NEWS
author wenzelm
Wed Oct 20 11:05:06 1999 +0200 (1999-10-20)
changeset 7886 8fa551e22e52
parent 7863 8b0aca9bdc26
child 7919 35c18affc1d8
permissions -rw-r--r--
the settings environment is now statically scoped;
tuned;
wenzelm@5363
     1
Isabelle NEWS -- history user-relevant changes
wenzelm@5363
     2
==============================================
wenzelm@2553
     3
wenzelm@4981
     4
New in this Isabelle version
wenzelm@4981
     5
----------------------------
oheimb@4649
     6
paulson@5931
     7
*** Overview of INCOMPATIBILITIES (see below for more details) ***
paulson@5931
     8
paulson@6922
     9
* HOL: The THEN and ELSE parts of conditional expressions (if P then x else y)
paulson@6922
    10
are no longer simplified.  (This allows the simplifier to unfold recursive
paulson@6922
    11
functional programs.)  To restore the old behaviour, declare
wenzelm@7215
    12
wenzelm@7215
    13
    Delcongs [if_weak_cong];
paulson@6922
    14
wenzelm@6269
    15
* HOL: Removed the obsolete syntax "Compl A"; use -A for set
wenzelm@6269
    16
complement;
paulson@5931
    17
wenzelm@6269
    18
* HOL: the predicate "inj" is now defined by translation to "inj_on";
paulson@6174
    19
berghofe@7847
    20
* HOL/datatype: mutual_induct_tac no longer exists --
berghofe@7847
    21
  use induct_tac "x_1 ... x_n" instead of mutual_induct_tac ["x_1", ..., "x_n"]
berghofe@7847
    22
wenzelm@6386
    23
* HOL/typedef: fixed type inference for representing set; type
wenzelm@6386
    24
arguments now have to occur explicitly on the rhs as type constraints;
wenzelm@6386
    25
wenzelm@6269
    26
* ZF: The con_defs part of an inductive definition may no longer refer
wenzelm@6269
    27
to constants declared in the same theory;
nipkow@6057
    28
wenzelm@6269
    29
* HOL, ZF: the function mk_cases, generated by the inductive
wenzelm@6269
    30
definition package, has lost an argument.  To simplify its result, it
wenzelm@6269
    31
uses the default simpset instead of a supplied list of theorems.
paulson@6141
    32
wenzelm@7215
    33
* HOL/List: the constructors of type list are now Nil and Cons;
wenzelm@7215
    34
nipkow@7619
    35
* Simplifier: the type of the infix ML functions
nipkow@7619
    36
	setSSolver addSSolver setSolver addSolver
nipkow@7619
    37
is now  simpset * solver -> simpset  where `solver' is a new abstract type
nipkow@7619
    38
for packaging solvers. A solver is created via
nipkow@7619
    39
	mk_solver: string -> (thm list -> int -> tactic) -> solver
nipkow@7619
    40
where the string argument is only a comment.
nipkow@6057
    41
wenzelm@7647
    42
paulson@6069
    43
*** Proof tools ***
paulson@6069
    44
wenzelm@6343
    45
* Provers/Arith/fast_lin_arith.ML contains a functor for creating a
wenzelm@6343
    46
decision procedure for linear arithmetic. Currently it is used for
wenzelm@7593
    47
types `nat', `int', and `real' in HOL (see below); it can, should and
wenzelm@7593
    48
will be instantiated for other types and logics as well.
paulson@6069
    49
nipkow@7324
    50
* The simplifier now accepts rewrite rules with flexible heads, eg
nipkow@7324
    51
     hom ?f ==> ?f(?x+?y) = ?f ?x + ?f ?y
nipkow@7324
    52
  They are applied like any rule with a non-pattern lhs, i.e. by first-order
nipkow@7324
    53
  matching.
paulson@6069
    54
wenzelm@7593
    55
paulson@6014
    56
*** General ***
paulson@6014
    57
wenzelm@7215
    58
* new Isabelle/Isar subsystem provides an alternative to traditional
wenzelm@7215
    59
tactical theorem proving; together with the ProofGeneral/isar user
wenzelm@7215
    60
interface it offers an interactive environment for developing human
wenzelm@7215
    61
readable proof documents (Isar == Intelligible semi-automated
wenzelm@7886
    62
reasoning); for further information see isatool doc isar-ref,
wenzelm@7886
    63
src/HOL/Isar_examples and http://isabelle.in.tum.de/Isar/;
wenzelm@7886
    64
wenzelm@7886
    65
* improved presentation of theories: better HTML markup (including
wenzelm@7886
    66
colors), graph views in several sizes; isatool usedir now provides a
wenzelm@7886
    67
proper interface for user theories (via -P option); actual document
wenzelm@7886
    68
preparation based on (PDF)LaTeX is available as well (for new-style
wenzelm@7886
    69
theories only); see isatool doc system for more information;
wenzelm@7215
    70
wenzelm@7252
    71
* native support for Proof General, both for classic Isabelle and
wenzelm@7215
    72
Isabelle/Isar (the latter is slightly better supported and more
wenzelm@7215
    73
robust);
wenzelm@7215
    74
wenzelm@7791
    75
* ML function thm_deps visualizes dependencies of theorems and lemmas,
wenzelm@7791
    76
using the graph browser tool;
wenzelm@7791
    77
wenzelm@6751
    78
* Isabelle manuals now also available as PDF;
wenzelm@6751
    79
wenzelm@6449
    80
* theory loader rewritten from scratch (may not be fully
wenzelm@6449
    81
bug-compatible); old loadpath variable has been replaced by show_path,
wenzelm@6671
    82
add_path, del_path, reset_path functions; new operations such as
wenzelm@7593
    83
update_thy, touch_thy, remove_thy, use/update_thy_only (see also
wenzelm@7593
    84
isatool doc ref);
wenzelm@6449
    85
wenzelm@7215
    86
* improved isatool install: option -k creates KDE application icon,
wenzelm@7215
    87
option -p DIR installs standalone binaries;
wenzelm@7215
    88
wenzelm@7215
    89
* added ML_PLATFORM setting (useful for cross-platform installations);
wenzelm@7215
    90
more robust handling of platform specific ML images for SML/NJ;
wenzelm@7215
    91
wenzelm@7886
    92
* the settings environment is now statically scoped, i.e. it is never
wenzelm@7886
    93
read again in sub-processes invoked from isabelle, isatool, or
wenzelm@7886
    94
Isabelle;
wenzelm@7886
    95
wenzelm@7215
    96
* path element specification '~~' refers to '$ISABELLE_HOME';
wenzelm@7215
    97
wenzelm@6343
    98
* in locales, the "assumes" and "defines" parts may be omitted if
wenzelm@6343
    99
empty;
wenzelm@5973
   100
wenzelm@6269
   101
* new print_mode "xsymbols" for extended symbol support (e.g. genuine
wenzelm@6269
   102
long arrows);
wenzelm@6259
   103
wenzelm@6343
   104
* new print_mode "HTML";
wenzelm@6343
   105
wenzelm@6343
   106
* new flag show_tags controls display of tags of theorems (which are
wenzelm@6343
   107
basically just comments that may be attached by some tools);
wenzelm@6343
   108
wenzelm@6461
   109
* Isamode 2.6 requires patch to accomodate change of Isabelle font
wenzelm@6461
   110
mode and goal output format:
wenzelm@6461
   111
wenzelm@6461
   112
diff -r Isamode-2.6/elisp/isa-load.el Isamode/elisp/isa-load.el
wenzelm@6461
   113
244c244
wenzelm@6461
   114
<       (list (isa-getenv "ISABELLE") "-msymbols" logic-name)
wenzelm@6461
   115
---
wenzelm@6533
   116
>       (list (isa-getenv "ISABELLE") "-misabelle_font" "-msymbols" logic-name)
wenzelm@6461
   117
diff -r Isabelle-2.6/elisp/isa-proofstate.el Isamode/elisp/isa-proofstate.el
wenzelm@6461
   118
181c181
wenzelm@6461
   119
< (defconst proofstate-proofstart-regexp "^Level [0-9]+$"
wenzelm@6461
   120
---
wenzelm@6461
   121
> (defconst proofstate-proofstart-regexp "^Level [0-9]+"
wenzelm@6461
   122
wenzelm@7450
   123
* function bind_thms stores lists of theorems (cf. bind_thm);
wenzelm@7450
   124
wenzelm@7593
   125
* new shorthand tactics ftac, eatac, datac, fatac;
wenzelm@7593
   126
wenzelm@7593
   127
* qed (and friends) now accept "" as result name; in that case the
wenzelm@7593
   128
result is not stored, but proper checks and presentation of the result
wenzelm@7593
   129
still apply;
wenzelm@7593
   130
wenzelm@7805
   131
* theorem database now also indexes constants "Trueprop", "all",
wenzelm@7805
   132
"==>", "=="; thus thms_containing, findI etc. may retrieve more rules;
wenzelm@7805
   133
oheimb@6028
   134
nipkow@6057
   135
*** HOL ***
nipkow@6057
   136
wenzelm@7215
   137
** HOL arithmetic **
wenzelm@7215
   138
wenzelm@6343
   139
* There are now decision procedures for linear arithmetic over nat and
wenzelm@6343
   140
int:
nipkow@6131
   141
wenzelm@6343
   142
1. arith_tac copes with arbitrary formulae involving `=', `<', `<=',
wenzelm@6343
   143
`+', `-', `Suc', `min', `max' and numerical constants; other subterms
wenzelm@6343
   144
are treated as atomic; subformulae not involving type `nat' or `int'
wenzelm@6343
   145
are ignored; quantified subformulae are ignored unless they are
wenzelm@6343
   146
positive universal or negative existential. The tactic has to be
wenzelm@6343
   147
invoked by hand and can be a little bit slow. In particular, the
wenzelm@6343
   148
running time is exponential in the number of occurrences of `min' and
wenzelm@6343
   149
`max', and `-' on `nat'.
