src/HOL/Predicate.thy
author haftmann
Mon Dec 20 15:37:25 2010 +0100 (2010-12-20)
changeset 41311 de0c906dfe60
parent 41082 9ff94e7cc3b3
child 41372 551eb49a6e91
permissions -rw-r--r--
type_lifting for predicates
berghofe@22259
     1
(*  Title:      HOL/Predicate.thy
haftmann@30328
     2
    Author:     Stefan Berghofer and Lukas Bulwahn and Florian Haftmann, TU Muenchen
berghofe@22259
     3
*)
berghofe@22259
     4
haftmann@30328
     5
header {* Predicates as relations and enumerations *}
berghofe@22259
     6
berghofe@22259
     7
theory Predicate
haftmann@23708
     8
imports Inductive Relation
berghofe@22259
     9
begin
berghofe@22259
    10
haftmann@30328
    11
notation
haftmann@41082
    12
  bot ("\<bottom>") and
haftmann@41082
    13
  top ("\<top>") and
haftmann@30328
    14
  inf (infixl "\<sqinter>" 70) and
haftmann@30328
    15
  sup (infixl "\<squnion>" 65) and
haftmann@30328
    16
  Inf ("\<Sqinter>_" [900] 900) and
haftmann@41082
    17
  Sup ("\<Squnion>_" [900] 900)
haftmann@30328
    18
haftmann@41080
    19
syntax (xsymbols)
haftmann@41082
    20
  "_INF1"     :: "pttrns \<Rightarrow> 'b \<Rightarrow> 'b"           ("(3\<Sqinter>_./ _)" [0, 10] 10)
haftmann@41082
    21
  "_INF"      :: "pttrn \<Rightarrow> 'a set \<Rightarrow> 'b \<Rightarrow> 'b"  ("(3\<Sqinter>_\<in>_./ _)" [0, 0, 10] 10)
haftmann@41080
    22
  "_SUP1"     :: "pttrns \<Rightarrow> 'b \<Rightarrow> 'b"           ("(3\<Squnion>_./ _)" [0, 10] 10)
haftmann@41080
    23
  "_SUP"      :: "pttrn \<Rightarrow> 'a set \<Rightarrow> 'b \<Rightarrow> 'b"  ("(3\<Squnion>_\<in>_./ _)" [0, 0, 10] 10)
haftmann@41080
    24
haftmann@30328
    25
haftmann@30328
    26
subsection {* Predicates as (complete) lattices *}
haftmann@30328
    27
haftmann@34065
    28
haftmann@34065
    29
text {*
haftmann@34065
    30
  Handy introduction and elimination rules for @{text "\<le>"}
haftmann@34065
    31
  on unary and binary predicates
haftmann@34065
    32
*}
haftmann@34065
    33
haftmann@34065
    34
lemma predicate1I:
haftmann@34065
    35
  assumes PQ: "\<And>x. P x \<Longrightarrow> Q x"
haftmann@34065
    36
  shows "P \<le> Q"
haftmann@34065
    37
  apply (rule le_funI)
haftmann@34065
    38
  apply (rule le_boolI)
haftmann@34065
    39
  apply (rule PQ)
haftmann@34065
    40
  apply assumption
haftmann@34065
    41
  done
haftmann@34065
    42
haftmann@34065
    43
lemma predicate1D [Pure.dest?, dest?]:
haftmann@34065
    44
  "P \<le> Q \<Longrightarrow> P x \<Longrightarrow> Q x"
haftmann@34065
    45
  apply (erule le_funE)
haftmann@34065
    46
  apply (erule le_boolE)
haftmann@34065
    47
  apply assumption+
haftmann@34065
    48
  done
haftmann@34065
    49
haftmann@34065
    50
lemma rev_predicate1D:
haftmann@34065
    51
  "P x ==> P <= Q ==> Q x"
haftmann@34065
    52
  by (rule predicate1D)
haftmann@34065
    53
haftmann@34065
    54
lemma predicate2I [Pure.intro!, intro!]:
haftmann@34065
    55
  assumes PQ: "\<And>x y. P x y \<Longrightarrow> Q x y"
haftmann@34065
    56
  shows "P \<le> Q"
haftmann@34065
    57
  apply (rule le_funI)+
haftmann@34065
    58
  apply (rule le_boolI)
haftmann@34065
    59
  apply (rule PQ)
haftmann@34065
    60
  apply assumption
haftmann@34065
    61
  done
haftmann@34065
    62
haftmann@34065
    63
lemma predicate2D [Pure.dest, dest]:
haftmann@34065
    64
  "P \<le> Q \<Longrightarrow> P x y \<Longrightarrow> Q x y"
haftmann@34065
    65
  apply (erule le_funE)+
haftmann@34065
    66
  apply (erule le_boolE)
haftmann@34065
    67
  apply assumption+
haftmann@34065
    68
  done
haftmann@34065
    69
haftmann@34065
    70
lemma rev_predicate2D:
haftmann@34065
    71
  "P x y ==> P <= Q ==> Q x y"
haftmann@34065
    72
  by (rule predicate2D)
haftmann@34065
    73
haftmann@34065
    74
haftmann@32779
    75
subsubsection {* Equality *}
berghofe@22259
    76
berghofe@26797
    77
lemma pred_equals_eq: "((\<lambda>x. x \<in> R) = (\<lambda>x. x \<in> S)) = (R = S)"
berghofe@26797
    78
  by (simp add: mem_def)
berghofe@22259
    79
berghofe@23741
    80
lemma pred_equals_eq2 [pred_set_conv]: "((\<lambda>x y. (x, y) \<in> R) = (\<lambda>x y. (x, y) \<in> S)) = (R = S)"
nipkow@39302
    81
  by (simp add: fun_eq_iff mem_def)
berghofe@22259
    82
haftmann@32779
    83
haftmann@32779
    84
subsubsection {* Order relation *}
haftmann@32779
    85
berghofe@26797
    86
lemma pred_subset_eq: "((\<lambda>x. x \<in> R) <= (\<lambda>x. x \<in> S)) = (R <= S)"
berghofe@26797
    87
  by (simp add: mem_def)
berghofe@22259
    88
berghofe@23741
    89
lemma pred_subset_eq2 [pred_set_conv]: "((\<lambda>x y. (x, y) \<in> R) <= (\<lambda>x y. (x, y) \<in> S)) = (R <= S)"
berghofe@22259
    90
  by fast
berghofe@22259
    91
berghofe@23741
    92
haftmann@30328
    93
subsubsection {* Top and bottom elements *}
berghofe@23741
    94
blanchet@38651
    95
lemma bot1E [no_atp, elim!]: "bot x \<Longrightarrow> P"
haftmann@41075
    96
  by (simp add: bot_fun_def bot_bool_def)
berghofe@23741
    97
berghofe@23741
    98
lemma bot2E [elim!]: "bot x y \<Longrightarrow> P"
haftmann@41075
    99
  by (simp add: bot_fun_def bot_bool_def)
berghofe@22259
   100
berghofe@23741
   101
lemma bot_empty_eq: "bot = (\<lambda>x. x \<in> {})"
nipkow@39302
   102
  by (auto simp add: fun_eq_iff)
berghofe@22259
   103
berghofe@23741
   104
lemma bot_empty_eq2: "bot = (\<lambda>x y. (x, y) \<in> {})"
nipkow@39302
   105
  by (auto simp add: fun_eq_iff)
berghofe@22259
   106
haftmann@41082
   107
lemma top1I [intro!]: "top x"
haftmann@41082
   108
  by (simp add: top_fun_def top_bool_def)
haftmann@41082
   109
haftmann@41082
   110
lemma top2I [intro!]: "top x y"
haftmann@41082
   111
  by (simp add: top_fun_def top_bool_def)
haftmann@41082
   112
haftmann@41082
   113
haftmann@41082
   114
subsubsection {* Binary intersection *}
haftmann@41082
   115
haftmann@41082
   116
lemma inf1I [intro!]: "A x ==> B x ==> inf A B x"
haftmann@41082
   117
  by (simp add: inf_fun_def inf_bool_def)
haftmann@41082
   118
haftmann@41082
   119
lemma inf2I [intro!]: "A x y ==> B x y ==> inf A B x y"
haftmann@41082
   120
  by (simp add: inf_fun_def inf_bool_def)
haftmann@41082
   121
haftmann@41082
   122
lemma inf1E [elim!]: "inf A B x ==> (A x ==> B x ==> P) ==> P"
haftmann@41082
   123
  by (simp add: inf_fun_def inf_bool_def)
haftmann@41082
   124
haftmann@41082
   125
lemma inf2E [elim!]: "inf A B x y ==> (A x y ==> B x y ==> P) ==> P"
haftmann@41082
   126
  by (simp add: inf_fun_def inf_bool_def)
haftmann@41082
   127
haftmann@41082
   128
lemma inf1D1: "inf A B x ==> A x"
haftmann@41082
   129
  by (simp add: inf_fun_def inf_bool_def)
haftmann@41082
   130
haftmann@41082
   131
lemma inf2D1: "inf A B x y ==> A x y"
haftmann@41082
   132
  by (simp add: inf_fun_def inf_bool_def)
haftmann@41082
   133
haftmann@41082
   134
lemma inf1D2: "inf A B x ==> B x"
haftmann@41082
   135
  by (simp add: inf_fun_def inf_bool_def)
haftmann@41082
   136
haftmann@41082
   137
lemma inf2D2: "inf A B x y ==> B x y"
haftmann@41082
   138
  by (simp add: inf_fun_def inf_bool_def)
haftmann@41082
