0
|
1 |
(* Title: HOL/hol.ML
|
|
2 |
ID: $Id$
|
|
3 |
Author: Tobias Nipkow
|
|
4 |
Copyright 1991 University of Cambridge
|
|
5 |
|
|
6 |
For hol.thy
|
|
7 |
Derived rules from Appendix of Mike Gordons HOL Report, Cambridge TR 68
|
|
8 |
*)
|
|
9 |
|
|
10 |
open HOL;
|
|
11 |
|
|
12 |
signature HOL_LEMMAS =
|
|
13 |
sig
|
|
14 |
val allE: thm
|
|
15 |
val all_dupE: thm
|
|
16 |
val allI: thm
|
|
17 |
val arg_cong: thm
|
|
18 |
val fun_cong: thm
|
|
19 |
val box_equals: thm
|
|
20 |
val ccontr: thm
|
|
21 |
val classical: thm
|
|
22 |
val cong: thm
|
|
23 |
val conjunct1: thm
|
|
24 |
val conjunct2: thm
|
|
25 |
val conjE: thm
|
|
26 |
val conjI: thm
|
|
27 |
val contrapos: thm
|
|
28 |
val disjCI: thm
|
|
29 |
val disjE: thm
|
|
30 |
val disjI1: thm
|
|
31 |
val disjI2: thm
|
|
32 |
val eqTrueI: thm
|
|
33 |
val eqTrueE: thm
|
|
34 |
val ex1E: thm
|
|
35 |
val ex1I: thm
|
|
36 |
val exCI: thm
|
|
37 |
val exI: thm
|
|
38 |
val exE: thm
|
|
39 |
val excluded_middle: thm
|
|
40 |
val FalseE: thm
|
|
41 |
val False_neq_True: thm
|
|
42 |
val iffCE : thm
|
|
43 |
val iffD1: thm
|
|
44 |
val iffD2: thm
|
|
45 |
val iffE: thm
|
|
46 |
val iffI: thm
|
|
47 |
val impCE: thm
|
|
48 |
val impE: thm
|
|
49 |
val not_sym: thm
|
|
50 |
val notE: thm
|
|
51 |
val notI: thm
|
|
52 |
val notnotD : thm
|
|
53 |
val rev_mp: thm
|
|
54 |
val select_equality: thm
|
|
55 |
val spec: thm
|
|
56 |
val sstac: thm list -> int -> tactic
|
|
57 |
val ssubst: thm
|
|
58 |
val stac: thm -> int -> tactic
|
|
59 |
val strip_tac: int -> tactic
|
|
60 |
val swap: thm
|
|
61 |
val sym: thm
|
|
62 |
val trans: thm
|
|
63 |
val TrueI: thm
|
|
64 |
end;
|
|
65 |
|
|
66 |
structure HOL_Lemmas : HOL_LEMMAS =
|
|
67 |
|
|
68 |
struct
|
|
69 |
|
|
70 |
(** Equality **)
|
|
71 |
|
|
72 |
val sym = prove_goal HOL.thy "s=t ==> t=s"
|
|
73 |
(fn prems => [cut_facts_tac prems 1, etac subst 1, rtac refl 1]);
|
|
74 |
|
|
75 |
(*calling "standard" reduces maxidx to 0*)
|
|
76 |
val ssubst = standard (sym RS subst);
|
|
77 |
|
|
78 |
val trans = prove_goal HOL.thy "[| r=s; s=t |] ==> r=t"
|
|
79 |
(fn prems =>
|
|
80 |
[rtac subst 1, resolve_tac prems 1, resolve_tac prems 1]);
|
|
81 |
|
|
82 |
(*Useful with eresolve_tac for proving equalties from known equalities.
