declarations
wenzelm@12364
   934
AddXIs/AddXEs/AddXDs; all of this has some potential for
wenzelm@12364
   935
INCOMPATIBILITY;
wenzelm@12364
   936
wenzelm@12405
   937
* Provers/classical: attribute 'swapped' produces classical inversions
wenzelm@12405
   938
of introduction rules;
wenzelm@12405
   939
wenzelm@12364
   940
* Provers/simplifier: 'simplified' attribute may refer to explicit
wenzelm@12364
   941
rules instead of full simplifier context; 'iff' attribute handles
wenzelm@12364
   942
conditional rules;
wenzelm@11936
   943
wenzelm@11745
   944
* HOL: 'typedef' now allows alternative names for Rep/Abs morphisms;
wenzelm@11745
   945
wenzelm@11690
   946
* HOL: 'recdef' now fails on unfinished automated proofs, use
wenzelm@11633
   947
"(permissive)" option to recover old behavior;
wenzelm@11633
   948
wenzelm@11933
   949
* HOL: 'inductive' no longer features separate (collective) attributes
wenzelm@11933
   950
for 'intros' (was found too confusing);
wenzelm@11933
   951
wenzelm@12405
   952
* HOL: properly declared induction rules less_induct and
wenzelm@12405
   953
wf_induct_rule;
wenzelm@12405
   954
kleing@11788
   955
wenzelm@11474
   956
*** HOL ***
wenzelm@11474
   957
wenzelm@11702
   958
* HOL: moved over to sane numeral syntax; the new policy is as
wenzelm@11702
   959
follows:
wenzelm@11702
   960
wenzelm@11702
   961
  - 0 and 1 are polymorphic constants, which are defined on any
wenzelm@11702
   962
  numeric type (nat, int, real etc.);
wenzelm@11702
   963
wenzelm@11702
   964
  - 2, 3, 4, ... and -1, -2, -3, ... are polymorphic numerals, based
wenzelm@11702
   965
  binary representation internally;
wenzelm@11702
   966
wenzelm@11702
   967
  - type nat has special constructor Suc, and generally prefers Suc 0
wenzelm@11702
   968
  over 1::nat and Suc (Suc 0) over 2::nat;
wenzelm@11702
   969
wenzelm@12364
   970
This change may cause significant problems of INCOMPATIBILITY; here
wenzelm@12364
   971
are some hints on converting existing sources:
wenzelm@11702
   972
wenzelm@11702
   973
  - due to the new "num" token, "-0" and "-1" etc. are now atomic
wenzelm@11702
   974
  entities, so expressions involving "-" (unary or binary minus) need
wenzelm@11702
   975
  to be spaced properly;
wenzelm@11702
   976
wenzelm@11702
   977
  - existing occurrences of "1" may need to be constraint "1::nat" or
wenzelm@11702
   978
  even replaced by Suc 0; similar for old "2";
wenzelm@11702
   979
wenzelm@11702
   980
  - replace "#nnn" by "nnn", and "#-nnn" by "-nnn";
wenzelm@11702
   981
wenzelm@11702
   982
  - remove all special provisions on numerals in proofs;
wenzelm@11702
   983
wenzelm@13042
   984
* HOL: simp rules nat_number expand numerals on nat to Suc/0
wenzelm@12837
   985
representation (depends on bin_arith_simps in the default context);
wenzelm@12837
   986
wenzelm@12736
   987
* HOL: symbolic syntax for x^2 (numeral 2);
wenzelm@12736
   988
wenzelm@12335
   989
* HOL: the class of all HOL types is now called "type" rather than
wenzelm@12335
   990
"term"; INCOMPATIBILITY, need to adapt references to this type class
wenzelm@12335
   991
in axclass/classes, instance/arities, and (usually rare) occurrences
wenzelm@12335
   992
in typings (of consts etc.); internally the class is called
wenzelm@12335
   993
"HOL.type", ML programs should refer to HOLogic.typeS;
wenzelm@12335
   994
wenzelm@12280
   995
* HOL/record package improvements:
wenzelm@12280
   996
  - new derived operations "fields" to build a partial record section,
wenzelm@12280
   997
    "extend" to promote a fixed record to a record scheme, and
wenzelm@12280
   998
    "truncate" for the reverse; cf. theorems "xxx.defs", which are *not*
wenzelm@12280
   999
    declared as simp by default;
wenzelm@12587
  1000
  - shared operations ("more", "fields", etc.) now need to be always
wenzelm@12587
  1001
    qualified) --- potential INCOMPATIBILITY;
wenzelm@12280
  1002
  - removed "make_scheme" operations (use "make" with "extend") --
wenzelm@12280
  1003
    INCOMPATIBILITY;
wenzelm@11937
  1004
  - removed "more" class (simply use "term") -- INCOMPATIBILITY;
wenzelm@12253
  1005
  - provides cases/induct rules for use with corresponding Isar
wenzelm@12253
  1006
    methods (for concrete records, record schemes, concrete more
wenzelm@12280
  1007
    parts, and schematic more parts -- in that order);
wenzelm@11930
  1008
  - internal definitions directly based on a light-weight abstract
wenzelm@11930
  1009
    theory of product types over typedef rather than datatype;
wenzelm@11930
  1010
berghofe@13023
  1011
* HOL: generic code generator for generating executable ML code from
berghofe@13023
  1012
specifications; specific support for HOL constructs such as inductive
berghofe@13023
  1013
datatypes and sets, as well as recursive functions; can be invoked
berghofe@13023
  1014
via 'generate_code' theory section;
berghofe@13023
  1015
wenzelm@11933
  1016
* HOL: canonical cases/induct rules for n-tuples (n = 3..7);
wenzelm@11933
  1017
paulson@13824
  1018
* HOL: consolidated and renamed several theories.  In particular:
wenzelm@14731
  1019
        Ord.thy has been absorbed into HOL.thy
wenzelm@14731
  1020
        String.thy has been absorbed into List.thy
wenzelm@14731
  1021
wenzelm@11802
  1022
* HOL: concrete setsum syntax "\<Sum>i:A. b" == "setsum (%i. b) A"
wenzelm@11802
  1023
(beware of argument permutation!);
wenzelm@11802
  1024
wenzelm@11657
  1025
* HOL: linorder_less_split superseded by linorder_cases;
wenzelm@11657
  1026
wenzelm@12917
  1027
* HOL/List: "nodups" renamed to "distinct";
nipkow@12889
  1028
wenzelm@11633
  1029
* HOL: added "The" definite description operator; move Hilbert's "Eps"
paulson@13824
  1030
to peripheral theory "Hilbert_Choice"; some INCOMPATIBILITIES:
paulson@13824
  1031
  - Ex_def has changed, now need to use some_eq_ex
wenzelm@11437
  1032
wenzelm@11572
  1033
* HOL: made split_all_tac safe; EXISTING PROOFS MAY FAIL OR LOOP, so
wenzelm@11572
  1034
in this (rare) case use:
wenzelm@11572
  1035
wenzelm@11572
  1036
  delSWrapper "split_all_tac"
wenzelm@11572
  1037
  addSbefore ("unsafe_split_all_tac", unsafe_split_all_tac)
wenzelm@11572
  1038
wenzelm@11572
  1039
* HOL: added safe wrapper "split_conv_tac" to claset; EXISTING PROOFS
wenzelm@11474
  1040
MAY FAIL;
nipkow@11361
  1041
wenzelm@11572
  1042
* HOL: introduced f^n = f o ... o f; warning: due to the limits of
wenzelm@11572
  1043
Isabelle's type classes, ^ on functions and relations has too general
wenzelm@11572
  1044
a domain, namely ('a * 'b) set and 'a => 'b; this means that it may be
wenzelm@11572
  1045
necessary to attach explicit type constraints;
nipkow@11307
  1046
wenzelm@12917
  1047
* HOL/Relation: the prefix name of the infix "O" has been changed from
wenzelm@12917
  1048
"comp" to "rel_comp"; INCOMPATIBILITY: a few theorems have been
wenzelm@12917
  1049
renamed accordingly (eg "compI" -> "rel_compI").
nipkow@12489
  1050
wenzelm@11487
  1051
* HOL: syntax translations now work properly with numerals and records
wenzelm@11487
  1052
expressions;
wenzelm@11474
  1053
wenzelm@12457
  1054
* HOL: bounded abstraction now uses syntax "%" / "\<lambda>" instead
wenzelm@12457
  1055
of "lam" -- INCOMPATIBILITY;
wenzelm@11474
  1056
wenzelm@11933
  1057
* HOL: got rid of some global declarations (potential INCOMPATIBILITY
wenzelm@11933
  1058
for ML tools): const "()" renamed "Product_Type.Unity", type "unit"
wenzelm@11933
  1059
renamed "Product_Type.unit";
wenzelm@11611
  1060
nipkow@12564
  1061
* HOL: renamed rtrancl_into_rtrancl2 to converse_rtrancl_into_rtrancl
nipkow@12564
  1062
wenzelm@12924
  1063
* HOL: removed obsolete theorem "optionE" (use "option.exhaust", or
wenzelm@12924
  1064
the "cases" method);
wenzelm@12924
  1065
wenzelm@12597
  1066
* HOL/GroupTheory: group theory examples including Sylow's theorem (by
webertj@15154
  1067
Florian Kammller);
wenzelm@12597
  1068
wenzelm@12608
  1069
* HOL/IMP: updated and converted to new-style theory format; several
wenzelm@12608
  1070
parts turned into readable document, with proper Isar proof texts and
wenzelm@12608
  1071
some explanations (by Gerwin Klein);
wenzelm@12597
  1072
wenzelm@12734
  1073
* HOL-Real: added Complex_Numbers (by Gertrud Bauer);
wenzelm@12734
  1074
wenzelm@12690
  1075
* HOL-Hyperreal is now a logic image;
wenzelm@12690
  1076
wenzelm@11611
  1077
wenzelm@12022
  1078
*** HOLCF ***
wenzelm@12022
  1079
wenzelm@12622
  1080
* Isar: consts/constdefs supports mixfix syntax for continuous
wenzelm@12622
  1081
operations;
wenzelm@12622
  1082
wenzelm@12622
  1083
* Isar: domain package adapted to new-style theory format, e.g. see
wenzelm@12622
  1084
HOLCF/ex/Dnat.thy;
wenzelm@12622
  1085
wenzelm@12622
  1086
* theory Lift: proper use of rep_datatype lift instead of ML hacks --
wenzelm@12280
  1087
potential INCOMPATIBILITY; now use plain induct_tac instead of former
wenzelm@12280
  1088
lift.induct_tac, always use UU instead of Undef;
wenzelm@12022
  1089
wenzelm@12597
  1090
* HOLCF/IMP: updated and converted to new-style theory;
wenzelm@12597
  1091
wenzelm@12022
  1092
wenzelm@11474
  1093
*** ZF ***
wenzelm@11474
  1094
wenzelm@12622
  1095
* Isar: proper integration of logic-specific tools and packages,
wenzelm@12622
  1096
including theory commands '(co)inductive', '(co)datatype',
wenzelm@12622
  1097
'rep_datatype', 'inductive_cases', as well as methods 'ind_cases',
wenzelm@12622
  1098
'induct_tac', 'case_tac', and 'typecheck' (with attribute 'TC');
wenzelm@12622
  1099
wenzelm@12622
  1100
* theory Main no longer includes AC; for the Axiom of Choice, base
wenzelm@12622
  1101
your theory on Main_ZFC;
wenzelm@12622
  1102
wenzelm@12622
  1103
* the integer library now covers quotients and remainders, with many
wenzelm@12622
  1104
laws relating division to addition, multiplication, etc.;
paulson@12563
  1105
wenzelm@12280
  1106
* ZF/UNITY: Chandy and Misra's UNITY is now available in ZF, giving a
wenzelm@12280
  1107
typeless version of the formalism;
wenzelm@12280
  1108
wenzelm@13025
  1109
* ZF/AC, Coind, IMP, Resid: updated and converted to new-style theory
wenzelm@13025
  1110
format;
wenzelm@12608
  1111
wenzelm@12280
  1112
* ZF/Induct: new directory for examples of inductive definitions,
wenzelm@12608
  1113
including theory Multiset for multiset orderings; converted to
wenzelm@12608
  1114
new-style theory format;
wenzelm@12177
  1115
wenzelm@13025
  1116
* ZF: many new theorems about lists, ordinals, etc.;
paulson@12850
  1117
wenzelm@11474
  1118
wenzelm@11474
  1119
*** General ***
wenzelm@11474
  1120
wenzelm@12280
  1121
* Pure/kernel: meta-level proof terms (by Stefan Berghofer); reference
wenzelm@12280
  1122
variable proof controls level of detail: 0 = no proofs (only oracle
wenzelm@12280
  1123
dependencies), 1 = lemma dependencies, 2 = compact proof terms; see
wenzelm@12280
  1124
also ref manual for further ML interfaces;
wenzelm@12280
  1125
wenzelm@12280
  1126
* Pure/axclass: removed obsolete ML interface
wenzelm@12280
  1127
goal_subclass/goal_arity;
wenzelm@12280
  1128
wenzelm@12280
  1129
* Pure/syntax: new token syntax "num" for plain numerals (without "#"
wenzelm@12280
  1130
of "xnum"); potential INCOMPATIBILITY, since -0, -1 etc. are now
wenzelm@12280
  1131
separate tokens, so expressions involving minus need to be spaced
wenzelm@12280
  1132
properly;
wenzelm@12280
  1133
wenzelm@12312
  1134
* Pure/syntax: support non-oriented infixes, using keyword "infix"