   139
haftmann@41082
   140
lemma inf_Int_eq: "inf (\<lambda>x. x \<in> R) (\<lambda>x. x \<in> S) = (\<lambda>x. x \<in> R \<inter> S)"
haftmann@41082
   141
  by (simp add: inf_fun_def inf_bool_def mem_def)
haftmann@41082
   142
haftmann@41082
   143
lemma inf_Int_eq2 [pred_set_conv]: "inf (\<lambda>x y. (x, y) \<in> R) (\<lambda>x y. (x, y) \<in> S) = (\<lambda>x y. (x, y) \<in> R \<inter> S)"
haftmann@41082
   144
  by (simp add: inf_fun_def inf_bool_def mem_def)
haftmann@41082
   145
berghofe@23741
   146
haftmann@30328
   147
subsubsection {* Binary union *}
berghofe@22259
   148
haftmann@32883
   149
lemma sup1I1 [elim?]: "A x \<Longrightarrow> sup A B x"
haftmann@41075
   150
  by (simp add: sup_fun_def sup_bool_def)
berghofe@22259
   151
haftmann@32883
   152
lemma sup2I1 [elim?]: "A x y \<Longrightarrow> sup A B x y"
haftmann@41075
   153
  by (simp add: sup_fun_def sup_bool_def)
haftmann@32883
   154
haftmann@32883
   155
lemma sup1I2 [elim?]: "B x \<Longrightarrow> sup A B x"
haftmann@41075
   156
  by (simp add: sup_fun_def sup_bool_def)
berghofe@22259
   157
haftmann@32883
   158
lemma sup2I2 [elim?]: "B x y \<Longrightarrow> sup A B x y"
haftmann@41075
   159
  by (simp add: sup_fun_def sup_bool_def)
berghofe@22259
   160
haftmann@32883
   161
lemma sup1E [elim!]: "sup A B x ==> (A x ==> P) ==> (B x ==> P) ==> P"
haftmann@41075
   162
  by (simp add: sup_fun_def sup_bool_def) iprover
berghofe@22259
   163
haftmann@32883
   164
lemma sup2E [elim!]: "sup A B x y ==> (A x y ==> P) ==> (B x y ==> P) ==> P"
haftmann@41075
   165
  by (simp add: sup_fun_def sup_bool_def) iprover
berghofe@22259
   166
berghofe@22259
   167
text {*
berghofe@22259
   168
  \medskip Classical introduction rule: no commitment to @{text A} vs
berghofe@22259
   169
  @{text B}.
berghofe@22259
   170
*}
berghofe@22259
   171
haftmann@22422
   172
lemma sup1CI [intro!]: "(~ B x ==> A x) ==> sup A B x"
haftmann@41075
   173
  by (auto simp add: sup_fun_def sup_bool_def)
berghofe@22259
   174
haftmann@22422
   175
lemma sup2CI [intro!]: "(~ B x y ==> A x y) ==> sup A B x y"
haftmann@41075
   176
  by (auto simp add: sup_fun_def sup_bool_def)
berghofe@22259
   177
haftmann@32883
   178
lemma sup_Un_eq: "sup (\<lambda>x. x \<in> R) (\<lambda>x. x \<in> S) = (\<lambda>x. x \<in> R \<union> S)"
haftmann@41075
   179
  by (simp add: sup_fun_def sup_bool_def mem_def)
berghofe@22259
   180
haftmann@32883
   181
lemma sup_Un_eq2 [pred_set_conv]: "sup (\<lambda>x y. (x, y) \<in> R) (\<lambda>x y. (x, y) \<in> S) = (\<lambda>x y. (x, y) \<in> R \<union> S)"
haftmann@41075
   182
  by (simp add: sup_fun_def sup_bool_def mem_def)
berghofe@22259
   183
berghofe@22259
   184
haftmann@30328
   185
subsubsection {* Intersections of families *}
berghofe@22430
   186
haftmann@32601
   187
lemma INF1_iff: "(INF x:A. B x) b = (ALL x:A. B x b)"
haftmann@41080
   188
  by (simp add: INFI_apply)
berghofe@22430
   189
haftmann@32601
   190
lemma INF2_iff: "(INF x:A. B x) b c = (ALL x:A. B x b c)"
haftmann@41080
   191
  by (simp add: INFI_apply)
berghofe@22430
   192
berghofe@22430
   193
lemma INF1_I [intro!]: "(!!x. x : A ==> B x b) ==> (INF x:A. B x) b"
haftmann@41080
   194
  by (auto simp add: INFI_apply)
berghofe@22259
   195
berghofe@22430
   196
lemma INF2_I [intro!]: "(!!x. x : A ==> B x b c) ==> (INF x:A. B x) b c"
haftmann@41080
   197
  by (auto simp add: INFI_apply)
berghofe@22430
   198
berghofe@22430
   199
lemma INF1_D [elim]: "(INF x:A. B x) b ==> a : A ==> B a b"
haftmann@41080
   200
  by (auto simp add: INFI_apply)
berghofe@22259
   201
berghofe@22430
   202
lemma INF2_D [elim]: "(INF x:A. B x) b c ==> a : A ==> B a b c"
haftmann@41080
   203
  by (auto simp add: INFI_apply)
berghofe@22430
   204
berghofe@22430
   205
lemma INF1_E [elim]: "(INF x:A. B x) b ==> (B a b ==> R) ==> (a ~: A ==> R) ==> R"
haftmann@41080
   206
  by (auto simp add: INFI_apply)
berghofe@22430
   207
berghofe@22430
   208
lemma INF2_E [elim]: "(INF x:A. B x) b c ==> (B a b c ==> R) ==> (a ~: A ==> R) ==> R"
haftmann@41080
   209
  by (auto simp add: INFI_apply)
berghofe@22259
   210
berghofe@23741
   211
lemma INF_INT_eq: "(INF i. (\<lambda>x. x \<in> r i)) = (\<lambda>x. x \<in> (INT i. r i))"
haftmann@41080
   212
  by (simp add: INFI_apply fun_eq_iff)
berghofe@23741
   213
berghofe@23741
   214
lemma INF_INT_eq2: "(INF i. (\<lambda>x y. (x, y) \<in> r i)) = (\<lambda>x y. (x, y) \<in> (INT i. r i))"
haftmann@41080
   215
  by (simp add: INFI_apply fun_eq_iff)
berghofe@23741
   216
berghofe@22259
   217
haftmann@41082
   218
subsubsection {* Unions of families *}
haftmann@41082
   219
haftmann@41082
   220
lemma SUP1_iff: "(SUP x:A. B x) b = (EX x:A. B x b)"
haftmann@41082
   221
  by (simp add: SUPR_apply)
haftmann@41082
   222
haftmann@41082
   223
lemma SUP2_iff: "(SUP x:A. B x) b c = (EX x:A. B x b c)"
haftmann@41082
   224
  by (simp add: SUPR_apply)
haftmann@41082
   225
haftmann@41082
   226
lemma SUP1_I [intro]: "a : A ==> B a b ==> (SUP x:A. B x) b"
haftmann@41082
   227
  by (auto simp add: SUPR_apply)
haftmann@41082
   228
haftmann@41082
   229
lemma SUP2_I [intro]: "a : A ==> B a b c ==> (SUP x:A. B x) b c"
haftmann@41082
   230
  by (auto simp add: SUPR_apply)
haftmann@41082
   231
haftmann@41082
   232
lemma SUP1_E [elim!]: "(SUP x:A. B x) b ==> (!!x. x : A ==> B x b ==> R) ==> R"
haftmann@41082
   233
  by (auto simp add: SUPR_apply)
haftmann@41082
   234
haftmann@41082
   235
lemma SUP2_E [elim!]: "(SUP x:A. B x) b c ==> (!!x. x : A ==> B x b c ==> R) ==> R"
haftmann@41082
   236
  by (auto simp add: SUPR_apply)
haftmann@41082
   237
haftmann@41082
   238
lemma SUP_UN_eq: "(SUP i. (\<lambda>x. x \<in> r i)) = (\<lambda>x. x \<in> (UN i. r i))"
haftmann@41082
   239
  by (simp add: SUPR_apply fun_eq_iff)
haftmann@41082
   240
haftmann@41082
   241
lemma SUP_UN_eq2: "(SUP i. (\<lambda>x y. (x, y) \<in> r i)) = (\<lambda>x y. (x, y) \<in> (UN i. r i))"
haftmann@41082
   242
  by (simp add: SUPR_apply fun_eq_iff)
haftmann@41082
   243
haftmann@41082
   244
haftmann@30328
   245
subsection {* Predicates as relations *}
haftmann@30328
   246
haftmann@30328
   247
subsubsection {* Composition  *}
berghofe@22259
   248
berghofe@23741
   249
inductive
krauss@32235
   250
  pred_comp  :: "['a => 'b => bool, 'b => 'c => bool] => 'a => 'c => bool"
berghofe@22259
   251
    (infixr "OO" 75)
krauss@32235
   252
  for r :: "'a => 'b => bool" and s :: "'b => 'c => bool"
berghofe@22259
   253
where
krauss@32235
   254
  pred_compI [intro]: "r a b ==> s b c ==> (r OO s) a c"
berghofe@22259
   255
berghofe@23741
   256
inductive_cases pred_compE [elim!]: "(r OO s) a c"
berghofe@22259
   257
berghofe@22259
   258
lemma pred_comp_rel_comp_eq [pred_set_conv]:
berghofe@23741
   259
  "((\<lambda>x y. (x, y) \<in> r) OO (\<lambda>x y. (x, y) \<in> s)) = (\<lambda>x y. (x, y) \<in> r O s)"
nipkow@39302
   260
  by (auto simp add: fun_eq_iff elim: pred_compE)
berghofe@22259
   261
berghofe@22259
   262
haftmann@30328
   263
subsubsection {* Converse *}
berghofe@22259
   264
berghofe@23741
   265