|
|
83 |
a = b
|
|
84 |
| |
|
|
85 |
c = d *)
|
|
86 |
val box_equals = prove_goal HOL.thy
|
|
87 |
"[| a=b; a=c; b=d |] ==> c=d"
|
|
88 |
(fn prems=>
|
|
89 |
[ (rtac trans 1),
|
|
90 |
(rtac trans 1),
|
|
91 |
(rtac sym 1),
|
|
92 |
(REPEAT (resolve_tac prems 1)) ]);
|
|
93 |
|
|
94 |
(** Congruence rules for meta-application **)
|
|
95 |
|
|
96 |
(*similar to AP_THM in Gordon's HOL*)
|
|
97 |
val fun_cong = prove_goal HOL.thy "(f::'a=>'b) = g ==> f(x)=g(x)"
|
|
98 |
(fn [prem] => [rtac (prem RS subst) 1, rtac refl 1]);
|
|
99 |
|
|
100 |
(*similar to AP_TERM in Gordon's HOL and FOL's subst_context*)
|
|
101 |
val arg_cong = prove_goal HOL.thy "x=y ==> f(x)=f(y)"
|
|
102 |
(fn [prem] => [rtac (prem RS subst) 1, rtac refl 1]);
|
|
103 |
|
|
104 |
val cong = prove_goal HOL.thy
|
|
105 |
"[| f = g; x::'a = y |] ==> f(x) = g(y)"
|
|
106 |
(fn [prem1,prem2] =>
|
|
107 |
[rtac (prem1 RS subst) 1, rtac (prem2 RS subst) 1, rtac refl 1]);
|
|
108 |
|
|
109 |
(** Equality of booleans -- iff **)
|
|
110 |
|
|
111 |
val iffI = prove_goal HOL.thy
|
|
112 |
"[| P ==> Q; Q ==> P |] ==> P=Q"
|
|
113 |
(fn prems=> [ (REPEAT (ares_tac (prems@[impI, iff RS mp RS mp]) 1)) ]);
|
|
114 |
|
|
115 |
val iffD2 = prove_goal HOL.thy "[| P=Q; Q |] ==> P"
|
|
116 |
(fn prems =>
|
|
117 |
[rtac ssubst 1, resolve_tac prems 1, resolve_tac prems 1]);
|
|
118 |
|
|
119 |
val iffD1 = sym RS iffD2;
|
|
120 |
|
|
121 |
val iffE = prove_goal HOL.thy
|
|
122 |
"[| P=Q; [| P --> Q; Q --> P |] ==> R |] ==> R"
|
|
123 |
(fn [p1,p2] => [REPEAT(ares_tac([p1 RS iffD2, p1 RS iffD1, p2, impI])1)]);
|
|
124 |
|
|
125 |
(** True **)
|
|
126 |
|
|
127 |
val TrueI = refl RS (True_def RS iffD2);
|
|
128 |
|
|
129 |
val eqTrueI = prove_goal HOL.thy "P ==> P=True"
|
|
130 |
(fn prems => [REPEAT(resolve_tac ([iffI,TrueI]@prems) 1)]);
|
|
131 |
|
|
132 |
val eqTrueE = prove_goal HOL.thy "P=True ==> P"
|
|
133 |
(fn prems => [REPEAT(resolve_tac (prems@[TrueI,iffD2]) 1)]);
|
|
134 |
|
|
135 |
(** Universal quantifier **)
|
|
136 |
|
|
137 |
val allI = prove_goal HOL.thy "(!!x::'a. P(x)) ==> !x. P(x)"
|
|
138 |
(fn [asm] => [rtac (All_def RS ssubst) 1, rtac (asm RS (eqTrueI RS ext)) 1]);
|
|
139 |
|
|
140 |
val spec = prove_goal HOL.thy "! x::'a.P(x) ==> P(x)"
|
|
141 |
(fn prems =>
|
|
142 |
[ rtac eqTrueE 1,
|
|
143 |
resolve_tac (prems RL [All_def RS subst] RL [fun_cong]) 1 ]);
|
|
144 |
|
|
145 |
val allE = prove_goal HOL.thy "[| !x.P(x); P(x) ==> R |] ==> R"
|
|
