doc-src/IsarRef/Thy/document/HOL_Specific.tex
author haftmann
Tue Jun 10 15:30:06 2008 +0200 (2008-06-10)
changeset 27103 d8549f4d900b
parent 27047 2dcdea037385
child 27124 e02d6e655e60
permissions -rw-r--r--
major refactorings in code generator modules
wenzelm@26840
     1
%
wenzelm@26840
     2
\begin{isabellebody}%
wenzelm@26840
     3
\def\isabellecontext{HOL{\isacharunderscore}Specific}%
wenzelm@26840
     4
%
wenzelm@26840
     5
\isadelimtheory
wenzelm@26840
     6
\isanewline
wenzelm@26840
     7
\isanewline
wenzelm@26840
     8
%
wenzelm@26840
     9
\endisadelimtheory
wenzelm@26840
    10
%
wenzelm@26840
    11
\isatagtheory
wenzelm@26840
    12
\isacommand{theory}\isamarkupfalse%
wenzelm@26840
    13
\ HOL{\isacharunderscore}Specific\isanewline
wenzelm@26849
    14
\isakeyword{imports}\ Main\isanewline
wenzelm@26849
    15
\isakeyword{begin}%
wenzelm@26849
    16
\endisatagtheory
wenzelm@26849
    17
{\isafoldtheory}%
wenzelm@26849
    18
%
wenzelm@26849
    19
\isadelimtheory
wenzelm@26849
    20
%
wenzelm@26849
    21
\endisadelimtheory
wenzelm@26849
    22
%
wenzelm@26852
    23
\isamarkupchapter{Isabelle/HOL \label{ch:hol}%
wenzelm@26849
    24
}
wenzelm@26849
    25
\isamarkuptrue%
wenzelm@26849
    26
%
wenzelm@26849
    27
\isamarkupsection{Primitive types \label{sec:hol-typedef}%
wenzelm@26849
    28
}
wenzelm@26849
    29
\isamarkuptrue%
wenzelm@26849
    30
%
wenzelm@26849
    31
\begin{isamarkuptext}%
wenzelm@26849
    32
\begin{matharray}{rcl}
wenzelm@26902
    33
    \indexdef{HOL}{command}{typedecl}\hypertarget{command.HOL.typedecl}{\hyperlink{command.HOL.typedecl}{\mbox{\isa{\isacommand{typedecl}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26902
    34
    \indexdef{HOL}{command}{typedef}\hypertarget{command.HOL.typedef}{\hyperlink{command.HOL.typedef}{\mbox{\isa{\isacommand{typedef}}}}} & : & \isartrans{theory}{proof(prove)} \\
wenzelm@26849
    35
  \end{matharray}
wenzelm@26849
    36
wenzelm@26849
    37
  \begin{rail}
wenzelm@26849
    38
    'typedecl' typespec infix?
wenzelm@26849
    39
    ;
wenzelm@26849
    40
    'typedef' altname? abstype '=' repset
wenzelm@26849
    41
    ;
wenzelm@26849
    42
wenzelm@26849
    43
    altname: '(' (name | 'open' | 'open' name) ')'
wenzelm@26849
    44
    ;
wenzelm@26849
    45
    abstype: typespec infix?
wenzelm@26849
    46
    ;
wenzelm@26849
    47
    repset: term ('morphisms' name name)?
wenzelm@26849
    48
    ;
wenzelm@26849
    49
  \end{rail}
wenzelm@26849
    50
wenzelm@26849
    51
  \begin{descr}
wenzelm@26849
    52
  
wenzelm@26902
    53
  \item [\hyperlink{command.HOL.typedecl}{\mbox{\isa{\isacommand{typedecl}}}}~\isa{{\isachardoublequote}{\isacharparenleft}{\isasymalpha}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ {\isasymalpha}\isactrlsub n{\isacharparenright}\ t{\isachardoublequote}}] is similar to the original \hyperlink{command.typedecl}{\mbox{\isa{\isacommand{typedecl}}}} of
wenzelm@26849
    54
  Isabelle/Pure (see \secref{sec:types-pure}), but also declares type
wenzelm@26849
    55
  arity \isa{{\isachardoublequote}t\ {\isacharcolon}{\isacharcolon}\ {\isacharparenleft}type{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ type{\isacharparenright}\ type{\isachardoublequote}}, making \isa{t} an
wenzelm@26849
    56
  actual HOL type constructor.   %FIXME check, update
wenzelm@26849
    57
  
wenzelm@26902
    58
  \item [\hyperlink{command.HOL.typedef}{\mbox{\isa{\isacommand{typedef}}}}~\isa{{\isachardoublequote}{\isacharparenleft}{\isasymalpha}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ {\isasymalpha}\isactrlsub n{\isacharparenright}\ t\ {\isacharequal}\ A{\isachardoublequote}}] sets up a goal stating non-emptiness of the set \isa{A}.
wenzelm@26849
    59
  After finishing the proof, the theory will be augmented by a
wenzelm@26849
    60
  Gordon/HOL-style type definition, which establishes a bijection
wenzelm@26849
    61
  between the representing set \isa{A} and the new type \isa{t}.
wenzelm@26849
    62
  
wenzelm@26902
    63
  Technically, \hyperlink{command.HOL.typedef}{\mbox{\isa{\isacommand{typedef}}}} defines both a type \isa{t} and a set (term constant) of the same name (an alternative base
wenzelm@26849
    64
  name may be given in parentheses).  The injection from type to set
wenzelm@26849
    65
  is called \isa{Rep{\isacharunderscore}t}, its inverse \isa{Abs{\isacharunderscore}t} (this may be
wenzelm@26902
    66
  changed via an explicit \hyperlink{keyword.HOL.morphisms}{\mbox{\isa{\isakeyword{morphisms}}}} declaration).
wenzelm@26849
    67
  
wenzelm@26849
    68
  Theorems \isa{Rep{\isacharunderscore}t}, \isa{Rep{\isacharunderscore}t{\isacharunderscore}inverse}, and \isa{Abs{\isacharunderscore}t{\isacharunderscore}inverse} provide the most basic characterization as a
wenzelm@26849
    69
  corresponding injection/surjection pair (in both directions).  Rules
wenzelm@26849
    70
  \isa{Rep{\isacharunderscore}t{\isacharunderscore}inject} and \isa{Abs{\isacharunderscore}t{\isacharunderscore}inject} provide a slightly
wenzelm@26849
    71
  more convenient view on the injectivity part, suitable for automated
wenzelm@26902
    72
  proof tools (e.g.\ in \hyperlink{attribute.simp}{\mbox{\isa{simp}}} or \hyperlink{attribute.iff}{\mbox{\isa{iff}}}
wenzelm@26895
    73
  declarations).  Rules \isa{Rep{\isacharunderscore}t{\isacharunderscore}cases}/\isa{Rep{\isacharunderscore}t{\isacharunderscore}induct}, and
wenzelm@26895
    74
  \isa{Abs{\isacharunderscore}t{\isacharunderscore}cases}/\isa{Abs{\isacharunderscore}t{\isacharunderscore}induct} provide alternative views
wenzelm@26895
    75
  on surjectivity; these are already declared as set or type rules for
wenzelm@26902
    76
  the generic \hyperlink{method.cases}{\mbox{\isa{cases}}} and \hyperlink{method.induct}{\mbox{\isa{induct}}} methods.
wenzelm@26849
    77
  
wenzelm@26849
    78
  An alternative name may be specified in parentheses; the default is
wenzelm@26849
    79
  to use \isa{t} as indicated before.  The ``\isa{{\isachardoublequote}{\isacharparenleft}open{\isacharparenright}{\isachardoublequote}}''
wenzelm@26849
    80
  declaration suppresses a separate constant definition for the
wenzelm@26849
    81
  representing set.
wenzelm@26849
    82
wenzelm@26849
    83
  \end{descr}
wenzelm@26849
    84
wenzelm@26849
    85
  Note that raw type declarations are rarely used in practice; the
wenzelm@26849
    86
  main application is with experimental (or even axiomatic!) theory
wenzelm@26849
    87
  fragments.  Instead of primitive HOL type definitions, user-level
wenzelm@26902
    88
  theories usually refer to higher-level packages such as \hyperlink{command.HOL.record}{\mbox{\isa{\isacommand{record}}}} (see \secref{sec:hol-record}) or \hyperlink{command.HOL.datatype}{\mbox{\isa{\isacommand{datatype}}}} (see \secref{sec:hol-datatype}).%
wenzelm@26849
    89
\end{isamarkuptext}%
wenzelm@26849
    90
\isamarkuptrue%
wenzelm@26849
    91
%
wenzelm@26849
    92
\isamarkupsection{Adhoc tuples%
wenzelm@26849
    93
}
wenzelm@26849
    94
\isamarkuptrue%
wenzelm@26849
    95
%
wenzelm@26849
    96
\begin{isamarkuptext}%
wenzelm@26849
    97
\begin{matharray}{rcl}
wenzelm@26907
    98
    \hyperlink{attribute.HOL.split-format}{\mbox{\isa{split{\isacharunderscore}format}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isaratt \\
wenzelm@26849
    99
  \end{matharray}
wenzelm@26849
   100
wenzelm@26849
   101
  \begin{rail}
wenzelm@26849
   102
    'split\_format' (((name *) + 'and') | ('(' 'complete' ')'))
wenzelm@26849
   103
    ;
wenzelm@26849
   104
  \end{rail}
wenzelm@26849
   105
wenzelm@26849
   106
  \begin{descr}
wenzelm@26849
   107
  
wenzelm@26907
   108
  \item [\hyperlink{attribute.HOL.split-format}{\mbox{\isa{split{\isacharunderscore}format}}}~\isa{{\isachardoublequote}p\isactrlsub {\isadigit{1}}\ {\isasymdots}\ p\isactrlsub m\ {\isasymAND}\ {\isasymdots}\ {\isasymAND}\ q\isactrlsub {\isadigit{1}}\ {\isasymdots}\ q\isactrlsub n{\isachardoublequote}}] puts expressions of
wenzelm@26849
   109
  low-level tuple types into canonical form as specified by the
wenzelm@26849
   110
  arguments given; the \isa{i}-th collection of arguments refers to
wenzelm@26849
   111
  occurrences in premise \isa{i} of the rule.  The ``\isa{{\isachardoublequote}{\isacharparenleft}complete{\isacharparenright}{\isachardoublequote}}'' option causes \emph{all} arguments in function
wenzelm@26849
   112
  applications to be represented canonically according to their tuple
wenzelm@26849
   113
  type structure.
wenzelm@26849
   114
wenzelm@26849
   115
  Note that these operations tend to invent funny names for new local
wenzelm@26849
   116
  parameters to be introduced.
wenzelm@26849
   117
wenzelm@26849
   118
  \end{descr}%
wenzelm@26849
   119
\end{isamarkuptext}%
wenzelm@26849
   120
\isamarkuptrue%
wenzelm@26849
   121
%
wenzelm@26849
   122
\isamarkupsection{Records \label{sec:hol-record}%
wenzelm@26849
   123
}
wenzelm@26849
   124
\isamarkuptrue%
wenzelm@26849
   125
%
wenzelm@26849
   126
\begin{isamarkuptext}%
wenzelm@26849
   127
In principle, records merely generalize the concept of tuples, where
wenzelm@26849
   128
  components may be addressed by labels instead of just position.  The
wenzelm@26849
   129
  logical infrastructure of records in Isabelle/HOL is slightly more
wenzelm@26849
   130
  advanced, though, supporting truly extensible record schemes.  This
wenzelm@26849
   131
  admits operations that are polymorphic with respect to record
wenzelm@26849
   132
  extension, yielding ``object-oriented'' effects like (single)
wenzelm@26849
   133
  inheritance.  See also \cite{NaraschewskiW-TPHOLs98} for more
wenzelm@26849
   134
  details on object-oriented verification and record subtyping in HOL.%
wenzelm@26849
   135
\end{isamarkuptext}%
wenzelm@26849
   136
\isamarkuptrue%
wenzelm@26849
   137
%
wenzelm@26849
   138
\isamarkupsubsection{Basic concepts%
wenzelm@26849
   139
}
wenzelm@26849
   140
\isamarkuptrue%
wenzelm@26849
   141
%
wenzelm@26849
   142
\begin{isamarkuptext}%
wenzelm@26849
   143
Isabelle/HOL supports both \emph{fixed} and \emph{schematic} records
wenzelm@26849
   144
  at the level of terms and types.  The notation is as follows:
wenzelm@26849
   145
wenzelm@26849
   146
  \begin{center}
wenzelm@26849
   147
  \begin{tabular}{l|l|l}
wenzelm@26849
   148
    & record terms & record types \\ \hline
wenzelm@26849
   149
    fixed & \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharequal}\ a{\isacharcomma}\ y\ {\isacharequal}\ b{\isasymrparr}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharcolon}{\isacharcolon}\ A{\isacharcomma}\ y\ {\isacharcolon}{\isacharcolon}\ B{\isasymrparr}{\isachardoublequote}} \\
wenzelm@26849
   150
    schematic & \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharequal}\ a{\isacharcomma}\ y\ {\isacharequal}\ b{\isacharcomma}\ {\isasymdots}\ {\isacharequal}\ m{\isasymrparr}{\isachardoublequote}} &
wenzelm@26849
   151
      \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharcolon}{\isacharcolon}\ A{\isacharcomma}\ y\ {\isacharcolon}{\isacharcolon}\ B{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ M{\isasymrparr}{\isachardoublequote}} \\
wenzelm@26849
   152
  \end{tabular}
wenzelm@26849
   153
  \end{center}
wenzelm@26849
   154
wenzelm@26849
   155
  \noindent The ASCII representation of \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharequal}\ a{\isasymrparr}{\isachardoublequote}} is \isa{{\isachardoublequote}{\isacharparenleft}{\isacharbar}\ x\ {\isacharequal}\ a\ {\isacharbar}{\isacharparenright}{\isachardoublequote}}.