inductive
berghofe@22259
   266
  conversep :: "('a => 'b => bool) => 'b => 'a => bool"
berghofe@22259
   267
    ("(_^--1)" [1000] 1000)
berghofe@22259
   268
  for r :: "'a => 'b => bool"
berghofe@22259
   269
where
berghofe@22259
   270
  conversepI: "r a b ==> r^--1 b a"
berghofe@22259
   271
berghofe@22259
   272
notation (xsymbols)
berghofe@22259
   273
  conversep  ("(_\<inverse>\<inverse>)" [1000] 1000)
berghofe@22259
   274
berghofe@22259
   275
lemma conversepD:
berghofe@22259
   276
  assumes ab: "r^--1 a b"
berghofe@22259
   277
  shows "r b a" using ab
berghofe@22259
   278
  by cases simp
berghofe@22259
   279
berghofe@22259
   280
lemma conversep_iff [iff]: "r^--1 a b = r b a"
berghofe@22259
   281
  by (iprover intro: conversepI dest: conversepD)
berghofe@22259
   282
berghofe@22259
   283
lemma conversep_converse_eq [pred_set_conv]:
berghofe@23741
   284
  "(\<lambda>x y. (x, y) \<in> r)^--1 = (\<lambda>x y. (x, y) \<in> r^-1)"
nipkow@39302
   285
  by (auto simp add: fun_eq_iff)
berghofe@22259
   286
berghofe@22259
   287
lemma conversep_conversep [simp]: "(r^--1)^--1 = r"
berghofe@22259
   288
  by (iprover intro: order_antisym conversepI dest: conversepD)
berghofe@22259
   289
berghofe@22259
   290
lemma converse_pred_comp: "(r OO s)^--1 = s^--1 OO r^--1"
berghofe@22259
   291
  by (iprover intro: order_antisym conversepI pred_compI
berghofe@22259
   292
    elim: pred_compE dest: conversepD)
berghofe@22259
   293
haftmann@22422
   294
lemma converse_meet: "(inf r s)^--1 = inf r^--1 s^--1"
haftmann@41075
   295
  by (simp add: inf_fun_def inf_bool_def)
berghofe@22259
   296
    (iprover intro: conversepI ext dest: conversepD)
berghofe@22259
   297
haftmann@22422
   298
lemma converse_join: "(sup r s)^--1 = sup r^--1 s^--1"
haftmann@41075
   299
  by (simp add: sup_fun_def sup_bool_def)
berghofe@22259
   300
    (iprover intro: conversepI ext dest: conversepD)
berghofe@22259
   301
berghofe@22259
   302
lemma conversep_noteq [simp]: "(op ~=)^--1 = op ~="
nipkow@39302
   303
  by (auto simp add: fun_eq_iff)
berghofe@22259
   304
berghofe@22259
   305
lemma conversep_eq [simp]: "(op =)^--1 = op ="
nipkow@39302
   306
  by (auto simp add: fun_eq_iff)
berghofe@22259
   307
berghofe@22259
   308
haftmann@30328
   309
subsubsection {* Domain *}
berghofe@22259
   310
berghofe@23741
   311
inductive
berghofe@22259
   312
  DomainP :: "('a => 'b => bool) => 'a => bool"
berghofe@22259
   313
  for r :: "'a => 'b => bool"
berghofe@22259
   314
where
berghofe@22259
   315
  DomainPI [intro]: "r a b ==> DomainP r a"
berghofe@22259
   316
berghofe@23741
   317
inductive_cases DomainPE [elim!]: "DomainP r a"
berghofe@22259
   318
berghofe@23741
   319
lemma DomainP_Domain_eq [pred_set_conv]: "DomainP (\<lambda>x y. (x, y) \<in> r) = (\<lambda>x. x \<in> Domain r)"
berghofe@26797
   320
  by (blast intro!: Orderings.order_antisym predicate1I)
berghofe@22259
   321
berghofe@22259
   322
haftmann@30328
   323
subsubsection {* Range *}
berghofe@22259
   324
berghofe@23741
   325
inductive
berghofe@22259
   326
  RangeP :: "('a => 'b => bool) => 'b => bool"
berghofe@22259
   327
  for r :: "'a => 'b => bool"
berghofe@22259
   328
where
berghofe@22259
   329
  RangePI [intro]: "r a b ==> RangeP r b"
berghofe@22259
   330
berghofe@23741
   331
inductive_cases RangePE [elim!]: "RangeP r b"
berghofe@22259
   332
berghofe@23741
   333
lemma RangeP_Range_eq [pred_set_conv]: "RangeP (\<lambda>x y. (x, y) \<in> r) = (\<lambda>x. x \<in> Range r)"
berghofe@26797
   334
  by (blast intro!: Orderings.order_antisym predicate1I)
berghofe@22259
   335
berghofe@22259
   336
haftmann@30328
   337
subsubsection {* Inverse image *}
berghofe@22259
   338
berghofe@22259
   339
definition
berghofe@22259
   340
  inv_imagep :: "('b => 'b => bool) => ('a => 'b) => 'a => 'a => bool" where
berghofe@22259
   341
  "inv_imagep r f == %x y. r (f x) (f y)"
berghofe@22259
   342
berghofe@23741
   343
lemma [pred_set_conv]: "inv_imagep (\<lambda>x y. (x, y) \<in> r) f = (\<lambda>x y. (x, y) \<in> inv_image r f)"
berghofe@22259
   344
  by (simp add: inv_image_def inv_imagep_def)
berghofe@22259
   345
berghofe@22259
   346
lemma in_inv_imagep [simp]: "inv_imagep r f x y = r (f x) (f y)"
berghofe@22259
   347
  by (simp add: inv_imagep_def)
berghofe@22259
   348
berghofe@22259
   349
haftmann@30328
   350
subsubsection {* Powerset *}
berghofe@23741
   351
berghofe@23741
   352
definition Powp :: "('a \<Rightarrow> bool) \<Rightarrow> 'a set \<Rightarrow> bool" where
berghofe@23741
   353
  "Powp A == \<lambda>B. \<forall>x \<in> B. A x"
berghofe@23741
   354
berghofe@23741
   355
lemma Powp_Pow_eq [pred_set_conv]: "Powp (\<lambda>x. x \<in> A) = (\<lambda>x. x \<in> Pow A)"
nipkow@39302
   356
  by (auto simp add: Powp_def fun_eq_iff)
berghofe@23741
   357
berghofe@26797
   358
lemmas Powp_mono [mono] = Pow_mono [to_pred pred_subset_eq]
berghofe@26797
   359
berghofe@23741
   360
haftmann@30328
   361
subsubsection {* Properties of relations *}
berghofe@22259
   362
berghofe@22259
   363
abbreviation antisymP :: "('a => 'a => bool) => bool" where
berghofe@23741
   364
  "antisymP r == antisym {(x, y). r x y}"
berghofe@22259
   365
berghofe@22259
   366
abbreviation transP :: "('a => 'a => bool) => bool" where
berghofe@23741
   367
  "transP r == trans {(x, y). r x y}"
berghofe@22259
   368
berghofe@22259
   369
abbreviation single_valuedP :: "('a => 'b => bool) => bool" where
berghofe@23741
   370
  "single_valuedP r == single_valued {(x, y). r x y}"
berghofe@22259
   371
haftmann@40813
   372
(*FIXME inconsistencies: abbreviations vs. definitions, suffix `P` vs. suffix `p`*)
haftmann@40813
   373
haftmann@40813
   374
definition reflp :: "('a \<Rightarrow> 'a \<Rightarrow> bool) \<Rightarrow> bool" where
haftmann@40813
   375
  "reflp r \<longleftrightarrow> refl {(x, y). r x y}"
haftmann@40813
   376
haftmann@40813
   377
definition symp :: "('a \<Rightarrow> 'a \<Rightarrow> bool) \<Rightarrow> bool" where
haftmann@40813
   378
  "symp r \<longleftrightarrow> sym {(x, y). r x y}"
haftmann@40813
   379
haftmann@40813
   380
definition transp :: "('a \<Rightarrow> 'a \<Rightarrow> bool) \<Rightarrow> bool" where
haftmann@40813
   381
  "transp r \<longleftrightarrow> trans {(x, y). r x y}"
haftmann@40813
   382
haftmann@40813
   383
lemma reflpI:
haftmann@40813
   384
  "(\<And>x. r x x) \<Longrightarrow> reflp r"
haftmann@40813
   385
  by (auto intro: refl_onI simp add: reflp_def)
haftmann@40813
   386
haftmann@40813
   387
lemma reflpE:
haftmann@40813
   388
  assumes "reflp r"
haftmann@40813
   389
  obtains "r x x"
haftmann@40813
   390
  using assms by (auto dest: refl_onD simp add: reflp_def)
haftmann@40813
   391
haftmann@40813
   392
lemma sympI:
haftmann@40813
   393
  "(\<And>x y. r x y \<Longrightarrow> r y x) \<Longrightarrow> symp r"
haftmann@40813
   394
  by (auto intro: symI simp add: symp_def)
haftmann@40813
   395
haftmann@40813
   396
lemma sympE:
haftmann@40813
   397
  assumes "symp r" and "r x y"
haftmann@40813
   398
  obtains "r y x"
haftmann@40813
   399