wenzelm@12312
  1135
rather than "infixl" or "infixr";
wenzelm@12312
  1136
wenzelm@12312
  1137
* Pure/syntax: concrete syntax for dummy type variables admits genuine
wenzelm@12312
  1138
sort constraint specifications in type inference; e.g. "x::_::foo"
wenzelm@12312
  1139
ensures that the type of "x" is of sort "foo" (but not necessarily a
wenzelm@12312
  1140
type variable);
wenzelm@12280
  1141
wenzelm@12280
  1142
* Pure/syntax: print modes "type_brackets" and "no_type_brackets"
wenzelm@12280
  1143
control output of nested => (types); the default behavior is
wenzelm@12280
  1144
"type_brackets";
wenzelm@12280
  1145
wenzelm@12280
  1146
* Pure/syntax: builtin parse translation for "_constify" turns valued
wenzelm@11817
  1147
tokens into AST constants;
wenzelm@11474
  1148
wenzelm@12280
  1149
* Pure/syntax: prefer later declarations of translations and print
wenzelm@12280
  1150
translation functions; potential INCOMPATIBILITY: need to reverse
wenzelm@12280
  1151
multiple declarations for same syntax element constant;
wenzelm@12280
  1152
wenzelm@12832
  1153
* Pure/show_hyps reset by default (in accordance to existing Isar
wenzelm@12832
  1154
practice);
wenzelm@12832
  1155
wenzelm@12280
  1156
* Provers/classical: renamed addaltern to addafter, addSaltern to
wenzelm@12280
  1157
addSafter;
wenzelm@12280
  1158
wenzelm@12280
  1159
* Provers/clasimp: ``iff'' declarations now handle conditional rules
wenzelm@12280
  1160
as well;
wenzelm@12253
  1161
wenzelm@12538
  1162
* system: tested support for MacOS X; should be able to get Isabelle +
wenzelm@12538
  1163
Proof General to work in a plain Terminal after installing Poly/ML
wenzelm@12538
  1164
(e.g. from the Isabelle distribution area) and GNU bash alone
wenzelm@12538
  1165
(e.g. from http://www.apple.com); full X11, XEmacs and X-Symbol
wenzelm@12538
  1166
support requires further installations, e.g. from
wenzelm@12538
  1167
http://fink.sourceforge.net/);
wenzelm@12538
  1168
wenzelm@12280
  1169
* system: support Poly/ML 4.1.1 (able to manage larger heaps);
wenzelm@11551
  1170
wenzelm@12753
  1171
* system: reduced base memory usage by Poly/ML (approx. 20 MB instead
wenzelm@12753
  1172
of 40 MB), cf. ML_OPTIONS;
wenzelm@12753
  1173
wenzelm@11633
  1174
* system: Proof General keywords specification is now part of the
wenzelm@11633
  1175
Isabelle distribution (see etc/isar-keywords.el);
wenzelm@11633
  1176
wenzelm@12728
  1177
* system: support for persistent Proof General sessions (refrain from
wenzelm@12728
  1178
outdating all loaded theories on startup); user may create writable
wenzelm@12728
  1179
logic images like this: ``isabelle -q HOL Test'';
wenzelm@12597
  1180
wenzelm@11551
  1181
* system: smart selection of Isabelle process versus Isabelle
wenzelm@11572
  1182
interface, accommodates case-insensitive file systems (e.g. HFS+); may
wenzelm@11572
  1183
run both "isabelle" and "Isabelle" even if file names are badly
wenzelm@11572
  1184
damaged (executable inspects the case of the first letter of its own
wenzelm@11572
  1185
name); added separate "isabelle-process" and "isabelle-interface";
wenzelm@11551
  1186
wenzelm@12472
  1187
* system: refrain from any attempt at filtering input streams; no
wenzelm@12472
  1188
longer support ``8bit'' encoding of old isabelle font, instead proper
wenzelm@12472
  1189
iso-latin characters may now be used; the related isatools
wenzelm@12472
  1190
"symbolinput" and "nonascii" have disappeared as well;
wenzelm@12472
  1191
wenzelm@12472
  1192
* system: removed old "xterm" interface (the print modes "xterm" and
wenzelm@12472
  1193
"xterm_color" are still available for direct use in a suitable
wenzelm@12472
  1194
terminal);
wenzelm@12472
  1195
paulson@11314
  1196
oheimb@11169
  1197
wenzelm@11062
  1198
New in Isabelle99-2 (February 2001)
wenzelm@11062
  1199
-----------------------------------
wenzelm@11062
  1200
nipkow@10224
  1201
*** Overview of INCOMPATIBILITIES ***
nipkow@10224
  1202
paulson@11241
  1203
* HOL: please note that theories in the Library and elsewhere often use the
paulson@11241
  1204
new-style (Isar) format; to refer to their theorems in an ML script you must
wenzelm@12622
  1205
bind them to ML identifers by e.g.      val thm_name = thm "thm_name";
paulson@11241
  1206
wenzelm@11043
  1207
* HOL: inductive package no longer splits induction rule aggressively,
wenzelm@11043
  1208
but only as far as specified by the introductions given; the old
oheimb@11130
  1209
format may be recovered via ML function complete_split_rule or attribute
wenzelm@11043
  1210
'split_rule (complete)';
wenzelm@11043
  1211
wenzelm@10998
  1212
* HOL: induct renamed to lfp_induct, lfp_Tarski to lfp_unfold,
wenzelm@10998
  1213
gfp_Tarski to gfp_unfold;
nipkow@10224
  1214
paulson@10288
  1215
* HOL: contrapos, contrapos2 renamed to contrapos_nn, contrapos_pp;
paulson@10288
  1216
wenzelm@10858
  1217
* HOL: infix "dvd" now has priority 50 rather than 70 (because it is a
wenzelm@10858
  1218
relation); infix "^^" has been renamed "``"; infix "``" has been
wenzelm@10858
  1219
renamed "`"; "univalent" has been renamed "single_valued";
nipkow@10793
  1220
wenzelm@10998
  1221
* HOL/Real: "rinv" and "hrinv" replaced by overloaded "inverse"
wenzelm@10998
  1222
operation;
wenzelm@10998
  1223
nipkow@10868
  1224
* HOLCF: infix "`" has been renamed "$"; the symbol syntax is \<cdot>;
nipkow@10856
  1225
wenzelm@10391
  1226
* Isar: 'obtain' no longer declares "that" fact as simp/intro;
wenzelm@10391
  1227
wenzelm@10401
  1228
* Isar/HOL: method 'induct' now handles non-atomic goals; as a
wenzelm@10401
  1229
consequence, it is no longer monotonic wrt. the local goal context
wenzelm@10401
  1230
(which is now passed through the inductive cases);
wenzelm@10401
  1231
wenzelm@10976
  1232
* Document preparation: renamed standard symbols \<ll> to \<lless> and
wenzelm@10976
  1233
\<gg> to \<ggreater>;
wenzelm@10976
  1234
nipkow@10224
  1235
wenzelm@10245
  1236
*** Document preparation ***
wenzelm@10245
  1237
wenzelm@10858
  1238
* \isabellestyle{NAME} selects version of Isabelle output (currently
wenzelm@10858
  1239
available: are "it" for near math-mode best-style output, "sl" for
wenzelm@10858
  1240
slanted text style, and "tt" for plain type-writer; if no
wenzelm@10858
  1241
\isabellestyle command is given, output is according to slanted
wenzelm@10858
  1242
type-writer);
wenzelm@10858
  1243
wenzelm@10322
  1244
* support sub/super scripts (for single symbols only), input syntax is
wenzelm@10322
  1245
like this: "A\<^sup>*" or "A\<^sup>\<star>";
wenzelm@10322
  1246
wenzelm@10858
  1247
* some more standard symbols; see Appendix A of the system manual for
wenzelm@11062
  1248
the complete list of symbols defined in isabellesym.sty;
wenzelm@10858
  1249
wenzelm@10998
  1250
* improved isabelle style files; more abstract symbol implementation
wenzelm@10998
  1251
(should now use \isamath{...} and \isatext{...} in custom symbol
wenzelm@10998
  1252
definitions);
wenzelm@10998
  1253
wenzelm@10634
  1254
* antiquotation @{goals} and @{subgoals} for output of *dynamic* goals
wenzelm@10634
  1255
state; Note that presentation of goal states does not conform to
wenzelm@10634
  1256
actual human-readable proof documents.  Please do not include goal
wenzelm@10634
  1257
states into document output unless you really know what you are doing!
wenzelm@10322
  1258
wenzelm@11062
  1259
* proper indentation of antiquoted output with proportional LaTeX
wenzelm@11062
  1260
fonts;
wenzelm@10862
  1261
wenzelm@11050
  1262
* no_document ML operator temporarily disables LaTeX document
wenzelm@11050
  1263
generation;
wenzelm@11050
  1264
wenzelm@11062
  1265
* isatool unsymbolize tunes sources for plain ASCII communication;
wenzelm@11062
  1266
wenzelm@10322
  1267
wenzelm@10306
  1268
*** Isar ***
wenzelm@10306
  1269
wenzelm@10547
  1270
* Pure: Isar now suffers initial goal statements to contain unbound
wenzelm@10547
  1271
schematic variables (this does not conform to actual readable proof
wenzelm@10547
  1272
documents, due to unpredictable outcome and non-compositional proof
wenzelm@10547
  1273
checking); users who know what they are doing may use schematic goals
wenzelm@10547
  1274
for Prolog-style synthesis of proven results;
wenzelm@10547
  1275
wenzelm@10391
  1276
* Pure: assumption method (an implicit finishing) now handles actual
wenzelm@10391
  1277
rules as well;
wenzelm@10391
  1278
wenzelm@10391
  1279
* Pure: improved 'obtain' --- moved to Pure, insert "that" into
wenzelm@10391
  1280
initial goal, declare "that" only as Pure intro (only for single
wenzelm@10391
  1281
steps); the "that" rule assumption may now be involved in implicit
wenzelm@10391
  1282
finishing, thus ".." becomes a feasible for trivial obtains;
wenzelm@10391
  1283
wenzelm@10391
  1284
* Pure: default proof step now includes 'intro_classes'; thus trivial
wenzelm@10391
  1285
instance proofs may be performed by "..";
wenzelm@10391
  1286
wenzelm@10391
  1287
* Pure: ?thesis / ?this / "..." now work for pure meta-level
wenzelm@10391
  1288
statements as well;
wenzelm@10306
  1289
wenzelm@11097
  1290
* Pure: more robust selection of calculational rules;
wenzelm@11097
  1291
wenzelm@10858
  1292
* Pure: the builtin notion of 'finished' goal now includes the ==-refl
wenzelm@10858
  1293
rule (as well as the assumption rule);
wenzelm@10858
  1294
wenzelm@10858
  1295
* Pure: 'thm_deps' command visualizes dependencies of theorems and
wenzelm@10858
  1296
lemmas, using the graph browser tool;
wenzelm@10858
  1297
wenzelm@10944
  1298
* Pure: predict failure of "show" in interactive mode;
wenzelm@10944
  1299
wenzelm@11016
  1300
* Pure: 'thms_containing' now takes actual terms as arguments;
wenzelm@11016
  1301
wenzelm@10401
  1302
* HOL: improved method 'induct' --- now handles non-atomic goals
wenzelm@10401
  1303
(potential INCOMPATIBILITY); tuned error handling;
wenzelm@10401
  1304
wenzelm@10557
  1305
* HOL: cases and induct rules now provide explicit hints about the
wenzelm@10547
  1306
number of facts to be consumed (0 for "type" and 1 for "set" rules);
wenzelm@10547
  1307
any remaining facts are inserted into the goal verbatim;
wenzelm@10547
  1308
wenzelm@10858
  1309
* HOL: local contexts (aka cases) may now contain term bindings as
wenzelm@10858
  1310
well; the 'cases' and 'induct' methods new provide a ?case binding for
wenzelm@10858
  1311
the result to be shown in each case;
wenzelm@10858
  1312
wenzelm@10770
  1313
* HOL: added 'recdef_tc' command;
wenzelm@10770
  1314
wenzelm@11016
  1315
* isatool convert assists in eliminating legacy ML scripts;
wenzelm@11016
  1316
wenzelm@10306
  1317
wenzelm@10245
  1318
*** HOL ***
wenzelm@10245
  1319
wenzelm@10245
  1320
* HOL/Library: a collection of generic theories to be used together
wenzelm@10245
  1321
with main HOL; the theory loader path already includes this directory
wenzelm@10245
  1322
by default; the following existing theories have been moved here:
wenzelm@10245
  1323
HOL/Induct/Multiset, HOL/Induct/Acc (as Accessible_Part), HOL/While
wenzelm@10337
  1324
(as While_Combinator), HOL/Lex/Prefix (as List_Prefix);
wenzelm@10245
  1325
wenzelm@10966
  1326
* HOL/Unix: "Some aspects of Unix file-system security", a typical
wenzelm@10966
  1327
modelling and verification task performed in Isabelle/HOL +
wenzelm@10966
  1328
Isabelle/Isar + Isabelle document preparation (by Markus Wenzel).