wenzelm@26849
   156
wenzelm@26849
   157
  A fixed record \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharequal}\ a{\isacharcomma}\ y\ {\isacharequal}\ b{\isasymrparr}{\isachardoublequote}} has field \isa{x} of value
wenzelm@26849
   158
  \isa{a} and field \isa{y} of value \isa{b}.  The corresponding
wenzelm@26849
   159
  type is \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharcolon}{\isacharcolon}\ A{\isacharcomma}\ y\ {\isacharcolon}{\isacharcolon}\ B{\isasymrparr}{\isachardoublequote}}, assuming that \isa{{\isachardoublequote}a\ {\isacharcolon}{\isacharcolon}\ A{\isachardoublequote}}
wenzelm@26849
   160
  and \isa{{\isachardoublequote}b\ {\isacharcolon}{\isacharcolon}\ B{\isachardoublequote}}.
wenzelm@26849
   161
wenzelm@26849
   162
  A record scheme like \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharequal}\ a{\isacharcomma}\ y\ {\isacharequal}\ b{\isacharcomma}\ {\isasymdots}\ {\isacharequal}\ m{\isasymrparr}{\isachardoublequote}} contains fields
wenzelm@26849
   163
  \isa{x} and \isa{y} as before, but also possibly further fields
wenzelm@26849
   164
  as indicated by the ``\isa{{\isachardoublequote}{\isasymdots}{\isachardoublequote}}'' notation (which is actually part
wenzelm@26849
   165
  of the syntax).  The improper field ``\isa{{\isachardoublequote}{\isasymdots}{\isachardoublequote}}'' of a record
wenzelm@26849
   166
  scheme is called the \emph{more part}.  Logically it is just a free
wenzelm@26849
   167
  variable, which is occasionally referred to as ``row variable'' in
wenzelm@26849
   168
  the literature.  The more part of a record scheme may be
wenzelm@26849
   169
  instantiated by zero or more further components.  For example, the
wenzelm@26852
   170
  previous scheme may get instantiated to \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharequal}\ a{\isacharcomma}\ y\ {\isacharequal}\ b{\isacharcomma}\ z\ {\isacharequal}\ c{\isacharcomma}\ {\isasymdots}\ {\isacharequal}\ m{\isacharprime}{\isasymrparr}{\isachardoublequote}}, where \isa{m{\isacharprime}} refers to a different more part.
wenzelm@26849
   171
  Fixed records are special instances of record schemes, where
wenzelm@26849
   172
  ``\isa{{\isachardoublequote}{\isasymdots}{\isachardoublequote}}'' is properly terminated by the \isa{{\isachardoublequote}{\isacharparenleft}{\isacharparenright}\ {\isacharcolon}{\isacharcolon}\ unit{\isachardoublequote}}
wenzelm@26849
   173
  element.  In fact, \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharequal}\ a{\isacharcomma}\ y\ {\isacharequal}\ b{\isasymrparr}{\isachardoublequote}} is just an abbreviation
wenzelm@26849
   174
  for \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharequal}\ a{\isacharcomma}\ y\ {\isacharequal}\ b{\isacharcomma}\ {\isasymdots}\ {\isacharequal}\ {\isacharparenleft}{\isacharparenright}{\isasymrparr}{\isachardoublequote}}.
wenzelm@26849
   175
  
wenzelm@26849
   176
  \medskip Two key observations make extensible records in a simply
wenzelm@26849
   177
  typed language like HOL work out:
wenzelm@26849
   178
wenzelm@26849
   179
  \begin{enumerate}
wenzelm@26849
   180
wenzelm@26849
   181
  \item the more part is internalized, as a free term or type
wenzelm@26849
   182
  variable,
wenzelm@26849
   183
wenzelm@26852
   184
  \item field names are externalized, they cannot be accessed within
wenzelm@26852
   185
  the logic as first-class values.
wenzelm@26849
   186
wenzelm@26849
   187
  \end{enumerate}
wenzelm@26849
   188
wenzelm@26849
   189
  \medskip In Isabelle/HOL record types have to be defined explicitly,
wenzelm@26849
   190
  fixing their field names and types, and their (optional) parent
wenzelm@26849
   191
  record.  Afterwards, records may be formed using above syntax, while
wenzelm@26849
   192
  obeying the canonical order of fields as given by their declaration.
wenzelm@26849
   193
  The record package provides several standard operations like
wenzelm@26849
   194
  selectors and updates.  The common setup for various generic proof
wenzelm@26849
   195
  tools enable succinct reasoning patterns.  See also the Isabelle/HOL
wenzelm@26849
   196
  tutorial \cite{isabelle-hol-book} for further instructions on using
wenzelm@26849
   197
  records in practice.%
wenzelm@26849
   198
\end{isamarkuptext}%
wenzelm@26849
   199
\isamarkuptrue%
wenzelm@26849
   200
%
wenzelm@26849
   201
\isamarkupsubsection{Record specifications%
wenzelm@26849
   202
}
wenzelm@26849
   203
\isamarkuptrue%
wenzelm@26849
   204
%
wenzelm@26849
   205
\begin{isamarkuptext}%
wenzelm@26849
   206
\begin{matharray}{rcl}
wenzelm@26902
   207
    \indexdef{HOL}{command}{record}\hypertarget{command.HOL.record}{\hyperlink{command.HOL.record}{\mbox{\isa{\isacommand{record}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26849
   208
  \end{matharray}
wenzelm@26849
   209
wenzelm@26849
   210
  \begin{rail}
wenzelm@26849
   211
    'record' typespec '=' (type '+')? (constdecl +)
wenzelm@26849
   212
    ;
wenzelm@26849
   213
  \end{rail}
wenzelm@26849
   214
wenzelm@26849
   215
  \begin{descr}
wenzelm@26849
   216
wenzelm@26902
   217
  \item [\hyperlink{command.HOL.record}{\mbox{\isa{\isacommand{record}}}}~\isa{{\isachardoublequote}{\isacharparenleft}{\isasymalpha}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ {\isasymalpha}\isactrlsub m{\isacharparenright}\ t\ {\isacharequal}\ {\isasymtau}\ {\isacharplus}\ c\isactrlsub {\isadigit{1}}\ {\isacharcolon}{\isacharcolon}\ {\isasymsigma}\isactrlsub {\isadigit{1}}\ {\isasymdots}\ c\isactrlsub n\ {\isacharcolon}{\isacharcolon}\ {\isasymsigma}\isactrlsub n{\isachardoublequote}}] defines
wenzelm@26849
   218
  extensible record type \isa{{\isachardoublequote}{\isacharparenleft}{\isasymalpha}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ {\isasymalpha}\isactrlsub m{\isacharparenright}\ t{\isachardoublequote}},
wenzelm@26849
   219
  derived from the optional parent record \isa{{\isachardoublequote}{\isasymtau}{\isachardoublequote}} by adding new
wenzelm@26849
   220
  field components \isa{{\isachardoublequote}c\isactrlsub i\ {\isacharcolon}{\isacharcolon}\ {\isasymsigma}\isactrlsub i{\isachardoublequote}} etc.
wenzelm@26849
   221
wenzelm@26849
   222
  The type variables of \isa{{\isachardoublequote}{\isasymtau}{\isachardoublequote}} and \isa{{\isachardoublequote}{\isasymsigma}\isactrlsub i{\isachardoublequote}} need to be
wenzelm@26849
   223
  covered by the (distinct) parameters \isa{{\isachardoublequote}{\isasymalpha}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ {\isasymalpha}\isactrlsub m{\isachardoublequote}}.  Type constructor \isa{t} has to be new, while \isa{{\isasymtau}} needs to specify an instance of an existing record type.  At
wenzelm@26849
   224
  least one new field \isa{{\isachardoublequote}c\isactrlsub i{\isachardoublequote}} has to be specified.
wenzelm@26849
   225
  Basically, field names need to belong to a unique record.  This is
wenzelm@26849
   226
  not a real restriction in practice, since fields are qualified by
wenzelm@26849
   227
  the record name internally.
wenzelm@26849
   228
wenzelm@26849
   229
  The parent record specification \isa{{\isasymtau}} is optional; if omitted
wenzelm@26849
   230
  \isa{t} becomes a root record.  The hierarchy of all records
wenzelm@26849
   231
  declared within a theory context forms a forest structure, i.e.\ a
wenzelm@26849
   232
  set of trees starting with a root record each.  There is no way to
wenzelm@26849
   233
  merge multiple parent records!
wenzelm@26849
   234
wenzelm@26849
   235
  For convenience, \isa{{\isachardoublequote}{\isacharparenleft}{\isasymalpha}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ {\isasymalpha}\isactrlsub m{\isacharparenright}\ t{\isachardoublequote}} is made a
wenzelm@26849
   236
  type abbreviation for the fixed record type \isa{{\isachardoublequote}{\isasymlparr}c\isactrlsub {\isadigit{1}}\ {\isacharcolon}{\isacharcolon}\ {\isasymsigma}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ c\isactrlsub n\ {\isacharcolon}{\isacharcolon}\ {\isasymsigma}\isactrlsub n{\isasymrparr}{\isachardoublequote}}, likewise is \isa{{\isachardoublequote}{\isacharparenleft}{\isasymalpha}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ {\isasymalpha}\isactrlsub m{\isacharcomma}\ {\isasymzeta}{\isacharparenright}\ t{\isacharunderscore}scheme{\isachardoublequote}} made an abbreviation for
wenzelm@26849
   237
  \isa{{\isachardoublequote}{\isasymlparr}c\isactrlsub {\isadigit{1}}\ {\isacharcolon}{\isacharcolon}\ {\isasymsigma}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ c\isactrlsub n\ {\isacharcolon}{\isacharcolon}\ {\isasymsigma}\isactrlsub n{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ {\isasymzeta}{\isasymrparr}{\isachardoublequote}}.
wenzelm@26849
   238
wenzelm@26849
   239
  \end{descr}%
wenzelm@26849
   240
\end{isamarkuptext}%
wenzelm@26849
   241
\isamarkuptrue%
wenzelm@26849
   242
%
wenzelm@26849
   243
\isamarkupsubsection{Record operations%
wenzelm@26849
   244
}
wenzelm@26849
   245
\isamarkuptrue%
wenzelm@26849
   246
%
wenzelm@26849
   247
\begin{isamarkuptext}%
wenzelm@26849
   248
Any record definition of the form presented above produces certain
wenzelm@26849
   249
  standard operations.  Selectors and updates are provided for any
wenzelm@26849
   250
  field, including the improper one ``\isa{more}''.  There are also
wenzelm@26849
   251
  cumulative record constructor functions.  To simplify the
wenzelm@26849
   252
  presentation below, we assume for now that \isa{{\isachardoublequote}{\isacharparenleft}{\isasymalpha}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ {\isasymalpha}\isactrlsub m{\isacharparenright}\ t{\isachardoublequote}} is a root record with fields \isa{{\isachardoublequote}c\isactrlsub {\isadigit{1}}\ {\isacharcolon}{\isacharcolon}\ {\isasymsigma}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ c\isactrlsub n\ {\isacharcolon}{\isacharcolon}\ {\isasymsigma}\isactrlsub n{\isachardoublequote}}.