nipkow@6131
   150
wenzelm@6343
   151
2. fast_arith_tac is a cut-down version of arith_tac: it only takes
wenzelm@6343
   152
(negated) (in)equalities among the premises and the conclusion into
wenzelm@6343
   153
account (i.e. no compound formulae) and does not know about `min' and
wenzelm@6343
   154
`max', and `-' on `nat'. It is fast and is used automatically by the
wenzelm@6343
   155
simplifier.
nipkow@6131
   156
wenzelm@6343
   157
NB: At the moment, these decision procedures do not cope with mixed
wenzelm@6343
   158
nat/int formulae where the two parts interact, such as `m < n ==>
wenzelm@6343
   159
int(m) < int(n)'.
oheimb@6028
   160
wenzelm@7215
   161
* HOL/Numeral provides a generic theory of numerals (encoded
wenzelm@7313
   162
efficiently as bit strings); setup for types nat/int/real is in place;
wenzelm@7215
   163
INCOMPATIBILITY: since numeral syntax is now polymorphic, rather than
wenzelm@7215
   164
int, existing theories and proof scripts may require a few additional
wenzelm@7215
   165
type constraints;
wenzelm@7215
   166
wenzelm@7215
   167
* integer division and remainder can now be performed on constant
wenzelm@7215
   168
arguments;
paulson@7157
   169
wenzelm@7215
   170
* many properties of integer multiplication, division and remainder
wenzelm@7215
   171
are now available;
paulson@6922
   172
paulson@7287
   173
* An interface to the Stanford Validity Checker (SVC) is available through the
paulson@7287
   174
tactic svc_tac.  Propositional tautologies and theorems of linear arithmetic
paulson@7287
   175
are proved automatically.  SVC must be installed separately, and its results
paulson@7287
   176
must be TAKEN ON TRUST (Isabelle does not check the proofs, but tags any
paulson@7287
   177
invocation of the underlying oracle).  For SVC see
paulson@7444
   178
  http://verify.stanford.edu/SVC
paulson@6922
   179
wenzelm@7125
   180
* IsaMakefile: the HOL-Real target now builds an actual image;
wenzelm@7125
   181
wenzelm@7215
   182
wenzelm@7215
   183
** HOL misc **
wenzelm@7215
   184
wenzelm@7595
   185
* HOL/Real/HahnBanach: the Hahn-Banach theorem for real vector spaces
wenzelm@7595
   186
(in Isabelle/Isar) -- by Gertrud Bauer;
wenzelm@7595
   187
wenzelm@7691
   188
* HOL/BCV: generic model of bytecode verification, i.e. data-flow
wenzelm@7691
   189
analysis for assembly languages with subtypes;
wenzelm@7691
   190
wenzelm@6278
   191
* HOL/TLA (Lamport's Temporal Logic of Actions): major reorganization
wenzelm@6278
   192
-- avoids syntactic ambiguities and treats state, transition, and
wenzelm@6278
   193
temporal levels more uniformly; introduces INCOMPATIBILITIES due to
wenzelm@6278
   194
changed syntax and (many) tactics;
wenzelm@6278
   195
wenzelm@7791
   196
* HOL/inductive: Now also handles more general introduction rules such
wenzelm@7791
   197
  as "ALL y. (y, x) : r --> y : acc r ==> x : acc r"; monotonicity
wenzelm@7791
   198
  theorems are now maintained within the theory (maintained via the
wenzelm@7791
   199
  "mono" attribute);
berghofe@7780
   200
wenzelm@7238
   201
* HOL/datatype: Now also handles arbitrarily branching datatypes
wenzelm@7238
   202
  (using function types) such as
wenzelm@7238
   203
wenzelm@7238
   204
  datatype 'a tree = Atom 'a | Branch "nat => 'a tree"
berghofe@7047
   205
wenzelm@7326
   206
* HOL/record: record_simproc (part of the default simpset) takes care
wenzelm@7326
   207
of selectors applied to updated records; record_split_tac is no longer
wenzelm@7327
   208
part of the default claset; update_defs may now be removed from the
wenzelm@7327
   209
simpset in many cases; COMPATIBILITY: old behavior achieved by
wenzelm@7326
   210
wenzelm@7326
   211
  claset_ref () := claset() addSWrapper record_split_wrapper;
wenzelm@7326
   212
  Delsimprocs [record_simproc]
wenzelm@7326
   213
wenzelm@6386
   214
* HOL/typedef: fixed type inference for representing set; type
wenzelm@6386
   215
arguments now have to occur explicitly on the rhs as type constraints;
wenzelm@6386
   216
paulson@7287
   217
* HOL/recdef (TFL): 'congs' syntax now expects comma separated list of theorem
paulson@7287
   218
names rather than an ML expression;
paulson@7287
   219
paulson@7287
   220
* HOL/defer_recdef (TFL): like recdef but the well-founded relation can be
paulson@7287
   221
supplied later.  Program schemes can be defined, such as
paulson@7287
   222
    "While B C s = (if B s then While B C (C s) else s)"
paulson@7287
   223
where the well-founded relation can be chosen after B and C have been given.
wenzelm@6563
   224
wenzelm@7215
   225
* HOL/List: the constructors of type list are now Nil and Cons;
wenzelm@7215
   226
INCOMPATIBILITY: while [] and infix # syntax is still there, of
wenzelm@7215
   227
course, ML tools referring to List.list.op # etc. have to be adapted;
wenzelm@7215
   228
wenzelm@7238
   229
* HOL_quantifiers flag superseded by "HOL" print mode, which is
wenzelm@7238
   230
disabled by default; run isabelle with option -m HOL to get back to
wenzelm@7238
   231
the original Gordon/HOL-style output;
wenzelm@7238
   232
wenzelm@7238
   233
* HOL/Ord.thy: new bounded quantifier syntax (input only): ALL x<y. P,
wenzelm@7238
   234
ALL x<=y. P, EX x<y. P, EX x<=y. P;
wenzelm@7238
   235
wenzelm@7238
   236
* HOL basic syntax simplified (more orthogonal): all variants of
wenzelm@7238
   237
All/Ex now support plain / symbolic / HOL notation; plain syntax for
wenzelm@7238
   238
Eps operator is provided as well: "SOME x. P[x]";
wenzelm@7238
   239
berghofe@7320
   240
* HOL/Sum.thy: sum_case has been moved to HOL/Datatype;
wenzelm@7261
   241
wenzelm@7280
   242
* HOL/Univ.thy: infix syntax <*>, <+>, <**>, <+> eliminated and made
wenzelm@7280
   243
thus available for user theories;
wenzelm@7280
   244
wenzelm@7300
   245
* HOLCF/IOA/Sequents: renamed 'Cons' to 'Consq' to avoid clash with
wenzelm@7300
   246
HOL/List; hardly an INCOMPATIBILITY since '>>' syntax is used all the
wenzelm@7300
   247
time;
wenzelm@7300
   248
oheimb@7492
   249
* HOL: new tactic smp_tac: int -> int -> tactic, which applies spec several
oheimb@7492
   250
  times and then mp
oheimb@7492
   251
wenzelm@7215
   252
paulson@7113
   253
*** LK ***
paulson@7113
   254
wenzelm@7215
   255
* the notation <<...>> is now available as a notation for sequences of
wenzelm@7215
   256
formulas;
paulson@7113
   257
paulson@7113
   258
* the simplifier is now installed
paulson@7113
   259
paulson@7113
   260
* the axiom system has been generalized (thanks to Soren Heilmann) 
paulson@7113
   261
paulson@7113
   262
* the classical reasoner now has a default rule database
paulson@7113
   263
paulson@7113
   264
paulson@6064
   265
*** ZF ***
paulson@6064
   266
paulson@6064
   267
* new primrec section allows primitive recursive functions to be given
wenzelm@6269
   268
directly (as in HOL) over datatypes and the natural numbers;
paulson@6064
   269
wenzelm@6269
   270
* new tactics induct_tac and exhaust_tac for induction (or case
wenzelm@6269
   271
analysis) over datatypes and the natural numbers;
paulson@6064
   272
paulson@6064
   273
* the datatype declaration of type T now defines the recursor T_rec;
paulson@6064
   274
paulson@6141
   275
* simplification automatically does freeness reasoning for datatype
wenzelm@6269
   276
constructors;
paulson@6141
   277
wenzelm@6269
   278
* automatic type-inference, with AddTCs command to insert new
wenzelm@6269
   279
type-checking rules;
paulson@6155
   280
wenzelm@6269
   281
* datatype introduction rules are now added as Safe Introduction rules
wenzelm@6269
   282
to the claset;
paulson@6155
   283
wenzelm@6269
   284
* the syntax "if P then x else y" is now available in addition to
wenzelm@6269
   285
if(P,x,y);
wenzelm@6269
   286
paulson@6069
   287
wenzelm@6343
   288
*** Internal programming interfaces ***
wenzelm@6343
   289
wenzelm@7420
