author | nipkow |
Wed, 12 Oct 2011 09:16:30 +0200 | |
changeset 45127 | d2eb07a1e01b |
parent 45113 | 2a0d7be998bb |
child 45623 | f682f3f7b726 |
permissions | -rw-r--r-- |
45111 | 1 |
(* Author: Tobias Nipkow *) |
2 |
||
3 |
theory Abs_Int1_ivl |
|
4 |
imports Abs_Int1 |
|
5 |
begin |
|
6 |
||
7 |
subsection "Interval Analysis" |
|
8 |
||
9 |
datatype ivl = I "int option" "int option" |
|
10 |
||
11 |
definition "rep_ivl i = (case i of |
|
12 |
I (Some l) (Some h) \<Rightarrow> {l..h} | |
|
13 |
I (Some l) None \<Rightarrow> {l..} | |
|
14 |
I None (Some h) \<Rightarrow> {..h} | |
|
15 |
I None None \<Rightarrow> UNIV)" |
|
16 |
||
45113 | 17 |
abbreviation I_Some_Some :: "int \<Rightarrow> int \<Rightarrow> ivl" ("{_\<dots>_}") where |
18 |
"{lo\<dots>hi} == I (Some lo) (Some hi)" |
|
19 |
abbreviation I_Some_None :: "int \<Rightarrow> ivl" ("{_\<dots>}") where |
|
20 |
"{lo\<dots>} == I (Some lo) None" |
|
21 |
abbreviation I_None_Some :: "int \<Rightarrow> ivl" ("{\<dots>_}") where |
|
22 |
"{\<dots>hi} == I None (Some hi)" |
|
23 |
abbreviation I_None_None :: "ivl" ("{\<dots>}") where |
|
24 |
"{\<dots>} == I None None" |
|
25 |
||
26 |
definition "num_ivl n = {n\<dots>n}" |
|
45111 | 27 |
|
28 |
instantiation option :: (plus)plus |
|
29 |
begin |
|
30 |
||
31 |
fun plus_option where |
|
32 |
"Some x + Some y = Some(x+y)" | |
|
33 |
"_ + _ = None" |
|
34 |
||
35 |
instance proof qed |
|
36 |
||
37 |
end |
|
38 |
||
45113 | 39 |
definition empty where "empty = {1\<dots>0}" |
45111 | 40 |
|
41 |
fun is_empty where |
|
45113 | 42 |
"is_empty {l\<dots>h} = (h<l)" | |
45111 | 43 |
"is_empty _ = False" |
44 |
||
45 |
lemma [simp]: "is_empty(I l h) = |
|
46 |
(case l of Some l \<Rightarrow> (case h of Some h \<Rightarrow> h<l | None \<Rightarrow> False) | None \<Rightarrow> False)" |
|
47 |
by(auto split:option.split) |
|
48 |
||
49 |
lemma [simp]: "is_empty i \<Longrightarrow> rep_ivl i = {}" |
|
50 |
by(auto simp add: rep_ivl_def split: ivl.split option.split) |
|
51 |
||
52 |
definition "plus_ivl i1 i2 = (if is_empty i1 | is_empty i2 then empty else |
|
53 |
case (i1,i2) of (I l1 h1, I l2 h2) \<Rightarrow> I (l1+l2) (h1+h2))" |
|
54 |
||
55 |
instantiation ivl :: SL_top |
|
56 |
begin |
|
57 |
||
58 |
definition le_option :: "bool \<Rightarrow> int option \<Rightarrow> int option \<Rightarrow> bool" where |
|
59 |
"le_option pos x y = |
|
60 |
(case x of (Some i) \<Rightarrow> (case y of Some j \<Rightarrow> i\<le>j | None \<Rightarrow> pos) |
|
61 |
| None \<Rightarrow> (case y of Some j \<Rightarrow> \<not>pos | None \<Rightarrow> True))" |
|
62 |
||
63 |
fun le_aux where |
|
64 |
"le_aux (I l1 h1) (I l2 h2) = (le_option False l2 l1 & le_option True h1 h2)" |
|
65 |
||
66 |
definition le_ivl where |
|
67 |
"i1 \<sqsubseteq> i2 = |
|
68 |
(if is_empty i1 then True else |
|
69 |
if is_empty i2 then False else le_aux i1 i2)" |
|
70 |
||
71 |
definition min_option :: "bool \<Rightarrow> int option \<Rightarrow> int option \<Rightarrow> int option" where |
|
72 |
"min_option pos o1 o2 = (if le_option pos o1 o2 then o1 else o2)" |
|
73 |
||
74 |
definition max_option :: "bool \<Rightarrow> int option \<Rightarrow> int option \<Rightarrow> int option" where |
|
75 |
"max_option pos o1 o2 = (if le_option pos o1 o2 then o2 else o1)" |
|
76 |
||
77 |
definition "i1 \<squnion> i2 = |
|
78 |
(if is_empty i1 then i2 else if is_empty i2 then i1 |
|
79 |
else case (i1,i2) of (I l1 h1, I l2 h2) \<Rightarrow> |
|
80 |
I (min_option False l1 l2) (max_option True h1 h2))" |
|
81 |
||
45113 | 82 |
definition "\<top> = {\<dots>}" |
45111 | 83 |
|
84 |
instance |
|
85 |
proof |
|
86 |
case goal1 thus ?case |
|
87 |
by(cases x, simp add: le_ivl_def le_option_def split: option.split) |
|
88 |
next |
|
89 |
case goal2 thus ?case |
|
90 |
by(cases x, cases y, cases z, auto simp: le_ivl_def le_option_def split: option.splits if_splits) |
|
91 |