wenzelm@26849
   253
wenzelm@26849
   254
  \medskip \textbf{Selectors} and \textbf{updates} are available for
wenzelm@26849
   255
  any field (including ``\isa{more}''):
wenzelm@26849
   256
wenzelm@26849
   257
  \begin{matharray}{lll}
wenzelm@26852
   258
    \isa{{\isachardoublequote}c\isactrlsub i{\isachardoublequote}} & \isa{{\isachardoublequote}{\isacharcolon}{\isacharcolon}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymlparr}\isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ {\isasymzeta}{\isasymrparr}\ {\isasymRightarrow}\ {\isasymsigma}\isactrlsub i{\isachardoublequote}} \\
wenzelm@26852
   259
    \isa{{\isachardoublequote}c\isactrlsub i{\isacharunderscore}update{\isachardoublequote}} & \isa{{\isachardoublequote}{\isacharcolon}{\isacharcolon}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymsigma}\isactrlsub i\ {\isasymRightarrow}\ {\isasymlparr}\isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ {\isasymzeta}{\isasymrparr}\ {\isasymRightarrow}\ {\isasymlparr}\isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ {\isasymzeta}{\isasymrparr}{\isachardoublequote}} \\
wenzelm@26849
   260
  \end{matharray}
wenzelm@26849
   261
wenzelm@26849
   262
  There is special syntax for application of updates: \isa{{\isachardoublequote}r{\isasymlparr}x\ {\isacharcolon}{\isacharequal}\ a{\isasymrparr}{\isachardoublequote}} abbreviates term \isa{{\isachardoublequote}x{\isacharunderscore}update\ a\ r{\isachardoublequote}}.  Further notation for
wenzelm@26849
   263
  repeated updates is also available: \isa{{\isachardoublequote}r{\isasymlparr}x\ {\isacharcolon}{\isacharequal}\ a{\isasymrparr}{\isasymlparr}y\ {\isacharcolon}{\isacharequal}\ b{\isasymrparr}{\isasymlparr}z\ {\isacharcolon}{\isacharequal}\ c{\isasymrparr}{\isachardoublequote}} may be written \isa{{\isachardoublequote}r{\isasymlparr}x\ {\isacharcolon}{\isacharequal}\ a{\isacharcomma}\ y\ {\isacharcolon}{\isacharequal}\ b{\isacharcomma}\ z\ {\isacharcolon}{\isacharequal}\ c{\isasymrparr}{\isachardoublequote}}.  Note that
wenzelm@26849
   264
  because of postfix notation the order of fields shown here is
wenzelm@26849
   265
  reverse than in the actual term.  Since repeated updates are just
wenzelm@26849
   266
  function applications, fields may be freely permuted in \isa{{\isachardoublequote}{\isasymlparr}x\ {\isacharcolon}{\isacharequal}\ a{\isacharcomma}\ y\ {\isacharcolon}{\isacharequal}\ b{\isacharcomma}\ z\ {\isacharcolon}{\isacharequal}\ c{\isasymrparr}{\isachardoublequote}}, as far as logical equality is concerned.
wenzelm@26849
   267
  Thus commutativity of independent updates can be proven within the
wenzelm@26849
   268
  logic for any two fields, but not as a general theorem.
wenzelm@26849
   269
wenzelm@26849
   270
  \medskip The \textbf{make} operation provides a cumulative record
wenzelm@26849
   271
  constructor function:
wenzelm@26849
   272
wenzelm@26849
   273
  \begin{matharray}{lll}
wenzelm@26852
   274
    \isa{{\isachardoublequote}t{\isachardot}make{\isachardoublequote}} & \isa{{\isachardoublequote}{\isacharcolon}{\isacharcolon}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymsigma}\isactrlsub {\isadigit{1}}\ {\isasymRightarrow}\ {\isasymdots}\ {\isasymsigma}\isactrlsub n\ {\isasymRightarrow}\ {\isasymlparr}\isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isasymrparr}{\isachardoublequote}} \\
wenzelm@26849
   275
  \end{matharray}
wenzelm@26849
   276
wenzelm@26849
   277
  \medskip We now reconsider the case of non-root records, which are
wenzelm@26849
   278
  derived of some parent.  In general, the latter may depend on
wenzelm@26849
   279
  another parent as well, resulting in a list of \emph{ancestor
wenzelm@26849
   280
  records}.  Appending the lists of fields of all ancestors results in
wenzelm@26849
   281
  a certain field prefix.  The record package automatically takes care
wenzelm@26849
   282
  of this by lifting operations over this context of ancestor fields.
wenzelm@26849
   283
  Assuming that \isa{{\isachardoublequote}{\isacharparenleft}{\isasymalpha}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ {\isasymalpha}\isactrlsub m{\isacharparenright}\ t{\isachardoublequote}} has ancestor
wenzelm@26849
   284
  fields \isa{{\isachardoublequote}b\isactrlsub {\isadigit{1}}\ {\isacharcolon}{\isacharcolon}\ {\isasymrho}\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ b\isactrlsub k\ {\isacharcolon}{\isacharcolon}\ {\isasymrho}\isactrlsub k{\isachardoublequote}},
wenzelm@26849
   285
  the above record operations will get the following types:
wenzelm@26849
   286
wenzelm@26852
   287
  \medskip
wenzelm@26852
   288
  \begin{tabular}{lll}
wenzelm@26852
   289
    \isa{{\isachardoublequote}c\isactrlsub i{\isachardoublequote}} & \isa{{\isachardoublequote}{\isacharcolon}{\isacharcolon}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymlparr}\isactrlvec b\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymrho}{\isacharcomma}\ \isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ {\isasymzeta}{\isasymrparr}\ {\isasymRightarrow}\ {\isasymsigma}\isactrlsub i{\isachardoublequote}} \\
wenzelm@26852
   290
    \isa{{\isachardoublequote}c\isactrlsub i{\isacharunderscore}update{\isachardoublequote}} & \isa{{\isachardoublequote}{\isacharcolon}{\isacharcolon}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymsigma}\isactrlsub i\ {\isasymRightarrow}\ {\isasymlparr}\isactrlvec b\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymrho}{\isacharcomma}\ \isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ {\isasymzeta}{\isasymrparr}\ {\isasymRightarrow}\ {\isasymlparr}\isactrlvec b\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymrho}{\isacharcomma}\ \isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ {\isasymzeta}{\isasymrparr}{\isachardoublequote}} \\
wenzelm@26852
   291
    \isa{{\isachardoublequote}t{\isachardot}make{\isachardoublequote}} & \isa{{\isachardoublequote}{\isacharcolon}{\isacharcolon}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymrho}\isactrlsub {\isadigit{1}}\ {\isasymRightarrow}\ {\isasymdots}\ {\isasymrho}\isactrlsub k\ {\isasymRightarrow}\ {\isasymsigma}\isactrlsub {\isadigit{1}}\ {\isasymRightarrow}\ {\isasymdots}\ {\isasymsigma}\isactrlsub n\ {\isasymRightarrow}\ {\isasymlparr}\isactrlvec b\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymrho}{\isacharcomma}\ \isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isasymrparr}{\isachardoublequote}} \\
wenzelm@26852
   292
  \end{tabular}
wenzelm@26852
   293
  \medskip
wenzelm@26849
   294
wenzelm@26852
   295
  \noindent Some further operations address the extension aspect of a
wenzelm@26849
   296
  derived record scheme specifically: \isa{{\isachardoublequote}t{\isachardot}fields{\isachardoublequote}} produces a
wenzelm@26849
   297
  record fragment consisting of exactly the new fields introduced here
wenzelm@26849
   298
  (the result may serve as a more part elsewhere); \isa{{\isachardoublequote}t{\isachardot}extend{\isachardoublequote}}
wenzelm@26849
   299
  takes a fixed record and adds a given more part; \isa{{\isachardoublequote}t{\isachardot}truncate{\isachardoublequote}} restricts a record scheme to a fixed record.
wenzelm@26849
   300
wenzelm@26852
   301
  \medskip
wenzelm@26852
   302
  \begin{tabular}{lll}
wenzelm@26852
   303
    \isa{{\isachardoublequote}t{\isachardot}fields{\isachardoublequote}} & \isa{{\isachardoublequote}{\isacharcolon}{\isacharcolon}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymsigma}\isactrlsub {\isadigit{1}}\ {\isasymRightarrow}\ {\isasymdots}\ {\isasymsigma}\isactrlsub n\ {\isasymRightarrow}\ {\isasymlparr}\isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isasymrparr}{\isachardoublequote}} \\
wenzelm@26852
   304
    \isa{{\isachardoublequote}t{\isachardot}extend{\isachardoublequote}} & \isa{{\isachardoublequote}{\isacharcolon}{\isacharcolon}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymlparr}\isactrlvec b\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymrho}{\isacharcomma}\ \isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isasymrparr}\ {\isasymRightarrow}\ {\isasymzeta}\ {\isasymRightarrow}\ {\isasymlparr}\isactrlvec b\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymrho}{\isacharcomma}\ \isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ {\isasymzeta}{\isasymrparr}{\isachardoublequote}} \\
wenzelm@26852
   305
    \isa{{\isachardoublequote}t{\isachardot}truncate{\isachardoublequote}} & \isa{{\isachardoublequote}{\isacharcolon}{\isacharcolon}{\isachardoublequote}} & \isa{{\isachardoublequote}{\isasymlparr}\isactrlvec b\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymrho}{\isacharcomma}\ \isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isacharcomma}\ {\isasymdots}\ {\isacharcolon}{\isacharcolon}\ {\isasymzeta}{\isasymrparr}\ {\isasymRightarrow}\ {\isasymlparr}\isactrlvec b\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymrho}{\isacharcomma}\ \isactrlvec c\ {\isacharcolon}{\isacharcolon}\ \isactrlvec {\isasymsigma}{\isasymrparr}{\isachardoublequote}} \\
wenzelm@26852
   306
  \end{tabular}
wenzelm@26852
   307
  \medskip
wenzelm@26849
   308
wenzelm@26849
   309
  \noindent Note that \isa{{\isachardoublequote}t{\isachardot}make{\isachardoublequote}} and \isa{{\isachardoublequote}t{\isachardot}fields{\isachardoublequote}} coincide
wenzelm@26849
   310
  for root records.%
wenzelm@26849
   311
\end{isamarkuptext}%
wenzelm@26849
   312
\isamarkuptrue%
wenzelm@26849
   313
%
wenzelm@26849
   314
\isamarkupsubsection{Derived rules and proof tools%
wenzelm@26849
   315
}
wenzelm@26849
   316
\isamarkuptrue%
wenzelm@26849
   317
%
wenzelm@26849
   318
\begin{isamarkuptext}%
wenzelm@26849
   319
The record package proves several results internally, declaring
wenzelm@26849
   320
  these facts to appropriate proof tools.  This enables users to
wenzelm@26849
   321
  reason about record structures quite conveniently.  Assume that
wenzelm@26849
   322
  \isa{t} is a record type as specified above.
wenzelm@26849
   323
wenzelm@26849
   324
  \begin{enumerate}
wenzelm@26849
   325
  
wenzelm@26849
   326
  \item Standard conversions for selectors or updates applied to
wenzelm@26849
   327
  record constructor terms are made part of the default Simplifier
wenzelm@26849
   328
  context; thus proofs by reduction of basic operations merely require
wenzelm@26902
   329
  the \hyperlink{method.simp}{\mbox{\isa{simp}}} method without further arguments.  These rules
wenzelm@26849
   330
  are available as \isa{{\isachardoublequote}t{\isachardot}simps{\isachardoublequote}}, too.
wenzelm@26849
   331
  
wenzelm@26849
   332
  \item Selectors applied to updated records are automatically reduced
wenzelm@26849
   333
  by an internal simplification procedure, which is also part of the
wenzelm@26849
   334
  standard Simplifier setup.
wenzelm@26849
   335
wenzelm@26849
   336
  \item Inject equations of a form analogous to \isa{{\isachardoublequote}{\isacharparenleft}x{\isacharcomma}\ y{\isacharparenright}\ {\isacharequal}\ {\isacharparenleft}x{\isacharprime}{\isacharcomma}\ y{\isacharprime}{\isacharparenright}\ {\isasymequiv}\ x\ {\isacharequal}\ x{\isacharprime}\ {\isasymand}\ y\ {\isacharequal}\ y{\isacharprime}{\isachardoublequote}} are declared to the Simplifier and Classical
wenzelm@26902
   337
  Reasoner as \hyperlink{attribute.iff}{\mbox{\isa{iff}}} rules.  These rules are available as
wenzelm@26849
   338
  \isa{{\isachardoublequote}t{\isachardot}iffs{\isachardoublequote}}.
wenzelm@26849
   339
wenzelm@26849
   340
  \item The introduction rule for record equality analogous to \isa{{\isachardoublequote}x\ r\ {\isacharequal}\ x\ r{\isacharprime}\ {\isasymLongrightarrow}\ y\ r\ {\isacharequal}\ y\ r{\isacharprime}\ {\isasymdots}\ {\isasymLongrightarrow}\ r\ {\isacharequal}\ r{\isacharprime}{\isachardoublequote}} is declared to the Simplifier,
wenzelm@26902
   341
  and as the basic rule context as ``\hyperlink{attribute.intro}{\mbox{\isa{intro}}}\isa{{\isachardoublequote}{\isacharquery}{\isachardoublequote}}''.
wenzelm@26849
   342
  The rule is called \isa{{\isachardoublequote}t{\isachardot}equality{\isachardoublequote}}.
wenzelm@26849
   343
wenzelm@26849
   344
  \item Representations of arbitrary record expressions as canonical
wenzelm@26902
   345
  constructor terms are provided both in \hyperlink{method.cases}{\mbox{\isa{cases}}} and \hyperlink{method.induct}{\mbox{\isa{induct}}} format (cf.\ the generic proof methods of the same name,
wenzelm@26849
   346
  \secref{sec:cases-induct}).  Several variations are available, for
wenzelm@26849
   347
  fixed records, record schemes, more parts etc.
