src/HOL/Isar_examples/Cantor.thy
author wenzelm
Sat, 09 Oct 1999 23:20:02 +0200
changeset 7819 6dd018b6cf3f
parent 7800 8ee919e42174
child 7833 f5288e4b95d1
permissions -rw-r--r--
tuned presentation;
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
6444
2ebe9e630cab Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff changeset
     1
(*  Title:      HOL/Isar_examples/Cantor.thy
2ebe9e630cab Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff changeset
     2
    ID:         $Id$
2ebe9e630cab Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff changeset
     3
    Author:     Markus Wenzel, TU Muenchen
2ebe9e630cab Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff changeset
     4
*)
2ebe9e630cab Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff changeset
     5
7800
8ee919e42174 improved presentation;
wenzelm
parents: 7748
diff changeset
     6
header {* Cantor's Theorem *};
6444
2ebe9e630cab Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff changeset
     7
7748
5b9c45b21782 improved presentation;
wenzelm
parents: 7480
diff changeset
     8
theory Cantor = Main:;
6505
2863855a6902 elaborated;
wenzelm
parents: 6494
diff changeset
     9
6744
9727e83f0578 changed {| |} verbatim syntax to {* *};
wenzelm
parents: 6517
diff changeset
    10
text {*
7819
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    11
 This is an Isar'ized version of the final example of the Isabelle/HOL
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    12
 manual \cite{isabelle-HOL}.
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    13
*};
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    14
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    15
text {*
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    16
 Cantor's Theorem states that every set has more subsets than it has
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    17
 elements.  It has become a favorite basic example in pure
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    18
 higher-order logic since it is so easily expressed: \[\all{f::\alpha
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    19
 \To \alpha \To \idt{bool}} \ex{S::\alpha \To \idt{bool}}
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    20
 \all{x::\alpha}. f \ap x \not= S\]
7748
5b9c45b21782 improved presentation;
wenzelm
parents: 7480
diff changeset
    21
  
7819
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    22
 Viewing types as sets, $\alpha \To \idt{bool}$ represents the
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    23
 powerset of $\alpha$.  This version of the theorem states that for
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    24
 every function from $\alpha$ to its powerset, some subset is outside
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    25
 its range.  The Isabelle/Isar proofs below use HOL's set theory, with
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    26
 the type $\alpha \ap \idt{set}$ and the operator $\idt{range}$.
7748
5b9c45b21782 improved presentation;
wenzelm
parents: 7480
diff changeset
    27
  
7819
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    28
 \bigskip We first consider a rather verbose version of the proof,
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    29
 with the reasoning expressed quite naively.  We only make use of the
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    30
 pure core of the Isar proof language.
6744
9727e83f0578 changed {| |} verbatim syntax to {* *};
wenzelm
parents: 6517
diff changeset
    31
*};
6505
2863855a6902 elaborated;
wenzelm
parents: 6494
diff changeset
    32
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    33
theorem "EX S. S ~: range(f :: 'a => 'a set)";
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    34
proof;
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    35
  let ?S = "{x. x ~: f x}";
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    36
  show "?S ~: range f";
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    37
  proof;
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    38
    assume "?S : range f";
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    39
    then; show False;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    40
    proof;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    41
      fix y; 
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    42
      assume "?S = f y";
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    43
      then; show ?thesis;
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    44
      proof (rule equalityCE);
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    45
        assume y_in_S: "y : ?S";
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    46
        assume y_in_fy: "y : f y";
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    47
        from y_in_S; have y_notin_fy: "y ~: f y"; ..;
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    48
        from y_notin_fy y_in_fy; show ?thesis; by contradiction;
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    49
      next;
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    50
        assume y_notin_S: "y ~: ?S";
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    51
        assume y_notin_fy: "y ~: f y";
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    52
        from y_notin_S; have y_in_fy: "y : f y"; ..;
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    53
        from y_notin_fy y_in_fy; show ?thesis; by contradiction;
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    54
      qed;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    55
    qed;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    56
  qed;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    57
qed;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    58
6744
9727e83f0578 changed {| |} verbatim syntax to {* *};
wenzelm
parents: 6517
diff changeset
    59
text {*
7819
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    60
 The following version of the proof essentially does the same
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    61
 reasoning, only that it is expressed more neatly, with some derived
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    62
 Isar language elements involved.
6744
9727e83f0578 changed {| |} verbatim syntax to {* *};
wenzelm
parents: 6517
diff changeset
    63
*};
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    64
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    65
theorem "EX S. S ~: range(f :: 'a => 'a set)";
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    66
proof;
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    67
  let ?S = "{x. x ~: f x}";
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    68
  show "?S ~: range f";
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    69
  proof;
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    70
    assume "?S : range f";
6505
2863855a6902 elaborated;
wenzelm
parents: 6494
diff changeset
    71
    thus False;
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    72
    proof;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    73
      fix y; 
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    74
      assume "?S = f y";
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    75
      thus ?thesis;
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    76
      proof (rule equalityCE);
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    77
        assume "y : f y";
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    78
        assume "y : ?S"; hence "y ~: f y"; ..;
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    79
        thus ?thesis; by contradiction;
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    80
      next;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    81
        assume "y ~: f y";
7480
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    82
        assume "y ~: ?S"; hence "y : f y"; ..;
0a0e0dbe1269 replaced ?? by ?;
wenzelm
parents: 6746
diff changeset
    83
        thus ?thesis; by contradiction;
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    84
      qed;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    85
    qed;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    86
  qed;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    87
qed;
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    88
6744
9727e83f0578 changed {| |} verbatim syntax to {* *};
wenzelm
parents: 6517
diff changeset
    89
text {*
7819
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    90
 How much creativity is required?  As it happens, Isabelle can prove
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    91
 this theorem automatically.  The default classical set contains rules
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    92
 for most of the constructs of HOL's set theory.  We must augment it
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    93
 with \name{equalityCE} to break up set equalities, and then apply
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    94
 best-first search.  Depth-first search would diverge, but best-first
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
    95
 search successfully navigates through the large search space.
6744
9727e83f0578 changed {| |} verbatim syntax to {* *};
wenzelm
parents: 6517
diff changeset
    96
*};
6505
2863855a6902 elaborated;
wenzelm
parents: 6494
diff changeset
    97
6494
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    98
theorem "EX S. S ~: range(f :: 'a => 'a set)";
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
    99
  by (best elim: equalityCE);
ab1442d2e4e1 detailed proofs;
wenzelm
parents: 6444
diff changeset
   100
6744
9727e83f0578 changed {| |} verbatim syntax to {* *};
wenzelm
parents: 6517
diff changeset
   101
text {*
7819
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
   102
 While this establishes the same theorem internally, we do not get any
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
   103
 idea of how the proof actually works.  There is currently no way to
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
   104
 transform internal system-level representations of Isabelle proofs
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
   105
 back into Isar documents.  Writing proof documents really is a
6dd018b6cf3f tuned presentation;
wenzelm
parents: 7800
diff changeset
   106
 creative process.
6744
9727e83f0578 changed {| |} verbatim syntax to {* *};
wenzelm
parents: 6517
diff changeset
   107
*};
6444
2ebe9e630cab Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff changeset
   108
2ebe9e630cab Miscellaneous Isabelle/Isar examples for Higher-Order Logic.
wenzelm
parents:
diff changeset
   109
end;