   290
* structures Vartab / Termtab (instances of TableFun) offer efficient
wenzelm@7420
   291
tables indexed by indexname_ord / term_ord (compatible with aconv);
wenzelm@7420
   292
wenzelm@6386
   293
* AxClass.axclass_tac lost the theory argument;
wenzelm@6386
   294
wenzelm@6343
   295
* tuned current_goals_markers semantics: begin / end goal avoids
wenzelm@6343
   296
printing empty lines;
wenzelm@6343
   297
wenzelm@6343
   298
* removed prs and prs_fn hook, which was broken because it did not
wenzelm@6343
   299
include \n in its semantics, forcing writeln to add one
wenzelm@6343
   300
uncoditionally; replaced prs_fn by writeln_fn; consider std_output:
wenzelm@6343
   301
string -> unit if you really want to output text without newline;
wenzelm@6343
   302
wenzelm@6343
   303
* Symbol.output subject to print mode; INCOMPATIBILITY: defaults to
wenzelm@6343
   304
plain output, interface builders may have to enable 'isabelle_font'
wenzelm@6343
   305
mode to get Isabelle font glyphs as before;
wenzelm@6343
   306
wenzelm@6343
   307
* refined token_translation interface; INCOMPATIBILITY: output length
wenzelm@6343
   308
now of type real instead of int;
wenzelm@6343
   309
wenzelm@7196
   310
* theory loader actions may be traced via new ThyInfo.add_hook
wenzelm@7196
   311
interface (see src/Pure/Thy/thy_info.ML); example application: keep
wenzelm@7196
   312
your own database of information attached to *whole* theories -- as
wenzelm@7196
   313
opposed to intra-theory data slots offered via TheoryDataFun;
wenzelm@7196
   314
wenzelm@7647
   315
* proper handling of dangling sort hypotheses (at last!);
wenzelm@7647
   316
Thm.strip_shyps and Drule.strip_shyps_warning take care of removing
wenzelm@7647
   317
extra sort hypotheses that can be witnessed from the type signature;
wenzelm@7647
   318
the force_strip_shyps is gone, any remaining shyps are simply left in
wenzelm@7647
   319
the theorem (with a warning issued by strip_shyps_warning);
wenzelm@7647
   320
wenzelm@6343
   321
paulson@6064
   322
wenzelm@5781
   323
New in Isabelle98-1 (October 1998)
wenzelm@5781
   324
----------------------------------
wenzelm@5781
   325
wenzelm@5127
   326
*** Overview of INCOMPATIBILITIES (see below for more details) ***
wenzelm@4842
   327
wenzelm@5726
   328
* several changes of automated proof tools;
wenzelm@5373
   329
wenzelm@5726
   330
* HOL: major changes to the inductive and datatype packages, including
wenzelm@5726
   331
some minor incompatibilities of theory syntax;
berghofe@5214
   332
wenzelm@5726
   333
* HOL: renamed r^-1 to 'converse' from 'inverse'; 'inj_onto' is now
wenzelm@5217
   334
called `inj_on';
paulson@5160
   335
nipkow@5275
   336
* HOL: removed duplicate thms in Arith:
nipkow@5275
   337
  less_imp_add_less  should be replaced by  trans_less_add1
nipkow@5275
   338
  le_imp_add_le      should be replaced by  trans_le_add1
paulson@5160
   339
wenzelm@5726
   340
* HOL: unary minus is now overloaded (new type constraints may be
wenzelm@5726
   341
required);
paulson@5490
   342
wenzelm@5726
   343
* HOL and ZF: unary minus for integers is now #- instead of #~.  In
wenzelm@5726
   344
ZF, expressions such as n#-1 must be changed to n#- 1, since #-1 is
wenzelm@5726
   345
now taken as an integer constant.
paulson@5541
   346
wenzelm@5726
   347
* Pure: ML function 'theory_of' renamed to 'theory';
wenzelm@5397
   348
wenzelm@5363
   349
wenzelm@5127
   350
*** Proof tools ***
nipkow@4880
   351
nipkow@5657
   352
* Simplifier:
nipkow@5657
   353
  1. Asm_full_simp_tac is now more aggressive.
nipkow@5657
   354
     1. It will sometimes reorient premises if that increases their power to
nipkow@5657
   355
        simplify.
nipkow@5657
   356
     2. It does no longer proceed strictly from left to right but may also
nipkow@5657
   357
        rotate premises to achieve further simplification.
nipkow@5657
   358
     For compatibility reasons there is now Asm_lr_simp_tac which is like the
nipkow@5657
   359
     old Asm_full_simp_tac in that it does not rotate premises.
nipkow@5657
   360
  2. The simplifier now knows a little bit about nat-arithmetic.
nipkow@4880
   361
wenzelm@5127
   362
* Classical reasoner: wrapper mechanism for the classical reasoner now
wenzelm@5127
   363
allows for selected deletion of wrappers, by introduction of names for
wenzelm@5127
   364
wrapper functionals.  This implies that addbefore, addSbefore,
wenzelm@5127
   365
addaltern, and addSaltern now take a pair (name, tactic) as argument,
wenzelm@5127
   366
and that adding two tactics with the same name overwrites the first
wenzelm@5127
   367
one (emitting a warning).
oheimb@4824
   368
  type wrapper = (int -> tactic) -> (int -> tactic)
oheimb@4649
   369
  setWrapper, setSWrapper, compWrapper and compSWrapper are replaced by
oheimb@4824
   370
  addWrapper, addSWrapper: claset * (string * wrapper) -> claset
oheimb@4824
   371
  delWrapper, delSWrapper: claset *  string            -> claset
oheimb@4649
   372
  getWrapper is renamed to appWrappers, getSWrapper to appSWrappers;
oheimb@4649
   373
wenzelm@5705
   374
* Classical reasoner: addbefore/addSbefore now have APPEND/ORELSE
wenzelm@5726
   375
semantics; addbefore now affects only the unsafe part of step_tac
wenzelm@5726
   376
etc.; this affects addss/auto_tac/force_tac, so EXISTING PROOFS MAY
wenzelm@5726
   377
FAIL, but proofs should be fixable easily, e.g. by replacing Auto_tac
wenzelm@5726
   378
by Force_tac;
oheimb@5524
   379
wenzelm@5726
   380
* Classical reasoner: setwrapper to setWrapper and compwrapper to
wenzelm@5726
   381
compWrapper; added safe wrapper (and access functions for it);
oheimb@5524
   382
wenzelm@5127
   383
* HOL/split_all_tac is now much faster and fails if there is nothing
wenzelm@5726
   384
to split.  Some EXISTING PROOFS MAY REQUIRE ADAPTION because the order
wenzelm@5726
   385
and the names of the automatically generated variables have changed.
wenzelm@5726
   386
split_all_tac has moved within claset() from unsafe wrappers to safe
wenzelm@5726
   387
wrappers, which means that !!-bound variables are split much more
wenzelm@5726
   388
aggressively, and safe_tac and clarify_tac now split such variables.
wenzelm@5726
   389
If this splitting is not appropriate, use delSWrapper "split_all_tac".
wenzelm@5726
   390
Note: the same holds for record_split_tac, which does the job of
wenzelm@5726
   391
split_all_tac for record fields.
wenzelm@5127
   392
wenzelm@5726
   393
* HOL/Simplifier: Rewrite rules for case distinctions can now be added
wenzelm@5726
   394
permanently to the default simpset using Addsplits just like
wenzelm@5726
   395
Addsimps. They can be removed via Delsplits just like
wenzelm@5726
   396
Delsimps. Lower-case versions are also available.
wenzelm@5127
   397
wenzelm@5726
   398
* HOL/Simplifier: The rule split_if is now part of the default
wenzelm@5726
   399
simpset. This means that the simplifier will eliminate all occurrences
wenzelm@5726
   400
of if-then-else in the conclusion of a goal. To prevent this, you can
wenzelm@5726
   401
either remove split_if completely from the default simpset by
wenzelm@5726
   402
`Delsplits [split_if]' or remove it in a specific call of the
wenzelm@5726
   403
simplifier using `... delsplits [split_if]'.  You can also add/delete
wenzelm@5726
   404
other case splitting rules to/from the default simpset: every datatype
wenzelm@5726
   405
generates suitable rules `split_t_case' and `split_t_case_asm' (where
wenzelm@5726
   406
t is the name of the datatype).
wenzelm@5127
   407
wenzelm@5726
   408
* Classical reasoner / Simplifier combination: new force_tac (and
wenzelm@5127
   409
derivatives Force_tac, force) combines rewriting and classical
wenzelm@5127
   410
reasoning (and whatever other tools) similarly to auto_tac, but is
wenzelm@5726
   411
aimed to solve the given subgoal completely.