wenzelm@26849
   348
  
wenzelm@26849
   349
  The generic proof methods are sufficiently smart to pick the most
wenzelm@26849
   350
  sensible rule according to the type of the indicated record
wenzelm@26849
   351
  expression: users just need to apply something like ``\isa{{\isachardoublequote}{\isacharparenleft}cases\ r{\isacharparenright}{\isachardoublequote}}'' to a certain proof problem.
wenzelm@26849
   352
wenzelm@26849
   353
  \item The derived record operations \isa{{\isachardoublequote}t{\isachardot}make{\isachardoublequote}}, \isa{{\isachardoublequote}t{\isachardot}fields{\isachardoublequote}}, \isa{{\isachardoublequote}t{\isachardot}extend{\isachardoublequote}}, \isa{{\isachardoublequote}t{\isachardot}truncate{\isachardoublequote}} are \emph{not}
wenzelm@26849
   354
  treated automatically, but usually need to be expanded by hand,
wenzelm@26849
   355
  using the collective fact \isa{{\isachardoublequote}t{\isachardot}defs{\isachardoublequote}}.
wenzelm@26849
   356
wenzelm@26849
   357
  \end{enumerate}%
wenzelm@26849
   358
\end{isamarkuptext}%
wenzelm@26849
   359
\isamarkuptrue%
wenzelm@26849
   360
%
wenzelm@26849
   361
\isamarkupsection{Datatypes \label{sec:hol-datatype}%
wenzelm@26849
   362
}
wenzelm@26849
   363
\isamarkuptrue%
wenzelm@26849
   364
%
wenzelm@26849
   365
\begin{isamarkuptext}%
wenzelm@26849
   366
\begin{matharray}{rcl}
wenzelm@26902
   367
    \indexdef{HOL}{command}{datatype}\hypertarget{command.HOL.datatype}{\hyperlink{command.HOL.datatype}{\mbox{\isa{\isacommand{datatype}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   368
    \indexdef{HOL}{command}{rep\_datatype}\hypertarget{command.HOL.rep-datatype}{\hyperlink{command.HOL.rep-datatype}{\mbox{\isa{\isacommand{rep{\isacharunderscore}datatype}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26849
   369
  \end{matharray}
wenzelm@26849
   370
wenzelm@26849
   371
  \begin{rail}
wenzelm@26849
   372
    'datatype' (dtspec + 'and')
wenzelm@26849
   373
    ;
wenzelm@26849
   374
    'rep\_datatype' (name *) dtrules
wenzelm@26849
   375
    ;
wenzelm@26849
   376
wenzelm@26849
   377
    dtspec: parname? typespec infix? '=' (cons + '|')
wenzelm@26849
   378
    ;
wenzelm@26849
   379
    cons: name (type *) mixfix?
wenzelm@26849
   380
    ;
wenzelm@26849
   381
    dtrules: 'distinct' thmrefs 'inject' thmrefs 'induction' thmrefs
wenzelm@26849
   382
  \end{rail}
wenzelm@26849
   383
wenzelm@26849
   384
  \begin{descr}
wenzelm@26849
   385
wenzelm@26902
   386
  \item [\hyperlink{command.HOL.datatype}{\mbox{\isa{\isacommand{datatype}}}}] defines inductive datatypes in
wenzelm@26849
   387
  HOL.
wenzelm@26849
   388
wenzelm@26907
   389
  \item [\hyperlink{command.HOL.rep-datatype}{\mbox{\isa{\isacommand{rep{\isacharunderscore}datatype}}}}] represents existing types as
wenzelm@26849
   390
  inductive ones, generating the standard infrastructure of derived
wenzelm@26849
   391
  concepts (primitive recursion etc.).
wenzelm@26849
   392
wenzelm@26849
   393
  \end{descr}
wenzelm@26849
   394
wenzelm@26849
   395
  The induction and exhaustion theorems generated provide case names
wenzelm@26849
   396
  according to the constructors involved, while parameters are named
wenzelm@26849
   397
  after the types (see also \secref{sec:cases-induct}).
wenzelm@26849
   398
wenzelm@26849
   399
  See \cite{isabelle-HOL} for more details on datatypes, but beware of
wenzelm@26849
   400
  the old-style theory syntax being used there!  Apart from proper
wenzelm@26849
   401
  proof methods for case-analysis and induction, there are also
wenzelm@26907
   402
  emulations of ML tactics \hyperlink{method.HOL.case-tac}{\mbox{\isa{case{\isacharunderscore}tac}}} and \hyperlink{method.HOL.induct-tac}{\mbox{\isa{induct{\isacharunderscore}tac}}} available, see \secref{sec:hol-induct-tac}; these admit
wenzelm@26849
   403
  to refer directly to the internal structure of subgoals (including
wenzelm@26849
   404
  internally bound parameters).%
wenzelm@26849
   405
\end{isamarkuptext}%
wenzelm@26849
   406
\isamarkuptrue%
wenzelm@26849
   407
%
wenzelm@26849
   408
\isamarkupsection{Recursive functions \label{sec:recursion}%
wenzelm@26849
   409
}
wenzelm@26849
   410
\isamarkuptrue%
wenzelm@26849
   411
%
wenzelm@26849
   412
\begin{isamarkuptext}%
wenzelm@26849
   413
\begin{matharray}{rcl}
wenzelm@26902
   414
    \indexdef{HOL}{command}{primrec}\hypertarget{command.HOL.primrec}{\hyperlink{command.HOL.primrec}{\mbox{\isa{\isacommand{primrec}}}}} & : & \isarkeep{local{\dsh}theory} \\
wenzelm@26902
   415
    \indexdef{HOL}{command}{fun}\hypertarget{command.HOL.fun}{\hyperlink{command.HOL.fun}{\mbox{\isa{\isacommand{fun}}}}} & : & \isarkeep{local{\dsh}theory} \\
wenzelm@26902
   416
    \indexdef{HOL}{command}{function}\hypertarget{command.HOL.function}{\hyperlink{command.HOL.function}{\mbox{\isa{\isacommand{function}}}}} & : & \isartrans{local{\dsh}theory}{proof(prove)} \\
wenzelm@26902
   417
    \indexdef{HOL}{command}{termination}\hypertarget{command.HOL.termination}{\hyperlink{command.HOL.termination}{\mbox{\isa{\isacommand{termination}}}}} & : & \isartrans{local{\dsh}theory}{proof(prove)} \\
wenzelm@26849
   418
  \end{matharray}
wenzelm@26849
   419
wenzelm@26849
   420
  \begin{rail}
wenzelm@26849
   421
    'primrec' target? fixes 'where' equations
wenzelm@26849
   422
    ;
wenzelm@26849
   423
    equations: (thmdecl? prop + '|')
wenzelm@26849
   424
    ;
wenzelm@26987
   425
    ('fun' | 'function') target? functionopts? fixes 'where' clauses
wenzelm@26849
   426
    ;
wenzelm@26849
   427
    clauses: (thmdecl? prop ('(' 'otherwise' ')')? + '|')
wenzelm@26849
   428
    ;
wenzelm@26987
   429
    functionopts: '(' (('sequential' | 'domintros' | 'tailrec' | 'default' term) + ',') ')'
wenzelm@26849
   430
    ;
wenzelm@26849
   431
    'termination' ( term )?
wenzelm@26849
   432
  \end{rail}
wenzelm@26849
   433
wenzelm@26849
   434
  \begin{descr}
wenzelm@26849
   435
wenzelm@26902
   436
  \item [\hyperlink{command.HOL.primrec}{\mbox{\isa{\isacommand{primrec}}}}] defines primitive recursive
wenzelm@26849
   437
  functions over datatypes, see also \cite{isabelle-HOL}.
wenzelm@26849
   438
wenzelm@26902
   439
  \item [\hyperlink{command.HOL.function}{\mbox{\isa{\isacommand{function}}}}] defines functions by general
wenzelm@26849
   440
  wellfounded recursion. A detailed description with examples can be
wenzelm@26849
   441
  found in \cite{isabelle-function}. The function is specified by a
wenzelm@26849
   442
  set of (possibly conditional) recursive equations with arbitrary
wenzelm@26849
   443
  pattern matching. The command generates proof obligations for the
wenzelm@26849
   444
  completeness and the compatibility of patterns.
wenzelm@26849
   445
wenzelm@26849
   446
  The defined function is considered partial, and the resulting
wenzelm@26849
   447
  simplification rules (named \isa{{\isachardoublequote}f{\isachardot}psimps{\isachardoublequote}}) and induction rule
wenzelm@26849
   448
  (named \isa{{\isachardoublequote}f{\isachardot}pinduct{\isachardoublequote}}) are guarded by a generated domain
wenzelm@26902
   449
  predicate \isa{{\isachardoublequote}f{\isacharunderscore}dom{\isachardoublequote}}. The \hyperlink{command.HOL.termination}{\mbox{\isa{\isacommand{termination}}}}
wenzelm@26849
   450
  command can then be used to establish that the function is total.
wenzelm@26849
   451
wenzelm@26902
   452
  \item [\hyperlink{command.HOL.fun}{\mbox{\isa{\isacommand{fun}}}}] is a shorthand notation for
wenzelm@26902
   453
  ``\hyperlink{command.HOL.function}{\mbox{\isa{\isacommand{function}}}}~\isa{{\isachardoublequote}{\isacharparenleft}sequential{\isacharparenright}{\isachardoublequote}}, followed by
wenzelm@26849
   454
  automated proof attempts regarding pattern matching and termination.
wenzelm@26849
   455
  See \cite{isabelle-function} for further details.
wenzelm@26849
   456
wenzelm@26902
   457
  \item [\hyperlink{command.HOL.termination}{\mbox{\isa{\isacommand{termination}}}}~\isa{f}] commences a
wenzelm@26849
   458
  termination proof for the previously defined function \isa{f}.  If
wenzelm@26849
   459
  this is omitted, the command refers to the most recent function
wenzelm@26849
   460
  definition.  After the proof is closed, the recursive equations and
wenzelm@26849
   461
  the induction principle is established.
wenzelm@26849
   462
wenzelm@26849
   463
  \end{descr}
wenzelm@26849
   464
wenzelm@26849
   465
  %FIXME check
wenzelm@26849
   466
wenzelm@26902
   467
  Recursive definitions introduced by both the \hyperlink{command.HOL.primrec}{\mbox{\isa{\isacommand{primrec}}}} and the \hyperlink{command.HOL.function}{\mbox{\isa{\isacommand{function}}}} command accommodate
wenzelm@26849
   468
  reasoning by induction (cf.\ \secref{sec:cases-induct}): rule \isa{{\isachardoublequote}c{\isachardot}induct{\isachardoublequote}} (where \isa{c} is the name of the function definition)
wenzelm@26849
   469
  refers to a specific induction rule, with parameters named according
wenzelm@26902
   470
  to the user-specified equations.  Case names of \hyperlink{command.HOL.primrec}{\mbox{\isa{\isacommand{primrec}}}} are that of the datatypes involved, while those of
wenzelm@26902
   471
  \hyperlink{command.HOL.function}{\mbox{\isa{\isacommand{function}}}} are numbered (starting from 1).
wenzelm@26849
   472
wenzelm@26849
   473
  The equations provided by these packages may be referred later as
wenzelm@26849
   474
  theorem list \isa{{\isachardoublequote}f{\isachardot}simps{\isachardoublequote}}, where \isa{f} is the (collective)
wenzelm@26849
   475
  name of the functions defined.  Individual equations may be named
wenzelm@26849
   476
  explicitly as well.
wenzelm@26849
   477
wenzelm@26902
   478
  The \hyperlink{command.HOL.function}{\mbox{\isa{\isacommand{function}}}} command accepts the following
wenzelm@26849
   479
  options.
wenzelm@26849
   480
wenzelm@26849
   481
  \begin{descr}
wenzelm@26849
   482
wenzelm@26849
   483
  \item [\isa{sequential}] enables a preprocessor which
wenzelm@26849
   484
  disambiguates overlapping patterns by making them mutually disjoint.
wenzelm@26849
   485
  Earlier equations take precedence over later ones.  This allows to
wenzelm@26849
   486
  give the specification in a format very similar to functional
wenzelm@26849
   487
  programming.  Note that the resulting simplification and induction
wenzelm@26849
   488
  rules correspond to the transformed specification, not the one given
wenzelm@26849
   489
  originally. This usually means that each equation given by the user
wenzelm@26849
   490
  may result in several theroems.  Also note that this automatic
wenzelm@26849
   491
  transformation only works for ML-style datatype patterns.
wenzelm@26849
   492
wenzelm@26849
   493
  \item [\isa{domintros}] enables the automated generation of
wenzelm@26849
   494
  introduction rules for the domain predicate. While mostly not
wenzelm@26849
   495
  needed, they can be helpful in some proofs about partial functions.