  using assms by (auto dest: symD simp add: symp_def)
haftmann@40813
   400
haftmann@40813
   401
lemma transpI:
haftmann@40813
   402
  "(\<And>x y z. r x y \<Longrightarrow> r y z \<Longrightarrow> r x z) \<Longrightarrow> transp r"
haftmann@40813
   403
  by (auto intro: transI simp add: transp_def)
haftmann@40813
   404
  
haftmann@40813
   405
lemma transpE:
haftmann@40813
   406
  assumes "transp r" and "r x y" and "r y z"
haftmann@40813
   407
  obtains "r x z"
haftmann@40813
   408
  using assms by (auto dest: transD simp add: transp_def)
haftmann@40813
   409
haftmann@30328
   410
haftmann@30328
   411
subsection {* Predicates as enumerations *}
haftmann@30328
   412
haftmann@30328
   413
subsubsection {* The type of predicate enumerations (a monad) *}
haftmann@30328
   414
haftmann@30328
   415
datatype 'a pred = Pred "'a \<Rightarrow> bool"
haftmann@30328
   416
haftmann@30328
   417
primrec eval :: "'a pred \<Rightarrow> 'a \<Rightarrow> bool" where
haftmann@30328
   418
  eval_pred: "eval (Pred f) = f"
haftmann@30328
   419
haftmann@30328
   420
lemma Pred_eval [simp]:
haftmann@30328
   421
  "Pred (eval x) = x"
haftmann@30328
   422
  by (cases x) simp
haftmann@30328
   423
haftmann@40616
   424
lemma pred_eqI:
haftmann@40616
   425
  "(\<And>w. eval P w \<longleftrightarrow> eval Q w) \<Longrightarrow> P = Q"
haftmann@40616
   426
  by (cases P, cases Q) (auto simp add: fun_eq_iff)
haftmann@30328
   427
haftmann@40616
   428
lemma eval_mem [simp]:
haftmann@40616
   429
  "x \<in> eval P \<longleftrightarrow> eval P x"
haftmann@40616
   430
  by (simp add: mem_def)
haftmann@30328
   431
haftmann@40616
   432
lemma eq_mem [simp]:
haftmann@40616
   433
  "x \<in> (op =) y \<longleftrightarrow> x = y"
haftmann@40616
   434
  by (auto simp add: mem_def)
haftmann@30328
   435
haftmann@32578
   436
instantiation pred :: (type) "{complete_lattice, boolean_algebra}"
haftmann@30328
   437
begin
haftmann@30328
   438
haftmann@30328
   439
definition
haftmann@30328
   440
  "P \<le> Q \<longleftrightarrow> eval P \<le> eval Q"
haftmann@30328
   441
haftmann@30328
   442
definition
haftmann@30328
   443
  "P < Q \<longleftrightarrow> eval P < eval Q"
haftmann@30328
   444
haftmann@30328
   445
definition
haftmann@30328
   446
  "\<bottom> = Pred \<bottom>"
haftmann@30328
   447
haftmann@40616
   448
lemma eval_bot [simp]:
haftmann@40616
   449
  "eval \<bottom>  = \<bottom>"
haftmann@40616
   450
  by (simp add: bot_pred_def)
haftmann@40616
   451
haftmann@30328
   452
definition
haftmann@30328
   453
  "\<top> = Pred \<top>"
haftmann@30328
   454
haftmann@40616
   455
lemma eval_top [simp]:
haftmann@40616
   456
  "eval \<top>  = \<top>"
haftmann@40616
   457
  by (simp add: top_pred_def)
haftmann@40616
   458
haftmann@30328
   459
definition
haftmann@30328
   460
  "P \<sqinter> Q = Pred (eval P \<sqinter> eval Q)"
haftmann@30328
   461
haftmann@40616
   462
lemma eval_inf [simp]:
haftmann@40616
   463
  "eval (P \<sqinter> Q) = eval P \<sqinter> eval Q"
haftmann@40616
   464
  by (simp add: inf_pred_def)
haftmann@40616
   465
haftmann@30328
   466
definition
haftmann@30328
   467
  "P \<squnion> Q = Pred (eval P \<squnion> eval Q)"
haftmann@30328
   468
haftmann@40616
   469
lemma eval_sup [simp]:
haftmann@40616
   470
  "eval (P \<squnion> Q) = eval P \<squnion> eval Q"
haftmann@40616
   471
  by (simp add: sup_pred_def)
haftmann@40616
   472
haftmann@30328
   473
definition
haftmann@37767
   474
  "\<Sqinter>A = Pred (INFI A eval)"
haftmann@30328
   475
haftmann@40616
   476
lemma eval_Inf [simp]:
haftmann@40616
   477
  "eval (\<Sqinter>A) = INFI A eval"
haftmann@40616
   478
  by (simp add: Inf_pred_def)
haftmann@40616
   479
haftmann@30328
   480
definition
haftmann@37767
   481
  "\<Squnion>A = Pred (SUPR A eval)"
haftmann@30328
   482
haftmann@40616
   483
lemma eval_Sup [simp]:
haftmann@40616
   484
  "eval (\<Squnion>A) = SUPR A eval"
haftmann@40616
   485
  by (simp add: Sup_pred_def)
haftmann@40616
   486
haftmann@32578
   487
definition
haftmann@32578
   488
  "- P = Pred (- eval P)"
haftmann@32578
   489
haftmann@40616
   490
lemma eval_compl [simp]:
haftmann@40616
   491
  "eval (- P) = - eval P"
haftmann@40616
   492
  by (simp add: uminus_pred_def)
haftmann@40616
   493
haftmann@32578
   494
definition
haftmann@32578
   495
  "P - Q = Pred (eval P - eval Q)"
haftmann@32578
   496
haftmann@40616
   497
lemma eval_minus [simp]:
haftmann@40616
   498
  "eval (P - Q) = eval P - eval Q"
haftmann@40616
   499
  by (simp add: minus_pred_def)
haftmann@40616
   500
haftmann@32578
   501
instance proof
haftmann@41080
   502
qed (auto intro!: pred_eqI simp add: less_eq_pred_def less_pred_def uminus_apply minus_apply)
haftmann@30328
   503
berghofe@22259
   504
end
haftmann@30328
   505
haftmann@40616
   506
lemma eval_INFI [simp]:
haftmann@40616
   507
  "eval (INFI A f) = INFI A (eval \<circ> f)"
haftmann@40616
   508
  by (unfold INFI_def) simp
haftmann@40616
   509
haftmann@40616
   510
lemma eval_SUPR [simp]:
haftmann@40616
   511
  "eval (SUPR A f) = SUPR A (eval \<circ> f)"
haftmann@40616
   512
  by (unfold SUPR_def) simp
haftmann@40616
   513
haftmann@40616
   514
definition single :: "'a \<Rightarrow> 'a pred" where
haftmann@40616
   515
  "single x = Pred ((op =) x)"
haftmann@40616
   516
haftmann@40616
   517
lemma eval_single [simp]:
haftmann@40616
   518
  "eval (single x) = (op =) x"
haftmann@40616
   519
  by (simp add: single_def)
haftmann@40616
   520
haftmann@40616
   521
definition bind :: "'a pred \<Rightarrow> ('a \<Rightarrow> 'b pred) \<Rightarrow> 'b pred" (infixl "\<guillemotright>=" 70) where
haftmann@41080
   522
  "P \<guillemotright>= f = (SUPR {x. eval P x} f)"
haftmann@40616
   523
haftmann@40616
   524
lemma eval_bind [simp]:
haftmann@41080
   525
  "eval (P \<guillemotright>= f) = eval (SUPR {x. eval P x} f)"
haftmann@40616
   526
  by (simp add: bind_def)
haftmann@40616
   527
haftmann@30328
   528
lemma bind_bind:
haftmann@30328
   529
  "(P \<guillemotright>= Q) \<guillemotright>= R = P \<guillemotright>= (\<lambda>x. Q x \<guillemotright>= R)"
haftmann@40674
   530
  by (rule pred_eqI) auto
haftmann@30328
   531
haftmann@30328
   532
lemma bind_single:
haftmann@30328
   533
  "P \<guillemotright>= single = P"
haftmann@40616
   534
  by (rule pred_eqI) auto
haftmann@30328
   535
haftmann@30328
   536
lemma single_bind:
haftmann@30328
   537
  "single x \<guillemotright>= P = P x"
haftmann@40616
   538
  by (rule pred_eqI) auto
haftmann@30328
   539
haftmann@30328
   540
lemma bottom_bind:
haftmann@30328
   541
  "\<bottom> \<guillemotright>= P = \<bottom>"
haftmann@40674
   542
  by (rule pred_eqI) auto
haftmann@30328
   543
haftmann@30328
   544
lemma sup_bind:
haftmann@30328
   545
  "(P \<squnion> Q) \<guillemotright>= R = P \<guillemotright>= R \<squnion> Q \<guillemotright>= R"
haftmann@40674
   546
  by (rule pred_eqI) auto
haftmann@30328
   547
haftmann@40616
   548
lemma Sup_bind:
haftmann@40616
   549
  "(\<Squnion>A \<guillemotright>= f) = \<Squnion>((\<lambda>x. x \<guillemotright>= f) ` A)"
haftmann@40674