wenzelm@5127
   412
wenzelm@5127
   413
wenzelm@5127
   414
*** General ***
wenzelm@5127
   415
wenzelm@5217
   416
* new top-level commands `Goal' and `Goalw' that improve upon `goal'
wenzelm@5127
   417
and `goalw': the theory is no longer needed as an explicit argument -
wenzelm@5127
   418
the current theory context is used; assumptions are no longer returned
wenzelm@5127
   419
at the ML-level unless one of them starts with ==> or !!; it is
wenzelm@5217
   420
recommended to convert to these new commands using isatool fixgoal
wenzelm@5217
   421
(backup your sources first!);
wenzelm@4842
   422
wenzelm@5217
   423
* new top-level commands 'thm' and 'thms' for retrieving theorems from
wenzelm@5207
   424
the current theory context, and 'theory' to lookup stored theories;
paulson@4806
   425
paulson@5722
   426
* new theory section 'locale' for declaring constants, assumptions and
paulson@5722
   427
definitions that have local scope;
paulson@5722
   428
wenzelm@5127
   429
* new theory section 'nonterminals' for purely syntactic types;
wenzelm@4858
   430
wenzelm@5127
   431
* new theory section 'setup' for generic ML setup functions
wenzelm@5127
   432
(e.g. package initialization);
wenzelm@4869
   433
wenzelm@5131
   434
* the distribution now includes Isabelle icons: see
wenzelm@5131
   435
lib/logo/isabelle-{small,tiny}.xpm;
wenzelm@5131
   436
wenzelm@5363
   437
* isatool install - install binaries with absolute references to
wenzelm@5363
   438
ISABELLE_HOME/bin;
wenzelm@5363
   439
wenzelm@5572
   440
* isatool logo -- create instances of the Isabelle logo (as EPS);
wenzelm@5572
   441
wenzelm@5407
   442
* print mode 'emacs' reserved for Isamode;
wenzelm@5407
   443
wenzelm@5726
   444
* support multiple print (ast) translations per constant name;
wenzelm@5726
   445
wenzelm@6925
   446
* theorems involving oracles are now printed with a suffixed [!];
wenzelm@6925
   447
wenzelm@4711
   448
paulson@4661
   449
*** HOL ***
paulson@4661
   450
wenzelm@5710
   451
* there is now a tutorial on Isabelle/HOL (do 'isatool doc tutorial');
nipkow@5709
   452
wenzelm@5217
   453
* HOL/inductive package reorganized and improved: now supports mutual
paulson@5267
   454
definitions such as
wenzelm@5217
   455
wenzelm@5217
   456
  inductive EVEN ODD
wenzelm@5217
   457
    intrs
wenzelm@5217
   458
      null "0 : EVEN"
wenzelm@5217
   459
      oddI "n : EVEN ==> Suc n : ODD"
wenzelm@5217
   460
      evenI "n : ODD ==> Suc n : EVEN"
wenzelm@5217
   461
wenzelm@5217
   462
new theorem list "elims" contains an elimination rule for each of the
wenzelm@5217
   463
recursive sets; inductive definitions now handle disjunctive premises
wenzelm@5217
   464
correctly (also ZF);
berghofe@5214
   465
wenzelm@5217
   466
INCOMPATIBILITIES: requires Inductive as an ancestor; component
wenzelm@5217
   467
"mutual_induct" no longer exists - the induction rule is always
wenzelm@5217
   468
contained in "induct";
wenzelm@5217
   469
wenzelm@5217
   470
wenzelm@5217
   471
* HOL/datatype package re-implemented and greatly improved: now
paulson@5267
   472
supports mutually recursive datatypes such as
wenzelm@5217
   473
wenzelm@5217
   474
  datatype
wenzelm@5217
   475
    'a aexp = IF_THEN_ELSE ('a bexp) ('a aexp) ('a aexp)
wenzelm@5217
   476
            | SUM ('a aexp) ('a aexp)
wenzelm@5217
   477
            | DIFF ('a aexp) ('a aexp)
wenzelm@5217
   478
            | NUM 'a
wenzelm@5217
   479
  and
wenzelm@5217
   480
    'a bexp = LESS ('a aexp) ('a aexp)
wenzelm@5217
   481
            | AND ('a bexp) ('a bexp)
wenzelm@5217
   482
            | OR ('a bexp) ('a bexp)
wenzelm@5217
   483
paulson@5267
   484
as well as indirectly recursive datatypes such as
berghofe@5214
   485
wenzelm@5217
   486
  datatype
wenzelm@5217
   487
    ('a, 'b) term = Var 'a
wenzelm@5217
   488
                  | App 'b ((('a, 'b) term) list)
berghofe@5214
   489
wenzelm@5217
   490
The new tactic  mutual_induct_tac [<var_1>, ..., <var_n>] i  performs
wenzelm@5217
   491
induction on mutually / indirectly recursive datatypes.
wenzelm@5217
   492
wenzelm@5217
   493
Primrec equations are now stored in theory and can be accessed via
wenzelm@5217
   494
<function_name>.simps.
wenzelm@5217
   495
wenzelm@5217
   496
INCOMPATIBILITIES:
berghofe@5214
   497
wenzelm@5217
   498
  - Theories using datatypes must now have theory Datatype as an
wenzelm@5217
   499
    ancestor.
wenzelm@5217
   500
  - The specific <typename>.induct_tac no longer exists - use the
wenzelm@5217
   501
    generic induct_tac instead.
berghofe@5226
   502
  - natE has been renamed to nat.exhaust - use exhaust_tac
wenzelm@5217
   503
    instead of res_inst_tac ... natE. Note that the variable
berghofe@5226
   504
    names in nat.exhaust differ from the names in natE, this
wenzelm@5217
   505
    may cause some "fragile" proofs to fail.
wenzelm@5217
   506
  - The theorems split_<typename>_case and split_<typename>_case_asm
wenzelm@5217
   507
    have been renamed to <typename>.split and <typename>.split_asm.
wenzelm@5217
   508
  - Since default sorts of type variables are now handled correctly,
wenzelm@5217
   509
    some datatype definitions may have to be annotated with explicit
wenzelm@5217
   510
    sort constraints.
wenzelm@5217
   511
  - Primrec definitions no longer require function name and type
wenzelm@5217
   512
    of recursive argument.
berghofe@5214
   513
wenzelm@5217
   514
Consider using isatool fixdatatype to adapt your theories and proof
wenzelm@5217
   515
scripts to the new package (backup your sources first!).
wenzelm@5217
   516
wenzelm@5217
   517
wenzelm@5726
   518
* HOL/record package: considerably improved implementation; now
wenzelm@5726
   519
includes concrete syntax for record types, terms, updates; theorems
wenzelm@5726
   520
for surjective pairing and splitting !!-bound record variables; proof
wenzelm@5726
   521
support is as follows:
wenzelm@5726
   522
wenzelm@5726
   523
  1) standard conversions (selectors or updates applied to record
wenzelm@5726
   524
constructor terms) are part of the standard simpset;
wenzelm@5726
   525
wenzelm@5726
   526
  2) inject equations of the form ((x, y) = (x', y')) == x=x' & y=y' are
wenzelm@5726
   527
made part of standard simpset and claset via addIffs;
wenzelm@5726
   528
wenzelm@5726
   529
  3) a tactic for record field splitting (record_split_tac) is part of
wenzelm@5726
   530
the standard claset (addSWrapper);
wenzelm@5726
   531
wenzelm@5726
   532
To get a better idea about these rules you may retrieve them via
wenzelm@5726
   533
something like 'thms "foo.simps"' or 'thms "foo.iffs"', where "foo" is
wenzelm@5726
   534
the name of your record type.
wenzelm@5726
   535
wenzelm@5726
   536
The split tactic 3) conceptually simplifies by the following rule:
wenzelm@5726
   537
wenzelm@5726
   538
  "(!!x. PROP ?P x) == (!!a b. PROP ?P (a, b))"
wenzelm@5726
   539
wenzelm@5726
   540
Thus any record variable that is bound by meta-all will automatically
wenzelm@5726
   541
blow up into some record constructor term, consequently the
wenzelm@5726
   542
simplifications of 1), 2) apply.  Thus force_tac, auto_tac etc. shall
wenzelm@5726
   543
solve record problems automatically.
wenzelm@5726
   544
berghofe@5214
   545
wenzelm@5125
   546
* reorganized the main HOL image: HOL/Integ and String loaded by
wenzelm@5125
   547
default; theory Main includes everything;
wenzelm@5125
   548
paulson@5650
   549
* automatic simplification of integer sums and comparisons, using cancellation;
paulson@5650
   550
oheimb@5526
   551
* added option_map_eq_Some and not_Some_eq to the default simpset and claset;
wenzelm@5127
   552
wenzelm@5127
   553
* added disj_not1 = "(~P | Q) = (P --> Q)" to the default simpset;
wenzelm@5127
   554
wenzelm@5127
   555
* many new identities for unions, intersections, set difference, etc.;
wenzelm@5127
   556
wenzelm@5127
   557
* expand_if, expand_split, expand_sum_case and expand_nat_case are now
wenzelm@5127
   558
called split_if, split_split, split_sum_case and split_nat_case (to go
wenzelm@5127
   559
with add/delsplits);
wenzelm@5125
   560
wenzelm@5127
   561
* HOL/Prod introduces simplification procedure unit_eq_proc rewriting
wenzelm@5127
   562
(?x::unit) = (); this is made part of the default simpset, which COULD
wenzelm@5127
   563
MAKE EXISTING PROOFS FAIL under rare circumstances (consider
wenzelm@5207
   564
'Delsimprocs [unit_eq_proc];' as last resort); also note that
wenzelm@5207
   565
unit_abs_eta_conv is added in order to counter the effect of
wenzelm@5207
   566
unit_eq_proc on (%u::unit. f u), replacing it by f rather than by
wenzelm@5207
   567
%u.f();
wenzelm@5125
   568
wenzelm@5217
   569
* HOL/Fun INCOMPATIBILITY: `inj_onto' is now called `inj_on' (which
wenzelm@5217
   570
makes more sense);
berghofe@5109
   571
paulson@5475
   572
* HOL/Set INCOMPATIBILITY: rule `equals0D' is now a well-formed destruct rule;
paulson@5475
   573
  It and 'sym RS equals0D' are now in the default  claset, giving automatic
paulson@5475
   574
  disjointness reasoning but breaking a few old proofs.
