src/HOL/UNITY/README.html
author paulson
Mon Mar 05 15:25:11 2001 +0100 (2001-03-05)
changeset 11193 851c90b23a9e
parent 5679 916c75592bf6
child 15283 f21466450330
permissions -rw-r--r--
reorganization of HOL/UNITY, moving examples to subdirectories Simple and Comp
paulson@4776
     1
<!-- $Id$ -->
paulson@4776
     2
<HTML><HEAD><TITLE>HOL/UNITY/README</TITLE></HEAD><BODY>
paulson@4776
     3
paulson@4776
     4
<H2>UNITY--Chandy and Misra's UNITY formalism</H2>
paulson@4776
     5
paulson@4776
     6
<P>The book <EM>Parallel Program Design: A Foundation</EM> by Chandy and Misra
paulson@5679
     7
(Addison-Wesley, 1988) presents the UNITY formalism.  UNITY consists of an
paulson@5679
     8
abstract programming language of guarded assignments and a calculus for
paulson@5679
     9
reasoning about such programs.  Misra's 1994 paper "A Logic for Concurrent
paulson@5679
    10
Programming" presents New UNITY, giving more elegant foundations for a more
paulson@5679
    11
general class of languages.  In recent work, Chandy and Sanders have proposed
paulson@5679
    12
new methods for reasoning about systems composed of many components.
paulson@4776
    13
paulson@5679
    14
<P>This directory formalizes these new ideas for UNITY.  The Isabelle examples
paulson@5679
    15
may seem strange to UNITY traditionalists.  Hand UNITY proofs tend to be
paulson@5679
    16
written in the forwards direction, as in informal mathematics, while Isabelle
paulson@5679
    17
works best in a backwards (goal-directed) style.  Programs are expressed as
paulson@5679
    18
sets of commands, where each command is a relation on states.  Quantification
paulson@5679
    19
over commands using [] is easily expressed.  At present, there are no examples
paulson@5679
    20
of quantification using ||.
paulson@4776
    21
paulson@5679
    22
<P>A UNITY assertion denotes the set of programs satisfying it, as
paulson@5679
    23
in the propositions-as-types paradigm.  The resulting style is readable if
paulson@5679
    24
unconventional.
paulson@4776
    25
paulson@4776
    26
<P> Safety proofs (invariants) are often proved automatically.  Progress
paulson@4776
    27
proofs involving ENSURES can sometimes be proved automatically.  The
paulson@4776
    28
level of automation appears to be about the same as in HOL-UNITY by Flemming
paulson@4776
    29
Andersen et al.
paulson@4776
    30
paulson@11193
    31
<P>
paulson@11193
    32
The directory <A HREF="Simple/"><CODE>Simple</CODE></A>
paulson@11193
    33
presents a few examples, mostly taken from Misra's 1994
paulson@11193
    34
paper, involving single programs.
paulson@11193
    35
The directory <A HREF="Comp/"><CODE>Comp</CODE></A>
paulson@11193
    36
presents examples of proofs involving program composition.
paulson@11193
    37
paulson@4776
    38
<HR>
paulson@4776
    39
<P>Last modified on $Date$
paulson@4776
    40
paulson@4776
    41
<ADDRESS>
paulson@4776
    42
<A NAME="lcp@cl.cam.ac.uk" HREF="mailto:lcp@cl.cam.ac.uk">lcp@cl.cam.ac.uk</A>
paulson@4776
    43
</ADDRESS>
paulson@4776
    44
</BODY></HTML>