   550
  by (rule pred_eqI) auto
haftmann@30328
   551
haftmann@30328
   552
lemma pred_iffI:
haftmann@30328
   553
  assumes "\<And>x. eval A x \<Longrightarrow> eval B x"
haftmann@30328
   554
  and "\<And>x. eval B x \<Longrightarrow> eval A x"
haftmann@30328
   555
  shows "A = B"
haftmann@40616
   556
  using assms by (auto intro: pred_eqI)
haftmann@30328
   557
  
haftmann@30328
   558
lemma singleI: "eval (single x) x"
haftmann@40616
   559
  by simp
haftmann@30328
   560
haftmann@30328
   561
lemma singleI_unit: "eval (single ()) x"
haftmann@40616
   562
  by simp
haftmann@30328
   563
haftmann@30328
   564
lemma singleE: "eval (single x) y \<Longrightarrow> (y = x \<Longrightarrow> P) \<Longrightarrow> P"
haftmann@40616
   565
  by simp
haftmann@30328
   566
haftmann@30328
   567
lemma singleE': "eval (single x) y \<Longrightarrow> (x = y \<Longrightarrow> P) \<Longrightarrow> P"
haftmann@40616
   568
  by simp
haftmann@30328
   569
haftmann@30328
   570
lemma bindI: "eval P x \<Longrightarrow> eval (Q x) y \<Longrightarrow> eval (P \<guillemotright>= Q) y"
haftmann@40616
   571
  by auto
haftmann@30328
   572
haftmann@30328
   573
lemma bindE: "eval (R \<guillemotright>= Q) y \<Longrightarrow> (\<And>x. eval R x \<Longrightarrow> eval (Q x) y \<Longrightarrow> P) \<Longrightarrow> P"
haftmann@40616
   574
  by auto
haftmann@30328
   575
haftmann@30328
   576
lemma botE: "eval \<bottom> x \<Longrightarrow> P"
haftmann@40616
   577
  by auto
haftmann@30328
   578
haftmann@30328
   579
lemma supI1: "eval A x \<Longrightarrow> eval (A \<squnion> B) x"
haftmann@40616
   580
  by auto
haftmann@30328
   581
haftmann@30328
   582
lemma supI2: "eval B x \<Longrightarrow> eval (A \<squnion> B) x" 
haftmann@40616
   583
  by auto
haftmann@30328
   584
haftmann@30328
   585
lemma supE: "eval (A \<squnion> B) x \<Longrightarrow> (eval A x \<Longrightarrow> P) \<Longrightarrow> (eval B x \<Longrightarrow> P) \<Longrightarrow> P"
haftmann@40616
   586
  by auto
haftmann@30328
   587
haftmann@32578
   588
lemma single_not_bot [simp]:
haftmann@32578
   589
  "single x \<noteq> \<bottom>"
nipkow@39302
   590
  by (auto simp add: single_def bot_pred_def fun_eq_iff)
haftmann@32578
   591
haftmann@32578
   592
lemma not_bot:
haftmann@32578
   593
  assumes "A \<noteq> \<bottom>"
haftmann@32578
   594
  obtains x where "eval A x"
haftmann@40616
   595
  using assms by (cases A)
haftmann@40616
   596
    (auto simp add: bot_pred_def, auto simp add: mem_def)
haftmann@32578
   597
  
haftmann@32578
   598
haftmann@32578
   599
subsubsection {* Emptiness check and definite choice *}
haftmann@32578
   600
haftmann@32578
   601
definition is_empty :: "'a pred \<Rightarrow> bool" where
haftmann@32578
   602
  "is_empty A \<longleftrightarrow> A = \<bottom>"
haftmann@32578
   603
haftmann@32578
   604
lemma is_empty_bot:
haftmann@32578
   605
  "is_empty \<bottom>"
haftmann@32578
   606
  by (simp add: is_empty_def)
haftmann@32578
   607
haftmann@32578
   608
lemma not_is_empty_single:
haftmann@32578
   609
  "\<not> is_empty (single x)"
nipkow@39302
   610
  by (auto simp add: is_empty_def single_def bot_pred_def fun_eq_iff)
haftmann@32578
   611
haftmann@32578
   612
lemma is_empty_sup:
haftmann@32578
   613
  "is_empty (A \<squnion> B) \<longleftrightarrow> is_empty A \<and> is_empty B"
huffman@36008
   614
  by (auto simp add: is_empty_def)
haftmann@32578
   615
haftmann@40616
   616
definition singleton :: "(unit \<Rightarrow> 'a) \<Rightarrow> 'a pred \<Rightarrow> 'a" where
bulwahn@33111
   617
  "singleton dfault A = (if \<exists>!x. eval A x then THE x. eval A x else dfault ())"
haftmann@32578
   618
haftmann@32578
   619
lemma singleton_eqI:
bulwahn@33110
   620
  "\<exists>!x. eval A x \<Longrightarrow> eval A x \<Longrightarrow> singleton dfault A = x"
haftmann@32578
   621
  by (auto simp add: singleton_def)
haftmann@32578
   622
haftmann@32578
   623
lemma eval_singletonI:
bulwahn@33110
   624
  "\<exists>!x. eval A x \<Longrightarrow> eval A (singleton dfault A)"
haftmann@32578
   625
proof -
haftmann@32578
   626
  assume assm: "\<exists>!x. eval A x"
haftmann@32578
   627
  then obtain x where "eval A x" ..
bulwahn@33110
   628
  moreover with assm have "singleton dfault A = x" by (rule singleton_eqI)
haftmann@32578
   629
  ultimately show ?thesis by simp 
haftmann@32578
   630
qed
haftmann@32578
   631
haftmann@32578
   632
lemma single_singleton:
bulwahn@33110
   633
  "\<exists>!x. eval A x \<Longrightarrow> single (singleton dfault A) = A"
haftmann@32578
   634
proof -
haftmann@32578
   635
  assume assm: "\<exists>!x. eval A x"
bulwahn@33110
   636
  then have "eval A (singleton dfault A)"
haftmann@32578
   637
    by (rule eval_singletonI)
bulwahn@33110
   638
  moreover from assm have "\<And>x. eval A x \<Longrightarrow> singleton dfault A = x"
haftmann@32578
   639
    by (rule singleton_eqI)
bulwahn@33110
   640
  ultimately have "eval (single (singleton dfault A)) = eval A"
nipkow@39302
   641
    by (simp (no_asm_use) add: single_def fun_eq_iff) blast
haftmann@40616
   642
  then have "\<And>x. eval (single (singleton dfault A)) x = eval A x"
haftmann@40616
   643
    by simp
haftmann@40616
   644
  then show ?thesis by (rule pred_eqI)
haftmann@32578
   645
qed
haftmann@32578
   646
haftmann@32578
   647
lemma singleton_undefinedI:
bulwahn@33111
   648
  "\<not> (\<exists>!x. eval A x) \<Longrightarrow> singleton dfault A = dfault ()"
haftmann@32578
   649
  by (simp add: singleton_def)
haftmann@32578
   650
haftmann@32578
   651
lemma singleton_bot:
bulwahn@33111
   652
  "singleton dfault \<bottom> = dfault ()"
haftmann@32578
   653
  by (auto simp add: bot_pred_def intro: singleton_undefinedI)
haftmann@32578
   654
haftmann@32578
   655
lemma singleton_single:
bulwahn@33110
   656
  "singleton dfault (single x) = x"
haftmann@32578
   657
  by (auto simp add: intro: singleton_eqI singleI elim: singleE)
haftmann@32578
   658
haftmann@32578
   659
lemma singleton_sup_single_single:
bulwahn@33111
   660
  "singleton dfault (single x \<squnion> single y) = (if x = y then x else dfault ())"
haftmann@32578
   661
proof (cases "x = y")
haftmann@32578
   662
  case True then show ?thesis by (simp add: singleton_single)
haftmann@32578
   663
next
haftmann@32578
   664
  case False
haftmann@32578
   665
  have "eval (single x \<squnion> single y) x"
haftmann@32578
   666
    and "eval (single x \<squnion> single y) y"
haftmann@32578
   667
  by (auto intro: supI1 supI2 singleI)
haftmann@32578
   668
  with False have "\<not> (\<exists>!z. eval (single x \<squnion> single y) z)"
haftmann@32578
   669
    by blast
bulwahn@33111
   670
  then have "singleton dfault (single x \<squnion> single y) = dfault ()"
haftmann@32578
   671
    by (rule singleton_undefinedI)
haftmann@32578
   672
  with False show ?thesis by simp
haftmann@32578
   673
qed
haftmann@32578
   674
haftmann@32578
   675
lemma singleton_sup_aux:
bulwahn@33110
   676
  "singleton dfault (A \<squnion> B) = (if A = \<bottom> then singleton dfault B
bulwahn@33110
   677