next |
|
92 |
case goal3 thus ?case |
|
93 |
by(cases x, cases y, simp add: le_ivl_def join_ivl_def le_option_def min_option_def max_option_def split: option.splits) |
|
94 |
next |
|
95 |
case goal4 thus ?case |
|
96 |
by(cases x, cases y, simp add: le_ivl_def join_ivl_def le_option_def min_option_def max_option_def split: option.splits) |
|
97 |
next |
|
98 |
case goal5 thus ?case |
|
99 |
by(cases x, cases y, cases z, auto simp add: le_ivl_def join_ivl_def le_option_def min_option_def max_option_def split: option.splits if_splits) |
|
100 |
next |
|
101 |
case goal6 thus ?case |
|
102 |
by(cases x, simp add: Top_ivl_def le_ivl_def le_option_def split: option.split) |
|
103 |
qed |
|
104 |
||
105 |
end |
|
106 |
||
107 |
||
108 |
instantiation ivl :: L_top_bot |
|
109 |
begin |
|
110 |
||
111 |
definition "i1 \<sqinter> i2 = (if is_empty i1 \<or> is_empty i2 then empty else |
|
112 |
case (i1,i2) of (I l1 h1, I l2 h2) \<Rightarrow> |
|
113 |
I (max_option False l1 l2) (min_option True h1 h2))" |
|
114 |
||
115 |
definition "\<bottom> = empty" |
|
116 |
||
117 |
instance |
|
118 |
proof |
|
119 |
case goal1 thus ?case |
|
120 |
by (simp add:meet_ivl_def empty_def meet_ivl_def le_ivl_def le_option_def max_option_def min_option_def split: ivl.splits option.splits) |
|
121 |
next |
|
122 |
case goal2 thus ?case |
|
123 |
by (simp add:meet_ivl_def empty_def meet_ivl_def le_ivl_def le_option_def max_option_def min_option_def split: ivl.splits option.splits) |
|
124 |
next |
|
125 |
case goal3 thus ?case |
|
126 |
by (cases x, cases y, cases z, auto simp add: le_ivl_def meet_ivl_def empty_def le_option_def max_option_def min_option_def split: option.splits if_splits) |
|
127 |
next |
|
128 |
case goal4 show ?case by(cases x, simp add: bot_ivl_def empty_def le_ivl_def) |
|
129 |
qed |
|
130 |
||
131 |
end |
|
132 |
||
133 |
instantiation option :: (minus)minus |
|
134 |
begin |
|
135 |
||
136 |
fun minus_option where |
|
137 |
"Some x - Some y = Some(x-y)" | |
|
138 |
"_ - _ = None" |
|
139 |
||
140 |
instance proof qed |
|
141 |
||
142 |
end |
|
143 |
||
144 |
definition "minus_ivl i1 i2 = (if is_empty i1 | is_empty i2 then empty else |
|
145 |
case (i1,i2) of (I l1 h1, I l2 h2) \<Rightarrow> I (l1-h2) (h1-l2))" |
|
146 |
||
147 |
lemma rep_minus_ivl: |
|
148 |
"n1 : rep_ivl i1 \<Longrightarrow> n2 : rep_ivl i2 \<Longrightarrow> n1-n2 : rep_ivl(minus_ivl i1 i2)" |
|
149 |
by(auto simp add: minus_ivl_def rep_ivl_def split: ivl.splits option.splits) |
|
150 |
||
151 |
||
152 |
definition "filter_plus_ivl i i1 i2 = ((*if is_empty i then empty else*) |
|
153 |
i1 \<sqinter> minus_ivl i i2, i2 \<sqinter> minus_ivl i i1)" |
|
154 |
||
155 |
fun filter_less_ivl :: "bool \<Rightarrow> ivl \<Rightarrow> ivl \<Rightarrow> ivl * ivl" where |
|
156 |
"filter_less_ivl res (I l1 h1) (I l2 h2) = |
|
157 |
(if is_empty(I l1 h1) \<or> is_empty(I l2 h2) then (empty, empty) else |
|
158 |
if res |
|
159 |
then (I l1 (min_option True h1 (h2 - Some 1)), |
|
160 |
I (max_option False (l1 + Some 1) l2) h2) |
|
161 |
else (I (max_option False l1 l2) h1, I l2 (min_option True h1 h2)))" |
|
162 |
||
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
163 |
interpretation Val_abs rep_ivl num_ivl plus_ivl |
45111 | 164 |
proof |
165 |
case goal1 thus ?case |
|
166 |
by(auto simp: rep_ivl_def le_ivl_def le_option_def split: ivl.split option.split if_splits) |
|
167 |
next |
|
168 |
case goal2 show ?case by(simp add: rep_ivl_def Top_ivl_def) |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
169 |
next |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
170 |
case goal3 thus ?case by(simp add: rep_ivl_def num_ivl_def) |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
171 |
next |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
172 |
case goal4 thus ?case |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
173 |