wenzelm@10966
  1329
wenzelm@11094
  1330
* HOL/Algebra: special summation operator SUM no longer exists, it has
wenzelm@11094
  1331
been replaced by setsum; infix 'assoc' now has priority 50 (like
wenzelm@11094
  1332
'dvd'); axiom 'one_not_zero' has been moved from axclass 'ring' to
wenzelm@11094
  1333
'domain', this makes the theory consistent with mathematical
wenzelm@11094
  1334
literature;
wenzelm@11094
  1335
wenzelm@10514
  1336
* HOL basics: added overloaded operations "inverse" and "divide"
wenzelm@10726
  1337
(infix "/"), syntax for generic "abs" operation, generic summation
wenzelm@11094
  1338
operator \<Sum>;
wenzelm@10452
  1339
wenzelm@10391
  1340
* HOL/typedef: simplified package, provide more useful rules (see also
wenzelm@10391
  1341
HOL/subset.thy);
wenzelm@10391
  1342
wenzelm@10915
  1343
* HOL/datatype: induction rule for arbitrarily branching datatypes is
wenzelm@10915
  1344
now expressed as a proper nested rule (old-style tactic scripts may
wenzelm@10915
  1345
require atomize_strip_tac to cope with non-atomic premises);
wenzelm@10915
  1346
wenzelm@10915
  1347
* HOL: renamed theory "Prod" to "Product_Type", renamed "split" rule
wenzelm@10915
  1348
to "split_conv" (old name still available for compatibility);
wenzelm@10915
  1349
wenzelm@10915
  1350
* HOL: improved concrete syntax for strings (e.g. allows translation
wenzelm@10915
  1351
rules with string literals);
wenzelm@10915
  1352
paulson@12245
  1353
* HOL-Real-Hyperreal: this extends HOL-Real with the hyperreals
paulson@12245
  1354
 and Fleuriot's mechanization of analysis, including the transcendental
paulson@12245
  1355
 functions for the reals;
paulson@10756
  1356
wenzelm@11094
  1357
* HOL/Real, HOL/Hyperreal: improved arithmetic simplification;
wenzelm@10391
  1358
wenzelm@10858
  1359
paulson@10474
  1360
*** CTT ***
paulson@10474
  1361
wenzelm@10547
  1362
* CTT: x-symbol support for Pi, Sigma, -->, : (membership); note that
wenzelm@10547
  1363
"lam" is displayed as TWO lambda-symbols
paulson@10474
  1364
wenzelm@10547
  1365
* CTT: theory Main now available, containing everything (that is, Bool
wenzelm@10547
  1366
and Arith);
wenzelm@10547
  1367
paulson@10474
  1368
wenzelm@10391
  1369
*** General ***
wenzelm@10391
  1370
wenzelm@10547
  1371
* Pure: the Simplifier has been implemented properly as a derived rule
wenzelm@10547
  1372
outside of the actual kernel (at last!); the overall performance
wenzelm@10547
  1373
penalty in practical applications is about 50%, while reliability of
wenzelm@10547
  1374
the Isabelle inference kernel has been greatly improved;
wenzelm@10547
  1375
wenzelm@11112
  1376
* print modes "brackets" and "no_brackets" control output of nested =>
wenzelm@11112
  1377
(types) and ==> (props); the default behaviour is "brackets";
wenzelm@11112
  1378
wenzelm@10391
  1379
* Provers: fast_tac (and friends) now handle actual object-logic rules
wenzelm@10391
  1380
as assumptions as well;
wenzelm@10391
  1381
wenzelm@11124
  1382
* system: support Poly/ML 4.0;
wenzelm@11124
  1383
wenzelm@11124
  1384
* system: isatool install handles KDE version 1 or 2;
wenzelm@11124
  1385
wenzelm@10391
  1386
wenzelm@10245
  1387
wenzelm@10103
  1388
New in Isabelle99-1 (October 2000)
wenzelm@10103
  1389
----------------------------------
wenzelm@8015
  1390
wenzelm@10003
  1391
*** Overview of INCOMPATIBILITIES ***
paulson@8014
  1392
wenzelm@8848
  1393
* HOL: simplification of natural numbers is much changed; to partly
wenzelm@8848
  1394
recover the old behaviour (e.g. to prevent n+n rewriting to #2*n)
wenzelm@8848
  1395
issue the following ML commands:
wenzelm@8848
  1396
wenzelm@8848
  1397
  Delsimprocs Nat_Numeral_Simprocs.cancel_numerals;
wenzelm@8848
  1398
  Delsimprocs [Nat_Numeral_Simprocs.combine_numerals];
paulson@8788
  1399
wenzelm@10129
  1400
* HOL: simplification no longer dives into case-expressions; this is
wenzelm@10129
  1401
controlled by "t.weak_case_cong" for each datatype t;
wenzelm@10003
  1402
wenzelm@10003
  1403
* HOL: nat_less_induct renamed to less_induct;
wenzelm@10003
  1404
wenzelm@10003
  1405
* HOL: systematic renaming of the SOME (Eps) rules, may use isatool
wenzelm@10003
  1406
fixsome to patch .thy and .ML sources automatically;
paulson@8967
  1407
wenzelm@10003
  1408
  select_equality  -> some_equality
wenzelm@10003
  1409
  select_eq_Ex     -> some_eq_ex
wenzelm@10003
  1410
  selectI2EX       -> someI2_ex
wenzelm@10003
  1411
  selectI2         -> someI2
wenzelm@10003
  1412
  selectI          -> someI
wenzelm@10003
  1413
  select1_equality -> some1_equality
wenzelm@10003
  1414
  Eps_sym_eq       -> some_sym_eq_trivial
wenzelm@10003
  1415
  Eps_eq           -> some_eq_trivial
wenzelm@10003
  1416
wenzelm@10003
  1417
* HOL: exhaust_tac on datatypes superceded by new generic case_tac;
wenzelm@10003
  1418
wenzelm@10003
  1419
* HOL: removed obsolete theorem binding expand_if (refer to split_if
wenzelm@10003
  1420
instead);
wenzelm@10003
  1421
wenzelm@10003
  1422
* HOL: the recursion equations generated by 'recdef' are now called
wenzelm@10003
  1423
f.simps instead of f.rules;
wenzelm@10003
  1424
wenzelm@10003
  1425
* HOL: qed_spec_mp now also handles bounded ALL as well;
wenzelm@10003
  1426
wenzelm@10003
  1427
* HOL: 0 is now overloaded, so the type constraint ":: nat" may
wenzelm@10003
  1428
sometimes be needed;
wenzelm@10003
  1429
wenzelm@10003
  1430
* HOL: the constant for "f``x" is now "image" rather than "op ``";
paulson@8014
  1431
paulson@10065
  1432
* HOL: the constant for "f-``x" is now "vimage" rather than "op -``";
paulson@10065
  1433
wenzelm@9330
  1434
* HOL: the disjoint sum is now "<+>" instead of "Plus"; the cartesian
wenzelm@9330
  1435
product is now "<*>" instead of "Times"; the lexicographic product is
wenzelm@9330
  1436
now "<*lex*>" instead of "**";
nipkow@8705
  1437
wenzelm@10003
  1438
* HOL: theory Sexp is now in HOL/Induct examples (it used to be part
wenzelm@10003
  1439
of main HOL, but was unused); better use HOL's datatype package;
paulson@9971
  1440
wenzelm@10137
  1441
* HOL: removed "symbols" syntax for constant "override" of theory Map;
wenzelm@10137
  1442
the old syntax may be recovered as follows:
wenzelm@10137
  1443
wenzelm@10137
  1444
  syntax (symbols)
wenzelm@10137
  1445
    override  :: "('a ~=> 'b) => ('a ~=> 'b) => ('a ~=> 'b)"
wenzelm@10137
  1446
      (infixl "\\<oplus>" 100)
wenzelm@10137
  1447
wenzelm@8848
  1448
* HOL/Real: "rabs" replaced by overloaded "abs" function;
wenzelm@8848
  1449
wenzelm@8887
  1450
* HOL/ML: even fewer consts are declared as global (see theories Ord,
wenzelm@8887
  1451
Lfp, Gfp, WF); this only affects ML packages that refer to const names
wenzelm@8887
  1452
internally;
wenzelm@8887
  1453
wenzelm@10003
  1454
* HOL and ZF: syntax for quotienting wrt an equivalence relation
wenzelm@10003
  1455
changed from A/r to A//r;
wenzelm@9908
  1456
wenzelm@10003
  1457
* ZF: new treatment of arithmetic (nat & int) may break some old
wenzelm@10003
  1458
proofs;
wenzelm@8921
  1459
wenzelm@10003
  1460
* Isar: renamed some attributes (RS -> THEN, simplify -> simplified,
wenzelm@10003
  1461
rulify -> rule_format, elimify -> elim_format, ...);
paulson@9542
  1462
wenzelm@9941
  1463
* Isar/Provers: intro/elim/dest attributes changed; renamed
wenzelm@9941
  1464
intro/intro!/intro!! flags to intro!/intro/intro? (in most cases, one
wenzelm@9937
  1465
should have to change intro!! to intro? only); replaced "delrule" by
wenzelm@9937
  1466
"rule del";
wenzelm@9437
  1467
wenzelm@9612
  1468
* Isar/HOL: renamed "intrs" to "intros" in inductive definitions;
wenzelm@9612
  1469
wenzelm@9437
  1470
* Provers: strengthened force_tac by using new first_best_tac;
oheimb@9402
  1471
wenzelm@10003
  1472
* LaTeX document preparation: several changes of isabelle.sty (see
wenzelm@10003
  1473
lib/texinputs);
wenzelm@8729
  1474
paulson@8014
  1475
wenzelm@8487
  1476
*** Document preparation ***
wenzelm@8358
  1477
wenzelm@9198
  1478
* formal comments (text blocks etc.) in new-style theories may now
wenzelm@9753
  1479
contain antiquotations of thm/prop/term/typ/text to be presented
wenzelm@9753
  1480
according to latex print mode; concrete syntax is like this:
wenzelm@9753
  1481
@{term[show_types] "f(x) = a + x"};
wenzelm@9198
  1482
wenzelm@8358
  1483
* isatool mkdir provides easy setup of Isabelle session directories,
wenzelm@8518
  1484
including proper document sources;
wenzelm@8358
  1485
wenzelm@8358
  1486
* generated LaTeX sources are now deleted after successful run
wenzelm@8358
  1487
(isatool document -c); may retain a copy somewhere else via -D option
wenzelm@8358
  1488
of isatool usedir;
wenzelm@8358
  1489
wenzelm@8566
  1490
* isatool usedir -D now lets isatool latex -o sty update the Isabelle
wenzelm@10003
  1491
style files, achieving self-contained LaTeX sources and simplifying
wenzelm@10003
  1492
LaTeX debugging;
wenzelm@8566
  1493
wenzelm@8518
  1494
* old-style theories now produce (crude) LaTeX output as well;
wenzelm@8358
  1495
wenzelm@9057
  1496
* browser info session directories are now self-contained (may be put
wenzelm@9437
  1497
on WWW server seperately); improved graphs of nested sessions; removed
wenzelm@9437
  1498
graph for 'all sessions';
wenzelm@9057
  1499
wenzelm@10003
  1500
* several improvements in isabelle style files; \isabellestyle{it}
wenzelm@10003
  1501
produces fake math mode output; \isamarkupheader is now \section by
wenzelm@10003
  1502
default; see lib/texinputs/isabelle.sty etc.;
wenzelm@9489
  1503
wenzelm@8358
  1504
wenzelm@8184
  1505
*** Isar ***
wenzelm@8184
  1506
wenzelm@10003
  1507
* Isar/Pure: local results and corresponding term bindings are now
wenzelm@10003
  1508
subject to Hindley-Milner polymorphism (similar to ML); this
wenzelm@10003
  1509
accommodates incremental type-inference very nicely;
wenzelm@8283
  1510
wenzelm@10003
  1511
* Isar/Pure: new derived language element 'obtain' supports
wenzelm@10003
  1512
generalized existence reasoning;
wenzelm@8621
  1513
wenzelm@10003
  1514
* Isar/Pure: new calculational elements 'moreover' and 'ultimately'
wenzelm@10003
  1515
support accumulation of results, without applying any rules yet;
wenzelm@10003
  1516
useful to collect intermediate results without explicit name
wenzelm@10003
  1517
references, and for use with transitivity rules with more than 2
wenzelm@10003
  1518
premises;
wenzelm@8184
  1519
wenzelm@10003
  1520
* Isar/Pure: scalable support for case-analysis type proofs: new
wenzelm@10003
  1521
'case' language element refers to local contexts symbolically, as
wenzelm@10003
  1522
produced by certain proof methods; internally, case names are attached
wenzelm@10003
  1523
to theorems as "tags";
wenzelm@8440
  1524
wenzelm@10003
  1525
* Isar/Pure: theory command 'hide' removes declarations from
wenzelm@9330
  1526
class/type/const name spaces;
wenzelm@9330
  1527
wenzelm@10003
  1528
* Isar/Pure: theory command 'defs' supports option "(overloaded)" to
wenzelm@9330
  1529
indicate potential overloading;
wenzelm@9330
  1530
wenzelm@10003
  1531
* Isar/Pure: changed syntax of local blocks from {{ }} to { };
wenzelm@8621
  1532
wenzelm@10003
  1533
* Isar/Pure: syntax of sorts made 'inner', i.e. have to write
wenzelm@10003
  1534
"{a,b,c}" instead of {a,b,c};
wenzelm@9011
  1535
wenzelm@10003
  1536
* Isar/Pure now provides its own version of intro/elim/dest
wenzelm@10003
  1537
attributes; useful for building new logics, but beware of confusion
wenzelm@10003
  1538
with the version in Provers/classical;
wenzelm@9612
  1539
wenzelm@10003
  1540
* Isar/Pure: the local context of (non-atomic) goals is provided via
wenzelm@10003
  1541
case name 'antecedent';
wenzelm@8440
  1542
wenzelm@10003
  1543
* Isar/Pure: removed obsolete 'transfer' attribute (transfer of thms
wenzelm@10003
  1544
to the current context is now done automatically);
wenzelm@9383
  1545
wenzelm@10003
  1546
* Isar/Pure: theory command 'method_setup' provides a simple interface
wenzelm@10003
  1547
for definining proof methods in ML;
wenzelm@9612
  1548
wenzelm@10003
  1549
* Isar/Provers: intro/elim/dest attributes changed; renamed
wenzelm@9941
  1550
intro/intro!/intro!! flags to intro!/intro/intro? (INCOMPATIBILITY, in
wenzelm@9941
  1551
most cases, one should have to change intro!! to intro? only);
wenzelm@9941
  1552
replaced "delrule" by "rule del";
wenzelm@8283
  1553
wenzelm@10003
  1554
* Isar/Provers: new 'hypsubst' method, plain 'subst' method and
wenzelm@10003
  1555
'symmetric' attribute (the latter supercedes [RS sym]);
wenzelm@10003
  1556
wenzelm@10003
  1557
* Isar/Provers: splitter support (via 'split' attribute and 'simp'
wenzelm@10003
  1558
method modifier); 'simp' method: 'only:' modifier removes loopers as
wenzelm@10003
  1559
well (including splits);
wenzelm@10003
  1560
wenzelm@10003
  1561
* Isar/Provers: Simplifier and Classical methods now support all kind
wenzelm@10003
  1562
of modifiers used in the past, including 'cong', 'iff', etc.