    else if B = \<bottom> then singleton dfault A
bulwahn@33110
   678
    else singleton dfault
bulwahn@33110
   679
      (single (singleton dfault A) \<squnion> single (singleton dfault B)))"
haftmann@32578
   680
proof (cases "(\<exists>!x. eval A x) \<and> (\<exists>!y. eval B y)")
haftmann@32578
   681
  case True then show ?thesis by (simp add: single_singleton)
haftmann@32578
   682
next
haftmann@32578
   683
  case False
haftmann@32578
   684
  from False have A_or_B:
bulwahn@33111
   685
    "singleton dfault A = dfault () \<or> singleton dfault B = dfault ()"
haftmann@32578
   686
    by (auto intro!: singleton_undefinedI)
bulwahn@33110
   687
  then have rhs: "singleton dfault
bulwahn@33111
   688
    (single (singleton dfault A) \<squnion> single (singleton dfault B)) = dfault ()"
haftmann@32578
   689
    by (auto simp add: singleton_sup_single_single singleton_single)
haftmann@32578
   690
  from False have not_unique:
haftmann@32578
   691
    "\<not> (\<exists>!x. eval A x) \<or> \<not> (\<exists>!y. eval B y)" by simp
haftmann@32578
   692
  show ?thesis proof (cases "A \<noteq> \<bottom> \<and> B \<noteq> \<bottom>")
haftmann@32578
   693
    case True
haftmann@32578
   694
    then obtain a b where a: "eval A a" and b: "eval B b"
haftmann@32578
   695
      by (blast elim: not_bot)
haftmann@32578
   696
    with True not_unique have "\<not> (\<exists>!x. eval (A \<squnion> B) x)"
haftmann@32578
   697
      by (auto simp add: sup_pred_def bot_pred_def)
bulwahn@33111
   698
    then have "singleton dfault (A \<squnion> B) = dfault ()" by (rule singleton_undefinedI)
haftmann@32578
   699
    with True rhs show ?thesis by simp
haftmann@32578
   700
  next
haftmann@32578
   701
    case False then show ?thesis by auto
haftmann@32578
   702
  qed
haftmann@32578
   703
qed
haftmann@32578
   704
haftmann@32578
   705
lemma singleton_sup:
bulwahn@33110
   706
  "singleton dfault (A \<squnion> B) = (if A = \<bottom> then singleton dfault B
bulwahn@33110
   707
    else if B = \<bottom> then singleton dfault A
bulwahn@33111
   708
    else if singleton dfault A = singleton dfault B then singleton dfault A else dfault ())"
bulwahn@33110
   709
using singleton_sup_aux [of dfault A B] by (simp only: singleton_sup_single_single)
haftmann@32578
   710
haftmann@30328
   711
haftmann@30328
   712
subsubsection {* Derived operations *}
haftmann@30328
   713
haftmann@30328
   714
definition if_pred :: "bool \<Rightarrow> unit pred" where
haftmann@30328
   715
  if_pred_eq: "if_pred b = (if b then single () else \<bottom>)"
haftmann@30328
   716
bulwahn@33754
   717
definition holds :: "unit pred \<Rightarrow> bool" where
bulwahn@33754
   718
  holds_eq: "holds P = eval P ()"
bulwahn@33754
   719
haftmann@30328
   720
definition not_pred :: "unit pred \<Rightarrow> unit pred" where
haftmann@30328
   721
  not_pred_eq: "not_pred P = (if eval P () then \<bottom> else single ())"
haftmann@30328
   722
haftmann@30328
   723
lemma if_predI: "P \<Longrightarrow> eval (if_pred P) ()"
haftmann@30328
   724
  unfolding if_pred_eq by (auto intro: singleI)
haftmann@30328
   725
haftmann@30328
   726
lemma if_predE: "eval (if_pred b) x \<Longrightarrow> (b \<Longrightarrow> x = () \<Longrightarrow> P) \<Longrightarrow> P"
haftmann@30328
   727
  unfolding if_pred_eq by (cases b) (auto elim: botE)
haftmann@30328
   728
haftmann@30328
   729
lemma not_predI: "\<not> P \<Longrightarrow> eval (not_pred (Pred (\<lambda>u. P))) ()"
haftmann@30328
   730
  unfolding not_pred_eq eval_pred by (auto intro: singleI)
haftmann@30328
   731
haftmann@30328
   732
lemma not_predI': "\<not> eval P () \<Longrightarrow> eval (not_pred P) ()"
haftmann@30328
   733
  unfolding not_pred_eq by (auto intro: singleI)
haftmann@30328
   734
haftmann@30328
   735
lemma not_predE: "eval (not_pred (Pred (\<lambda>u. P))) x \<Longrightarrow> (\<not> P \<Longrightarrow> thesis) \<Longrightarrow> thesis"
haftmann@30328
   736
  unfolding not_pred_eq
haftmann@30328
   737
  by (auto split: split_if_asm elim: botE)
haftmann@30328
   738
haftmann@30328
   739
lemma not_predE': "eval (not_pred P) x \<Longrightarrow> (\<not> eval P x \<Longrightarrow> thesis) \<Longrightarrow> thesis"
haftmann@30328
   740
  unfolding not_pred_eq
haftmann@30328
   741
  by (auto split: split_if_asm elim: botE)
bulwahn@33754
   742
lemma "f () = False \<or> f () = True"
bulwahn@33754
   743
by simp
haftmann@30328
   744
blanchet@37549
   745
lemma closure_of_bool_cases [no_atp]:
bulwahn@33754
   746
assumes "(f :: unit \<Rightarrow> bool) = (%u. False) \<Longrightarrow> P f"
bulwahn@33754
   747
assumes "f = (%u. True) \<Longrightarrow> P f"
bulwahn@33754
   748
shows "P f"
bulwahn@33754
   749
proof -
bulwahn@33754
   750
  have "f = (%u. False) \<or> f = (%u. True)"
bulwahn@33754
   751
    apply (cases "f ()")
bulwahn@33754
   752
    apply (rule disjI2)
bulwahn@33754
   753
    apply (rule ext)
bulwahn@33754
   754
    apply (simp add: unit_eq)
bulwahn@33754
   755
    apply (rule disjI1)
bulwahn@33754
   756
    apply (rule ext)
bulwahn@33754
   757
    apply (simp add: unit_eq)
bulwahn@33754
   758
    done
bulwahn@33754
   759
  from this prems show ?thesis by blast
bulwahn@33754
   760
qed
bulwahn@33754
   761
bulwahn@33754
   762
lemma unit_pred_cases:
bulwahn@33754
   763
assumes "P \<bottom>"
bulwahn@33754
   764
assumes "P (single ())"
bulwahn@33754
   765
shows "P Q"
bulwahn@33754
   766
using assms
bulwahn@33754
   767
unfolding bot_pred_def Collect_def empty_def single_def
bulwahn@33754
   768
apply (cases Q)
bulwahn@33754
   769
apply simp
bulwahn@33754
   770
apply (rule_tac f="fun" in closure_of_bool_cases)
bulwahn@33754
   771
apply auto
bulwahn@33754
   772
apply (subgoal_tac "(%x. () = x) = (%x. True)") 
bulwahn@33754
   773
apply auto
bulwahn@33754
   774
done
bulwahn@33754
   775
bulwahn@33754
   776
lemma holds_if_pred:
bulwahn@33754
   777
  "holds (if_pred b) = b"
bulwahn@33754
   778
unfolding if_pred_eq holds_eq
bulwahn@33754
   779
by (cases b) (auto intro: singleI elim: botE)
bulwahn@33754
   780
bulwahn@33754
   781
lemma if_pred_holds:
bulwahn@33754
   782
  "if_pred (holds P) = P"
bulwahn@33754
   783
unfolding if_pred_eq holds_eq
bulwahn@33754
   784
by (rule unit_pred_cases) (auto intro: singleI elim: botE)
bulwahn@33754
   785
bulwahn@33754
   786
lemma is_empty_holds:
bulwahn@33754
   787
  "is_empty P \<longleftrightarrow> \<not> holds P"
bulwahn@33754
   788
unfolding is_empty_def holds_eq
bulwahn@33754
   789
by (rule unit_pred_cases) (auto elim: botE intro: singleI)
haftmann@30328
   790
haftmann@41311
   791
definition map :: "('a \<Rightarrow> 'b) \<Rightarrow> 'a pred \<Rightarrow> 'b pred" where
haftmann@41311
   792
  "map f P = P \<guillemotright>= (single o f)"
haftmann@41311
   793
haftmann@41311
   794
lemma eval_map [simp]:
haftmann@41311
   795
  "eval (map f P) = image f (eval P)"
haftmann@41311
   796
  by (auto simp add: map_def)
haftmann@41311
   797
haftmann@41311
   798
type_lifting map
haftmann@41311
   799
  by (auto intro!: pred_eqI simp add: image_image)
haftmann@41311