paulson@5267
   575
wenzelm@5217
   576
* HOL/Relation INCOMPATIBILITY: renamed the relational operator r^-1
wenzelm@5217
   577
to 'converse' from 'inverse' (for compatibility with ZF and some
wenzelm@5217
   578
literature);
wenzelm@5085
   579
wenzelm@5127
   580
* HOL/recdef can now declare non-recursive functions, with {} supplied as
wenzelm@5127
   581
the well-founded relation;
oheimb@4838
   582
paulson@5490
   583
* HOL/Set INCOMPATIBILITY: the complement of set A is now written -A instead of
paulson@5490
   584
    Compl A.  The "Compl" syntax remains available as input syntax for this
paulson@5490
   585
    release ONLY.
paulson@5490
   586
wenzelm@5127
   587
* HOL/Update: new theory of function updates:
wenzelm@5127
   588
    f(a:=b) == %x. if x=a then b else f x
wenzelm@5127
   589
may also be iterated as in f(a:=b,c:=d,...);
nipkow@5077
   590
wenzelm@5127
   591
* HOL/Vimage: new theory for inverse image of a function, syntax f-``B;
paulson@4899
   592
nipkow@5282
   593
* HOL/List:
nipkow@5282
   594
  - new function list_update written xs[i:=v] that updates the i-th
nipkow@5282
   595
    list position. May also be iterated as in xs[i:=a,j:=b,...].
nipkow@5428
   596
  - new function `upt' written [i..j(] which generates the list
nipkow@5428
   597
    [i,i+1,...,j-1], i.e. the upper bound is excluded. To include the upper
nipkow@5428
   598
    bound write [i..j], which is a shorthand for [i..j+1(].
nipkow@5282
   599
  - new lexicographic orderings and corresponding wellfoundedness theorems.
paulson@4779
   600
wenzelm@5127
   601
* HOL/Arith:
wenzelm@5127
   602
  - removed 'pred' (predecessor) function;
wenzelm@5127
   603
  - generalized some theorems about n-1;
wenzelm@5127
   604
  - many new laws about "div" and "mod";
wenzelm@5127
   605
  - new laws about greatest common divisors (see theory ex/Primes);
oheimb@4766
   606
wenzelm@5127
   607
* HOL/Relation: renamed the relational operator r^-1 "converse"
wenzelm@4842
   608
instead of "inverse";
wenzelm@4711
   609
nipkow@5651
   610
* HOL/Induct/Multiset: a theory of multisets, including the wellfoundedness
nipkow@5651
   611
  of the multiset ordering;
nipkow@5651
   612
wenzelm@5127
   613
* directory HOL/Real: a construction of the reals using Dedekind cuts
nipkow@5651
   614
  (not included by default);
nipkow@4835
   615
wenzelm@5127
   616
* directory HOL/UNITY: Chandy and Misra's UNITY formalism;
wenzelm@4711
   617
nipkow@5651
   618
* directory HOL/Hoare: a new version of Hoare logic which permits many-sorted
nipkow@5651
   619
  programs, i.e. different program variables may have different types.
nipkow@5651
   620
paulson@5142
   621
* calling (stac rew i) now fails if "rew" has no effect on the goal
paulson@5142
   622
  [previously, this check worked only if the rewrite rule was unconditional]
paulson@5308
   623
  Now rew can involve either definitions or equalities (either == or =).
wenzelm@5002
   624
wenzelm@5363
   625
paulson@4879
   626
*** ZF ***
paulson@4879
   627
paulson@5332
   628
* theory Main includes everything; INCOMPATIBILITY: theory ZF.thy contains
paulson@5332
   629
  only the theorems proved on ZF.ML;
paulson@5160
   630
paulson@5475
   631
* ZF INCOMPATIBILITY: rule `equals0D' is now a well-formed destruct rule;
paulson@5475
   632
  It and 'sym RS equals0D' are now in the default  claset, giving automatic
paulson@5475
   633
  disjointness reasoning but breaking a few old proofs.
paulson@5267
   634
paulson@5160
   635
* ZF/Update: new theory of function updates
paulson@5160
   636
    with default rewrite rule  f(x:=y) ` z = if(z=x, y, f`z)
paulson@5160
   637
  may also be iterated as in f(a:=b,c:=d,...);
paulson@5160
   638
paulson@4879
   639
* in  let x=t in u(x), neither t nor u(x) has to be an FOL term.
oheimb@4649
   640
paulson@5142
   641
* calling (stac rew i) now fails if "rew" has no effect on the goal
paulson@5142
   642
  [previously, this check worked only if the rewrite rule was unconditional]
paulson@5308
   643
  Now rew can involve either definitions or equalities (either == or =).
paulson@5142
   644
paulson@5160
   645
* case_tac provided for compatibility with HOL
paulson@5160
   646
    (like the old excluded_middle_tac, but with subgoals swapped)
paulson@5160
   647
wenzelm@4842
   648
wenzelm@5127
   649
*** Internal programming interfaces ***
wenzelm@5002
   650
wenzelm@5251
   651
* Pure: several new basic modules made available for general use, see
wenzelm@5251
   652
also src/Pure/README;
wenzelm@5207
   653
wenzelm@5008
   654
* improved the theory data mechanism to support encapsulation (data
wenzelm@5008
   655
kind name replaced by private Object.kind, acting as authorization
wenzelm@5373
   656
key); new type-safe user interface via functor TheoryDataFun; generic
wenzelm@5373
   657
print_data function becomes basically useless;
wenzelm@5002
   658
wenzelm@5251
   659
* removed global_names compatibility flag -- all theory declarations
wenzelm@5251
   660
are qualified by default;
wenzelm@5251
   661
wenzelm@5085
   662
* module Pure/Syntax now offers quote / antiquote translation
wenzelm@5085
   663
functions (useful for Hoare logic etc. with implicit dependencies);
wenzelm@5373
   664
see HOL/ex/Antiquote for an example use;
wenzelm@5085
   665
wenzelm@5127
   666
* Simplifier now offers conversions (asm_)(full_)rewrite: simpset ->
wenzelm@5127
   667
cterm -> thm;
wenzelm@5127
   668
wenzelm@5207
   669
* new tactical CHANGED_GOAL for checking that a tactic modifies a
wenzelm@5207
   670
subgoal;
paulson@5142
   671
wenzelm@5251
   672
* Display.print_goals function moved to Locale.print_goals;
wenzelm@5251
   673
wenzelm@5731
   674
* standard print function for goals supports current_goals_markers
wenzelm@5731
   675
variable for marking begin of proof, end of proof, start of goal; the
wenzelm@5731
   676
default is ("", "", ""); setting current_goals_markers := ("<proof>",
wenzelm@5731
   677
"</proof>", "<goal>") causes SGML like tagged proof state printing,
wenzelm@5731
   678
for example;
wenzelm@5731
   679
wenzelm@5002
   680
wenzelm@5002
   681
wenzelm@4410
   682
New in Isabelle98 (January 1998)
wenzelm@4410
   683
--------------------------------
wenzelm@4410
   684
wenzelm@4410
   685
*** Overview of INCOMPATIBILITIES (see below for more details) ***
wenzelm@4410
   686
wenzelm@4410
   687
* changed lexical syntax of terms / types: dots made part of long
wenzelm@4410
   688
identifiers, e.g. "%x.x" no longer possible, should be "%x. x";
wenzelm@4410
   689
wenzelm@4410
   690
* simpset (and claset) reference variable replaced by functions
wenzelm@4410
   691
simpset / simpset_ref;
wenzelm@4410
   692
wenzelm@4410
   693
* no longer supports theory aliases (via merge) and non-trivial
wenzelm@4410
   694
implicit merge of thms' signatures;
wenzelm@4410
   695
wenzelm@4410
   696
* most internal names of constants changed due to qualified names;
wenzelm@4410
   697
wenzelm@4410
   698
* changed Pure/Sequence interface (see Pure/seq.ML);
wenzelm@4410
   699
wenzelm@3454
   700
paulson@3715
   701
*** General Changes ***
paulson@3715
   702
wenzelm@4174
   703
* hierachically structured name spaces (for consts, types, axms, thms
wenzelm@3943
   704
etc.); new lexical class 'longid' (e.g. Foo.bar.x) may render much of
wenzelm@4108
   705
old input syntactically incorrect (e.g. "%x.x"); COMPATIBILITY:
wenzelm@4108
   706
isatool fixdots ensures space after dots (e.g. "%x. x"); set
wenzelm@4174
   707
long_names for fully qualified output names; NOTE: ML programs
wenzelm@4174
   708
(special tactics, packages etc.) referring to internal names may have
wenzelm@4174
   709
to be adapted to cope with fully qualified names; in case of severe
wenzelm@4174
   710
backward campatibility problems try setting 'global_names' at compile
wenzelm@4174
   711
time to have enrything declared within a flat name space; one may also
wenzelm@4174
   712
fine tune name declarations in theories via the 'global' and 'local'
wenzelm@4174
   713
section;
wenzelm@4108
   714
wenzelm@4108
   715