wenzelm@10003
  1563
wenzelm@10003
  1564
* Isar/Provers: added 'fastsimp' and 'clarsimp' methods (combination
wenzelm@10003
  1565
of Simplifier and Classical reasoner);
wenzelm@10003
  1566
wenzelm@10003
  1567
* Isar/HOL: new proof method 'cases' and improved version of 'induct'
wenzelm@10003
  1568
now support named cases; major packages (inductive, datatype, primrec,
wenzelm@10003
  1569
recdef) support case names and properly name parameters;
wenzelm@9612
  1570
wenzelm@10003
  1571
* Isar/HOL: new transitivity rules for substitution in inequalities --
wenzelm@10003
  1572
monotonicity conditions are extracted to be proven at end of
wenzelm@10003
  1573
calculations;
wenzelm@10003
  1574
wenzelm@10003
  1575
* Isar/HOL: removed 'case_split' thm binding, should use 'cases' proof
wenzelm@10003
  1576
method anyway;
wenzelm@10003
  1577
wenzelm@10003
  1578
* Isar/HOL: removed old expand_if = split_if; theorems if_splits =
wenzelm@10003
  1579
split_if split_if_asm; datatype package provides theorems foo.splits =
wenzelm@10003
  1580
foo.split foo.split_asm for each datatype;
wenzelm@10003
  1581
wenzelm@10003
  1582
* Isar/HOL: tuned inductive package, rename "intrs" to "intros"
wenzelm@10003
  1583
(potential INCOMPATIBILITY), emulation of mk_cases feature for proof
wenzelm@10003
  1584
scripts: new 'inductive_cases' command and 'ind_cases' method; (Note:
wenzelm@10003
  1585
use "(cases (simplified))" method in proper proof texts);
wenzelm@10003
  1586
wenzelm@10003
  1587
* Isar/HOL: added global 'arith_split' attribute for 'arith' method;
wenzelm@10003
  1588
wenzelm@10003
  1589
* Isar: names of theorems etc. may be natural numbers as well;
wenzelm@10003
  1590
wenzelm@10003
  1591
* Isar: 'pr' command: optional arguments for goals_limit and
wenzelm@9724
  1592
ProofContext.prems_limit; no longer prints theory contexts, but only
wenzelm@9724
  1593
proof states;
wenzelm@8487
  1594
wenzelm@10003
  1595
* Isar: diagnostic commands 'pr', 'thm', 'prop', 'term', 'typ' admit
wenzelm@8518
  1596
additional print modes to be specified; e.g. "pr(latex)" will print
wenzelm@8518
  1597
proof state according to the Isabelle LaTeX style;
wenzelm@8487
  1598
wenzelm@10003
  1599
* Isar: improved support for emulating tactic scripts, including proof
wenzelm@9612
  1600
methods 'rule_tac' etc., 'cut_tac', 'thin_tac', 'subgoal_tac',
wenzelm@9612
  1601
'rename_tac', 'rotate_tac', 'tactic', and 'case_tac' / 'induct_tac'
wenzelm@9612
  1602
(for HOL datatypes);
wenzelm@8534
  1603
wenzelm@10003
  1604
* Isar: simplified (more robust) goal selection of proof methods: 1st
wenzelm@10003
  1605
goal, all goals, or explicit goal specifier (tactic emulation); thus
wenzelm@10003
  1606
'proof method scripts' have to be in depth-first order;
wenzelm@8673
  1607
wenzelm@10003
  1608
* Isar: tuned 'let' syntax: replaced 'as' keyword by 'and';
wenzelm@8729
  1609
wenzelm@10003
  1610
* Isar: removed 'help' command, which hasn't been too helpful anyway;
wenzelm@10003
  1611
should instead use individual commands for printing items
wenzelm@10003
  1612
(print_commands, print_methods etc.);
wenzelm@9224
  1613
wenzelm@10003
  1614
* Isar: added 'nothing' --- the empty list of theorems;
wenzelm@9239
  1615
wenzelm@8184
  1616
paulson@8014
  1617
*** HOL ***
paulson@8014
  1618
wenzelm@10080
  1619
* HOL/MicroJava: formalization of a fragment of Java, together with a
wenzelm@10080
  1620
corresponding virtual machine and a specification of its bytecode
wenzelm@10080
  1621
verifier and a lightweight bytecode verifier, including proofs of
wenzelm@10080
  1622
type-safety; by Gerwin Klein, Tobias Nipkow, David von Oheimb, and
wenzelm@10080
  1623
Cornelia Pusch (see also the homepage of project Bali at
wenzelm@10080
  1624
http://isabelle.in.tum.de/Bali/);
wenzelm@10080
  1625
wenzelm@8518
  1626
* HOL/Algebra: new theory of rings and univariate polynomials, by
wenzelm@8518
  1627
Clemens Ballarin;
paulson@8014
  1628
wenzelm@10157
  1629
* HOL/NumberTheory: fundamental Theorem of Arithmetic, Chinese
wenzelm@10003
  1630
Remainder Theorem, Fermat/Euler Theorem, Wilson's Theorem, by Thomas M
wenzelm@10003
  1631
Rasmussen;
wenzelm@8570
  1632
wenzelm@10157
  1633
* HOL/Lattice: fundamental concepts of lattice theory and order
wenzelm@10157
  1634
structures, including duals, properties of bounds versus algebraic
wenzelm@10157
  1635
laws, lattice operations versus set-theoretic ones, the Knaster-Tarski
wenzelm@10157
  1636
Theorem for complete lattices etc.; may also serve as a demonstration
wenzelm@10157
  1637
for abstract algebraic reasoning using axiomatic type classes, and
wenzelm@10157
  1638
mathematics-style proof in Isabelle/Isar; by Markus Wenzel;
wenzelm@10157
  1639
wenzelm@10003
  1640
* HOL/Prolog: a (bare-bones) implementation of Lambda-Prolog, by David
wenzelm@10003
  1641
von Oheimb;
paulson@9542
  1642
wenzelm@10164
  1643
* HOL/IMPP: extension of IMP with local variables and mutually
wenzelm@10164
  1644
recursive procedures, by David von Oheimb;
wenzelm@10164
  1645
wenzelm@10003
  1646
* HOL/Lambda: converted into new-style theory and document;
paulson@9542
  1647
wenzelm@10003
  1648
* HOL/ex/Multiquote: example of multiple nested quotations and
wenzelm@10003
  1649
anti-quotations -- basically a generalized version of de-Bruijn
wenzelm@10003
  1650
representation; very useful in avoiding lifting of operations;
wenzelm@8848
  1651
wenzelm@9612
  1652
* HOL/record: added general record equality rule to simpset; fixed
wenzelm@9612
  1653
select-update simplification procedure to handle extended records as
wenzelm@9612
  1654
well; admit "r" as field name;
paulson@9542
  1655
paulson@8967
  1656
* HOL: 0 is now overloaded over the new sort "zero", allowing its use with
paulson@8967
  1657
other numeric types and also as the identity of groups, rings, etc.;
paulson@8967
  1658
paulson@8967
  1659
* HOL: new axclass plus_ac0 for addition with the AC-laws and 0 as identity.
paulson@8967
  1660
Types nat and int belong to this axclass;
paulson@8967
  1661
wenzelm@10003
  1662
* HOL: greatly improved simplification involving numerals of type nat, int, real:
paulson@8788
  1663
   (i + #8 + j) = Suc k simplifies to  #7 + (i + j) = k
paulson@8832
  1664
   i*j + k + j*#3*i     simplifies to  #4*(i*j) + k
paulson@8832
  1665
  two terms #m*u and #n*u are replaced by #(m+n)*u
paulson@8832
  1666
    (where #m, #n and u can implicitly be 1; this is simproc combine_numerals)
paulson@8832
  1667
  and the term/formula #m*u+x ~~ #n*u+y simplifies simplifies to #(m-n)+x ~~ y
paulson@8832
  1668
    or x ~~ #(n-m)+y, where ~~ is one of = < <= or - (simproc cancel_numerals);
paulson@8736
  1669
wenzelm@10003
  1670
* HOL: meson_tac is available (previously in ex/meson.ML); it is a
wenzelm@10003
  1671
powerful prover for predicate logic but knows nothing of clasets; see
wenzelm@10003
  1672
ex/mesontest.ML and ex/mesontest2.ML for example applications;
paulson@9835
  1673
wenzelm@8848
  1674
* HOL: new version of "case_tac" subsumes both boolean case split and
wenzelm@8440
  1675
"exhaust_tac" on datatypes; INCOMPATIBILITY: exhaust_tac no longer
wenzelm@8518
  1676
exists, may define val exhaust_tac = case_tac for ad-hoc portability;
wenzelm@8440
  1677
wenzelm@8848
  1678
* HOL: simplification no longer dives into case-expressions: only the
wenzelm@10129
  1679
selector expression is simplified, but not the remaining arms; to
wenzelm@10129
  1680
enable full simplification of case-expressions for datatype t, you may
wenzelm@10129
  1681
remove t.weak_case_cong from the simpset, either globally (Delcongs
wenzelm@10129
  1682
[thm"t.weak_case_cong"];) or locally (delcongs [...]).
nipkow@8603
  1683
wenzelm@8848
  1684
* HOL/recdef: the recursion equations generated by 'recdef' for
wenzelm@8848
  1685
function 'f' are now called f.simps instead of f.rules; if all
wenzelm@8848
  1686
termination conditions are proved automatically, these simplification
wenzelm@8848
  1687
rules are added to the simpset, as in primrec; rules may be named
wenzelm@8848
  1688
individually as well, resulting in a separate list of theorems for
wenzelm@8848
  1689
each equation;
wenzelm@8848
  1690
wenzelm@9489
  1691
* HOL/While is a new theory that provides a while-combinator. It
wenzelm@9489
  1692
permits the definition of tail-recursive functions without the
wenzelm@9489
  1693
provision of a termination measure. The latter is necessary once the
wenzelm@9489
  1694
invariant proof rule for while is applied.
nipkow@9457
  1695
wenzelm@10003
  1696
* HOL: new (overloaded) notation for the set of elements below/above
wenzelm@10003
  1697
some element: {..u}, {..u(}, {l..}, {)l..}. See theory SetInterval.
nipkow@8925
  1698
wenzelm@8848
  1699
* HOL: theorems impI, allI, ballI bound as "strip";
wenzelm@8848
  1700
wenzelm@10003
  1701
* HOL: new tactic induct_thm_tac: thm -> string -> int -> tactic
nipkow@9746
  1702
induct_tac th "x1 ... xn" expects th to have a conclusion of the form
nipkow@9746
  1703
P v1 ... vn and abbreviates res_inst_tac [("v1","x1"),...,("vn","xn")] th;
nipkow@9746
  1704
wenzelm@10003
  1705
* HOL/Real: "rabs" replaced by overloaded "abs" function;
nipkow@9737
  1706
wenzelm@10003
  1707
* HOL: theory Sexp now in HOL/Induct examples (it used to be part of
wenzelm@10003
  1708
main HOL, but was unused);
nipkow@8626
  1709
wenzelm@10003
  1710
* HOL: fewer consts declared as global (e.g. have to refer to
wenzelm@10003
  1711
"Lfp.lfp" instead of "lfp" internally; affects ML packages only);
wenzelm@8887
  1712
wenzelm@10003
  1713
* HOL: tuned AST representation of nested pairs, avoiding bogus output
wenzelm@10003
  1714
in case of overlap with user translations (e.g. judgements over
wenzelm@10003
  1715
tuples); (note that the underlying logical represenation is still
wenzelm@10003
  1716
bogus);
wenzelm@9349
  1717
nipkow@8412
  1718
paulson@9542
  1719
*** ZF ***
paulson@9542
  1720
wenzelm@10003
  1721
* ZF: simplification automatically cancels common terms in arithmetic
wenzelm@10003
  1722
expressions over nat and int;
paulson@9542
  1723
wenzelm@10003
  1724
* ZF: new treatment of nat to minimize type-checking: all operators
wenzelm@10003
  1725
coerce their operands to a natural number using the function natify,
wenzelm@10003
  1726
making the algebraic laws unconditional;
paulson@9542
  1727
wenzelm@10003
  1728
* ZF: as above, for int: operators coerce their operands to an integer
wenzelm@10003
  1729
using the function intify;
paulson@9542
  1730
wenzelm@10003
  1731
* ZF: the integer library now contains many of the usual laws for the
wenzelm@10003
  1732
orderings, including $<=, and monotonicity laws for $+ and $*;
paulson@9542
  1733
wenzelm@10003
  1734
* ZF: new example ZF/ex/NatSum to demonstrate integer arithmetic
wenzelm@10003
  1735
simplification;
paulson@9388
  1736
wenzelm@10003
  1737
* FOL and ZF: AddIffs now available, giving theorems of the form P<->Q
wenzelm@10003
  1738
to the simplifier and classical reasoner simultaneously;
paulson@9388
  1739
paulson@9388
  1740
wenzelm@8358
  1741
*** General ***
wenzelm@8358
  1742
wenzelm@10003
  1743
* Provers: blast_tac now handles actual object-logic rules as
wenzelm@10003
  1744
assumptions; note that auto_tac uses blast_tac internally as well;
wenzelm@10003
  1745
wenzelm@10003
  1746
* Provers: new functions rulify/rulify_no_asm: thm -> thm for turning
wenzelm@10003
  1747
outer -->/All/Ball into ==>/!!; qed_spec_mp now uses rulify_no_asm;
wenzelm@10003
  1748
wenzelm@9941
  1749
* Provers: delrules now handles destruct rules as well (no longer need
wenzelm@9941
  1750
explicit make_elim);
wenzelm@9941
  1751
wenzelm@10003
  1752
* Provers: Blast_tac now warns of and ignores "weak elimination rules" e.g.