   800
haftmann@41311
   801
haftmann@30328
   802
subsubsection {* Implementation *}
haftmann@30328
   803
haftmann@30328
   804
datatype 'a seq = Empty | Insert "'a" "'a pred" | Join "'a pred" "'a seq"
haftmann@30328
   805
haftmann@30328
   806
primrec pred_of_seq :: "'a seq \<Rightarrow> 'a pred" where
haftmann@30328
   807
    "pred_of_seq Empty = \<bottom>"
haftmann@30328
   808
  | "pred_of_seq (Insert x P) = single x \<squnion> P"
haftmann@30328
   809
  | "pred_of_seq (Join P xq) = P \<squnion> pred_of_seq xq"
haftmann@30328
   810
haftmann@30328
   811
definition Seq :: "(unit \<Rightarrow> 'a seq) \<Rightarrow> 'a pred" where
haftmann@30328
   812
  "Seq f = pred_of_seq (f ())"
haftmann@30328
   813
haftmann@30328
   814
code_datatype Seq
haftmann@30328
   815
haftmann@30328
   816
primrec member :: "'a seq \<Rightarrow> 'a \<Rightarrow> bool"  where
haftmann@30328
   817
  "member Empty x \<longleftrightarrow> False"
haftmann@30328
   818
  | "member (Insert y P) x \<longleftrightarrow> x = y \<or> eval P x"
haftmann@30328
   819
  | "member (Join P xq) x \<longleftrightarrow> eval P x \<or> member xq x"
haftmann@30328
   820
haftmann@30328
   821
lemma eval_member:
haftmann@30328
   822
  "member xq = eval (pred_of_seq xq)"
haftmann@30328
   823
proof (induct xq)
haftmann@30328
   824
  case Empty show ?case
nipkow@39302
   825
  by (auto simp add: fun_eq_iff elim: botE)
haftmann@30328
   826
next
haftmann@30328
   827
  case Insert show ?case
nipkow@39302
   828
  by (auto simp add: fun_eq_iff elim: supE singleE intro: supI1 supI2 singleI)
haftmann@30328
   829
next
haftmann@30328
   830
  case Join then show ?case
nipkow@39302
   831
  by (auto simp add: fun_eq_iff elim: supE intro: supI1 supI2)
haftmann@30328
   832
qed
haftmann@30328
   833
haftmann@30328
   834
lemma eval_code [code]: "eval (Seq f) = member (f ())"
haftmann@30328
   835
  unfolding Seq_def by (rule sym, rule eval_member)
haftmann@30328
   836
haftmann@30328
   837
lemma single_code [code]:
haftmann@30328
   838
  "single x = Seq (\<lambda>u. Insert x \<bottom>)"
haftmann@30328
   839
  unfolding Seq_def by simp
haftmann@30328
   840
haftmann@41080
   841
primrec "apply" :: "('a \<Rightarrow> 'b pred) \<Rightarrow> 'a seq \<Rightarrow> 'b seq" where
haftmann@30328
   842
    "apply f Empty = Empty"
haftmann@30328
   843
  | "apply f (Insert x P) = Join (f x) (Join (P \<guillemotright>= f) Empty)"
haftmann@30328
   844
  | "apply f (Join P xq) = Join (P \<guillemotright>= f) (apply f xq)"
haftmann@30328
   845
haftmann@30328
   846
lemma apply_bind:
haftmann@30328
   847
  "pred_of_seq (apply f xq) = pred_of_seq xq \<guillemotright>= f"
haftmann@30328
   848
proof (induct xq)
haftmann@30328
   849
  case Empty show ?case
haftmann@30328
   850
    by (simp add: bottom_bind)
haftmann@30328
   851
next
haftmann@30328
   852
  case Insert show ?case
haftmann@30328
   853
    by (simp add: single_bind sup_bind)
haftmann@30328
   854
next
haftmann@30328
   855
  case Join then show ?case
haftmann@30328
   856
    by (simp add: sup_bind)
haftmann@30328
   857
qed
haftmann@30328
   858
  
haftmann@30328
   859
lemma bind_code [code]:
haftmann@30328
   860
  "Seq g \<guillemotright>= f = Seq (\<lambda>u. apply f (g ()))"
haftmann@30328
   861
  unfolding Seq_def by (rule sym, rule apply_bind)
haftmann@30328
   862
haftmann@30328
   863
lemma bot_set_code [code]:
haftmann@30328
   864
  "\<bottom> = Seq (\<lambda>u. Empty)"
haftmann@30328
   865
  unfolding Seq_def by simp
haftmann@30328
   866
haftmann@30376
   867
primrec adjunct :: "'a pred \<Rightarrow> 'a seq \<Rightarrow> 'a seq" where
haftmann@30376
   868
    "adjunct P Empty = Join P Empty"
haftmann@30376
   869
  | "adjunct P (Insert x Q) = Insert x (Q \<squnion> P)"
haftmann@30376
   870
  | "adjunct P (Join Q xq) = Join Q (adjunct P xq)"
haftmann@30376
   871
haftmann@30376
   872
lemma adjunct_sup:
haftmann@30376
   873
  "pred_of_seq (adjunct P xq) = P \<squnion> pred_of_seq xq"
haftmann@30376
   874
  by (induct xq) (simp_all add: sup_assoc sup_commute sup_left_commute)
haftmann@30376
   875
haftmann@30328
   876
lemma sup_code [code]:
haftmann@30328
   877
  "Seq f \<squnion> Seq g = Seq (\<lambda>u. case f ()
haftmann@30328
   878
    of Empty \<Rightarrow> g ()
haftmann@30328
   879
     | Insert x P \<Rightarrow> Insert x (P \<squnion> Seq g)
haftmann@30376
   880
     | Join P xq \<Rightarrow> adjunct (Seq g) (Join P xq))"
haftmann@30328
   881
proof (cases "f ()")
haftmann@30328
   882
  case Empty
haftmann@30328
   883
  thus ?thesis
haftmann@34007
   884
    unfolding Seq_def by (simp add: sup_commute [of "\<bottom>"])
haftmann@30328
   885
next
haftmann@30328
   886
  case Insert
haftmann@30328
   887
  thus ?thesis
haftmann@30328
   888
    unfolding Seq_def by (simp add: sup_assoc)
haftmann@30328
   889
next
haftmann@30328
   890
  case Join
haftmann@30328
   891
  thus ?thesis
haftmann@30376
   892
    unfolding Seq_def
haftmann@30376
   893
    by (simp add: adjunct_sup sup_assoc sup_commute sup_left_commute)
haftmann@30328
   894
qed
haftmann@30328
   895
haftmann@30430
   896
primrec contained :: "'a seq \<Rightarrow> 'a pred \<Rightarrow> bool" where
haftmann@30430
   897
    "contained Empty Q \<longleftrightarrow> True"
haftmann@30430
   898
  | "contained (Insert x P) Q \<longleftrightarrow> eval Q x \<and> P \<le> Q"
haftmann@30430
   899
  | "contained (Join P xq) Q \<longleftrightarrow> P \<le> Q \<and> contained xq Q"
haftmann@30430
   900
haftmann@30430
   901
lemma single_less_eq_eval:
haftmann@30430
   902
  "single x \<le> P \<longleftrightarrow> eval P x"
haftmann@30430
   903
  by (auto simp add: single_def less_eq_pred_def mem_def)
haftmann@30430
   904
haftmann@30430
   905
lemma contained_less_eq:
haftmann@30430
   906
  "contained xq Q \<longleftrightarrow> pred_of_seq xq \<le> Q"
haftmann@30430
   907
  by (induct xq) (simp_all add: single_less_eq_eval)
haftmann@30430
   908
haftmann@30430
   909
lemma less_eq_pred_code [code]:
haftmann@30430
   910
  "Seq f \<le> Q = (case f ()
haftmann@30430
   911
   of Empty \<Rightarrow> True
haftmann@30430
   912
    | Insert x P \<Rightarrow> eval Q x \<and> P \<le> Q
haftmann@30430
   913
    | Join P xq \<Rightarrow> P \<le> Q \<and> contained xq Q)"
haftmann@30430
   914
  by (cases "f ()")
haftmann@30430
   915
    (simp_all add: Seq_def single_less_eq_eval contained_less_eq)
haftmann@30430
   916
haftmann@30430
   917
lemma eq_pred_code [code]:
haftmann@31133
   918
  fixes P Q :: "'a pred"
haftmann@38857
   919
  shows "HOL.equal P Q \<longleftrightarrow> P \<le> Q \<and> Q \<le> P"
haftmann@38857
   920
  by (auto simp add: equal)
haftmann@38857
   921
haftmann@38857
   922
lemma [code nbe]:
haftmann@38857
   923
  "HOL.equal (x :: 'a pred) x \<longleftrightarrow> True"
haftmann@38857
   924
  by (fact equal_refl)
haftmann@30430
   925
haftmann@30430
   926
lemma [code]:
haftmann@30430
   927
  "pred_case f P = f (eval P)"
haftmann@30430
   928
  by (cases P) simp
haftmann@30430
   929
haftmann@30430
   930
lemma [code]:
haftmann@30430