by(auto simp add: rep_ivl_def plus_ivl_def split: ivl.split option.splits) |
45111 | 174 |
qed |
175 |
||
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
176 |
interpretation Val_abs1_rep rep_ivl num_ivl plus_ivl |
45111 | 177 |
proof |
178 |
case goal1 thus ?case |
|
179 |
by(auto simp add: rep_ivl_def meet_ivl_def empty_def min_option_def max_option_def split: ivl.split option.split) |
|
180 |
next |
|
181 |
case goal2 show ?case by(auto simp add: bot_ivl_def rep_ivl_def empty_def) |
|
182 |
qed |
|
183 |
||
184 |
lemma mono_minus_ivl: |
|
185 |
"i1 \<sqsubseteq> i1' \<Longrightarrow> i2 \<sqsubseteq> i2' \<Longrightarrow> minus_ivl i1 i2 \<sqsubseteq> minus_ivl i1' i2'" |
|
186 |
apply(auto simp add: minus_ivl_def empty_def le_ivl_def le_option_def split: ivl.splits) |
|
187 |
apply(simp split: option.splits) |
|
188 |
apply(simp split: option.splits) |
|
189 |
apply(simp split: option.splits) |
|
190 |
done |
|
191 |
||
192 |
||
193 |
interpretation |
|
194 |
Val_abs1 rep_ivl num_ivl plus_ivl filter_plus_ivl filter_less_ivl |
|
195 |
proof |
|
196 |
case goal1 thus ?case |
|
197 |
by(auto simp add: filter_plus_ivl_def) |
|
198 |
(metis rep_minus_ivl add_diff_cancel add_commute)+ |
|
199 |
next |
|
200 |
case goal2 thus ?case |
|
201 |
by(cases a1, cases a2, |
|
202 |
auto simp: rep_ivl_def min_option_def max_option_def le_option_def split: if_splits option.splits) |
|
203 |
qed |
|
204 |
||
205 |
interpretation |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
206 |
Abs_Int1 rep_ivl num_ivl plus_ivl filter_plus_ivl filter_less_ivl |
45111 | 207 |
defines afilter_ivl is afilter |
208 |
and bfilter_ivl is bfilter |
|
209 |
and step_ivl is step |
|
210 |
and AI_ivl is AI |
|
211 |
and aval_ivl is aval' |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
212 |
proof qed |
45111 | 213 |
|
214 |
definition "test1_ivl = |
|
215 |
''y'' ::= N 7; |
|
216 |
IF Less (V ''x'') (V ''y'') |
|
217 |
THEN ''y'' ::= Plus (V ''y'') (V ''x'') |
|
218 |
ELSE ''x'' ::= Plus (V ''x'') (V ''y'')" |
|
219 |
||
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
220 |
value [code] "show_acom_opt (AI_ivl test1_ivl)" |
45111 | 221 |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
222 |
value [code] "show_acom_opt (AI_const test3_const)" |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
223 |
value [code] "show_acom_opt (AI_ivl test3_const)" |
45111 | 224 |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
225 |
value [code] "show_acom_opt (AI_const test4_const)" |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
226 |
value [code] "show_acom_opt (AI_ivl test4_const)" |
45111 | 227 |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
228 |
value [code] "show_acom_opt (AI_ivl test6_const)" |
45111 | 229 |
|
230 |
definition "test2_ivl = |
|
231 |
WHILE Less (V ''x'') (N 100) |
|
232 |
DO ''x'' ::= Plus (V ''x'') (N 1)" |
|
233 |
||
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
234 |
value [code] "show_acom_opt (AI_ivl test2_ivl)" |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
235 |
value [code] "show_acom (((step_ivl \<top>)^^0) (\<bottom>\<^sub>c test2_ivl))" |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
236 |
value [code] "show_acom (((step_ivl \<top>)^^1) (\<bottom>\<^sub>c test2_ivl))" |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
237 |
value [code] "show_acom (((step_ivl \<top>)^^2) (\<bottom>\<^sub>c test2_ivl))" |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
238 |
|
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
239 |
text{* Fixed point reached in 2 steps. Not so if the start value of x is known: *} |
45111 | 240 |
|
241 |
definition "test3_ivl = |
|
242 |
''x'' ::= N 7; |
|
243 |
WHILE Less (V ''x'') (N 100) |
|
244 |
DO ''x'' ::= Plus (V ''x'') (N 1)" |
|
245 |
||
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
246 |
value [code] "show_acom_opt (AI_ivl test3_ivl)" |