wenzelm@10003
  1753
  [| inj ?f;          ?f ?x = ?f ?y; ?x = ?y ==> ?W |] ==> ?W
wenzelm@10003
  1754
use instead the strong form,
wenzelm@10003
  1755
  [| inj ?f; ~ ?W ==> ?f ?x = ?f ?y; ?x = ?y ==> ?W |] ==> ?W
wenzelm@10003
  1756
in HOL, FOL and ZF the function cla_make_elim will create such rules
wenzelm@10003
  1757
from destruct-rules;
wenzelm@9489
  1758
wenzelm@9709
  1759
* Provers: Simplifier.easy_setup provides a fast path to basic
wenzelm@9709
  1760
Simplifier setup for new object-logics;
wenzelm@9709
  1761
wenzelm@9709
  1762
* Pure: AST translation rules no longer require constant head on LHS;
wenzelm@9349
  1763
wenzelm@9709
  1764
* Pure: improved name spaces: ambiguous output is qualified; support
wenzelm@9709
  1765
for hiding of names;
wenzelm@8729
  1766
wenzelm@10003
  1767
* system: smart setup of canonical ML_HOME, ISABELLE_INTERFACE, and
wenzelm@10003
  1768
XSYMBOL_HOME; no longer need to do manual configuration in most
wenzelm@10003
  1769
situations;
wenzelm@10003
  1770
wenzelm@9709
  1771
* system: compression of ML heaps images may now be controlled via -c
wenzelm@9709
  1772
option of isabelle and isatool usedir (currently only observed by
wenzelm@9709
  1773
Poly/ML);
wenzelm@8358
  1774
wenzelm@9981
  1775
* system: isatool installfonts may handle X-Symbol fonts as well (very
wenzelm@9981
  1776
useful for remote X11);
wenzelm@9981
  1777
wenzelm@9709
  1778
* system: provide TAGS file for Isabelle sources;
wenzelm@9052
  1779
wenzelm@9288
  1780
* ML: infix 'OF' is a version of 'MRS' with more appropriate argument
wenzelm@9288
  1781
order;
wenzelm@9288
  1782
wenzelm@8994
  1783
* ML: renamed flags Syntax.trace_norm_ast to Syntax.trace_ast; global
wenzelm@8994
  1784
timing flag supersedes proof_timing and Toplevel.trace;
wenzelm@8994
  1785
wenzelm@10003
  1786
* ML: new combinators |>> and |>>> for incremental transformations
wenzelm@10003
  1787
with secondary results (e.g. certain theory extensions):
wenzelm@10003
  1788
wenzelm@9330
  1789
* ML: PureThy.add_defs gets additional argument to indicate potential
wenzelm@9330
  1790
overloading (usually false);
wenzelm@9330
  1791
wenzelm@10003
  1792
* ML: PureThy.add_thms/add_axioms/add_defs now return theorems as
wenzelm@10003
  1793
results;
wenzelm@8440
  1794
wenzelm@8358
  1795
wenzelm@8015
  1796
wenzelm@7986
  1797
New in Isabelle99 (October 1999)
wenzelm@7986
  1798
--------------------------------
oheimb@4649
  1799
paulson@5931
  1800
*** Overview of INCOMPATIBILITIES (see below for more details) ***
paulson@5931
  1801
paulson@6922
  1802
* HOL: The THEN and ELSE parts of conditional expressions (if P then x else y)
paulson@6922
  1803
are no longer simplified.  (This allows the simplifier to unfold recursive
paulson@6922
  1804
functional programs.)  To restore the old behaviour, declare
wenzelm@7215
  1805
wenzelm@7215
  1806
    Delcongs [if_weak_cong];
paulson@6922
  1807
wenzelm@6269
  1808
* HOL: Removed the obsolete syntax "Compl A"; use -A for set
wenzelm@6269
  1809
complement;
paulson@5931
  1810
wenzelm@6269
  1811
* HOL: the predicate "inj" is now defined by translation to "inj_on";
paulson@6174
  1812
berghofe@7847
  1813
* HOL/datatype: mutual_induct_tac no longer exists --
berghofe@7847
  1814
  use induct_tac "x_1 ... x_n" instead of mutual_induct_tac ["x_1", ..., "x_n"]
berghofe@7847
  1815
wenzelm@6386
  1816
* HOL/typedef: fixed type inference for representing set; type
wenzelm@6386
  1817
arguments now have to occur explicitly on the rhs as type constraints;
wenzelm@6386
  1818
wenzelm@6269
  1819
* ZF: The con_defs part of an inductive definition may no longer refer
wenzelm@6269
  1820
to constants declared in the same theory;
nipkow@6057
  1821
wenzelm@6269
  1822
* HOL, ZF: the function mk_cases, generated by the inductive
wenzelm@6269
  1823
definition package, has lost an argument.  To simplify its result, it
wenzelm@6269
  1824
uses the default simpset instead of a supplied list of theorems.
paulson@6141
  1825
wenzelm@7215
  1826
* HOL/List: the constructors of type list are now Nil and Cons;
wenzelm@7215
  1827
nipkow@7619
  1828
* Simplifier: the type of the infix ML functions
wenzelm@8729
  1829
        setSSolver addSSolver setSolver addSolver
nipkow@7619
  1830
is now  simpset * solver -> simpset  where `solver' is a new abstract type
nipkow@7619
  1831
for packaging solvers. A solver is created via
wenzelm@8729
  1832
        mk_solver: string -> (thm list -> int -> tactic) -> solver
nipkow@7619
  1833
where the string argument is only a comment.
nipkow@6057
  1834
wenzelm@7647
  1835
paulson@6069
  1836
*** Proof tools ***
paulson@6069
  1837
wenzelm@6343
  1838
* Provers/Arith/fast_lin_arith.ML contains a functor for creating a
wenzelm@6343
  1839
decision procedure for linear arithmetic. Currently it is used for
wenzelm@7593
  1840
types `nat', `int', and `real' in HOL (see below); it can, should and
wenzelm@7593
  1841
will be instantiated for other types and logics as well.
paulson@6069
  1842
nipkow@7324
  1843
* The simplifier now accepts rewrite rules with flexible heads, eg
nipkow@7324
  1844
     hom ?f ==> ?f(?x+?y) = ?f ?x + ?f ?y
nipkow@7324
  1845
  They are applied like any rule with a non-pattern lhs, i.e. by first-order
nipkow@7324
  1846
  matching.
paulson@6069
  1847
wenzelm@7593
  1848
paulson@6014
  1849
*** General ***
paulson@6014
  1850
wenzelm@7986
  1851
* New Isabelle/Isar subsystem provides an alternative to traditional
wenzelm@7215
  1852
tactical theorem proving; together with the ProofGeneral/isar user
wenzelm@7215
  1853
interface it offers an interactive environment for developing human
wenzelm@7215
  1854
readable proof documents (Isar == Intelligible semi-automated
wenzelm@7886
  1855
reasoning); for further information see isatool doc isar-ref,
wenzelm@7986
  1856
src/HOL/Isar_examples and http://isabelle.in.tum.de/Isar/
wenzelm@7886
  1857
wenzelm@9612
  1858
* improved and simplified presentation of theories: better HTML markup
wenzelm@9612
  1859
(including colors), graph views in several sizes; isatool usedir now
wenzelm@9612
  1860
provides a proper interface for user theories (via -P option); actual
wenzelm@9612
  1861
document preparation based on (PDF)LaTeX is available as well (for
wenzelm@9612
  1862
new-style theories only); see isatool doc system for more information;
wenzelm@7215
  1863
wenzelm@7252
  1864
* native support for Proof General, both for classic Isabelle and
wenzelm@7986
  1865
Isabelle/Isar;
wenzelm@7215
  1866
wenzelm@7791
  1867
* ML function thm_deps visualizes dependencies of theorems and lemmas,
wenzelm@7791
  1868
using the graph browser tool;
wenzelm@7791
  1869
wenzelm@6751
  1870
* Isabelle manuals now also available as PDF;
wenzelm@6751
  1871
wenzelm@6449
  1872
* theory loader rewritten from scratch (may not be fully
wenzelm@6449
  1873
bug-compatible); old loadpath variable has been replaced by show_path,
wenzelm@6671
  1874
add_path, del_path, reset_path functions; new operations such as
wenzelm@7593
  1875
update_thy, touch_thy, remove_thy, use/update_thy_only (see also
wenzelm@7593
  1876
isatool doc ref);
wenzelm@6449
  1877
wenzelm@7215
  1878
* improved isatool install: option -k creates KDE application icon,
wenzelm@7215
  1879
option -p DIR installs standalone binaries;
wenzelm@7215
  1880
wenzelm@7215
  1881
* added ML_PLATFORM setting (useful for cross-platform installations);
wenzelm@7215
  1882
more robust handling of platform specific ML images for SML/NJ;
wenzelm@7215
  1883
wenzelm@7886
  1884
* the settings environment is now statically scoped, i.e. it is never
wenzelm@7986
  1885
created again in sub-processes invoked from isabelle, isatool, or
wenzelm@7886
  1886
Isabelle;
wenzelm@7886
  1887
wenzelm@7215
  1888
* path element specification '~~' refers to '$ISABELLE_HOME';
wenzelm@7215
  1889
wenzelm@6343
  1890
* in locales, the "assumes" and "defines" parts may be omitted if
wenzelm@6343
  1891
empty;
wenzelm@5973
  1892
wenzelm@6269
  1893
* new print_mode "xsymbols" for extended symbol support (e.g. genuine
wenzelm@6269
  1894
long arrows);
wenzelm@6259
  1895
wenzelm@6343
  1896
* new print_mode "HTML";
wenzelm@6343
  1897
wenzelm@6343
  1898
* new flag show_tags controls display of tags of theorems (which are
wenzelm@6343
  1899
basically just comments that may be attached by some tools);
wenzelm@6343
  1900
wenzelm@6461
  1901
* Isamode 2.6 requires patch to accomodate change of Isabelle font
wenzelm@6461
  1902
mode and goal output format:
wenzelm@6461
  1903
wenzelm@6461
  1904
diff -r Isamode-2.6/elisp/isa-load.el Isamode/elisp/isa-load.el
wenzelm@6461
  1905
244c244
wenzelm@6461
  1906
<       (list (isa-getenv "ISABELLE") "-msymbols" logic-name)
wenzelm@6461
  1907
---
wenzelm@6533
  1908
>       (list (isa-getenv "ISABELLE") "-misabelle_font" "-msymbols" logic-name)
wenzelm@6461
  1909
diff -r Isabelle-2.6/elisp/isa-proofstate.el Isamode/elisp/isa-proofstate.el
wenzelm@6461
  1910
181c181
wenzelm@6461
  1911
< (defconst proofstate-proofstart-regexp "^Level [0-9]+$"
wenzelm@6461
  1912
---
wenzelm@6461
  1913
> (defconst proofstate-proofstart-regexp "^Level [0-9]+"
wenzelm@6461
  1914
wenzelm@7450
  1915
* function bind_thms stores lists of theorems (cf. bind_thm);
wenzelm@7450
  1916
wenzelm@7593
  1917
* new shorthand tactics ftac, eatac, datac, fatac;
wenzelm@7593
  1918
wenzelm@7593
  1919
* qed (and friends) now accept "" as result name; in that case the
wenzelm@7986
  1920
theorem is not stored, but proper checks and presentation of the
wenzelm@7986
  1921
result still apply;
wenzelm@7593
  1922
wenzelm@7805
  1923
* theorem database now also indexes constants "Trueprop", "all",
wenzelm@7805
  1924
"==>", "=="; thus thms_containing, findI etc. may retrieve more rules;
wenzelm@7805
  1925
oheimb@6028
  1926
nipkow@6057
  1927
*** HOL ***
nipkow@6057
  1928
wenzelm@7215
  1929
** HOL arithmetic **
wenzelm@7215
  1930
wenzelm@6343
  1931
* There are now decision procedures for linear arithmetic over nat and
wenzelm@6343
  1932
int:
nipkow@6131
  1933
wenzelm@6343
  1934
1. arith_tac copes with arbitrary formulae involving `=', `<', `<=',
wenzelm@6343
  1935
`+', `-', `Suc', `min', `max' and numerical constants; other subterms
wenzelm@6343
  1936
are treated as atomic; subformulae not involving type `nat' or `int'
wenzelm@6343
  1937
are ignored; quantified subformulae are ignored unless they are
wenzelm@6343
  1938
positive universal or negative existential. The tactic has to be
wenzelm@6343
  1939
invoked by hand and can be a little bit slow. In particular, the
wenzelm@6343
  1940
running time is exponential in the number of occurrences of `min' and
wenzelm@6343
  1941
`max', and `-' on `nat'.
nipkow@6131
  1942
wenzelm@6343
  1943
2. fast_arith_tac is a cut-down version of arith_tac: it only takes
wenzelm@6343
  1944
(negated) (in)equalities among the premises and the conclusion into
wenzelm@6343
  1945
account (i.e. no compound formulae) and does not know about `min' and
wenzelm@6343
  1946
`max', and `-' on `nat'. It is fast and is used automatically by the
wenzelm@6343
  1947
simplifier.
nipkow@6131
  1948
wenzelm@6343
  1949
NB: At the moment, these decision procedures do not cope with mixed
wenzelm@6343
  1950
nat/int formulae where the two parts interact, such as `m < n ==>
wenzelm@6343
  1951
int(m) < int(n)'.
oheimb@6028
  1952
wenzelm@7215
  1953
* HOL/Numeral provides a generic theory of numerals (encoded
wenzelm@7313
  1954
efficiently as bit strings); setup for types nat/int/real is in place;
wenzelm@7215
  1955
INCOMPATIBILITY: since numeral syntax is now polymorphic, rather than
wenzelm@7215
  1956
int, existing theories and proof scripts may require a few additional
wenzelm@7215
  1957
type constraints;
wenzelm@7215
  1958
wenzelm@7215
  1959
* integer division and remainder can now be performed on constant
wenzelm@7215
  1960
arguments;
paulson@7157
  1961
wenzelm@7215
  1962
* many properties of integer multiplication, division and remainder
wenzelm@7215
  1963
are now available;
paulson@6922
  1964
paulson@7287
  1965
* An interface to the Stanford Validity Checker (SVC) is available through the
paulson@7287
  1966
tactic svc_tac.  Propositional tautologies and theorems of linear arithmetic
paulson@7287
  1967
are proved automatically.  SVC must be installed separately, and its results
paulson@7287
  1968
must be TAKEN ON TRUST (Isabelle does not check the proofs, but tags any
paulson@7287
  1969
invocation of the underlying oracle).  For SVC see
paulson@7444
  1970
  http://verify.stanford.edu/SVC
paulson@6922
  1971
wenzelm@7125
  1972
* IsaMakefile: the HOL-Real target now builds an actual image;
wenzelm@7125
  1973
wenzelm@7215
  1974
wenzelm@7215
  1975
** HOL misc **
wenzelm@7215
  1976
wenzelm@7595
  1977
* HOL/Real/HahnBanach: the Hahn-Banach theorem for real vector spaces
wenzelm@7595
  1978
(in Isabelle/Isar) -- by Gertrud Bauer;
wenzelm@7595
  1979
wenzelm@7691
  1980
* HOL/BCV: generic model of bytecode verification, i.e. data-flow
wenzelm@7691
  1981
analysis for assembly languages with subtypes;
wenzelm@7691
  1982
wenzelm@6278
  1983
* HOL/TLA (Lamport's Temporal Logic of Actions): major reorganization
wenzelm@6278
  1984
-- avoids syntactic ambiguities and treats state, transition, and
wenzelm@6278
  1985
temporal levels more uniformly; introduces INCOMPATIBILITIES due to
wenzelm@6278
  1986
changed syntax and (many) tactics;
wenzelm@6278
  1987
wenzelm@7791
  1988
* HOL/inductive: Now also handles more general introduction rules such
wenzelm@7791
  1989
  as "ALL y. (y, x) : r --> y : acc r ==> x : acc r"; monotonicity
wenzelm@7791
  1990
  theorems are now maintained within the theory (maintained via the
wenzelm@7791
  1991
  "mono" attribute);
berghofe@7780
  1992
wenzelm@7238
  1993
* HOL/datatype: Now also handles arbitrarily branching datatypes
wenzelm@7238
  1994
  (using function types) such as
wenzelm@7238
  1995
wenzelm@7238
  1996
  datatype 'a tree = Atom 'a | Branch "nat => 'a tree"
berghofe@7047
  1997
wenzelm@7326
  1998
* HOL/record: record_simproc (part of the default simpset) takes care
wenzelm@7326
  1999
of selectors applied to updated records; record_split_tac is no longer
wenzelm@7327
  2000
part of the default claset; update_defs may now be removed from the
wenzelm@7327
  2001
simpset in many cases; COMPATIBILITY: old behavior achieved by
wenzelm@7326
  2002
wenzelm@7326
  2003
  claset_ref () := claset() addSWrapper record_split_wrapper;
wenzelm@7326
  2004
  Delsimprocs [record_simproc]
wenzelm@7326
  2005
wenzelm@6386
  2006
* HOL/typedef: fixed type inference for representing set; type
wenzelm@6386
  2007
arguments now have to occur explicitly on the rhs as type constraints;
wenzelm@6386
  2008
paulson@7287
  2009
* HOL/recdef (TFL): 'congs' syntax now expects comma separated list of theorem
paulson@7287
  2010
names rather than an ML expression;
paulson@7287
  2011
paulson@7287
  2012
* HOL/defer_recdef (TFL): like recdef but the well-founded relation can be
paulson@7287
  2013
supplied later.  Program schemes can be defined, such as
paulson@7287
  2014
    "While B C s = (if B s then While B C (C s) else s)"
paulson@7287
  2015
where the well-founded relation can be chosen after B and C have been given.