wenzelm@26849
   496
wenzelm@26849
   497
  \item [\isa{tailrec}] generates the unconstrained recursive
wenzelm@26849
   498
  equations even without a termination proof, provided that the
wenzelm@26849
   499
  function is tail-recursive. This currently only works
wenzelm@26849
   500
wenzelm@26849
   501
  \item [\isa{{\isachardoublequote}default\ d{\isachardoublequote}}] allows to specify a default value for a
wenzelm@26849
   502
  (partial) function, which will ensure that \isa{{\isachardoublequote}f\ x\ {\isacharequal}\ d\ x{\isachardoublequote}}
wenzelm@26849
   503
  whenever \isa{{\isachardoublequote}x\ {\isasymnotin}\ f{\isacharunderscore}dom{\isachardoublequote}}.
wenzelm@26849
   504
wenzelm@26849
   505
  \end{descr}%
wenzelm@26849
   506
\end{isamarkuptext}%
wenzelm@26849
   507
\isamarkuptrue%
wenzelm@26849
   508
%
wenzelm@26849
   509
\isamarkupsubsection{Proof methods related to recursive definitions%
wenzelm@26849
   510
}
wenzelm@26849
   511
\isamarkuptrue%
wenzelm@26849
   512
%
wenzelm@26849
   513
\begin{isamarkuptext}%
wenzelm@26849
   514
\begin{matharray}{rcl}
wenzelm@26907
   515
    \indexdef{HOL}{method}{pat\_completeness}\hypertarget{method.HOL.pat-completeness}{\hyperlink{method.HOL.pat-completeness}{\mbox{\isa{pat{\isacharunderscore}completeness}}}} & : & \isarmeth \\
wenzelm@26902
   516
    \indexdef{HOL}{method}{relation}\hypertarget{method.HOL.relation}{\hyperlink{method.HOL.relation}{\mbox{\isa{relation}}}} & : & \isarmeth \\
wenzelm@26907
   517
    \indexdef{HOL}{method}{lexicographic\_order}\hypertarget{method.HOL.lexicographic-order}{\hyperlink{method.HOL.lexicographic-order}{\mbox{\isa{lexicographic{\isacharunderscore}order}}}} & : & \isarmeth \\
wenzelm@26849
   518
  \end{matharray}
wenzelm@26849
   519
wenzelm@26849
   520
  \begin{rail}
wenzelm@26849
   521
    'relation' term
wenzelm@26849
   522
    ;
wenzelm@26849
   523
    'lexicographic\_order' (clasimpmod *)
wenzelm@26849
   524
    ;
wenzelm@26849
   525
  \end{rail}
wenzelm@26849
   526
wenzelm@26849
   527
  \begin{descr}
wenzelm@26849
   528
wenzelm@26907
   529
  \item [\hyperlink{method.HOL.pat-completeness}{\mbox{\isa{pat{\isacharunderscore}completeness}}}] is a specialized method to
wenzelm@26849
   530
  solve goals regarding the completeness of pattern matching, as
wenzelm@26902
   531
  required by the \hyperlink{command.HOL.function}{\mbox{\isa{\isacommand{function}}}} package (cf.\
wenzelm@26849
   532
  \cite{isabelle-function}).
wenzelm@26849
   533
wenzelm@26902
   534
  \item [\hyperlink{method.HOL.relation}{\mbox{\isa{relation}}}~\isa{R}] introduces a termination
wenzelm@26849
   535
  proof using the relation \isa{R}.  The resulting proof state will
wenzelm@26849
   536
  contain goals expressing that \isa{R} is wellfounded, and that the
wenzelm@26849
   537
  arguments of recursive calls decrease with respect to \isa{R}.
wenzelm@26849
   538
  Usually, this method is used as the initial proof step of manual
wenzelm@26849
   539
  termination proofs.
wenzelm@26849
   540
wenzelm@26907
   541
  \item [\hyperlink{method.HOL.lexicographic-order}{\mbox{\isa{lexicographic{\isacharunderscore}order}}}] attempts a fully
wenzelm@26849
   542
  automated termination proof by searching for a lexicographic
wenzelm@26849
   543
  combination of size measures on the arguments of the function. The
wenzelm@26902
   544
  method accepts the same arguments as the \hyperlink{method.auto}{\mbox{\isa{auto}}} method,
wenzelm@26849
   545
  which it uses internally to prove local descents.  The same context
wenzelm@26902
   546
  modifiers as for \hyperlink{method.auto}{\mbox{\isa{auto}}} are accepted, see
wenzelm@26849
   547
  \secref{sec:clasimp}.
wenzelm@26849
   548
wenzelm@26849
   549
  In case of failure, extensive information is printed, which can help
wenzelm@26849
   550
  to analyse the situation (cf.\ \cite{isabelle-function}).
wenzelm@26849
   551
wenzelm@26849
   552
  \end{descr}%
wenzelm@26849
   553
\end{isamarkuptext}%
wenzelm@26849
   554
\isamarkuptrue%
wenzelm@26849
   555
%
wenzelm@26849
   556
\isamarkupsubsection{Old-style recursive function definitions (TFL)%
wenzelm@26849
   557
}
wenzelm@26849
   558
\isamarkuptrue%
wenzelm@26849
   559
%
wenzelm@26849
   560
\begin{isamarkuptext}%
wenzelm@26907
   561
The old TFL commands \hyperlink{command.HOL.recdef}{\mbox{\isa{\isacommand{recdef}}}} and \hyperlink{command.HOL.recdef-tc}{\mbox{\isa{\isacommand{recdef{\isacharunderscore}tc}}}} for defining recursive are mostly obsolete; \hyperlink{command.HOL.function}{\mbox{\isa{\isacommand{function}}}} or \hyperlink{command.HOL.fun}{\mbox{\isa{\isacommand{fun}}}} should be used instead.
wenzelm@26849
   562
wenzelm@26849
   563
  \begin{matharray}{rcl}
wenzelm@26902
   564
    \indexdef{HOL}{command}{recdef}\hypertarget{command.HOL.recdef}{\hyperlink{command.HOL.recdef}{\mbox{\isa{\isacommand{recdef}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   565
    \indexdef{HOL}{command}{recdef\_tc}\hypertarget{command.HOL.recdef-tc}{\hyperlink{command.HOL.recdef-tc}{\mbox{\isa{\isacommand{recdef{\isacharunderscore}tc}}}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isartrans{theory}{proof(prove)} \\
wenzelm@26849
   566
  \end{matharray}
wenzelm@26849
   567
wenzelm@26849
   568
  \begin{rail}
wenzelm@26849
   569
    'recdef' ('(' 'permissive' ')')? \\ name term (prop +) hints?
wenzelm@26849
   570
    ;
wenzelm@26849
   571
    recdeftc thmdecl? tc
wenzelm@26849
   572
    ;
wenzelm@26849
   573
    hints: '(' 'hints' (recdefmod *) ')'
wenzelm@26849
   574
    ;
wenzelm@26849
   575
    recdefmod: (('recdef\_simp' | 'recdef\_cong' | 'recdef\_wf') (() | 'add' | 'del') ':' thmrefs) | clasimpmod
wenzelm@26849
   576
    ;
wenzelm@26849
   577
    tc: nameref ('(' nat ')')?
wenzelm@26849
   578
    ;
wenzelm@26849
   579
  \end{rail}
wenzelm@26849
   580
wenzelm@26849
   581
  \begin{descr}
wenzelm@26849
   582
  
wenzelm@26902
   583
  \item [\hyperlink{command.HOL.recdef}{\mbox{\isa{\isacommand{recdef}}}}] defines general well-founded
wenzelm@26849
   584
  recursive functions (using the TFL package), see also
wenzelm@26849
   585
  \cite{isabelle-HOL}.  The ``\isa{{\isachardoublequote}{\isacharparenleft}permissive{\isacharparenright}{\isachardoublequote}}'' option tells
wenzelm@26849
   586
  TFL to recover from failed proof attempts, returning unfinished
wenzelm@26849
   587
  results.  The \isa{recdef{\isacharunderscore}simp}, \isa{recdef{\isacharunderscore}cong}, and \isa{recdef{\isacharunderscore}wf} hints refer to auxiliary rules to be used in the internal
wenzelm@26902
   588
  automated proof process of TFL.  Additional \hyperlink{syntax.clasimpmod}{\mbox{\isa{clasimpmod}}}
wenzelm@26849
   589
  declarations (cf.\ \secref{sec:clasimp}) may be given to tune the
wenzelm@26849
   590
  context of the Simplifier (cf.\ \secref{sec:simplifier}) and
wenzelm@26849
   591
  Classical reasoner (cf.\ \secref{sec:classical}).
wenzelm@26849
   592
  
wenzelm@26907
   593
  \item [\hyperlink{command.HOL.recdef-tc}{\mbox{\isa{\isacommand{recdef{\isacharunderscore}tc}}}}~\isa{{\isachardoublequote}c\ {\isacharparenleft}i{\isacharparenright}{\isachardoublequote}}] recommences the
wenzelm@26849
   594
  proof for leftover termination condition number \isa{i} (default
wenzelm@26902
   595
  1) as generated by a \hyperlink{command.HOL.recdef}{\mbox{\isa{\isacommand{recdef}}}} definition of
wenzelm@26849
   596
  constant \isa{c}.
wenzelm@26849
   597
  
wenzelm@26902
   598
  Note that in most cases, \hyperlink{command.HOL.recdef}{\mbox{\isa{\isacommand{recdef}}}} is able to finish
wenzelm@26849
   599
  its internal proofs without manual intervention.
wenzelm@26849
   600
wenzelm@26849
   601
  \end{descr}
wenzelm@26849
   602
wenzelm@26902
   603
  \medskip Hints for \hyperlink{command.HOL.recdef}{\mbox{\isa{\isacommand{recdef}}}} may be also declared
wenzelm@26849
   604
  globally, using the following attributes.
wenzelm@26849
   605
wenzelm@26849
   606
  \begin{matharray}{rcl}
wenzelm@26907
   607
    \indexdef{HOL}{attribute}{recdef\_simp}\hypertarget{attribute.HOL.recdef-simp}{\hyperlink{attribute.HOL.recdef-simp}{\mbox{\isa{recdef{\isacharunderscore}simp}}}} & : & \isaratt \\
wenzelm@26907
   608
    \indexdef{HOL}{attribute}{recdef\_cong}\hypertarget{attribute.HOL.recdef-cong}{\hyperlink{attribute.HOL.recdef-cong}{\mbox{\isa{recdef{\isacharunderscore}cong}}}} & : & \isaratt \\
wenzelm@26907
   609
    \indexdef{HOL}{attribute}{recdef\_wf}\hypertarget{attribute.HOL.recdef-wf}{\hyperlink{attribute.HOL.recdef-wf}{\mbox{\isa{recdef{\isacharunderscore}wf}}}} & : & \isaratt \\
wenzelm@26849
   610
  \end{matharray}
wenzelm@26849
   611
wenzelm@26849
   612
  \begin{rail}
wenzelm@26849
   613
    ('recdef\_simp' | 'recdef\_cong' | 'recdef\_wf') (() | 'add' | 'del')
wenzelm@26849
   614
    ;
wenzelm@26849
   615
  \end{rail}%
wenzelm@26849
   616
\end{isamarkuptext}%
wenzelm@26849
   617
\isamarkuptrue%
wenzelm@26849
   618
%
wenzelm@26849
   619
\isamarkupsection{Inductive and coinductive definitions \label{sec:hol-inductive}%
wenzelm@26849
   620
}
wenzelm@26849
   621
\isamarkuptrue%
wenzelm@26849
   622
%
wenzelm@26849
   623
\begin{isamarkuptext}%
wenzelm@26849
   624
An \textbf{inductive definition} specifies the least predicate (or
wenzelm@26849
   625
  set) \isa{R} closed under given rules: applying a rule to elements
wenzelm@26849
   626
  of \isa{R} yields a result within \isa{R}.  For example, a
wenzelm@26849
   627
  structural operational semantics is an inductive definition of an
wenzelm@26849
   628
  evaluation relation.
wenzelm@26849
   629
wenzelm@26849
   630
  Dually, a \textbf{coinductive definition} specifies the greatest
wenzelm@26849
   631
  predicate~/ set \isa{R} that is consistent with given rules: every
wenzelm@26849
   632
  element of \isa{R} can be seen as arising by applying a rule to
wenzelm@26849
   633
  elements of \isa{R}.  An important example is using bisimulation
wenzelm@26849
   634
  relations to formalise equivalence of processes and infinite data
wenzelm@26849
   635
  structures.
wenzelm@26849
   636
wenzelm@26849
   637
  \medskip The HOL package is related to the ZF one, which is
wenzelm@26849
   638
  described in a separate paper,\footnote{It appeared in CADE
wenzelm@26849
   639
  \cite{paulson-CADE}; a longer version is distributed with Isabelle.}
wenzelm@26849
   640
  which you should refer to in case of difficulties.  The package is
wenzelm@26849
   641
  simpler than that of ZF thanks to implicit type-checking in HOL.
wenzelm@26849
   642
  The types of the (co)inductive predicates (or sets) determine the
wenzelm@26849
   643
  domain of the fixedpoint definition, and the package does not have
wenzelm@26849
   644
  to use inference rules for type-checking.