* reimplemented the implicit simpset and claset using the new anytype
wenzelm@4108
   716
data filed in signatures; references simpset:simpset ref etc. are
wenzelm@4108
   717
replaced by functions simpset:unit->simpset and
wenzelm@4108
   718
simpset_ref:unit->simpset ref; COMPATIBILITY: use isatool fixclasimp
wenzelm@4108
   719
to patch your ML files accordingly;
paulson@3856
   720
wenzelm@3857
   721
* HTML output now includes theory graph data for display with Java
wenzelm@3857
   722
applet or isatool browser; data generated automatically via isatool
wenzelm@3901
   723
usedir (see -i option, ISABELLE_USEDIR_OPTIONS);
wenzelm@3857
   724
paulson@3856
   725
* defs may now be conditional; improved rewrite_goals_tac to handle
paulson@3856
   726
conditional equations;
paulson@3856
   727
wenzelm@4174
   728
* defs now admits additional type arguments, using TYPE('a) syntax;
wenzelm@4174
   729
wenzelm@3901
   730
* theory aliases via merge (e.g. M=A+B+C) no longer supported, always
wenzelm@3901
   731
creates a new theory node; implicit merge of thms' signatures is
wenzelm@4112
   732
restricted to 'trivial' ones; COMPATIBILITY: one may have to use
wenzelm@3901
   733
transfer:theory->thm->thm in (rare) cases;
wenzelm@3901
   734
wenzelm@3968
   735
* improved handling of draft signatures / theories; draft thms (and
wenzelm@3968
   736
ctyps, cterms) are automatically promoted to real ones;
wenzelm@3968
   737
wenzelm@3901
   738
* slightly changed interfaces for oracles: admit many per theory, named
wenzelm@3901
   739
(e.g. oracle foo = mlfun), additional name argument for invoke_oracle;
wenzelm@3901
   740
wenzelm@3901
   741
* print_goals: optional output of const types (set show_consts and
wenzelm@3901
   742
show_types);
wenzelm@3851
   743
wenzelm@4388
   744
* improved output of warnings (###) and errors (***);
wenzelm@3697
   745
paulson@4178
   746
* subgoal_tac displays a warning if the new subgoal has type variables;
paulson@4178
   747
paulson@3715
   748
* removed old README and Makefiles;
wenzelm@3697
   749
paulson@3856
   750
* replaced print_goals_ref hook by print_current_goals_fn and result_error_fn;
wenzelm@3670
   751
paulson@3715
   752
* removed obsolete init_pps and init_database;
paulson@3715
   753
paulson@3715
   754
* deleted the obsolete tactical STATE, which was declared by
paulson@3715
   755
    fun STATE tacfun st = tacfun st st;
paulson@3715
   756
wenzelm@4388
   757
* cd and use now support path variables, e.g. $ISABELLE_HOME, or ~
wenzelm@4388
   758
(which abbreviates $HOME);
wenzelm@4269
   759
wenzelm@4269
   760
* changed Pure/Sequence interface (see Pure/seq.ML); COMPATIBILITY:
wenzelm@4269
   761
use isatool fixseq to adapt your ML programs (this works for fully
wenzelm@4269
   762
qualified references to the Sequence structure only!);
wenzelm@4269
   763
wenzelm@4381
   764
* use_thy no longer requires writable current directory; it always
wenzelm@4381
   765
reloads .ML *and* .thy file, if either one is out of date;
wenzelm@4269
   766
paulson@3715
   767
paulson@3715
   768
*** Classical Reasoner ***
paulson@3715
   769
wenzelm@3744
   770
* Clarify_tac, clarify_tac, clarify_step_tac, Clarify_step_tac: new
wenzelm@3744
   771
tactics that use classical reasoning to simplify a subgoal without
wenzelm@3744
   772
splitting it into several subgoals;
paulson@3715
   773
paulson@3719
   774
* Safe_tac: like safe_tac but uses the default claset;
paulson@3719
   775
paulson@3715
   776
paulson@3715
   777
*** Simplifier ***
paulson@3715
   778
paulson@3715
   779
* added simplification meta rules:
paulson@3715
   780
    (asm_)(full_)simplify: simpset -> thm -> thm;
paulson@3715
   781
paulson@3715
   782
* simplifier.ML no longer part of Pure -- has to be loaded by object
paulson@3715
   783
logics (again);
paulson@3715
   784
paulson@3715
   785
* added prems argument to simplification procedures;
paulson@3715
   786
paulson@4325
   787
* HOL, FOL, ZF: added infix function `addsplits':
paulson@4325
   788
  instead of `<simpset> setloop (split_tac <thms>)'
paulson@4325
   789
  you can simply write `<simpset> addsplits <thms>'
paulson@4325
   790
paulson@3715
   791
paulson@3715
   792
*** Syntax ***
paulson@3715
   793
wenzelm@4174
   794
* TYPE('a) syntax for type reflection terms;
wenzelm@4174
   795
wenzelm@3985
   796
* no longer handles consts with name "" -- declare as 'syntax' instead;
paulson@3856
   797
paulson@3856
   798
* pretty printer: changed order of mixfix annotation preference (again!);
wenzelm@3846
   799
paulson@3715
   800
* Pure: fixed idt/idts vs. pttrn/pttrns syntactic categories;
paulson@3715
   801
paulson@3715
   802
paulson@3715
   803
*** HOL ***
paulson@3715
   804
wenzelm@5726
   805
* HOL: there is a new splitter `split_asm_tac' that can be used e.g.
oheimb@4189
   806
  with `addloop' of the simplifier to faciliate case splitting in premises.
oheimb@4189
   807
nipkow@4035
   808
* HOL/TLA: Stephan Merz's formalization of Lamport's Temporal Logic of Actions;
wenzelm@3985
   809
wenzelm@3985
   810
* HOL/Auth: new protocol proofs including some for the Internet
nipkow@4035
   811
  protocol TLS;
wenzelm@3985
   812
wenzelm@4125
   813
* HOL/Map: new theory of `maps' a la VDM;
nipkow@3982
   814
wenzelm@4335
   815
* HOL/simplifier: simplification procedures nat_cancel_sums for
wenzelm@4335
   816
cancelling out common nat summands from =, <, <= (in)equalities, or
wenzelm@4335
   817
differences; simplification procedures nat_cancel_factor for
wenzelm@4335
   818
cancelling common factor from =, <, <= (in)equalities over natural
wenzelm@4373
   819
sums; nat_cancel contains both kinds of procedures, it is installed by
wenzelm@4373
   820
default in Arith.thy -- this COULD MAKE EXISTING PROOFS FAIL;
wenzelm@4335
   821
nipkow@3580
   822
* HOL/simplifier: terms of the form
paulson@4325
   823
  `? x. P1(x) & ... & Pn(x) & x=t & Q1(x) & ... Qn(x)'  (or t=x)
nipkow@3580
   824
  are rewritten to
nipkow@4035
   825
  `P1(t) & ... & Pn(t) & Q1(t) & ... Qn(t)',
nipkow@4035
   826
  and those of the form
paulson@4325
   827
  `! x. P1(x) & ... & Pn(x) & x=t & Q1(x) & ... Qn(x) --> R(x)'  (or t=x)
nipkow@4035
   828
  are rewritten to
nipkow@4035
   829
  `P1(t) & ... & Pn(t) & Q1(t) & ... Qn(t) --> R(t)',
nipkow@4035
   830
nipkow@4035
   831
* HOL/datatype
nipkow@4035
   832
  Each datatype `t' now comes with a theorem `split_t_case' of the form
nipkow@3580
   833
nipkow@4035
   834
  P(t_case f1 ... fn x) =
nipkow@4035
   835
     ( (!y1 ... ym1. x = C1 y1 ... ym1 --> P(f1 y1 ... ym1)) &
nipkow@4035
   836
        ...
oheimb@4189
   837
       (!y1 ... ymn. x = Cn y1 ... ymn --> P(f1 y1 ... ymn))
nipkow@4035
   838
     )
nipkow@4035
   839
oheimb@4930
   840
  and a theorem `split_t_case_asm' of the form
oheimb@4189
   841
oheimb@4189
   842
  P(t_case f1 ... fn x) =
oheimb@4189
   843
    ~( (? y1 ... ym1. x = C1 y1 ... ym1 & ~P(f1 y1 ... ym1)) |
oheimb@4189
   844
        ...
oheimb@4189
   845
       (? y1 ... ymn. x = Cn y1 ... ymn & ~P(f1 y1 ... ymn))
oheimb@4189
   846
     )
oheimb@4930
   847
  which can be added to a simpset via `addsplits'. The existing theorems
oheimb@4930
   848
  expand_list_case and expand_option_case have been renamed to
oheimb@4930
   849
  split_list_case and split_option_case.
oheimb@4189
   850
nipkow@4361
   851
* HOL/Arithmetic:
nipkow@4361
   852
  - `pred n' is automatically converted to `n-1'.
nipkow@4361
   853
    Users are strongly encouraged not to use `pred' any longer,
nipkow@4361
   854
    because it will disappear altogether at some point.
nipkow@4361
   855
  - Users are strongly encouraged to write "0 < n" rather than
nipkow@4361
   856
    "n ~= 0". Theorems and proof tools have been modified towards this
nipkow@4361
   857
    `standard'.
nipkow@4357
   858
nipkow@4502
   859
* HOL/Lists:
nipkow@4502
   860
  the function "set_of_list" has been renamed "set" (and its theorems too);
nipkow@4502
   861
  the function "nth" now takes its arguments in the reverse order and
nipkow@4502
   862
  has acquired the infix notation "!" as in "xs!n".