wenzelm@6563
  2016
wenzelm@7215
  2017
* HOL/List: the constructors of type list are now Nil and Cons;
wenzelm@7215
  2018
INCOMPATIBILITY: while [] and infix # syntax is still there, of
wenzelm@7215
  2019
course, ML tools referring to List.list.op # etc. have to be adapted;
wenzelm@7215
  2020
wenzelm@7238
  2021
* HOL_quantifiers flag superseded by "HOL" print mode, which is
wenzelm@7238
  2022
disabled by default; run isabelle with option -m HOL to get back to
wenzelm@7238
  2023
the original Gordon/HOL-style output;
wenzelm@7238
  2024
wenzelm@7238
  2025
* HOL/Ord.thy: new bounded quantifier syntax (input only): ALL x<y. P,
wenzelm@7238
  2026
ALL x<=y. P, EX x<y. P, EX x<=y. P;
wenzelm@7238
  2027
wenzelm@7238
  2028
* HOL basic syntax simplified (more orthogonal): all variants of
wenzelm@7238
  2029
All/Ex now support plain / symbolic / HOL notation; plain syntax for
wenzelm@7238
  2030
Eps operator is provided as well: "SOME x. P[x]";
wenzelm@7238
  2031
berghofe@7320
  2032
* HOL/Sum.thy: sum_case has been moved to HOL/Datatype;
wenzelm@7261
  2033
wenzelm@7280
  2034
* HOL/Univ.thy: infix syntax <*>, <+>, <**>, <+> eliminated and made
wenzelm@7280
  2035
thus available for user theories;
wenzelm@7280
  2036
wenzelm@7300
  2037
* HOLCF/IOA/Sequents: renamed 'Cons' to 'Consq' to avoid clash with
wenzelm@7300
  2038
HOL/List; hardly an INCOMPATIBILITY since '>>' syntax is used all the
wenzelm@7300
  2039
time;
wenzelm@7300
  2040
wenzelm@7986
  2041
* HOL: new tactic smp_tac: int -> int -> tactic, which applies spec
wenzelm@7986
  2042
several times and then mp;
oheimb@7492
  2043
wenzelm@7215
  2044
paulson@7113
  2045
*** LK ***
paulson@7113
  2046
wenzelm@7215
  2047
* the notation <<...>> is now available as a notation for sequences of
wenzelm@7215
  2048
formulas;
paulson@7113
  2049
paulson@7113
  2050
* the simplifier is now installed
paulson@7113
  2051
wenzelm@8729
  2052
* the axiom system has been generalized (thanks to Soren Heilmann)
paulson@7113
  2053
paulson@7113
  2054
* the classical reasoner now has a default rule database
paulson@7113
  2055
paulson@7113
  2056
paulson@6064
  2057
*** ZF ***
paulson@6064
  2058
paulson@6064
  2059
* new primrec section allows primitive recursive functions to be given
wenzelm@6269
  2060
directly (as in HOL) over datatypes and the natural numbers;
paulson@6064
  2061
wenzelm@6269
  2062
* new tactics induct_tac and exhaust_tac for induction (or case
wenzelm@6269
  2063
analysis) over datatypes and the natural numbers;
paulson@6064
  2064
paulson@6064
  2065
* the datatype declaration of type T now defines the recursor T_rec;
paulson@6064
  2066
paulson@6141
  2067
* simplification automatically does freeness reasoning for datatype
wenzelm@6269
  2068
constructors;
paulson@6141
  2069
wenzelm@6269
  2070
* automatic type-inference, with AddTCs command to insert new
wenzelm@6269
  2071
type-checking rules;
paulson@6155
  2072
wenzelm@6269
  2073
* datatype introduction rules are now added as Safe Introduction rules
wenzelm@6269
  2074
to the claset;
paulson@6155
  2075
wenzelm@6269
  2076
* the syntax "if P then x else y" is now available in addition to
wenzelm@6269
  2077
if(P,x,y);
wenzelm@6269
  2078
paulson@6069
  2079
wenzelm@6343
  2080
*** Internal programming interfaces ***
wenzelm@6343
  2081
wenzelm@7919
  2082
* tuned simplifier trace output; new flag debug_simp;
wenzelm@7919
  2083
wenzelm@7420
  2084
* structures Vartab / Termtab (instances of TableFun) offer efficient
wenzelm@7420
  2085
tables indexed by indexname_ord / term_ord (compatible with aconv);
wenzelm@7420
  2086
wenzelm@6386
  2087
* AxClass.axclass_tac lost the theory argument;
wenzelm@6386
  2088
wenzelm@6343
  2089
* tuned current_goals_markers semantics: begin / end goal avoids
wenzelm@6343
  2090
printing empty lines;
wenzelm@6343
  2091
wenzelm@6343
  2092
* removed prs and prs_fn hook, which was broken because it did not
wenzelm@6343
  2093
include \n in its semantics, forcing writeln to add one
wenzelm@6343
  2094
uncoditionally; replaced prs_fn by writeln_fn; consider std_output:
wenzelm@6343
  2095
string -> unit if you really want to output text without newline;
wenzelm@6343
  2096
wenzelm@6343
  2097
* Symbol.output subject to print mode; INCOMPATIBILITY: defaults to
wenzelm@6343
  2098
plain output, interface builders may have to enable 'isabelle_font'
wenzelm@6343
  2099
mode to get Isabelle font glyphs as before;
wenzelm@6343
  2100
wenzelm@6343
  2101
* refined token_translation interface; INCOMPATIBILITY: output length
wenzelm@6343
  2102
now of type real instead of int;
wenzelm@6343
  2103
wenzelm@7196
  2104
* theory loader actions may be traced via new ThyInfo.add_hook
wenzelm@7196
  2105
interface (see src/Pure/Thy/thy_info.ML); example application: keep
wenzelm@7196
  2106
your own database of information attached to *whole* theories -- as
wenzelm@7196
  2107
opposed to intra-theory data slots offered via TheoryDataFun;
wenzelm@7196
  2108
wenzelm@7647
  2109
* proper handling of dangling sort hypotheses (at last!);
wenzelm@7647
  2110
Thm.strip_shyps and Drule.strip_shyps_warning take care of removing
wenzelm@7647
  2111
extra sort hypotheses that can be witnessed from the type signature;
wenzelm@7986
  2112
the force_strip_shyps flag is gone, any remaining shyps are simply
wenzelm@7986
  2113
left in the theorem (with a warning issued by strip_shyps_warning);
wenzelm@7647
  2114
wenzelm@6343
  2115
paulson@6064
  2116
wenzelm@5781
  2117
New in Isabelle98-1 (October 1998)
wenzelm@5781
  2118
----------------------------------
wenzelm@5781
  2119
wenzelm@5127
  2120
*** Overview of INCOMPATIBILITIES (see below for more details) ***
wenzelm@4842
  2121
wenzelm@5726
  2122
* several changes of automated proof tools;
wenzelm@5373
  2123
wenzelm@5726
  2124
* HOL: major changes to the inductive and datatype packages, including
wenzelm@5726
  2125
some minor incompatibilities of theory syntax;
berghofe@5214
  2126
wenzelm@5726
  2127
* HOL: renamed r^-1 to 'converse' from 'inverse'; 'inj_onto' is now
wenzelm@5217
  2128
called `inj_on';
paulson@5160
  2129
nipkow@5275
  2130
* HOL: removed duplicate thms in Arith:
nipkow@5275
  2131
  less_imp_add_less  should be replaced by  trans_less_add1
nipkow@5275
  2132
  le_imp_add_le      should be replaced by  trans_le_add1
paulson@5160
  2133
wenzelm@5726
  2134
* HOL: unary minus is now overloaded (new type constraints may be
wenzelm@5726
  2135
required);
paulson@5490
  2136
wenzelm@5726
  2137
* HOL and ZF: unary minus for integers is now #- instead of #~.  In
wenzelm@5726
  2138
ZF, expressions such as n#-1 must be changed to n#- 1, since #-1 is
wenzelm@5726
  2139
now taken as an integer constant.
paulson@5541
  2140
wenzelm@5726
  2141
* Pure: ML function 'theory_of' renamed to 'theory';
wenzelm@5397
  2142
wenzelm@5363
  2143
wenzelm@5127
  2144
*** Proof tools ***
nipkow@4880
  2145
nipkow@5657
  2146
* Simplifier:
nipkow@5657
  2147
  1. Asm_full_simp_tac is now more aggressive.
nipkow@5657
  2148
     1. It will sometimes reorient premises if that increases their power to
nipkow@5657
  2149
        simplify.
nipkow@5657
  2150
     2. It does no longer proceed strictly from left to right but may also
nipkow@5657
  2151
        rotate premises to achieve further simplification.
nipkow@5657
  2152
     For compatibility reasons there is now Asm_lr_simp_tac which is like the
nipkow@5657
  2153
     old Asm_full_simp_tac in that it does not rotate premises.
nipkow@5657
  2154
  2. The simplifier now knows a little bit about nat-arithmetic.
nipkow@4880
  2155
wenzelm@5127
  2156
* Classical reasoner: wrapper mechanism for the classical reasoner now
wenzelm@5127
  2157
allows for selected deletion of wrappers, by introduction of names for
wenzelm@5127
  2158
wrapper functionals.  This implies that addbefore, addSbefore,
wenzelm@5127
  2159
addaltern, and addSaltern now take a pair (name, tactic) as argument,
wenzelm@5127
  2160
and that adding two tactics with the same name overwrites the first
wenzelm@5127
  2161
one (emitting a warning).
oheimb@4824
  2162
  type wrapper = (int -> tactic) -> (int -> tactic)
oheimb@4649
  2163
  setWrapper, setSWrapper, compWrapper and compSWrapper are replaced by
oheimb@4824
  2164
  addWrapper, addSWrapper: claset * (string * wrapper) -> claset
oheimb@4824
  2165
  delWrapper, delSWrapper: claset *  string            -> claset
oheimb@4649
  2166
  getWrapper is renamed to appWrappers, getSWrapper to appSWrappers;
oheimb@4649
  2167
wenzelm@5705
  2168
* Classical reasoner: addbefore/addSbefore now have APPEND/ORELSE
wenzelm@5726
  2169
semantics; addbefore now affects only the unsafe part of step_tac
wenzelm@5726
  2170
etc.; this affects addss/auto_tac/force_tac, so EXISTING PROOFS MAY
wenzelm@5726
  2171
FAIL, but proofs should be fixable easily, e.g. by replacing Auto_tac
wenzelm@5726
  2172
by Force_tac;
oheimb@5524
  2173
wenzelm@5726
  2174
* Classical reasoner: setwrapper to setWrapper and compwrapper to
wenzelm@5726
  2175
compWrapper; added safe wrapper (and access functions for it);
oheimb@5524
  2176
wenzelm@5127
  2177
* HOL/split_all_tac is now much faster and fails if there is nothing
wenzelm@5726
  2178
to split.  Some EXISTING PROOFS MAY REQUIRE ADAPTION because the order
wenzelm@5726
  2179
and the names of the automatically generated variables have changed.
wenzelm@5726
  2180
split_all_tac has moved within claset() from unsafe wrappers to safe
wenzelm@5726
  2181
wrappers, which means that !!-bound variables are split much more
wenzelm@5726
  2182
aggressively, and safe_tac and clarify_tac now split such variables.
wenzelm@5726
  2183
If this splitting is not appropriate, use delSWrapper "split_all_tac".
wenzelm@5726
  2184
Note: the same holds for record_split_tac, which does the job of
wenzelm@5726
  2185
split_all_tac for record fields.
wenzelm@5127
  2186
wenzelm@5726
  2187
* HOL/Simplifier: Rewrite rules for case distinctions can now be added
wenzelm@5726
  2188
permanently to the default simpset using Addsplits just like
wenzelm@5726
  2189
Addsimps. They can be removed via Delsplits just like
wenzelm@5726
  2190
Delsimps. Lower-case versions are also available.
wenzelm@5127
  2191
wenzelm@5726
  2192
* HOL/Simplifier: The rule split_if is now part of the default
wenzelm@5726
  2193
simpset. This means that the simplifier will eliminate all occurrences
wenzelm@5726
  2194
of if-then-else in the conclusion of a goal. To prevent this, you can
wenzelm@5726
  2195
either remove split_if completely from the default simpset by
wenzelm@5726
  2196
`Delsplits [split_if]' or remove it in a specific call of the
wenzelm@5726
  2197
simplifier using `... delsplits [split_if]'.  You can also add/delete
wenzelm@5726
  2198
other case splitting rules to/from the default simpset: every datatype
wenzelm@5726
  2199
generates suitable rules `split_t_case' and `split_t_case_asm' (where
wenzelm@5726
  2200
t is the name of the datatype).
wenzelm@5127
  2201
wenzelm@5726
  2202
* Classical reasoner / Simplifier combination: new force_tac (and
wenzelm@5127
  2203
derivatives Force_tac, force) combines rewriting and classical
wenzelm@5127
  2204
reasoning (and whatever other tools) similarly to auto_tac, but is
wenzelm@5726
  2205
aimed to solve the given subgoal completely.