146 |
(fn major::prems=>
|
|
147 |
[ (REPEAT (resolve_tac (prems @ [major RS spec]) 1)) ]);
|
|
148 |
|
|
149 |
val all_dupE = prove_goal HOL.thy
|
|
150 |
"[| ! x.P(x); [| P(x); ! x.P(x) |] ==> R |] ==> R"
|
|
151 |
(fn prems =>
|
|
152 |
[ (REPEAT (resolve_tac (prems @ (prems RL [spec])) 1)) ]);
|
|
153 |
|
|
154 |
|
|
155 |
(** False ** Depends upon spec; it is impossible to do propositional logic
|
|
156 |
before quantifiers! **)
|
|
157 |
|
|
158 |
val FalseE = prove_goal HOL.thy "False ==> P"
|
|
159 |
(fn prems => [rtac spec 1, rtac (False_def RS subst) 1, resolve_tac prems 1]);
|
|
160 |
|
|
161 |
val False_neq_True = prove_goal HOL.thy "False=True ==> P"
|
|
162 |
(fn [prem] => [rtac (prem RS eqTrueE RS FalseE) 1]);
|
|
163 |
|
|
164 |
|
|
165 |
(** Negation **)
|
|
166 |
|
|
167 |
val notI = prove_goal HOL.thy "(P ==> False) ==> ~P"
|
|
168 |
(fn prems=> [rtac (not_def RS ssubst) 1, rtac impI 1, eresolve_tac prems 1]);
|
|
169 |
|
|
170 |
val notE = prove_goal HOL.thy "[| ~P; P |] ==> R"
|
|
171 |
(fn prems =>
|
|
172 |
[rtac (mp RS FalseE) 1,
|
|
173 |
resolve_tac prems 2, rtac (not_def RS subst) 1,
|
|
174 |
resolve_tac prems 1]);
|
|
175 |
|
|
176 |
(** Implication **)
|
|
177 |
|
|
178 |
val impE = prove_goal HOL.thy "[| P-->Q; P; Q ==> R |] ==> R"
|
|
179 |
(fn prems=> [ (REPEAT (resolve_tac (prems@[mp]) 1)) ]);
|
|
180 |
|
|
181 |
(* Reduces Q to P-->Q, allowing substitution in P. *)
|
|
182 |
val rev_mp = prove_goal HOL.thy "[| P; P --> Q |] ==> Q"
|
|
183 |
(fn prems=> [ (REPEAT (resolve_tac (prems@[mp]) 1)) ]);
|
|
184 |
|
|
185 |
val contrapos = prove_goal HOL.thy "[| ~Q; P==>Q |] ==> ~P"
|
|
186 |
(fn [major,minor]=>
|
|
187 |
[ (rtac (major RS notE RS notI) 1),
|
|
188 |
(etac minor 1) ]);
|
|
189 |
|
|
190 |
(* ~(?t = ?s) ==> ~(?s = ?t) *)
|
|
191 |
val [not_sym] = compose(sym,2,contrapos);
|
|
192 |
|
|
193 |
|
|
194 |
(** Existential quantifier **)
|
|
195 |
|
|
196 |
val exI = prove_goal HOL.thy "P(x) ==> ? x::'a.P(x)"
|
|
197 |
(fn prems =>
|
|
198 |
[rtac (selectI RS (Ex_def RS ssubst)) 1,
|
|
199 |
resolve_tac prems 1]);
|
|
200 |
|
|
201 |
val exE = prove_goal HOL.thy "[| ? x::'a.P(x); !!x. P(x) ==> Q |] ==> Q"
|
|
202 |
(fn prems =>
|
|
203 |
[resolve_tac prems 1, res_inst_tac [("P","%C.C(P)")] subst 1,
|
|
204 |
rtac Ex_def 1, resolve_tac prems 1]);
|
|
205 |
|
|
206 |
|
|
207 |
(** Conjunction **)
|
|
208 |
|
|
209 |
val conjI = prove_goal HOL.thy "[| P; Q |] ==> P&Q"
|
|
210 |