paulson@3570
   863
paulson@4154
   864
* HOL/Set: UNIV is now a constant and is no longer translated to Compl{};
paulson@4154
   865
paulson@4154
   866
* HOL/Set: The operator (UN x.B x) now abbreviates (UN x:UNIV. B x) and its
paulson@4154
   867
  specialist theorems (like UN1_I) are gone.  Similarly for (INT x.B x);
paulson@4154
   868
wenzelm@4575
   869
* HOL/record: extensible records with schematic structural subtyping
wenzelm@4575
   870
(single inheritance); EXPERIMENTAL version demonstrating the encoding,
wenzelm@4575
   871
still lacks various theorems and concrete record syntax;
wenzelm@4575
   872
wenzelm@4125
   873
paulson@3715
   874
*** HOLCF ***
wenzelm@3535
   875
wenzelm@4125
   876
* removed "axioms" and "generated by" sections;
wenzelm@4125
   877
oheimb@4123
   878
* replaced "ops" section by extended "consts" section, which is capable of
wenzelm@4125
   879
  handling the continuous function space "->" directly;
wenzelm@4125
   880
wenzelm@4125
   881
* domain package:
wenzelm@4125
   882
  . proves theorems immediately and stores them in the theory,
wenzelm@4125
   883
  . creates hierachical name space,
wenzelm@4125
   884
  . now uses normal mixfix annotations (instead of cinfix...),
wenzelm@4125
   885
  . minor changes to some names and values (for consistency),
wenzelm@4125
   886
  . e.g. cases -> casedist, dists_eq -> dist_eqs, [take_lemma] -> take_lemmas,
wenzelm@4125
   887
  . separator between mutual domain defs: changed "," to "and",
wenzelm@4125
   888
  . improved handling of sort constraints;  now they have to
wenzelm@4125
   889
    appear on the left-hand side of the equations only;
oheimb@4123
   890
oheimb@4123
   891
* fixed LAM <x,y,zs>.b syntax;
wenzelm@3567
   892
wenzelm@3744
   893
* added extended adm_tac to simplifier in HOLCF -- can now discharge
wenzelm@3744
   894
adm (%x. P (t x)), where P is chainfinite and t continuous;
wenzelm@3579
   895
wenzelm@3579
   896
paulson@3719
   897
*** FOL and ZF ***
paulson@3719
   898
wenzelm@5726
   899
* FOL: there is a new splitter `split_asm_tac' that can be used e.g.
oheimb@4189
   900
  with `addloop' of the simplifier to faciliate case splitting in premises.
oheimb@4189
   901
wenzelm@3744
   902
* qed_spec_mp, qed_goal_spec_mp, qed_goalw_spec_mp are available, as
wenzelm@3744
   903
in HOL, they strip ALL and --> from proved theorems;
wenzelm@3744
   904
paulson@3719
   905
wenzelm@3579
   906
wenzelm@3006
   907
New in Isabelle94-8 (May 1997)
wenzelm@3006
   908
------------------------------
wenzelm@2654
   909
paulson@3002
   910
*** General Changes ***
paulson@3002
   911
paulson@3002
   912
* new utilities to build / run / maintain Isabelle etc. (in parts
paulson@3002
   913
still somewhat experimental); old Makefiles etc. still functional;
wenzelm@2971
   914
wenzelm@3205
   915
* new 'Isabelle System Manual';
wenzelm@3205
   916
wenzelm@2825
   917
* INSTALL text, together with ./configure and ./build scripts;
wenzelm@2773
   918
wenzelm@3006
   919
* reimplemented type inference for greater efficiency, better error
wenzelm@3006
   920
messages and clean internal interface;
paulson@3002
   921
paulson@3002
   922
* prlim command for dealing with lots of subgoals (an easier way of
paulson@3002
   923
setting goals_limit);
paulson@3002
   924
wenzelm@3006
   925
wenzelm@3006
   926
*** Syntax ***
paulson@3002
   927
wenzelm@3116
   928
* supports alternative (named) syntax tables (parser and pretty
wenzelm@3116
   929
printer); internal interface is provided by add_modesyntax(_i);
wenzelm@3116
   930
paulson@3002
   931
* Pure, FOL, ZF, HOL, HOLCF now support symbolic input and output; to
paulson@3002
   932
be used in conjunction with the Isabelle symbol font; uses the
paulson@3002
   933
"symbols" syntax table;
paulson@3002
   934
wenzelm@2705
   935
* added token_translation interface (may translate name tokens in
wenzelm@2756
   936
arbitrary ways, dependent on their type (free, bound, tfree, ...) and
wenzelm@3116
   937
the current print_mode); IMPORTANT: user print translation functions
wenzelm@3116
   938
are responsible for marking newly introduced bounds
wenzelm@3116
   939
(Syntax.mark_boundT);
wenzelm@2705
   940
wenzelm@2730
   941
* token translations for modes "xterm" and "xterm_color" that display
wenzelm@3006
   942
names in bold, underline etc. or colors (which requires a color
wenzelm@3006
   943
version of xterm);
wenzelm@2730
   944
paulson@3002
   945
* infixes may now be declared with names independent of their syntax;
paulson@3002
   946
paulson@3002
   947
* added typed_print_translation (like print_translation, but may
paulson@3002
   948
access type of constant);
paulson@3002
   949
wenzelm@3006
   950
paulson@3002
   951
*** Classical Reasoner ***
paulson@3002
   952
paulson@3002
   953
Blast_tac: a new tactic!  It is often more powerful than fast_tac, but has
paulson@3002
   954
some limitations.  Blast_tac...
paulson@3002
   955
  + ignores addss, addbefore, addafter; this restriction is intrinsic
paulson@3002
   956
  + ignores elimination rules that don't have the correct format
wenzelm@5726
   957
        (the conclusion MUST be a formula variable)
paulson@3002
   958
  + ignores types, which can make HOL proofs fail
paulson@3002
   959
  + rules must not require higher-order unification, e.g. apply_type in ZF
paulson@3002
   960
    [message "Function Var's argument not a bound variable" relates to this]
paulson@3002
   961
  + its proof strategy is more general but can actually be slower
paulson@3002
   962
wenzelm@3107
   963
* substitution with equality assumptions no longer permutes other
wenzelm@3107
   964
assumptions;
paulson@3002
   965
paulson@3002
   966
* minor changes in semantics of addafter (now called addaltern); renamed
paulson@3002
   967
setwrapper to setWrapper and compwrapper to compWrapper; added safe wrapper
wenzelm@3107
   968
(and access functions for it);
paulson@3002
   969
wenzelm@5726
   970
* improved combination of classical reasoner and simplifier:
oheimb@3317
   971
  + functions for handling clasimpsets
oheimb@3317
   972
  + improvement of addss: now the simplifier is called _after_ the
oheimb@3317
   973
    safe steps.
oheimb@3317
   974
  + safe variant of addss called addSss: uses safe simplifications
wenzelm@5726
   975
    _during_ the safe steps. It is more complete as it allows multiple
oheimb@3317
   976
    instantiations of unknowns (e.g. with slow_tac).
wenzelm@3006
   977
paulson@3002
   978
*** Simplifier ***
paulson@3002
   979
wenzelm@3006
   980
* added interface for simplification procedures (functions that
wenzelm@3006
   981
produce *proven* rewrite rules on the fly, depending on current
wenzelm@3006
   982
redex);
wenzelm@3006
   983
wenzelm@3006
   984
* ordering on terms as parameter (used for ordered rewriting);
wenzelm@3006
   985
wenzelm@3107
   986
* new functions delcongs, deleqcongs, and Delcongs. richer rep_ss;
paulson@3002
   987
paulson@3002
   988
* the solver is now split into a safe and an unsafe part.
paulson@3002
   989
This should be invisible for the normal user, except that the
paulson@3002
   990
functions setsolver and addsolver have been renamed to setSolver and
wenzelm@3107
   991
addSolver; added safe_asm_full_simp_tac;
paulson@3002
   992
paulson@3002
   993
paulson@3002
   994
*** HOL ***
paulson@3002
   995
nipkow@3042
   996
* a generic induction tactic `induct_tac' which works for all datatypes and
wenzelm@3107
   997
also for type `nat';
nipkow@3042
   998
nipkow@3316
   999
* a generic case distinction tactic `exhaust_tac' which works for all
nipkow@3316
  1000
datatypes and also for type `nat';
nipkow@3316
  1001
nipkow@3316
  1002
* each datatype comes with a function `size';
nipkow@3316
  1003
paulson@3002
  1004
* patterns in case expressions allow tuple patterns as arguments to
wenzelm@3107
  1005
constructors, for example `case x of [] => ... | (x,y,z)#ps => ...';
paulson@3002
  1006
paulson@3002
  1007
* primrec now also works with type nat;
paulson@3002
  1008
paulson@3338
  1009
* recdef: a new declaration form, allows general recursive functions to be
paulson@3338
  1010
defined in theory files.  See HOL/ex/Fib, HOL/ex/Primes, HOL/Subst/Unify.
paulson@3338
  1011
paulson@3002
  1012
* the constant for negation has been renamed from "not" to "Not" to
wenzelm@3107
  1013
harmonize with FOL, ZF, LK, etc.;
paulson@3002
  1014
wenzelm@3107
  1015
* HOL/ex/LFilter theory of a corecursive "filter" functional for
wenzelm@3107
  1016
infinite lists;
paulson@3002
  1017
wenzelm@3227
  1018
* HOL/Modelcheck demonstrates invocation of model checker oracle;
wenzelm@3227
  1019
paulson@3002
  1020
* HOL/ex/Ring.thy declares cring_simp, which solves equational
paulson@3002
  1021
problems in commutative rings, using axiomatic type classes for + and *;
paulson@3002
  1022
paulson@3002
  1023
* more examples in HOL/MiniML and HOL/Auth;
paulson@3002
  1024
paulson@3002
  1025
* more default rewrite rules for quantifiers, union/intersection;
paulson@3002
  1026
nipkow@3321
  1027
* a new constant `arbitrary == @x.False';
nipkow@3321
  1028
wenzelm@3107
  1029
* HOLCF/IOA replaces old HOL/IOA;
wenzelm@3107
  1030
wenzelm@5726
  1031
* HOLCF changes: derived all rules and arities
wenzelm@5726
  1032
  + axiomatic type classes instead of classes
slotosch@2653
  1033
  + typedef instead of faking type definitions
paulson@2747
  1034
  + eliminated the internal constants less_fun, less_cfun, UU_fun, UU_cfun etc.