wenzelm@5127
  2206
wenzelm@5127
  2207
wenzelm@5127
  2208
*** General ***
wenzelm@5127
  2209
wenzelm@5217
  2210
* new top-level commands `Goal' and `Goalw' that improve upon `goal'
wenzelm@5127
  2211
and `goalw': the theory is no longer needed as an explicit argument -
wenzelm@5127
  2212
the current theory context is used; assumptions are no longer returned
wenzelm@5127
  2213
at the ML-level unless one of them starts with ==> or !!; it is
wenzelm@5217
  2214
recommended to convert to these new commands using isatool fixgoal
wenzelm@5217
  2215
(backup your sources first!);
wenzelm@4842
  2216
wenzelm@5217
  2217
* new top-level commands 'thm' and 'thms' for retrieving theorems from
wenzelm@5207
  2218
the current theory context, and 'theory' to lookup stored theories;
paulson@4806
  2219
paulson@5722
  2220
* new theory section 'locale' for declaring constants, assumptions and
paulson@5722
  2221
definitions that have local scope;
paulson@5722
  2222
wenzelm@5127
  2223
* new theory section 'nonterminals' for purely syntactic types;
wenzelm@4858
  2224
wenzelm@5127
  2225
* new theory section 'setup' for generic ML setup functions
wenzelm@5127
  2226
(e.g. package initialization);
wenzelm@4869
  2227
wenzelm@5131
  2228
* the distribution now includes Isabelle icons: see
wenzelm@5131
  2229
lib/logo/isabelle-{small,tiny}.xpm;
wenzelm@5131
  2230
wenzelm@5363
  2231
* isatool install - install binaries with absolute references to
wenzelm@5363
  2232
ISABELLE_HOME/bin;
wenzelm@5363
  2233
wenzelm@5572
  2234
* isatool logo -- create instances of the Isabelle logo (as EPS);
wenzelm@5572
  2235
wenzelm@5407
  2236
* print mode 'emacs' reserved for Isamode;
wenzelm@5407
  2237
wenzelm@5726
  2238
* support multiple print (ast) translations per constant name;
wenzelm@5726
  2239
wenzelm@6925
  2240
* theorems involving oracles are now printed with a suffixed [!];
wenzelm@6925
  2241
wenzelm@4711
  2242
paulson@4661
  2243
*** HOL ***
paulson@4661
  2244
wenzelm@5710
  2245
* there is now a tutorial on Isabelle/HOL (do 'isatool doc tutorial');
nipkow@5709
  2246
wenzelm@5217
  2247
* HOL/inductive package reorganized and improved: now supports mutual
paulson@5267
  2248
definitions such as
wenzelm@5217
  2249
wenzelm@5217
  2250
  inductive EVEN ODD
wenzelm@5217
  2251
    intrs
wenzelm@5217
  2252
      null "0 : EVEN"
wenzelm@5217
  2253
      oddI "n : EVEN ==> Suc n : ODD"
wenzelm@5217
  2254
      evenI "n : ODD ==> Suc n : EVEN"
wenzelm@5217
  2255
wenzelm@5217
  2256
new theorem list "elims" contains an elimination rule for each of the
wenzelm@5217
  2257
recursive sets; inductive definitions now handle disjunctive premises
wenzelm@5217
  2258
correctly (also ZF);
berghofe@5214
  2259
wenzelm@5217
  2260
INCOMPATIBILITIES: requires Inductive as an ancestor; component
wenzelm@5217
  2261
"mutual_induct" no longer exists - the induction rule is always
wenzelm@5217
  2262
contained in "induct";
wenzelm@5217
  2263
wenzelm@5217
  2264
wenzelm@5217
  2265
* HOL/datatype package re-implemented and greatly improved: now
paulson@5267
  2266
supports mutually recursive datatypes such as
wenzelm@5217
  2267
wenzelm@5217
  2268
  datatype
wenzelm@5217
  2269
    'a aexp = IF_THEN_ELSE ('a bexp) ('a aexp) ('a aexp)
wenzelm@5217
  2270
            | SUM ('a aexp) ('a aexp)
wenzelm@5217
  2271
            | DIFF ('a aexp) ('a aexp)
wenzelm@5217
  2272
            | NUM 'a
wenzelm@5217
  2273
  and
wenzelm@5217
  2274
    'a bexp = LESS ('a aexp) ('a aexp)
wenzelm@5217
  2275
            | AND ('a bexp) ('a bexp)
wenzelm@5217
  2276
            | OR ('a bexp) ('a bexp)
wenzelm@5217
  2277
paulson@5267
  2278
as well as indirectly recursive datatypes such as
berghofe@5214
  2279
wenzelm@5217
  2280
  datatype
wenzelm@5217
  2281
    ('a, 'b) term = Var 'a
wenzelm@5217
  2282
                  | App 'b ((('a, 'b) term) list)
berghofe@5214
  2283
wenzelm@5217
  2284
The new tactic  mutual_induct_tac [<var_1>, ..., <var_n>] i  performs
wenzelm@5217
  2285
induction on mutually / indirectly recursive datatypes.
wenzelm@5217
  2286
wenzelm@5217
  2287
Primrec equations are now stored in theory and can be accessed via
wenzelm@5217
  2288
<function_name>.simps.
wenzelm@5217
  2289
wenzelm@5217
  2290
INCOMPATIBILITIES:
berghofe@5214
  2291
wenzelm@5217
  2292
  - Theories using datatypes must now have theory Datatype as an
wenzelm@5217
  2293
    ancestor.
wenzelm@5217
  2294
  - The specific <typename>.induct_tac no longer exists - use the
wenzelm@5217
  2295
    generic induct_tac instead.
berghofe@5226
  2296
  - natE has been renamed to nat.exhaust - use exhaust_tac
wenzelm@5217
  2297
    instead of res_inst_tac ... natE. Note that the variable
berghofe@5226
  2298
    names in nat.exhaust differ from the names in natE, this
wenzelm@5217
  2299
    may cause some "fragile" proofs to fail.
wenzelm@5217
  2300
  - The theorems split_<typename>_case and split_<typename>_case_asm
wenzelm@5217
  2301
    have been renamed to <typename>.split and <typename>.split_asm.
wenzelm@5217
  2302
  - Since default sorts of type variables are now handled correctly,
wenzelm@5217
  2303
    some datatype definitions may have to be annotated with explicit
wenzelm@5217
  2304
    sort constraints.
wenzelm@5217
  2305
  - Primrec definitions no longer require function name and type
wenzelm@5217
  2306
    of recursive argument.
berghofe@5214
  2307
wenzelm@5217
  2308
Consider using isatool fixdatatype to adapt your theories and proof
wenzelm@5217
  2309
scripts to the new package (backup your sources first!).
wenzelm@5217
  2310
wenzelm@5217
  2311
wenzelm@5726
  2312
* HOL/record package: considerably improved implementation; now
wenzelm@5726
  2313
includes concrete syntax for record types, terms, updates; theorems
wenzelm@5726
  2314
for surjective pairing and splitting !!-bound record variables; proof
wenzelm@5726
  2315
support is as follows:
wenzelm@5726
  2316
wenzelm@5726
  2317
  1) standard conversions (selectors or updates applied to record
wenzelm@5726
  2318
constructor terms) are part of the standard simpset;
wenzelm@5726
  2319
wenzelm@5726
  2320
  2) inject equations of the form ((x, y) = (x', y')) == x=x' & y=y' are
wenzelm@5726
  2321
made part of standard simpset and claset via addIffs;
wenzelm@5726
  2322
wenzelm@5726
  2323
  3) a tactic for record field splitting (record_split_tac) is part of
wenzelm@5726
  2324
the standard claset (addSWrapper);
wenzelm@5726
  2325
wenzelm@5726
  2326
To get a better idea about these rules you may retrieve them via
wenzelm@5726
  2327
something like 'thms "foo.simps"' or 'thms "foo.iffs"', where "foo" is
wenzelm@5726
  2328
the name of your record type.
wenzelm@5726
  2329
wenzelm@5726
  2330
The split tactic 3) conceptually simplifies by the following rule:
wenzelm@5726
  2331
wenzelm@5726
  2332
  "(!!x. PROP ?P x) == (!!a b. PROP ?P (a, b))"
wenzelm@5726
  2333
wenzelm@5726
  2334
Thus any record variable that is bound by meta-all will automatically
wenzelm@5726
  2335
blow up into some record constructor term, consequently the
wenzelm@5726
  2336
simplifications of 1), 2) apply.  Thus force_tac, auto_tac etc. shall
wenzelm@5726
  2337
solve record problems automatically.
wenzelm@5726
  2338
berghofe@5214
  2339
wenzelm@5125
  2340
* reorganized the main HOL image: HOL/Integ and String loaded by
wenzelm@5125
  2341
default; theory Main includes everything;
wenzelm@5125
  2342
paulson@5650
  2343
* automatic simplification of integer sums and comparisons, using cancellation;
paulson@5650
  2344
oheimb@5526
  2345
* added option_map_eq_Some and not_Some_eq to the default simpset and claset;
wenzelm@5127
  2346
wenzelm@5127
  2347
* added disj_not1 = "(~P | Q) = (P --> Q)" to the default simpset;
wenzelm@5127
  2348
wenzelm@5127
  2349
* many new identities for unions, intersections, set difference, etc.;
wenzelm@5127
  2350
wenzelm@5127
  2351
* expand_if, expand_split, expand_sum_case and expand_nat_case are now
wenzelm@5127
  2352
called split_if, split_split, split_sum_case and split_nat_case (to go
wenzelm@5127
  2353
with add/delsplits);
wenzelm@5125
  2354
wenzelm@5127
  2355
* HOL/Prod introduces simplification procedure unit_eq_proc rewriting
wenzelm@5127
  2356
(?x::unit) = (); this is made part of the default simpset, which COULD
wenzelm@5127
  2357
MAKE EXISTING PROOFS FAIL under rare circumstances (consider
wenzelm@5207
  2358
'Delsimprocs [unit_eq_proc];' as last resort); also note that
wenzelm@5207
  2359
unit_abs_eta_conv is added in order to counter the effect of
wenzelm@5207
  2360
unit_eq_proc on (%u::unit. f u), replacing it by f rather than by
wenzelm@5207
  2361
%u.f();
wenzelm@5125
  2362
wenzelm@5217
  2363
* HOL/Fun INCOMPATIBILITY: `inj_onto' is now called `inj_on' (which
wenzelm@5217
  2364
makes more sense);
berghofe@5109
  2365
paulson@5475
  2366
* HOL/Set INCOMPATIBILITY: rule `equals0D' is now a well-formed destruct rule;
paulson@5475
  2367
  It and 'sym RS equals0D' are now in the default  claset, giving automatic
paulson@5475
  2368
  disjointness reasoning but breaking a few old proofs.
paulson@5267
  2369
wenzelm@5217
  2370
* HOL/Relation INCOMPATIBILITY: renamed the relational operator r^-1
wenzelm@5217
  2371
to 'converse' from 'inverse' (for compatibility with ZF and some
wenzelm@5217
  2372
literature);
wenzelm@5085
  2373
wenzelm@5127
  2374
* HOL/recdef can now declare non-recursive functions, with {} supplied as
wenzelm@5127
  2375
the well-founded relation;
oheimb@4838
  2376
paulson@5490
  2377
* HOL/Set INCOMPATIBILITY: the complement of set A is now written -A instead of
paulson@5490
  2378
    Compl A.  The "Compl" syntax remains available as input syntax for this
paulson@5490
  2379
    release ONLY.
paulson@5490
  2380
wenzelm@5127
  2381
* HOL/Update: new theory of function updates:
wenzelm@5127
  2382
    f(a:=b) == %x. if x=a then b else f x
wenzelm@5127
  2383
may also be iterated as in f(a:=b,c:=d,...);
nipkow@5077
  2384
wenzelm@5127
  2385
* HOL/Vimage: new theory for inverse image of a function, syntax f-``B;
paulson@4899
  2386
nipkow@5282
  2387
* HOL/List:
nipkow@5282
  2388
  - new function list_update written xs[i:=v] that updates the i-th
nipkow@5282
  2389
    list position. May also be iterated as in xs[i:=a,j:=b,...].
nipkow@5428
  2390
  - new function `upt' written [i..j(] which generates the list
nipkow@5428
  2391
    [i,i+1,...,j-1], i.e. the upper bound is excluded. To include the upper
nipkow@5428
  2392
    bound write [i..j], which is a shorthand for [i..j+1(].
nipkow@5282
  2393
  - new lexicographic orderings and corresponding wellfoundedness theorems.
paulson@4779
  2394
wenzelm@5127
  2395
* HOL/Arith:
wenzelm@5127
  2396
  - removed 'pred' (predecessor) function;
wenzelm@5127
  2397
  - generalized some theorems about n-1;
wenzelm@5127
  2398
  - many new laws about "div" and "mod";
wenzelm@5127
  2399
  - new laws about greatest common divisors (see theory ex/Primes);
oheimb@4766
  2400
wenzelm@5127
  2401
* HOL/Relation: renamed the relational operator r^-1 "converse"
wenzelm@4842
  2402
instead of "inverse";
wenzelm@4711
  2403
nipkow@5651
  2404
* HOL/Induct/Multiset: a theory of multisets, including the wellfoundedness
nipkow@5651
  2405
  of the multiset ordering;
nipkow@5651
  2406
wenzelm@5127
  2407
* directory HOL/Real: a construction of the reals using Dedekind cuts
nipkow@5651
  2408
  (not included by default);
nipkow@4835
  2409
wenzelm@5127
  2410
* directory HOL/UNITY: Chandy and Misra's UNITY formalism;
wenzelm@4711
  2411
nipkow@5651
  2412
* directory HOL/Hoare: a new version of Hoare logic which permits many-sorted
nipkow@5651
  2413
  programs, i.e. different program variables may have different types.
nipkow@5651
  2414
paulson@5142
  2415
* calling (stac rew i) now fails if "rew" has no effect on the goal
paulson@5142
  2416
  [previously, this check worked only if the rewrite rule was unconditional]
paulson@5308
  2417
  Now rew can involve either definitions or equalities (either == or =).