(fn prems =>
|
|
211 |
[ (rtac (and_def RS ssubst) 1),
|
|
212 |
(REPEAT (resolve_tac (prems@[allI,impI]) 1 ORELSE etac (mp RS mp) 1)) ]);
|
|
213 |
|
|
214 |
val conjunct1 = prove_goal HOL.thy "[| P & Q |] ==> P"
|
|
215 |
(fn prems =>
|
|
216 |
[ (resolve_tac (prems RL [and_def RS subst] RL [spec] RL [mp]) 1),
|
|
217 |
(REPEAT(ares_tac [impI] 1)) ]);
|
|
218 |
|
|
219 |
val conjunct2 = prove_goal HOL.thy "[| P & Q |] ==> Q"
|
|
220 |
(fn prems =>
|
|
221 |
[ (resolve_tac (prems RL [and_def RS subst] RL [spec] RL [mp]) 1),
|
|
222 |
(REPEAT(ares_tac [impI] 1)) ]);
|
|
223 |
|
|
224 |
val conjE = prove_goal HOL.thy "[| P&Q; [| P; Q |] ==> R |] ==> R"
|
|
225 |
(fn prems =>
|
|
226 |
[cut_facts_tac prems 1, resolve_tac prems 1,
|
|
227 |
etac conjunct1 1, etac conjunct2 1]);
|
|
228 |
|
|
229 |
(** Disjunction *)
|
|
230 |
|
|
231 |
val disjI1 = prove_goal HOL.thy "P ==> P|Q"
|
|
232 |
(fn [prem] =>
|
|
233 |
[rtac (or_def RS ssubst) 1,
|
|
234 |
REPEAT(ares_tac [allI,impI, prem RSN (2,mp)] 1)]);
|
|
235 |
|
|
236 |
val disjI2 = prove_goal HOL.thy "Q ==> P|Q"
|
|
237 |
(fn [prem] =>
|
|
238 |
[rtac (or_def RS ssubst) 1,
|
|
239 |
REPEAT(ares_tac [allI,impI, prem RSN (2,mp)] 1)]);
|
|
240 |
|
|
241 |
val disjE = prove_goal HOL.thy "[| P | Q; P ==> R; Q ==> R |] ==> R"
|
|
242 |
(fn [a1,a2,a3] =>
|
|
243 |
[rtac (mp RS mp) 1, rtac spec 1, rtac (or_def RS subst) 1, rtac a1 1,
|
|
244 |
rtac (a2 RS impI) 1, atac 1, rtac (a3 RS impI) 1, atac 1]);
|
|
245 |
|
|
246 |
(** CCONTR -- classical logic **)
|
|
247 |
|
|
248 |
val ccontr = prove_goal HOL.thy "(~P ==> False) ==> P"
|
|
249 |
(fn prems =>
|
|
250 |
[rtac (True_or_False RS (disjE RS eqTrueE)) 1, atac 1,
|
|
251 |
rtac spec 1, rtac (False_def RS subst) 1, resolve_tac prems 1,
|
|
252 |
rtac ssubst 1, atac 1, rtac (not_def RS ssubst) 1,
|
|
253 |
REPEAT (ares_tac [impI] 1) ]);
|
|
254 |
|
|
255 |
val classical = prove_goal HOL.thy "(~P ==> P) ==> P"
|
|
256 |
(fn prems =>
|
|
257 |
[rtac ccontr 1,
|
|
258 |
REPEAT (ares_tac (prems@[notE]) 1)]);
|
|
259 |
|
|
260 |
|
|
261 |
(*Double negation law*)
|
|
262 |
val notnotD = prove_goal HOL.thy "~~P ==> P"
|
|
263 |
(fn [major]=>
|
|
264 |
[ (rtac classical 1), (eresolve_tac [major RS notE] 1) ]);
|
|
265 |
|
|
266 |
|
|
267 |
(** Unique existence **)
|
|
268 |
|
|
269 |
val ex1I = prove_goal HOL.thy
|
|
270 |
"[| P(a); !!x. P(x) ==> x=a |] ==> ?! x. P(x)"
|
|
271 |
(fn prems =>
|
|
272 |
[ (rtac (Ex1_def RS ssubst) 1),