wenzelm@2730
  1035
  + new axclasses cpo, chfin, flat with flat < chfin < pcpo < cpo < po
slotosch@2653
  1036
  + eliminated the types void, one, tr
slotosch@2653
  1037
  + use unit lift and bool lift (with translations) instead of one and tr
slotosch@2653
  1038
  + eliminated blift from Lift3.thy (use Def instead of blift)
wenzelm@3107
  1039
  all eliminated rules are derived as theorems --> no visible changes ;
oheimb@2649
  1040
wenzelm@3006
  1041
paulson@3002
  1042
*** ZF ***
wenzelm@2553
  1043
paulson@2865
  1044
* ZF now has Fast_tac, Simp_tac and Auto_tac.  Union_iff is a now a default
paulson@2865
  1045
rewrite rule; this may affect some proofs.  eq_cs is gone but can be put back
paulson@2865
  1046
as ZF_cs addSIs [equalityI];
wenzelm@2553
  1047
wenzelm@2554
  1048
wenzelm@2732
  1049
wenzelm@2553
  1050
New in Isabelle94-7 (November 96)
wenzelm@2553
  1051
---------------------------------
wenzelm@2553
  1052
wenzelm@2553
  1053
* allowing negative levels (as offsets) in prlev and choplev;
wenzelm@2553
  1054
wenzelm@2554
  1055
* super-linear speedup for large simplifications;
wenzelm@2554
  1056
wenzelm@2554
  1057
* FOL, ZF and HOL now use miniscoping: rewriting pushes
wenzelm@2554
  1058
quantifications in as far as possible (COULD MAKE EXISTING PROOFS
wenzelm@2554
  1059
FAIL); can suppress it using the command Delsimps (ex_simps @
wenzelm@2554
  1060
all_simps); De Morgan laws are also now included, by default;
wenzelm@2554
  1061
wenzelm@2554
  1062
* improved printing of ==>  :  ~:
wenzelm@2554
  1063
wenzelm@2554
  1064
* new object-logic "Sequents" adds linear logic, while replacing LK
wenzelm@2554
  1065
and Modal (thanks to Sara Kalvala);
wenzelm@2554
  1066
wenzelm@2554
  1067
* HOL/Auth: correctness proofs for authentication protocols;
wenzelm@2554
  1068
wenzelm@2554
  1069
* HOL: new auto_tac combines rewriting and classical reasoning (many
wenzelm@2554
  1070
examples on HOL/Auth);
wenzelm@2554
  1071
wenzelm@2554
  1072
* HOL: new command AddIffs for declaring theorems of the form P=Q to
wenzelm@2554
  1073
the rewriter and classical reasoner simultaneously;
wenzelm@2554
  1074
wenzelm@2554
  1075
* function uresult no longer returns theorems in "standard" format;
wenzelm@2554
  1076
regain previous version by: val uresult = standard o uresult;
wenzelm@2554
  1077
wenzelm@2554
  1078
wenzelm@2554
  1079
wenzelm@2554
  1080
New in Isabelle94-6
wenzelm@2554
  1081
-------------------
wenzelm@2554
  1082
wenzelm@2554
  1083
* oracles -- these establish an interface between Isabelle and trusted
wenzelm@2554
  1084
external reasoners, which may deliver results as theorems;
wenzelm@2554
  1085
wenzelm@2554
  1086
* proof objects (in particular record all uses of oracles);
wenzelm@2554
  1087
wenzelm@2554
  1088
* Simp_tac, Fast_tac, etc. that refer to implicit simpset / claset;
wenzelm@2554
  1089
wenzelm@2554
  1090
* "constdefs" section in theory files;
wenzelm@2554
  1091
wenzelm@2554
  1092
* "primrec" section (HOL) no longer requires names;
wenzelm@2554
  1093
wenzelm@2554
  1094
* internal type "tactic" now simply "thm -> thm Sequence.seq";
wenzelm@2554
  1095
wenzelm@2554
  1096
wenzelm@2554
  1097
wenzelm@2554
  1098
New in Isabelle94-5
wenzelm@2554
  1099
-------------------
wenzelm@2554
  1100
wenzelm@2554
  1101
* reduced space requirements;
wenzelm@2554
  1102
wenzelm@2554
  1103
* automatic HTML generation from theories;
wenzelm@2554
  1104
wenzelm@2554
  1105
* theory files no longer require "..." (quotes) around most types;
wenzelm@2554
  1106
wenzelm@2554
  1107
* new examples, including two proofs of the Church-Rosser theorem;
wenzelm@2554
  1108
wenzelm@2554
  1109
* non-curried (1994) version of HOL is no longer distributed;
wenzelm@2554
  1110
wenzelm@2553
  1111
paulson@2557
  1112
paulson@2557
  1113
New in Isabelle94-4
paulson@2557
  1114
-------------------
paulson@2557
  1115
paulson@2747
  1116
* greatly reduced space requirements;
paulson@2557
  1117
paulson@2557
  1118
* theory files (.thy) no longer require \...\ escapes at line breaks;
paulson@2557
  1119
wenzelm@5726
  1120
* searchable theorem database (see the section "Retrieving theorems" on
paulson@2557
  1121
page 8 of the Reference Manual);
paulson@2557
  1122
paulson@2557
  1123
* new examples, including Grabczewski's monumental case study of the
paulson@2557
  1124
Axiom of Choice;
paulson@2557
  1125
paulson@2557
  1126
* The previous version of HOL renamed to Old_HOL;
paulson@2557
  1127
wenzelm@5726
  1128
* The new version of HOL (previously called CHOL) uses a curried syntax
paulson@2557
  1129
for functions.  Application looks like f a b instead of f(a,b);
paulson@2557
  1130
paulson@2557
  1131
* Mutually recursive inductive definitions finally work in HOL;
paulson@2557
  1132
paulson@2557
  1133
* In ZF, pattern-matching on tuples is now available in all abstractions and
paulson@2557
  1134
translates to the operator "split";
paulson@2557
  1135
paulson@2557
  1136
paulson@2557
  1137
paulson@2557
  1138
New in Isabelle94-3
paulson@2557
  1139
-------------------
paulson@2557
  1140
wenzelm@5726
  1141
* new infix operator, addss, allowing the classical reasoner to
paulson@2557
  1142
perform simplification at each step of its search.  Example:
wenzelm@5726
  1143
        fast_tac (cs addss ss)
paulson@2557
  1144
wenzelm@5726
  1145
* a new logic, CHOL, the same as HOL, but with a curried syntax
wenzelm@5726
  1146
for functions.  Application looks like f a b instead of f(a,b).  Also pairs
paulson@2557
  1147
look like (a,b) instead of <a,b>;
paulson@2557
  1148
paulson@2557
  1149
* PLEASE NOTE: CHOL will eventually replace HOL!
paulson@2557
  1150
paulson@2557
  1151
* In CHOL, pattern-matching on tuples is now available in all abstractions.
paulson@2557
  1152
It translates to the operator "split".  A new theory of integers is available;
paulson@2557
  1153
paulson@2557
  1154
* In ZF, integer numerals now denote two's-complement binary integers.
paulson@2557
  1155
Arithmetic operations can be performed by rewriting.  See ZF/ex/Bin.ML;
paulson@2557
  1156
wenzelm@5726
  1157
* Many new examples: I/O automata, Church-Rosser theorem, equivalents
paulson@2557
  1158
of the Axiom of Choice;
paulson@2557
  1159
paulson@2557
  1160
paulson@2557
  1161
paulson@2557
  1162
New in Isabelle94-2
paulson@2557
  1163
-------------------
paulson@2557
  1164
wenzelm@5726
  1165
* Significantly faster resolution;
paulson@2557
  1166
paulson@2557
  1167
* the different sections in a .thy file can now be mixed and repeated
paulson@2557
  1168
freely;
paulson@2557
  1169
paulson@2557
  1170
* Database of theorems for FOL, HOL and ZF.  New
paulson@2557
  1171
commands including qed, qed_goal and bind_thm store theorems in the database.
paulson@2557
  1172
paulson@2557
  1173
* Simple database queries: return a named theorem (get_thm) or all theorems of
paulson@2557
  1174
a given theory (thms_of), or find out what theory a theorem was proved in
paulson@2557
  1175
(theory_of_thm);
paulson@2557
  1176
paulson@2557
  1177
* Bugs fixed in the inductive definition and datatype packages;
paulson@2557
  1178
paulson@2557
  1179
* The classical reasoner provides deepen_tac and depth_tac, making FOL_dup_cs
paulson@2557
  1180
and HOL_dup_cs obsolete;
paulson@2557
  1181
paulson@2557
  1182
* Syntactic ambiguities caused by the new treatment of syntax in Isabelle94-1
paulson@2557
  1183
have been removed;
paulson@2557
  1184
paulson@2557
  1185
* Simpler definition of function space in ZF;
paulson@2557
  1186
paulson@2557
  1187
* new results about cardinal and ordinal arithmetic in ZF;
paulson@2557
  1188
paulson@2557
  1189
* 'subtype' facility in HOL for introducing new types as subsets of existing
paulson@2557
  1190
types;
paulson@2557
  1191
paulson@2557
  1192
wenzelm@2553
  1193
$Id$