wenzelm@26849
   645
wenzelm@26849
   646
  \begin{matharray}{rcl}
wenzelm@26902
   647
    \indexdef{HOL}{command}{inductive}\hypertarget{command.HOL.inductive}{\hyperlink{command.HOL.inductive}{\mbox{\isa{\isacommand{inductive}}}}} & : & \isarkeep{local{\dsh}theory} \\
wenzelm@26907
   648
    \indexdef{HOL}{command}{inductive\_set}\hypertarget{command.HOL.inductive-set}{\hyperlink{command.HOL.inductive-set}{\mbox{\isa{\isacommand{inductive{\isacharunderscore}set}}}}} & : & \isarkeep{local{\dsh}theory} \\
wenzelm@26902
   649
    \indexdef{HOL}{command}{coinductive}\hypertarget{command.HOL.coinductive}{\hyperlink{command.HOL.coinductive}{\mbox{\isa{\isacommand{coinductive}}}}} & : & \isarkeep{local{\dsh}theory} \\
wenzelm@26907
   650
    \indexdef{HOL}{command}{coinductive\_set}\hypertarget{command.HOL.coinductive-set}{\hyperlink{command.HOL.coinductive-set}{\mbox{\isa{\isacommand{coinductive{\isacharunderscore}set}}}}} & : & \isarkeep{local{\dsh}theory} \\
wenzelm@26902
   651
    \indexdef{HOL}{attribute}{mono}\hypertarget{attribute.HOL.mono}{\hyperlink{attribute.HOL.mono}{\mbox{\isa{mono}}}} & : & \isaratt \\
wenzelm@26849
   652
  \end{matharray}
wenzelm@26849
   653
wenzelm@26849
   654
  \begin{rail}
wenzelm@26849
   655
    ('inductive' | 'inductive\_set' | 'coinductive' | 'coinductive\_set') target? fixes ('for' fixes)? \\
wenzelm@26849
   656
    ('where' clauses)? ('monos' thmrefs)?
wenzelm@26849
   657
    ;
wenzelm@26849
   658
    clauses: (thmdecl? prop + '|')
wenzelm@26849
   659
    ;
wenzelm@26849
   660
    'mono' (() | 'add' | 'del')
wenzelm@26849
   661
    ;
wenzelm@26849
   662
  \end{rail}
wenzelm@26849
   663
wenzelm@26849
   664
  \begin{descr}
wenzelm@26849
   665
wenzelm@26902
   666
  \item [\hyperlink{command.HOL.inductive}{\mbox{\isa{\isacommand{inductive}}}} and \hyperlink{command.HOL.coinductive}{\mbox{\isa{\isacommand{coinductive}}}}] define (co)inductive predicates from the
wenzelm@26902
   667
  introduction rules given in the \hyperlink{keyword.where}{\mbox{\isa{\isakeyword{where}}}} part.  The
wenzelm@26902
   668
  optional \hyperlink{keyword.for}{\mbox{\isa{\isakeyword{for}}}} part contains a list of parameters of the
wenzelm@26849
   669
  (co)inductive predicates that remain fixed throughout the
wenzelm@26902
   670
  definition.  The optional \hyperlink{keyword.monos}{\mbox{\isa{\isakeyword{monos}}}} section contains
wenzelm@26849
   671
  \emph{monotonicity theorems}, which are required for each operator
wenzelm@26849
   672
  applied to a recursive set in the introduction rules.  There
wenzelm@26849
   673
  \emph{must} be a theorem of the form \isa{{\isachardoublequote}A\ {\isasymle}\ B\ {\isasymLongrightarrow}\ M\ A\ {\isasymle}\ M\ B{\isachardoublequote}},
wenzelm@26849
   674
  for each premise \isa{{\isachardoublequote}M\ R\isactrlsub i\ t{\isachardoublequote}} in an introduction rule!
wenzelm@26849
   675
wenzelm@26907
   676
  \item [\hyperlink{command.HOL.inductive-set}{\mbox{\isa{\isacommand{inductive{\isacharunderscore}set}}}} and \hyperlink{command.HOL.coinductive-set}{\mbox{\isa{\isacommand{coinductive{\isacharunderscore}set}}}}] are wrappers for to the previous commands,
wenzelm@26849
   677
  allowing the definition of (co)inductive sets.
wenzelm@26849
   678
wenzelm@26902
   679
  \item [\hyperlink{attribute.HOL.mono}{\mbox{\isa{mono}}}] declares monotonicity rules.  These
wenzelm@26902
   680
  rule are involved in the automated monotonicity proof of \hyperlink{command.HOL.inductive}{\mbox{\isa{\isacommand{inductive}}}}.
wenzelm@26849
   681
wenzelm@26849
   682
  \end{descr}%
wenzelm@26849
   683
\end{isamarkuptext}%
wenzelm@26849
   684
\isamarkuptrue%
wenzelm@26849
   685
%
wenzelm@26849
   686
\isamarkupsubsection{Derived rules%
wenzelm@26849
   687
}
wenzelm@26849
   688
\isamarkuptrue%
wenzelm@26849
   689
%
wenzelm@26849
   690
\begin{isamarkuptext}%
wenzelm@26849
   691
Each (co)inductive definition \isa{R} adds definitions to the
wenzelm@26849
   692
  theory and also proves some theorems:
wenzelm@26849
   693
wenzelm@26849
   694
  \begin{description}
wenzelm@26849
   695
wenzelm@26849
   696
  \item [\isa{R{\isachardot}intros}] is the list of introduction rules as proven
wenzelm@26849
   697
  theorems, for the recursive predicates (or sets).  The rules are
wenzelm@26849
   698
  also available individually, using the names given them in the
wenzelm@26849
   699
  theory file;
wenzelm@26849
   700
wenzelm@26849
   701
  \item [\isa{R{\isachardot}cases}] is the case analysis (or elimination) rule;
wenzelm@26849
   702
wenzelm@26849
   703
  \item [\isa{R{\isachardot}induct} or \isa{R{\isachardot}coinduct}] is the (co)induction
wenzelm@26849
   704
  rule.
wenzelm@26849
   705
wenzelm@26849
   706
  \end{description}
wenzelm@26849
   707
wenzelm@26849
   708
  When several predicates \isa{{\isachardoublequote}R\isactrlsub {\isadigit{1}}{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ R\isactrlsub n{\isachardoublequote}} are
wenzelm@26849
   709
  defined simultaneously, the list of introduction rules is called
wenzelm@26849
   710
  \isa{{\isachardoublequote}R\isactrlsub {\isadigit{1}}{\isacharunderscore}{\isasymdots}{\isacharunderscore}R\isactrlsub n{\isachardot}intros{\isachardoublequote}}, the case analysis rules are
wenzelm@26849
   711
  called \isa{{\isachardoublequote}R\isactrlsub {\isadigit{1}}{\isachardot}cases{\isacharcomma}\ {\isasymdots}{\isacharcomma}\ R\isactrlsub n{\isachardot}cases{\isachardoublequote}}, and the list
wenzelm@26849
   712
  of mutual induction rules is called \isa{{\isachardoublequote}R\isactrlsub {\isadigit{1}}{\isacharunderscore}{\isasymdots}{\isacharunderscore}R\isactrlsub n{\isachardot}inducts{\isachardoublequote}}.%
wenzelm@26849
   713
\end{isamarkuptext}%
wenzelm@26849
   714
\isamarkuptrue%
wenzelm@26849
   715
%
wenzelm@26849
   716
\isamarkupsubsection{Monotonicity theorems%
wenzelm@26849
   717
}
wenzelm@26849
   718
\isamarkuptrue%
wenzelm@26849
   719
%
wenzelm@26849
   720
\begin{isamarkuptext}%
wenzelm@26849
   721
Each theory contains a default set of theorems that are used in
wenzelm@26849
   722
  monotonicity proofs.  New rules can be added to this set via the
wenzelm@26902
   723
  \hyperlink{attribute.HOL.mono}{\mbox{\isa{mono}}} attribute.  The HOL theory \isa{Inductive}
wenzelm@26849
   724
  shows how this is done.  In general, the following monotonicity
wenzelm@26849
   725
  theorems may be added:
wenzelm@26849
   726
wenzelm@26849
   727
  \begin{itemize}
wenzelm@26849
   728
wenzelm@26849
   729
  \item Theorems of the form \isa{{\isachardoublequote}A\ {\isasymle}\ B\ {\isasymLongrightarrow}\ M\ A\ {\isasymle}\ M\ B{\isachardoublequote}}, for proving
wenzelm@26849
   730
  monotonicity of inductive definitions whose introduction rules have
wenzelm@26849
   731
  premises involving terms such as \isa{{\isachardoublequote}M\ R\isactrlsub i\ t{\isachardoublequote}}.
wenzelm@26849
   732
wenzelm@26849
   733
  \item Monotonicity theorems for logical operators, which are of the
wenzelm@26849
   734
  general form \isa{{\isachardoublequote}{\isacharparenleft}{\isasymdots}\ {\isasymlongrightarrow}\ {\isasymdots}{\isacharparenright}\ {\isasymLongrightarrow}\ {\isasymdots}\ {\isacharparenleft}{\isasymdots}\ {\isasymlongrightarrow}\ {\isasymdots}{\isacharparenright}\ {\isasymLongrightarrow}\ {\isasymdots}\ {\isasymlongrightarrow}\ {\isasymdots}{\isachardoublequote}}.  For example, in
wenzelm@26849
   735
  the case of the operator \isa{{\isachardoublequote}{\isasymor}{\isachardoublequote}}, the corresponding theorem is
wenzelm@26849
   736
  \[
wenzelm@26849
   737
  \infer{\isa{{\isachardoublequote}P\isactrlsub {\isadigit{1}}\ {\isasymor}\ P\isactrlsub {\isadigit{2}}\ {\isasymlongrightarrow}\ Q\isactrlsub {\isadigit{1}}\ {\isasymor}\ Q\isactrlsub {\isadigit{2}}{\isachardoublequote}}}{\isa{{\isachardoublequote}P\isactrlsub {\isadigit{1}}\ {\isasymlongrightarrow}\ Q\isactrlsub {\isadigit{1}}{\isachardoublequote}} & \isa{{\isachardoublequote}P\isactrlsub {\isadigit{2}}\ {\isasymlongrightarrow}\ Q\isactrlsub {\isadigit{2}}{\isachardoublequote}}}
wenzelm@26849
   738
  \]
wenzelm@26849
   739
wenzelm@26849
   740
  \item De Morgan style equations for reasoning about the ``polarity''
wenzelm@26849
   741
  of expressions, e.g.
wenzelm@26849
   742
  \[
wenzelm@26849
   743
  \isa{{\isachardoublequote}{\isasymnot}\ {\isasymnot}\ P\ {\isasymlongleftrightarrow}\ P{\isachardoublequote}} \qquad\qquad
wenzelm@26849
   744
  \isa{{\isachardoublequote}{\isasymnot}\ {\isacharparenleft}P\ {\isasymand}\ Q{\isacharparenright}\ {\isasymlongleftrightarrow}\ {\isasymnot}\ P\ {\isasymor}\ {\isasymnot}\ Q{\isachardoublequote}}
wenzelm@26849
   745
  \]
wenzelm@26849
   746
wenzelm@26849
   747
  \item Equations for reducing complex operators to more primitive
wenzelm@26849
   748
  ones whose monotonicity can easily be proved, e.g.
wenzelm@26849
   749
  \[
wenzelm@26849
   750
  \isa{{\isachardoublequote}{\isacharparenleft}P\ {\isasymlongrightarrow}\ Q{\isacharparenright}\ {\isasymlongleftrightarrow}\ {\isasymnot}\ P\ {\isasymor}\ Q{\isachardoublequote}} \qquad\qquad
wenzelm@26849
   751
  \isa{{\isachardoublequote}Ball\ A\ P\ {\isasymequiv}\ {\isasymforall}x{\isachardot}\ x\ {\isasymin}\ A\ {\isasymlongrightarrow}\ P\ x{\isachardoublequote}}
wenzelm@26849
   752
  \]
wenzelm@26849
   753
wenzelm@26849
   754
  \end{itemize}
wenzelm@26849
   755
wenzelm@26849
   756
  %FIXME: Example of an inductive definition%
wenzelm@26849
   757
\end{isamarkuptext}%
wenzelm@26849
   758
\isamarkuptrue%
wenzelm@26849
   759
%
wenzelm@26849
   760
\isamarkupsection{Arithmetic proof support%
wenzelm@26849
   761
}
wenzelm@26849
   762
\isamarkuptrue%
wenzelm@26849
   763
%
wenzelm@26849
   764
\begin{isamarkuptext}%
wenzelm@26849
   765
\begin{matharray}{rcl}
wenzelm@26902
   766
    \indexdef{HOL}{method}{arith}\hypertarget{method.HOL.arith}{\hyperlink{method.HOL.arith}{\mbox{\isa{arith}}}} & : & \isarmeth \\
wenzelm@26907
   767
    \indexdef{HOL}{attribute}{arith\_split}\hypertarget{attribute.HOL.arith-split}{\hyperlink{attribute.HOL.arith-split}{\mbox{\isa{arith{\isacharunderscore}split}}}} & : & \isaratt \\
wenzelm@26849
   768
  \end{matharray}
wenzelm@26849
   769
wenzelm@26902
   770
  The \hyperlink{method.HOL.arith}{\mbox{\isa{arith}}} method decides linear arithmetic problems
wenzelm@26849
   771
  (on types \isa{nat}, \isa{int}, \isa{real}).  Any current
wenzelm@26849
   772
  facts are inserted into the goal before running the procedure.
