src/HOL/UNITY/Union.thy
author wenzelm
Sun, 15 Oct 2000 19:50:35 +0200
changeset 10220 2a726de6e124
parent 10064 1a77667b21ef
child 12114 a8e860c86252
permissions -rw-r--r--
proper symbol markup with \isamath, \isatext; support sub/super scripts:
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
5252
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
     1
(*  Title:      HOL/UNITY/Union.thy
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
     2
    ID:         $Id$
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
     3
    Author:     Lawrence C Paulson, Cambridge University Computer Laboratory
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
     4
    Copyright   1998  University of Cambridge
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
     5
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
     6
Unions of programs
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
     7
5804
8e0a4c4fd67b Revising the Client proof as suggested by Michel Charpentier. New lemmas
paulson
parents: 5648
diff changeset
     8
Partly from Misra's Chapter 5: Asynchronous Compositions of Programs
5252
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
     9
*)
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
    10
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
    11
Union = SubstAx + FP +
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
    12
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
    13
constdefs
10064
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    14
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    15
  (*FIXME: conjoin Init F Int Init G ~= {} *) 
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    16
  ok :: ['a program, 'a program] => bool      (infixl 65)
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    17
    "F ok G == Acts F <= AllowedActs G &
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    18
               Acts G <= AllowedActs F"
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    19
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    20
  (*FIXME: conjoin (INT i:I. Init (F i)) ~= {} *) 
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    21
  OK  :: ['a set, 'a => 'b program] => bool
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    22
    "OK I F == (ALL i:I. ALL j: I-{i}. Acts (F i) <= AllowedActs (F j))"
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    23
5648
fe887910e32e specifications as sets of programs
paulson
parents: 5611
diff changeset
    24
  JOIN  :: ['a set, 'a => 'b program] => 'b program
10064
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    25
    "JOIN I F == mk_program (INT i:I. Init (F i), UN i:I. Acts (F i),
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    26
			     INT i:I. AllowedActs (F i))"
5252
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
    27
5648
fe887910e32e specifications as sets of programs
paulson
parents: 5611
diff changeset
    28
  Join :: ['a program, 'a program] => 'a program      (infixl 65)
10064
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    29
    "F Join G == mk_program (Init F Int Init G, Acts F Un Acts G,
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    30
			     AllowedActs F Int AllowedActs G)"
5252
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
    31
6295
351b3c2b0d83 removed the infernal States, eqStates, compatible, etc.
paulson
parents: 6012
diff changeset
    32
  SKIP :: 'a program
10064
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    33
    "SKIP == mk_program (UNIV, {}, UNIV)"
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    34
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    35
  (*Characterizes safety properties.  Used with specifying AllowedActs*)
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    36
  safety_prop :: "'a program set => bool"
1a77667b21ef added compatibility relation: AllowedActs, Allowed, ok,
paulson
parents: 9685
diff changeset
    37
    "safety_prop X == SKIP: X & (ALL G. Acts G <= UNION X Acts --> G : X)"
5259
86d80749453f Null program and a few new results
paulson
parents: 5252
diff changeset
    38
5313
1861a564d7e2 Constrains, Stable, Invariant...more of the substitution axiom, but Union
paulson
parents: 5259
diff changeset
    39
syntax
7359
98a2afab3f86 extra syntax for JN, making it more like UN
paulson
parents: 6295
diff changeset
    40
  "@JOIN1"     :: [pttrns, 'b set] => 'b set         ("(3JN _./ _)" 10)
5313
1861a564d7e2 Constrains, Stable, Invariant...more of the substitution axiom, but Union
paulson
parents: 5259
diff changeset
    41
  "@JOIN"      :: [pttrn, 'a set, 'b set] => 'b set  ("(3JN _:_./ _)" 10)
1861a564d7e2 Constrains, Stable, Invariant...more of the substitution axiom, but Union
paulson
parents: 5259
diff changeset
    42
1861a564d7e2 Constrains, Stable, Invariant...more of the substitution axiom, but Union
paulson
parents: 5259
diff changeset
    43
translations
1861a564d7e2 Constrains, Stable, Invariant...more of the substitution axiom, but Union
paulson
parents: 5259
diff changeset
    44
  "JN x:A. B"   == "JOIN A (%x. B)"
7359
98a2afab3f86 extra syntax for JN, making it more like UN
paulson
parents: 6295
diff changeset
    45
  "JN x y. B"   == "JN x. JN y. B"
98a2afab3f86 extra syntax for JN, making it more like UN
paulson
parents: 6295
diff changeset
    46
  "JN x. B"     == "JOIN UNIV (%x. B)"
5313
1861a564d7e2 Constrains, Stable, Invariant...more of the substitution axiom, but Union
paulson
parents: 5259
diff changeset
    47
9685
6d123a7e30bd xsymbols for leads-to and Join
paulson
parents: 8055
diff changeset
    48
syntax (symbols)
6d123a7e30bd xsymbols for leads-to and Join
paulson
parents: 8055
diff changeset
    49
  SKIP      :: 'a program                              ("\\<bottom>")
6d123a7e30bd xsymbols for leads-to and Join
paulson
parents: 8055
diff changeset
    50
  "op Join" :: ['a program, 'a program] => 'a program  (infixl "\\<squnion>" 65)
6d123a7e30bd xsymbols for leads-to and Join
paulson
parents: 8055
diff changeset
    51
  "@JOIN1"  :: [pttrns, 'b set] => 'b set              ("(3\\<Squnion> _./ _)" 10)
6d123a7e30bd xsymbols for leads-to and Join
paulson
parents: 8055
diff changeset
    52
  "@JOIN"   :: [pttrn, 'a set, 'b set] => 'b set       ("(3\\<Squnion> _:_./ _)" 10)
6d123a7e30bd xsymbols for leads-to and Join
paulson
parents: 8055
diff changeset
    53
5252
1b0f14d11142 Union primitives and examples
paulson
parents:
diff changeset
    54
end