45111 | 247 |
value [code] "show_acom (((step_ivl \<top>)^^0) (\<bottom>\<^sub>c test3_ivl))" |
248 |
value [code] "show_acom (((step_ivl \<top>)^^1) (\<bottom>\<^sub>c test3_ivl))" |
|
249 |
value [code] "show_acom (((step_ivl \<top>)^^2) (\<bottom>\<^sub>c test3_ivl))" |
|
250 |
value [code] "show_acom (((step_ivl \<top>)^^3) (\<bottom>\<^sub>c test3_ivl))" |
|
251 |
value [code] "show_acom (((step_ivl \<top>)^^4) (\<bottom>\<^sub>c test3_ivl))" |
|
252 |
||
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
253 |
text{* Takes as many iterations as the actual execution. Would diverge if |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
254 |
loop did not terminate. Worse still, as the following example shows: even if |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
255 |
the actual execution terminates, the analysis may not: *} |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
256 |
|
45111 | 257 |
definition "test4_ivl = |
258 |
''x'' ::= N 0; ''y'' ::= N 100; ''z'' ::= Plus (V ''x'') (V ''y''); |
|
259 |
WHILE Less (V ''x'') (N 11) |
|
260 |
DO (''x'' ::= Plus (V ''x'') (N 1); ''y'' ::= Plus (V ''y'') (N -1))" |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
261 |
|
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
262 |
text{* The value of y keeps decreasing as the analysis is iterated, no matter |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
263 |
how long: *} |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
264 |
|
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
265 |
value [code] "show_acom (((step_ivl \<top>)^^50) (\<bottom>\<^sub>c test4_ivl))" |
45111 | 266 |
|
267 |
definition "test5_ivl = |
|
268 |
''x'' ::= N 0; ''y'' ::= N 0; |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
269 |
WHILE Less (V ''x'') (N 1000) |
45111 | 270 |
DO (''y'' ::= V ''x''; ''x'' ::= Plus (V ''x'') (N 1))" |
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
271 |
value [code] "show_acom_opt (AI_ivl test5_ivl)" |
45111 | 272 |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
273 |
text{* Again, the analysis would not terminate: *} |
45111 | 274 |
definition "test6_ivl = |
275 |
''x'' ::= N 0; |
|
276 |
WHILE Less (V ''x'') (N 1) DO ''x'' ::= Plus (V ''x'') (N -1)" |
|
45127
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
277 |
|
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
278 |
text{* Monotonicity: *} |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
279 |
|
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
280 |
interpretation |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
281 |
Abs_Int1_mono rep_ivl num_ivl plus_ivl filter_plus_ivl filter_less_ivl |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
282 |
proof |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
283 |
case goal1 thus ?case |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
284 |
by(auto simp: plus_ivl_def le_ivl_def le_option_def empty_def split: if_splits ivl.splits option.splits) |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
285 |
next |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
286 |
case goal2 thus ?case |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
287 |
by(auto simp: filter_plus_ivl_def le_prod_def mono_meet mono_minus_ivl) |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
288 |
next |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
289 |
case goal3 thus ?case |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
290 |
apply(cases a1, cases b1, cases a2, cases b2, auto simp: le_prod_def) |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
291 |
by(auto simp add: empty_def le_ivl_def le_option_def min_option_def max_option_def split: option.splits) |
d2eb07a1e01b
separated monotonicity reasoning and defined narrowing with while_option
nipkow
parents:
45113
diff
changeset
|
292 |
qed |
45111 | 293 |
|
294 |
end |