   931
  "pred_rec f P = f (eval P)"
haftmann@30430
   932
  by (cases P) simp
haftmann@30328
   933
bulwahn@31105
   934
inductive eq :: "'a \<Rightarrow> 'a \<Rightarrow> bool" where "eq x x"
bulwahn@31105
   935
bulwahn@31105
   936
lemma eq_is_eq: "eq x y \<equiv> (x = y)"
haftmann@31108
   937
  by (rule eq_reflection) (auto intro: eq.intros elim: eq.cases)
haftmann@30948
   938
haftmann@32578
   939
primrec null :: "'a seq \<Rightarrow> bool" where
haftmann@32578
   940
    "null Empty \<longleftrightarrow> True"
haftmann@32578
   941
  | "null (Insert x P) \<longleftrightarrow> False"
haftmann@32578
   942
  | "null (Join P xq) \<longleftrightarrow> is_empty P \<and> null xq"
haftmann@32578
   943
haftmann@32578
   944
lemma null_is_empty:
haftmann@32578
   945
  "null xq \<longleftrightarrow> is_empty (pred_of_seq xq)"
haftmann@32578
   946
  by (induct xq) (simp_all add: is_empty_bot not_is_empty_single is_empty_sup)
haftmann@32578
   947
haftmann@32578
   948
lemma is_empty_code [code]:
haftmann@32578
   949
  "is_empty (Seq f) \<longleftrightarrow> null (f ())"
haftmann@32578
   950
  by (simp add: null_is_empty Seq_def)
haftmann@32578
   951
bulwahn@33111
   952
primrec the_only :: "(unit \<Rightarrow> 'a) \<Rightarrow> 'a seq \<Rightarrow> 'a" where
bulwahn@33111
   953
  [code del]: "the_only dfault Empty = dfault ()"
bulwahn@33111
   954
  | "the_only dfault (Insert x P) = (if is_empty P then x else let y = singleton dfault P in if x = y then x else dfault ())"
bulwahn@33110
   955
  | "the_only dfault (Join P xq) = (if is_empty P then the_only dfault xq else if null xq then singleton dfault P
bulwahn@33110
   956
       else let x = singleton dfault P; y = the_only dfault xq in
bulwahn@33111
   957
       if x = y then x else dfault ())"
haftmann@32578
   958
haftmann@32578
   959
lemma the_only_singleton:
bulwahn@33110
   960
  "the_only dfault xq = singleton dfault (pred_of_seq xq)"
haftmann@32578
   961
  by (induct xq)
haftmann@32578
   962
    (auto simp add: singleton_bot singleton_single is_empty_def
haftmann@32578
   963
    null_is_empty Let_def singleton_sup)
haftmann@32578
   964
haftmann@32578
   965
lemma singleton_code [code]:
bulwahn@33110
   966
  "singleton dfault (Seq f) = (case f ()
bulwahn@33111
   967
   of Empty \<Rightarrow> dfault ()
haftmann@32578
   968
    | Insert x P \<Rightarrow> if is_empty P then x
bulwahn@33110
   969
        else let y = singleton dfault P in
bulwahn@33111
   970
          if x = y then x else dfault ()
bulwahn@33110
   971
    | Join P xq \<Rightarrow> if is_empty P then the_only dfault xq
bulwahn@33110
   972
        else if null xq then singleton dfault P
bulwahn@33110
   973
        else let x = singleton dfault P; y = the_only dfault xq in
bulwahn@33111
   974
          if x = y then x else dfault ())"
haftmann@32578
   975
  by (cases "f ()")
haftmann@32578
   976
   (auto simp add: Seq_def the_only_singleton is_empty_def
haftmann@32578
   977
      null_is_empty singleton_bot singleton_single singleton_sup Let_def)
haftmann@32578
   978
bulwahn@33110
   979
definition not_unique :: "'a pred => 'a"
bulwahn@33110
   980
where
bulwahn@33111
   981
  [code del]: "not_unique A = (THE x. eval A x)"
bulwahn@33110
   982
bulwahn@33111
   983
definition the :: "'a pred => 'a"
bulwahn@33111
   984
where
haftmann@37767
   985
  "the A = (THE x. eval A x)"
bulwahn@33111
   986
haftmann@40674
   987
lemma the_eqI:
haftmann@41080
   988
  "(THE x. eval P x) = x \<Longrightarrow> the P = x"
haftmann@40674
   989
  by (simp add: the_def)
haftmann@40674
   990
haftmann@40674
   991
lemma the_eq [code]: "the A = singleton (\<lambda>x. not_unique A) A"
haftmann@40674
   992
  by (rule the_eqI) (simp add: singleton_def not_unique_def)
bulwahn@33110
   993
haftmann@33988
   994
code_abort not_unique
haftmann@33988
   995
haftmann@36531
   996
code_reflect Predicate
haftmann@36513
   997
  datatypes pred = Seq and seq = Empty | Insert | Join
haftmann@36513
   998
  functions map
haftmann@36513
   999
haftmann@30948
  1000
ML {*
haftmann@30948
  1001
signature PREDICATE =
haftmann@30948
  1002
sig
haftmann@30948
  1003
  datatype 'a pred = Seq of (unit -> 'a seq)
haftmann@30948
  1004
  and 'a seq = Empty | Insert of 'a * 'a pred | Join of 'a pred * 'a seq
haftmann@30959
  1005
  val yield: 'a pred -> ('a * 'a pred) option
haftmann@30959
  1006
  val yieldn: int -> 'a pred -> 'a list * 'a pred
haftmann@31222
  1007
  val map: ('a -> 'b) -> 'a pred -> 'b pred
haftmann@30948
  1008
end;
haftmann@30948
  1009
haftmann@30948
  1010
structure Predicate : PREDICATE =
haftmann@30948
  1011
struct
haftmann@30948
  1012
haftmann@36513
  1013
datatype pred = datatype Predicate.pred
haftmann@36513
  1014
datatype seq = datatype Predicate.seq
haftmann@36513
  1015
haftmann@36513
  1016
fun map f = Predicate.map f;
haftmann@30959
  1017
haftmann@36513
  1018
fun yield (Seq f) = next (f ())
haftmann@36513
  1019
and next Empty = NONE
haftmann@36513
  1020
  | next (Insert (x, P)) = SOME (x, P)
haftmann@36513
  1021
  | next (Join (P, xq)) = (case yield P
haftmann@30959
  1022
     of NONE => next xq
haftmann@36513
  1023
      | SOME (x, Q) => SOME (x, Seq (fn _ => Join (Q, xq))));
haftmann@30959
  1024
haftmann@30959
  1025
fun anamorph f k x = (if k = 0 then ([], x)
haftmann@30959
  1026
  else case f x
haftmann@30959
  1027
   of NONE => ([], x)
haftmann@30959
  1028
    | SOME (v, y) => let
haftmann@30959
  1029
        val (vs, z) = anamorph f (k - 1) y
haftmann@33607
  1030
      in (v :: vs, z) end);
haftmann@30959
  1031
haftmann@30959
  1032
fun yieldn P = anamorph yield P;
haftmann@30948
  1033
haftmann@30948
  1034
end;
haftmann@30948
  1035
*}
haftmann@30948
  1036
haftmann@30328
  1037
no_notation
haftmann@41082
  1038
  bot ("\<bottom>") and
haftmann@41082
  1039
  top ("\<top>") and
haftmann@30328
  1040
  inf (infixl "\<sqinter>" 70) and
haftmann@30328
  1041
  sup (infixl "\<squnion>" 65) and
haftmann@30328
  1042
  Inf ("\<Sqinter>_" [900] 900) and
haftmann@30328
  1043
  Sup ("\<Squnion>_" [900] 900) and
haftmann@30328
  1044
  bind (infixl "\<guillemotright>=" 70)
haftmann@30328
  1045
haftmann@41080
  1046
no_syntax (xsymbols)
haftmann@41082
  1047
  "_INF1"     :: "pttrns \<Rightarrow> 'b \<Rightarrow> 'b"           ("(3\<Sqinter>_./ _)" [0, 10] 10)
haftmann@41082
  1048
  "_INF"      :: "pttrn \<Rightarrow> 'a set \<Rightarrow> 'b \<Rightarrow> 'b"  ("(3\<Sqinter>_\<in>_./ _)" [0, 0, 10] 10)
haftmann@41080
  1049
  "_SUP1"     :: "pttrns \<Rightarrow> 'b \<Rightarrow> 'b"           ("(3\<Squnion>_./ _)" [0, 10] 10)
haftmann@41080
  1050
  "_SUP"      :: "pttrn \<Rightarrow> 'a set \<Rightarrow> 'b \<Rightarrow> 'b"  ("(3\<Squnion>_\<in>_./ _)" [0, 0, 10] 10)
haftmann@41080
  1051
wenzelm@36176
  1052
hide_type (open) pred seq
wenzelm@36176
  1053
hide_const (open) Pred eval single bind is_empty singleton if_pred not_pred holds
bulwahn@33111
  1054
  Empty Insert Join Seq member pred_of_seq "apply" adjunct null the_only eq map not_unique the
haftmann@30328
  1055
haftmann@30328
  1056
end