wenzelm@26849
   773
wenzelm@26907
   774
  The \hyperlink{attribute.HOL.arith-split}{\mbox{\isa{arith{\isacharunderscore}split}}} attribute declares case split
wenzelm@26895
   775
  rules to be expanded before the arithmetic procedure is invoked.
wenzelm@26849
   776
wenzelm@26849
   777
  Note that a simpler (but faster) version of arithmetic reasoning is
wenzelm@26849
   778
  already performed by the Simplifier.%
wenzelm@26849
   779
\end{isamarkuptext}%
wenzelm@26849
   780
\isamarkuptrue%
wenzelm@26849
   781
%
wenzelm@26849
   782
\isamarkupsection{Cases and induction: emulating tactic scripts \label{sec:hol-induct-tac}%
wenzelm@26849
   783
}
wenzelm@26849
   784
\isamarkuptrue%
wenzelm@26849
   785
%
wenzelm@26849
   786
\begin{isamarkuptext}%
wenzelm@26849
   787
The following important tactical tools of Isabelle/HOL have been
wenzelm@26849
   788
  ported to Isar.  These should be never used in proper proof texts!
wenzelm@26849
   789
wenzelm@26849
   790
  \begin{matharray}{rcl}
wenzelm@26907
   791
    \indexdef{HOL}{method}{case\_tac}\hypertarget{method.HOL.case-tac}{\hyperlink{method.HOL.case-tac}{\mbox{\isa{case{\isacharunderscore}tac}}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isarmeth \\
wenzelm@26907
   792
    \indexdef{HOL}{method}{induct\_tac}\hypertarget{method.HOL.induct-tac}{\hyperlink{method.HOL.induct-tac}{\mbox{\isa{induct{\isacharunderscore}tac}}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isarmeth \\
wenzelm@26907
   793
    \indexdef{HOL}{method}{ind\_cases}\hypertarget{method.HOL.ind-cases}{\hyperlink{method.HOL.ind-cases}{\mbox{\isa{ind{\isacharunderscore}cases}}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isarmeth \\
wenzelm@26907
   794
    \indexdef{HOL}{command}{inductive\_cases}\hypertarget{command.HOL.inductive-cases}{\hyperlink{command.HOL.inductive-cases}{\mbox{\isa{\isacommand{inductive{\isacharunderscore}cases}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26849
   795
  \end{matharray}
wenzelm@26849
   796
wenzelm@26849
   797
  \begin{rail}
wenzelm@26849
   798
    'case\_tac' goalspec? term rule?
wenzelm@26849
   799
    ;
wenzelm@26849
   800
    'induct\_tac' goalspec? (insts * 'and') rule?
wenzelm@26849
   801
    ;
wenzelm@26849
   802
    'ind\_cases' (prop +) ('for' (name +)) ?
wenzelm@26849
   803
    ;
wenzelm@26849
   804
    'inductive\_cases' (thmdecl? (prop +) + 'and')
wenzelm@26849
   805
    ;
wenzelm@26849
   806
wenzelm@26849
   807
    rule: ('rule' ':' thmref)
wenzelm@26849
   808
    ;
wenzelm@26849
   809
  \end{rail}
wenzelm@26849
   810
wenzelm@26849
   811
  \begin{descr}
wenzelm@26849
   812
wenzelm@26907
   813
  \item [\hyperlink{method.HOL.case-tac}{\mbox{\isa{case{\isacharunderscore}tac}}} and \hyperlink{method.HOL.induct-tac}{\mbox{\isa{induct{\isacharunderscore}tac}}}]
wenzelm@26849
   814
  admit to reason about inductive datatypes only (unless an
wenzelm@26907
   815
  alternative rule is given explicitly).  Furthermore, \hyperlink{method.HOL.case-tac}{\mbox{\isa{case{\isacharunderscore}tac}}} does a classical case split on booleans; \hyperlink{method.HOL.induct-tac}{\mbox{\isa{induct{\isacharunderscore}tac}}} allows only variables to be given as instantiation.
wenzelm@26849
   816
  These tactic emulations feature both goal addressing and dynamic
wenzelm@26849
   817
  instantiation.  Note that named rule cases are \emph{not} provided
wenzelm@26902
   818
  as would be by the proper \hyperlink{method.induct}{\mbox{\isa{induct}}} and \hyperlink{method.cases}{\mbox{\isa{cases}}} proof
wenzelm@26849
   819
  methods (see \secref{sec:cases-induct}).
wenzelm@26849
   820
  
wenzelm@26907
   821
  \item [\hyperlink{method.HOL.ind-cases}{\mbox{\isa{ind{\isacharunderscore}cases}}} and \hyperlink{command.HOL.inductive-cases}{\mbox{\isa{\isacommand{inductive{\isacharunderscore}cases}}}}] provide an interface to the internal \verb|mk_cases| operation.  Rules are simplified in an unrestricted
wenzelm@26861
   822
  forward manner.
wenzelm@26849
   823
wenzelm@26907
   824
  While \hyperlink{method.HOL.ind-cases}{\mbox{\isa{ind{\isacharunderscore}cases}}} is a proof method to apply the
wenzelm@26907
   825
  result immediately as elimination rules, \hyperlink{command.HOL.inductive-cases}{\mbox{\isa{\isacommand{inductive{\isacharunderscore}cases}}}} provides case split theorems at the theory level
wenzelm@26907
   826
  for later use.  The \hyperlink{keyword.for}{\mbox{\isa{\isakeyword{for}}}} argument of the \hyperlink{method.HOL.ind-cases}{\mbox{\isa{ind{\isacharunderscore}cases}}} method allows to specify a list of variables that should
wenzelm@26849
   827
  be generalized before applying the resulting rule.
wenzelm@26849
   828
wenzelm@26849
   829
  \end{descr}%
wenzelm@26849
   830
\end{isamarkuptext}%
wenzelm@26849
   831
\isamarkuptrue%
wenzelm@26849
   832
%
wenzelm@26849
   833
\isamarkupsection{Executable code%
wenzelm@26849
   834
}
wenzelm@26849
   835
\isamarkuptrue%
wenzelm@26849
   836
%
wenzelm@26849
   837
\begin{isamarkuptext}%
wenzelm@26849
   838
Isabelle/Pure provides two generic frameworks to support code
wenzelm@26849
   839
  generation from executable specifications.  Isabelle/HOL
wenzelm@26849
   840
  instantiates these mechanisms in a way that is amenable to end-user
wenzelm@26849
   841
  applications.
wenzelm@26849
   842
wenzelm@26849
   843
  One framework generates code from both functional and relational
wenzelm@26849
   844
  programs to SML.  See \cite{isabelle-HOL} for further information
wenzelm@26849
   845
  (this actually covers the new-style theory format as well).
wenzelm@26849
   846
wenzelm@26849
   847
  \begin{matharray}{rcl}
wenzelm@26902
   848
    \indexdef{HOL}{command}{value}\hypertarget{command.HOL.value}{\hyperlink{command.HOL.value}{\mbox{\isa{\isacommand{value}}}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isarkeep{theory~|~proof} \\
wenzelm@26907
   849
    \indexdef{HOL}{command}{code\_module}\hypertarget{command.HOL.code-module}{\hyperlink{command.HOL.code-module}{\mbox{\isa{\isacommand{code{\isacharunderscore}module}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   850
    \indexdef{HOL}{command}{code\_library}\hypertarget{command.HOL.code-library}{\hyperlink{command.HOL.code-library}{\mbox{\isa{\isacommand{code{\isacharunderscore}library}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   851
    \indexdef{HOL}{command}{consts\_code}\hypertarget{command.HOL.consts-code}{\hyperlink{command.HOL.consts-code}{\mbox{\isa{\isacommand{consts{\isacharunderscore}code}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   852
    \indexdef{HOL}{command}{types\_code}\hypertarget{command.HOL.types-code}{\hyperlink{command.HOL.types-code}{\mbox{\isa{\isacommand{types{\isacharunderscore}code}}}}} & : & \isartrans{theory}{theory} \\  
wenzelm@26902
   853
    \indexdef{HOL}{attribute}{code}\hypertarget{attribute.HOL.code}{\hyperlink{attribute.HOL.code}{\mbox{\isa{code}}}} & : & \isaratt \\
wenzelm@26849
   854
  \end{matharray}
wenzelm@26849
   855
wenzelm@26849
   856
  \begin{rail}
wenzelm@26849
   857
  'value' term
wenzelm@26849
   858
  ;
wenzelm@26849
   859
wenzelm@26849
   860
  ( 'code\_module' | 'code\_library' ) modespec ? name ? \\
wenzelm@26849
   861
    ( 'file' name ) ? ( 'imports' ( name + ) ) ? \\
wenzelm@26849
   862
    'contains' ( ( name '=' term ) + | term + )
wenzelm@26849
   863
  ;
wenzelm@26849
   864
wenzelm@26849
   865
  modespec: '(' ( name * ) ')'
wenzelm@26849
   866
  ;
wenzelm@26849
   867
wenzelm@26849
   868
  'consts\_code' (codespec +)
wenzelm@26849
   869
  ;
wenzelm@26849
   870
wenzelm@26849
   871
  codespec: const template attachment ?
wenzelm@26849
   872
  ;
wenzelm@26849
   873
wenzelm@26849
   874
  'types\_code' (tycodespec +)
wenzelm@26849
   875
  ;
wenzelm@26849
   876
wenzelm@26849
   877
  tycodespec: name template attachment ?
wenzelm@26849
   878
  ;
wenzelm@26849
   879
wenzelm@26849
   880
  const: term
wenzelm@26849
   881
  ;
wenzelm@26849
   882
wenzelm@26849
   883
  template: '(' string ')'
wenzelm@26849
   884
  ;
wenzelm@26849
   885
wenzelm@26849
   886
  attachment: 'attach' modespec ? verblbrace text verbrbrace
wenzelm@26849
   887
  ;
wenzelm@26849
   888
wenzelm@26849
   889
  'code' (name)?
wenzelm@26849
   890
  ;
wenzelm@26849
   891
  \end{rail}
wenzelm@26849
   892
wenzelm@26849
   893
  \begin{descr}
wenzelm@26849
   894
wenzelm@26902
   895
  \item [\hyperlink{command.HOL.value}{\mbox{\isa{\isacommand{value}}}}~\isa{t}] evaluates and prints a
wenzelm@26849
   896
  term using the code generator.
wenzelm@26849
   897
wenzelm@26849
   898
  \end{descr}
wenzelm@26849
   899
wenzelm@26849
   900
  \medskip The other framework generates code from functional programs
wenzelm@26849
   901
  (including overloading using type classes) to SML \cite{SML}, OCaml
wenzelm@26849
   902
  \cite{OCaml} and Haskell \cite{haskell-revised-report}.
wenzelm@26849
   903
  Conceptually, code generation is split up in three steps:
wenzelm@26849
   904
  \emph{selection} of code theorems, \emph{translation} into an
wenzelm@26849
   905
  abstract executable view and \emph{serialization} to a specific
wenzelm@26849
   906
  \emph{target language}.  See \cite{isabelle-codegen} for an
wenzelm@26849
   907
  introduction on how to use it.