wenzelm@5002
  2418
wenzelm@5363
  2419
paulson@4879
  2420
*** ZF ***
paulson@4879
  2421
paulson@5332
  2422
* theory Main includes everything; INCOMPATIBILITY: theory ZF.thy contains
paulson@5332
  2423
  only the theorems proved on ZF.ML;
paulson@5160
  2424
paulson@5475
  2425
* ZF INCOMPATIBILITY: rule `equals0D' is now a well-formed destruct rule;
paulson@5475
  2426
  It and 'sym RS equals0D' are now in the default  claset, giving automatic
paulson@5475
  2427
  disjointness reasoning but breaking a few old proofs.
paulson@5267
  2428
paulson@5160
  2429
* ZF/Update: new theory of function updates
paulson@5160
  2430
    with default rewrite rule  f(x:=y) ` z = if(z=x, y, f`z)
paulson@5160
  2431
  may also be iterated as in f(a:=b,c:=d,...);
paulson@5160
  2432
paulson@4879
  2433
* in  let x=t in u(x), neither t nor u(x) has to be an FOL term.
oheimb@4649
  2434
paulson@5142
  2435
* calling (stac rew i) now fails if "rew" has no effect on the goal
paulson@5142
  2436
  [previously, this check worked only if the rewrite rule was unconditional]
paulson@5308
  2437
  Now rew can involve either definitions or equalities (either == or =).
paulson@5142
  2438
paulson@5160
  2439
* case_tac provided for compatibility with HOL
paulson@5160
  2440
    (like the old excluded_middle_tac, but with subgoals swapped)
paulson@5160
  2441
wenzelm@4842
  2442
wenzelm@5127
  2443
*** Internal programming interfaces ***
wenzelm@5002
  2444
wenzelm@5251
  2445
* Pure: several new basic modules made available for general use, see
wenzelm@5251
  2446
also src/Pure/README;
wenzelm@5207
  2447
wenzelm@5008
  2448
* improved the theory data mechanism to support encapsulation (data
wenzelm@5008
  2449
kind name replaced by private Object.kind, acting as authorization
wenzelm@5373
  2450
key); new type-safe user interface via functor TheoryDataFun; generic
wenzelm@5373
  2451
print_data function becomes basically useless;
wenzelm@5002
  2452
wenzelm@5251
  2453
* removed global_names compatibility flag -- all theory declarations
wenzelm@5251
  2454
are qualified by default;
wenzelm@5251
  2455
wenzelm@5085
  2456
* module Pure/Syntax now offers quote / antiquote translation
wenzelm@5085
  2457
functions (useful for Hoare logic etc. with implicit dependencies);
wenzelm@5373
  2458
see HOL/ex/Antiquote for an example use;
wenzelm@5085
  2459
wenzelm@5127
  2460
* Simplifier now offers conversions (asm_)(full_)rewrite: simpset ->
wenzelm@5127
  2461
cterm -> thm;
wenzelm@5127
  2462
wenzelm@5207
  2463
* new tactical CHANGED_GOAL for checking that a tactic modifies a
wenzelm@5207
  2464
subgoal;
paulson@5142
  2465
wenzelm@5251
  2466
* Display.print_goals function moved to Locale.print_goals;
wenzelm@5251
  2467
wenzelm@5731
  2468
* standard print function for goals supports current_goals_markers
wenzelm@5731
  2469
variable for marking begin of proof, end of proof, start of goal; the
wenzelm@5731
  2470
default is ("", "", ""); setting current_goals_markers := ("<proof>",
wenzelm@5731
  2471
"</proof>", "<goal>") causes SGML like tagged proof state printing,
wenzelm@5731
  2472
for example;
wenzelm@5731
  2473
wenzelm@5002
  2474
wenzelm@5002
  2475
wenzelm@4410
  2476
New in Isabelle98 (January 1998)
wenzelm@4410
  2477
--------------------------------
wenzelm@4410
  2478
wenzelm@4410
  2479
*** Overview of INCOMPATIBILITIES (see below for more details) ***
wenzelm@4410
  2480
wenzelm@4410
  2481
* changed lexical syntax of terms / types: dots made part of long
wenzelm@4410
  2482
identifiers, e.g. "%x.x" no longer possible, should be "%x. x";
wenzelm@4410
  2483
wenzelm@4410
  2484
* simpset (and claset) reference variable replaced by functions
wenzelm@4410
  2485
simpset / simpset_ref;
wenzelm@4410
  2486
wenzelm@4410
  2487
* no longer supports theory aliases (via merge) and non-trivial
wenzelm@4410
  2488
implicit merge of thms' signatures;
wenzelm@4410
  2489
wenzelm@4410
  2490
* most internal names of constants changed due to qualified names;
wenzelm@4410
  2491
wenzelm@4410
  2492
* changed Pure/Sequence interface (see Pure/seq.ML);
wenzelm@4410
  2493
wenzelm@3454
  2494
paulson@3715
  2495
*** General Changes ***
paulson@3715
  2496
wenzelm@4174
  2497
* hierachically structured name spaces (for consts, types, axms, thms
wenzelm@3943
  2498
etc.); new lexical class 'longid' (e.g. Foo.bar.x) may render much of
wenzelm@4108
  2499
old input syntactically incorrect (e.g. "%x.x"); COMPATIBILITY:
wenzelm@4108
  2500
isatool fixdots ensures space after dots (e.g. "%x. x"); set
wenzelm@4174
  2501
long_names for fully qualified output names; NOTE: ML programs
wenzelm@4174
  2502
(special tactics, packages etc.) referring to internal names may have
wenzelm@4174
  2503
to be adapted to cope with fully qualified names; in case of severe
wenzelm@4174
  2504
backward campatibility problems try setting 'global_names' at compile
wenzelm@4174
  2505
time to have enrything declared within a flat name space; one may also
wenzelm@4174
  2506
fine tune name declarations in theories via the 'global' and 'local'
wenzelm@4174
  2507
section;
wenzelm@4108
  2508
wenzelm@4108
  2509
* reimplemented the implicit simpset and claset using the new anytype
wenzelm@4108
  2510
data filed in signatures; references simpset:simpset ref etc. are
wenzelm@4108
  2511
replaced by functions simpset:unit->simpset and
wenzelm@4108
  2512
simpset_ref:unit->simpset ref; COMPATIBILITY: use isatool fixclasimp
wenzelm@4108
  2513
to patch your ML files accordingly;
paulson@3856
  2514
wenzelm@3857
  2515
* HTML output now includes theory graph data for display with Java
wenzelm@3857
  2516
applet or isatool browser; data generated automatically via isatool
wenzelm@3901
  2517
usedir (see -i option, ISABELLE_USEDIR_OPTIONS);
wenzelm@3857
  2518
paulson@3856
  2519
* defs may now be conditional; improved rewrite_goals_tac to handle
paulson@3856
  2520
conditional equations;
paulson@3856
  2521
wenzelm@4174
  2522
* defs now admits additional type arguments, using TYPE('a) syntax;
wenzelm@4174
  2523
wenzelm@3901
  2524
* theory aliases via merge (e.g. M=A+B+C) no longer supported, always
wenzelm@3901
  2525
creates a new theory node; implicit merge of thms' signatures is
wenzelm@4112
  2526
restricted to 'trivial' ones; COMPATIBILITY: one may have to use
wenzelm@3901
  2527
transfer:theory->thm->thm in (rare) cases;
wenzelm@3901
  2528
wenzelm@3968
  2529
* improved handling of draft signatures / theories; draft thms (and
wenzelm@3968
  2530
ctyps, cterms) are automatically promoted to real ones;
wenzelm@3968
  2531
wenzelm@3901
  2532
* slightly changed interfaces for oracles: admit many per theory, named
wenzelm@3901
  2533
(e.g. oracle foo = mlfun), additional name argument for invoke_oracle;
wenzelm@3901
  2534
wenzelm@3901
  2535
* print_goals: optional output of const types (set show_consts and
wenzelm@3901
  2536
show_types);
wenzelm@3851
  2537
wenzelm@4388
  2538
* improved output of warnings (###) and errors (***);
wenzelm@3697
  2539
paulson@4178
  2540
* subgoal_tac displays a warning if the new subgoal has type variables;
paulson@4178
  2541
paulson@3715
  2542
* removed old README and Makefiles;
wenzelm@3697
  2543
paulson@3856
  2544
* replaced print_goals_ref hook by print_current_goals_fn and result_error_fn;
wenzelm@3670
  2545
paulson@3715
  2546
* removed obsolete init_pps and init_database;
paulson@3715
  2547
paulson@3715
  2548
* deleted the obsolete tactical STATE, which was declared by
paulson@3715
  2549
    fun STATE tacfun st = tacfun st st;
paulson@3715
  2550
wenzelm@4388
  2551
* cd and use now support path variables, e.g. $ISABELLE_HOME, or ~
wenzelm@4388
  2552
(which abbreviates $HOME);
wenzelm@4269
  2553
wenzelm@4269
  2554
* changed Pure/Sequence interface (see Pure/seq.ML); COMPATIBILITY:
wenzelm@4269
  2555
use isatool fixseq to adapt your ML programs (this works for fully
wenzelm@4269
  2556
qualified references to the Sequence structure only!);
wenzelm@4269
  2557
wenzelm@4381
  2558
* use_thy no longer requires writable current directory; it always
wenzelm@4381
  2559
reloads .ML *and* .thy file, if either one is out of date;
wenzelm@4269
  2560
paulson@3715
  2561
paulson@3715
  2562
*** Classical Reasoner ***
paulson@3715
  2563
wenzelm@3744
  2564
* Clarify_tac, clarify_tac, clarify_step_tac, Clarify_step_tac: new
wenzelm@3744
  2565
tactics that use classical reasoning to simplify a subgoal without
wenzelm@3744
  2566
splitting it into several subgoals;
paulson@3715
  2567
paulson@3719
  2568
* Safe_tac: like safe_tac but uses the default claset;
paulson@3719
  2569
paulson@3715
  2570
paulson@3715
  2571
*** Simplifier ***
paulson@3715
  2572
paulson@3715
  2573
* added simplification meta rules:
paulson@3715
  2574
    (asm_)(full_)simplify: simpset -> thm -> thm;
paulson@3715
  2575
paulson@3715
  2576
* simplifier.ML no longer part of Pure -- has to be loaded by object
paulson@3715
  2577
logics (again);
paulson@3715
  2578
paulson@3715
  2579
* added prems argument to simplification procedures;
paulson@3715
  2580
paulson@4325
  2581
* HOL, FOL, ZF: added infix function `addsplits':
paulson@4325
  2582
  instead of `<simpset> setloop (split_tac <thms>)'
paulson@4325
  2583
  you can simply write `<simpset> addsplits <thms>'
paulson@4325
  2584
paulson@3715
  2585
paulson@3715
  2586
*** Syntax ***
paulson@3715
  2587
wenzelm@4174
  2588
* TYPE('a) syntax for type reflection terms;
wenzelm@4174
  2589
wenzelm@3985
  2590
* no longer handles consts with name "" -- declare as 'syntax' instead;
paulson@3856
  2591
paulson@3856
  2592
* pretty printer: changed order of mixfix annotation preference (again!);
wenzelm@3846
  2593
paulson@3715
  2594
* Pure: fixed idt/idts vs. pttrn/pttrns syntactic categories;
paulson@3715
  2595
paulson@3715
  2596
paulson@3715
  2597
*** HOL ***
paulson@3715
  2598
wenzelm@5726
  2599
* HOL: there is a new splitter `split_asm_tac' that can be used e.g.
oheimb@4189
  2600
  with `addloop' of the simplifier to faciliate case splitting in premises.
oheimb@4189
  2601
nipkow@4035
  2602
* HOL/TLA: Stephan Merz's formalization of Lamport's Temporal Logic of Actions;
wenzelm@3985
  2603
wenzelm@3985
  2604
* HOL/Auth: new protocol proofs including some for the Internet
nipkow@4035
  2605
  protocol TLS;
wenzelm@3985
  2606
wenzelm@4125
  2607
* HOL/Map: new theory of `maps' a la VDM;
nipkow@3982
  2608
wenzelm@4335
  2609
* HOL/simplifier: simplification procedures nat_cancel_sums for
wenzelm@4335
  2610
cancelling out common nat summands from =, <, <= (in)equalities, or
wenzelm@4335
  2611
differences; simplification procedures nat_cancel_factor for
wenzelm@4335
  2612
cancelling common factor from =, <, <= (in)equalities over natural
wenzelm@4373
  2613
sums; nat_cancel contains both kinds of procedures, it is installed by
wenzelm@4373
  2614
default in Arith.thy -- this COULD MAKE EXISTING PROOFS FAIL;
wenzelm@4335
  2615
nipkow@3580
  2616
* HOL/simplifier: terms of the form
paulson@4325
  2617
  `? x. P1(x) & ... & Pn(x) & x=t & Q1(x) & ... Qn(x)'  (or t=x)
nipkow@3580
  2618
  are rewritten to
nipkow@4035
  2619
  `P1(t) & ... & Pn(t) & Q1(t) & ... Qn(t)',
nipkow@4035
  2620
  and those of the form
paulson@4325
  2621
  `! x. P1(x) & ... & Pn(x) & x=t & Q1(x) & ... Qn(x) --> R(x)'  (or t=x)
nipkow@4035
  2622
  are rewritten to
nipkow@4035
  2623
  `P1(t) & ... & Pn(t) & Q1(t) & ... Qn(t) --> R(t)',
nipkow@4035
  2624
nipkow@4035
  2625
* HOL/datatype
nipkow@4035
  2626
  Each datatype `t' now comes with a theorem `split_t_case' of the form
nipkow@3580
  2627
nipkow@4035
  2628
  P(t_case f1 ... fn x) =
nipkow@4035
  2629
     ( (!y1 ... ym1. x = C1 y1 ... ym1 --> P(f1 y1 ... ym1)) &
nipkow@4035
  2630
        ...
oheimb@4189
  2631
       (!y1 ... ymn. x = Cn y1 ... ymn --> P(f1 y1 ... ymn))
nipkow@4035
  2632
     )
nipkow@4035
  2633
oheimb@4930
  2634
  and a theorem `split_t_case_asm' of the form
oheimb@4189
  2635
oheimb@4189
  2636
  P(t_case f1 ... fn x) =
oheimb@4189
  2637
    ~( (? y1 ... ym1. x = C1 y1 ... ym1 & ~P(f1 y1 ... ym1)) |
oheimb@4189
  2638
        ...
oheimb@4189
  2639
       (? y1 ... ymn. x = Cn y1 ... ymn & ~P(f1 y1 ... ymn))
oheimb@4189
  2640<