3807
|
1 |
(*
|
|
2 |
File: ProcedureInterface.ML
|
|
3 |
Author: Stephan Merz
|
|
4 |
Copyright: 1997 University of Munich
|
|
5 |
|
6255
|
6 |
Procedure interface (theorems and proofs)
|
3807
|
7 |
*)
|
|
8 |
|
|
9 |
Addsimps [slice_def];
|
6255
|
10 |
val mem_css = (claset(), simpset());
|
3807
|
11 |
|
|
12 |
(* ---------------------------------------------------------------------------- *)
|
|
13 |
|
6255
|
14 |
val Procedure_defs = [caller_def, rtrner_def, Calling_def,
|
3807
|
15 |
Call_def, Return_def,
|
|
16 |
PLegalCaller_def, LegalCaller_def,
|
|
17 |
PLegalReturner_def, LegalReturner_def];
|
|
18 |
|
|
19 |
(* sample theorems (not used in the proof):
|
|
20 |
1. calls and returns are mutually exclusive
|
|
21 |
|
6255
|
22 |
qed_goal "CallNotReturn" ProcedureInterface.thy
|
|
23 |
"|- Call ch p v --> ~ Return ch p w"
|
|
24 |
(fn prems => [ auto_tac (temp_css addsimps2 [Call_def,Return_def]) ]);
|
3807
|
25 |
|
|
26 |
|
|
27 |
2. enabledness of calls and returns
|
|
28 |
|
|
29 |
qed_goal "Call_enabled" ProcedureInterface.thy
|
6255
|
30 |
"!!p. basevars ((caller ch)!p) ==> |- ~ Calling ch p --> Enabled (Call ch p v)"
|
4089
|
31 |
(fn _ => [action_simp_tac (simpset() addsimps [caller_def, Call_def])
|
3807
|
32 |
[] [base_enabled,Pair_inject] 1
|
|
33 |
]);
|
|
34 |
|
6255
|
35 |
qed_goal "Call_enabled_rew" ProcedureInterface.thy
|
|
36 |
"basevars ((caller ch)!p) ==> |- Enabled (Call ch p v) = (~Calling ch p)"
|
|
37 |
(fn [prem] => [auto_tac (mem_css addsimps2 [Call_def]),
|
|
38 |
force_tac (mem_css addsimps2 [enabled_def]) 1,
|
|
39 |
enabled_tac prem 1,
|
|
40 |
action_simp_tac (simpset() addsimps [caller_def]) [] [Pair_inject] 1
|
|
41 |
]);
|
|
42 |
|
3807
|
43 |
qed_goal "Return_enabled" ProcedureInterface.thy
|
6255
|
44 |
"!!p. basevars ((rtrner ch)!p) ==> |- Calling ch p --> Enabled (Return ch p v)"
|
4089
|
45 |
(fn _ => [action_simp_tac (simpset() addsimps [rtrner_def, Return_def])
|
3807
|
46 |
[] [base_enabled,Pair_inject] 1
|
|
47 |
]);
|
|
48 |
|
|
49 |
*)
|
|
50 |
|
|
51 |
(* Calls and returns change their subchannel *)
|
|
52 |
qed_goal "Call_changed" ProcedureInterface.thy
|
6255
|
53 |
"|- Call ch p v --> <Call ch p v>_((caller ch)!p)"
|
|
54 |
(fn _ => [ auto_tac (mem_css addsimps2 [angle_def,Call_def,caller_def,Calling_def]) ]);
|
3807
|
55 |
|
|
56 |
qed_goal "Return_changed" ProcedureInterface.thy
|
6255
|
57 |
"|- Return ch p v --> <Return ch p v>_((rtrner ch)!p)"
|
|
58 |
(fn _ => [ auto_tac (mem_css addsimps2 [angle_def,Return_def,rtrner_def,Calling_def]) ]);
|
3807
|
59 |
|
|
60 |
|