|
|
273 |
(REPEAT (ares_tac (prems@[exI,conjI,allI,impI]) 1)) ]);
|
|
274 |
|
|
275 |
val ex1E = prove_goal HOL.thy
|
|
276 |
"[| ?! x.P(x); !!x. [| P(x); ! y. P(y) --> y=x |] ==> R |] ==> R"
|
|
277 |
(fn major::prems =>
|
|
278 |
[ (resolve_tac ([major] RL [Ex1_def RS subst] RL [exE]) 1),
|
|
279 |
(REPEAT (etac conjE 1 ORELSE ares_tac prems 1)) ]);
|
|
280 |
|
|
281 |
|
|
282 |
(** Select: Hilbert's Epsilon-operator **)
|
|
283 |
|
|
284 |
val select_equality = prove_goal HOL.thy
|
|
285 |
"[| P(a); !!x. P(x) ==> x=a |] ==> (@x.P(x)) = a"
|
|
286 |
(fn prems => [ resolve_tac prems 1,
|
|
287 |
rtac selectI 1,
|
|
288 |
resolve_tac prems 1 ]);
|
|
289 |
|
|
290 |
(** Classical intro rules for disjunction and existential quantifiers *)
|
|
291 |
|
|
292 |
val disjCI = prove_goal HOL.thy "(~Q ==> P) ==> P|Q"
|
|
293 |
(fn prems=>
|
|
294 |
[ (rtac classical 1),
|
|
295 |
(REPEAT (ares_tac (prems@[disjI1,notI]) 1)),
|
|
296 |
(REPEAT (ares_tac (prems@[disjI2,notE]) 1)) ]);
|
|
297 |
|
|
298 |
val excluded_middle = prove_goal HOL.thy "~P | P"
|
|
299 |
(fn _ => [ (REPEAT (ares_tac [disjCI] 1)) ]);
|
|
300 |
|
|
301 |
(*Classical implies (-->) elimination. *)
|
|
302 |
val impCE = prove_goal HOL.thy "[| P-->Q; ~P ==> R; Q ==> R |] ==> R"
|
|
303 |
(fn major::prems=>
|
|
304 |
[ rtac (excluded_middle RS disjE) 1,
|
|
305 |
REPEAT (DEPTH_SOLVE_1 (ares_tac (prems @ [major RS mp]) 1))]);
|
|
306 |
|
|
307 |
(*Classical <-> elimination. *)
|
|
308 |
val iffCE = prove_goal HOL.thy
|
|
309 |
"[| P=Q; [| P; Q |] ==> R; [| ~P; ~Q |] ==> R |] ==> R"
|
|
310 |
(fn major::prems =>
|
|
311 |
[ (rtac (major RS iffE) 1),
|
|
312 |
(REPEAT (DEPTH_SOLVE_1
|
|
313 |
(eresolve_tac ([asm_rl,impCE,notE]@prems) 1))) ]);
|
|
314 |
|
|
315 |
val exCI = prove_goal HOL.thy "(! x. ~P(x) ==> P(a)) ==> ? x.P(x)"
|
|
316 |
(fn prems=>
|
|
317 |
[ (rtac ccontr 1),
|
|
318 |
(REPEAT (ares_tac (prems@[exI,allI,notI,notE]) 1)) ]);
|
|
319 |
|
|
320 |
(*Required by the "classical" module*)
|
|
321 |
val swap = prove_goal HOL.thy "~P ==> (~Q ==> P) ==> Q"
|
|
322 |
(fn major::prems=>
|
|
323 |
[ rtac ccontr 1, rtac (major RS notE) 1, REPEAT (ares_tac prems 1)]);
|
|
324 |
|
|
325 |
(** Standard abbreviations **)
|
|
326 |
|
|
327 |
fun stac th = rtac(th RS ssubst);
|
|
328 |
fun sstac ths = EVERY' (map stac ths);
|
|
329 |
fun strip_tac i = REPEAT(resolve_tac [impI,allI] i);
|
|
330 |
|
|
331 |
end;
|
|
332 |
|
|
333 |
open HOL_Lemmas;
|
|
334 |
|