wenzelm@26849
   908
wenzelm@26849
   909
  \begin{matharray}{rcl}
wenzelm@26907
   910
    \indexdef{HOL}{command}{export\_code}\hypertarget{command.HOL.export-code}{\hyperlink{command.HOL.export-code}{\mbox{\isa{\isacommand{export{\isacharunderscore}code}}}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isarkeep{theory~|~proof} \\
wenzelm@26907
   911
    \indexdef{HOL}{command}{code\_thms}\hypertarget{command.HOL.code-thms}{\hyperlink{command.HOL.code-thms}{\mbox{\isa{\isacommand{code{\isacharunderscore}thms}}}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isarkeep{theory~|~proof} \\
wenzelm@26907
   912
    \indexdef{HOL}{command}{code\_deps}\hypertarget{command.HOL.code-deps}{\hyperlink{command.HOL.code-deps}{\mbox{\isa{\isacommand{code{\isacharunderscore}deps}}}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isarkeep{theory~|~proof} \\
wenzelm@26907
   913
    \indexdef{HOL}{command}{code\_datatype}\hypertarget{command.HOL.code-datatype}{\hyperlink{command.HOL.code-datatype}{\mbox{\isa{\isacommand{code{\isacharunderscore}datatype}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   914
    \indexdef{HOL}{command}{code\_const}\hypertarget{command.HOL.code-const}{\hyperlink{command.HOL.code-const}{\mbox{\isa{\isacommand{code{\isacharunderscore}const}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   915
    \indexdef{HOL}{command}{code\_type}\hypertarget{command.HOL.code-type}{\hyperlink{command.HOL.code-type}{\mbox{\isa{\isacommand{code{\isacharunderscore}type}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   916
    \indexdef{HOL}{command}{code\_class}\hypertarget{command.HOL.code-class}{\hyperlink{command.HOL.code-class}{\mbox{\isa{\isacommand{code{\isacharunderscore}class}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   917
    \indexdef{HOL}{command}{code\_instance}\hypertarget{command.HOL.code-instance}{\hyperlink{command.HOL.code-instance}{\mbox{\isa{\isacommand{code{\isacharunderscore}instance}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   918
    \indexdef{HOL}{command}{code\_monad}\hypertarget{command.HOL.code-monad}{\hyperlink{command.HOL.code-monad}{\mbox{\isa{\isacommand{code{\isacharunderscore}monad}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   919
    \indexdef{HOL}{command}{code\_reserved}\hypertarget{command.HOL.code-reserved}{\hyperlink{command.HOL.code-reserved}{\mbox{\isa{\isacommand{code{\isacharunderscore}reserved}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   920
    \indexdef{HOL}{command}{code\_include}\hypertarget{command.HOL.code-include}{\hyperlink{command.HOL.code-include}{\mbox{\isa{\isacommand{code{\isacharunderscore}include}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   921
    \indexdef{HOL}{command}{code\_modulename}\hypertarget{command.HOL.code-modulename}{\hyperlink{command.HOL.code-modulename}{\mbox{\isa{\isacommand{code{\isacharunderscore}modulename}}}}} & : & \isartrans{theory}{theory} \\
haftmann@27103
   922
    \indexdef{HOL}{command}{code\_abort}\hypertarget{command.HOL.code-abort}{\hyperlink{command.HOL.code-abort}{\mbox{\isa{\isacommand{code{\isacharunderscore}abort}}}}} & : & \isartrans{theory}{theory} \\
wenzelm@26907
   923
    \indexdef{HOL}{command}{print\_codesetup}\hypertarget{command.HOL.print-codesetup}{\hyperlink{command.HOL.print-codesetup}{\mbox{\isa{\isacommand{print{\isacharunderscore}codesetup}}}}}\isa{{\isachardoublequote}\isactrlsup {\isacharasterisk}{\isachardoublequote}} & : & \isarkeep{theory~|~proof} \\
wenzelm@26902
   924
    \indexdef{HOL}{attribute}{code}\hypertarget{attribute.HOL.code}{\hyperlink{attribute.HOL.code}{\mbox{\isa{code}}}} & : & \isaratt \\
wenzelm@26849
   925
  \end{matharray}
wenzelm@26849
   926
wenzelm@26849
   927
  \begin{rail}
wenzelm@26849
   928
    'export\_code' ( constexpr + ) ? \\
wenzelm@26849
   929
      ( ( 'in' target ( 'module\_name' string ) ? \\
wenzelm@26849
   930
        ( 'file' ( string | '-' ) ) ? ( '(' args ')' ) ?) + ) ?
wenzelm@26849
   931
    ;
wenzelm@26849
   932
wenzelm@26849
   933
    'code\_thms' ( constexpr + ) ?
wenzelm@26849
   934
    ;
wenzelm@26849
   935
wenzelm@26849
   936
    'code\_deps' ( constexpr + ) ?
wenzelm@26849
   937
    ;
wenzelm@26849
   938
wenzelm@26849
   939
    const: term
wenzelm@26849
   940
    ;
wenzelm@26849
   941
wenzelm@26849
   942
    constexpr: ( const | 'name.*' | '*' )
wenzelm@26849
   943
    ;
wenzelm@26849
   944
wenzelm@26849
   945
    typeconstructor: nameref
wenzelm@26849
   946
    ;
wenzelm@26849
   947
wenzelm@26849
   948
    class: nameref
wenzelm@26849
   949
    ;
wenzelm@26849
   950
wenzelm@26849
   951
    target: 'OCaml' | 'SML' | 'Haskell'
wenzelm@26849
   952
    ;
wenzelm@26849
   953
wenzelm@26849
   954
    'code\_datatype' const +
wenzelm@26849
   955
    ;
wenzelm@26849
   956
wenzelm@26849
   957
    'code\_const' (const + 'and') \\
wenzelm@26849
   958
      ( ( '(' target ( syntax ? + 'and' ) ')' ) + )
wenzelm@26849
   959
    ;
wenzelm@26849
   960
wenzelm@26849
   961
    'code\_type' (typeconstructor + 'and') \\
wenzelm@26849
   962
      ( ( '(' target ( syntax ? + 'and' ) ')' ) + )
wenzelm@26849
   963
    ;
wenzelm@26849
   964
wenzelm@26849
   965
    'code\_class' (class + 'and') \\
wenzelm@26849
   966
      ( ( '(' target \\
wenzelm@26849
   967
        ( ( string ('where' \\
wenzelm@26849
   968
          ( const ( '==' | equiv ) string ) + ) ? ) ? + 'and' ) ')' ) + )
wenzelm@26849
   969
    ;
wenzelm@26849
   970
wenzelm@26849
   971
    'code\_instance' (( typeconstructor '::' class ) + 'and') \\
wenzelm@26849
   972
      ( ( '(' target ( '-' ? + 'and' ) ')' ) + )
wenzelm@26849
   973
    ;
wenzelm@26849
   974
wenzelm@26849
   975
    'code\_monad' const const target
wenzelm@26849
   976
    ;
wenzelm@26849
   977
wenzelm@26849
   978
    'code\_reserved' target ( string + )
wenzelm@26849
   979
    ;
wenzelm@26849
   980
wenzelm@26849
   981
    'code\_include' target ( string ( string | '-') )
wenzelm@26849
   982
    ;
wenzelm@26849
   983
wenzelm@26849
   984
    'code\_modulename' target ( ( string string ) + )
wenzelm@26849
   985
    ;
wenzelm@26849
   986
wenzelm@26849
   987
    'code\_exception' ( const + )
wenzelm@26849
   988
    ;
wenzelm@26849
   989
wenzelm@26849
   990
    syntax: string | ( 'infix' | 'infixl' | 'infixr' ) nat string
wenzelm@26849
   991
    ;
wenzelm@26849
   992
wenzelm@26849
   993
    'code' ('func' | 'inline') ( 'del' )?
wenzelm@26849
   994
    ;
wenzelm@26849
   995
  \end{rail}
wenzelm@26849
   996
wenzelm@26849
   997
  \begin{descr}
wenzelm@26849
   998
wenzelm@26907
   999
  \item [\hyperlink{command.HOL.export-code}{\mbox{\isa{\isacommand{export{\isacharunderscore}code}}}}] is the canonical interface
wenzelm@26849
  1000
  for generating and serializing code: for a given list of constants,
wenzelm@26849
  1001
  code is generated for the specified target languages.  Abstract code
wenzelm@26849
  1002
  is cached incrementally.  If no constant is given, the currently
wenzelm@26849
  1003
  cached code is serialized.  If no serialization instruction is
wenzelm@26849
  1004
  given, only abstract code is cached.
wenzelm@26849
  1005
wenzelm@26849
  1006
  Constants may be specified by giving them literally, referring to
wenzelm@26849
  1007
  all executable contants within a certain theory by giving \isa{{\isachardoublequote}name{\isachardot}{\isacharasterisk}{\isachardoublequote}}, or referring to \emph{all} executable constants currently
wenzelm@26849
  1008
  available by giving \isa{{\isachardoublequote}{\isacharasterisk}{\isachardoublequote}}.
wenzelm@26849
  1009
wenzelm@26849
  1010
  By default, for each involved theory one corresponding name space
wenzelm@26849
  1011
  module is generated.  Alternativly, a module name may be specified
wenzelm@26907
  1012
  after the \hyperlink{keyword.module-name}{\mbox{\isa{\isakeyword{module{\isacharunderscore}name}}}} keyword; then \emph{all} code is
wenzelm@26849
  1013
  placed in this module.
wenzelm@26849
  1014
wenzelm@26849
  1015
  For \emph{SML} and \emph{OCaml}, the file specification refers to a
wenzelm@26849
  1016
  single file; for \emph{Haskell}, it refers to a whole directory,
wenzelm@26849
  1017
  where code is generated in multiple files reflecting the module
wenzelm@26849
  1018
  hierarchy.  The file specification ``\isa{{\isachardoublequote}{\isacharminus}{\isachardoublequote}}'' denotes standard
wenzelm@26849
  1019
  output.  For \emph{SML}, omitting the file specification compiles
wenzelm@26849
  1020
  code internally in the context of the current ML session.
wenzelm@26849
  1021
wenzelm@26849
  1022
  Serializers take an optional list of arguments in parentheses.  For
wenzelm@26849
  1023
  \emph{Haskell} a module name prefix may be given using the ``\isa{{\isachardoublequote}root{\isacharcolon}{\isachardoublequote}}'' argument; ``\isa{string{\isacharunderscore}classes}'' adds a ``\verb|deriving (Read, Show)|'' clause to each appropriate datatype
wenzelm@26849
  1024
  declaration.
wenzelm@26849
  1025
wenzelm@26907
  1026
  \item [\hyperlink{command.HOL.code-thms}{\mbox{\isa{\isacommand{code{\isacharunderscore}thms}}}}] prints a list of theorems
wenzelm@26849
  1027
  representing the corresponding program containing all given
wenzelm@26849
  1028
  constants; if no constants are given, the currently cached code
wenzelm@26849
  1029
  theorems are printed.
wenzelm@26849
  1030
wenzelm@26907
  1031
  \item [\hyperlink{command.HOL.code-deps}{\mbox{\isa{\isacommand{code{\isacharunderscore}deps}}}}] visualizes dependencies of
wenzelm@26849
  1032
  theorems representing the corresponding program containing all given
wenzelm@26849
  1033
  constants; if no constants are given, the currently cached code
wenzelm@26849
  1034
  theorems are visualized.
wenzelm@26849
  1035
wenzelm@26907
  1036
  \item [\hyperlink{command.HOL.code-datatype}{\mbox{\isa{\isacommand{code{\isacharunderscore}datatype}}}}] specifies a constructor set
wenzelm@26849
  1037
  for a logical type.
wenzelm@26849
  1038
wenzelm@26907
  1039
  \item [\hyperlink{command.HOL.code-const}{\mbox{\isa{\isacommand{code{\isacharunderscore}const}}}}] associates a list of constants
wenzelm@26849
  1040
  with target-specific serializations; omitting a serialization
wenzelm@26849
  1041
  deletes an existing serialization.
wenzelm@26849
  1042
wenzelm@26907
  1043
  \item [\hyperlink{command.HOL.code-type}{\mbox{\isa{\isacommand{code{\isacharunderscore}type}}}}] associates a list of type
wenzelm@26849
  1044
  constructors with target-specific serializations; omitting a
wenzelm@26849
  1045
  serialization deletes an existing serialization.
wenzelm@26849
  1046
wenzelm@26907
  1047
  \item [\hyperlink{command.HOL.code-class}{\mbox{\isa{\isacommand{code{\isacharunderscore}class}}}}] associates a list of classes
wenzelm@26849
  1048
  with target-specific class names; in addition, constants associated
wenzelm@26849
  1049
  with this class may be given target-specific names used for instance
wenzelm@26849
  1050
  declarations; omitting a serialization deletes an existing
wenzelm@26849
  1051
  serialization.  This applies only to \emph{Haskell}.
wenzelm@26849
  1052
wenzelm@26907
  1053
  \item [\hyperlink{command.HOL.code-instance}{\mbox{\isa{\isacommand{code{\isacharunderscore}instance}}}}] declares a list of type
wenzelm@26849
  1054
  constructor / class instance relations as ``already present'' for a
wenzelm@26849
  1055
  given target.  Omitting a ``\isa{{\isachardoublequote}{\isacharminus}{\isachardoublequote}}'' deletes an existing
wenzelm@26849
  1056
  ``already present'' declaration.  This applies only to
wenzelm@26849
  1057
  \emph{Haskell}.
wenzelm@26849
  1058
wenzelm@26907
  1059
  \item [\hyperlink{command.HOL.code-monad}{\mbox{\isa{\isacommand{code{\isacharunderscore}monad}}}}] provides an auxiliary
wenzelm@26849
  1060
  mechanism to generate monadic code.
wenzelm@26849
  1061
wenzelm@26907
  1062
  \item [\hyperlink{command.HOL.code-reserved}{\mbox{\isa{\isacommand{code{\isacharunderscore}reserved}}}}] declares a list of names as
wenzelm@26849
  1063
  reserved for a given target, preventing it to be shadowed by any
wenzelm@26849
  1064
  generated code.
wenzelm@26849
  1065
wenzelm@26907
  1066
  \item [\hyperlink{command.HOL.code-include}{\mbox{\isa{\isacommand{code{\isacharunderscore}include}}}}] adds arbitrary named content
wenzelm@26849
  1067
  (``include'') to generated code.  A as last argument ``\isa{{\isachardoublequote}{\isacharminus}{\isachardoublequote}}''
wenzelm@26849
  1068
  will remove an already added ``include''.
wenzelm@26849
  1069
wenzelm@26907
  1070
  \item [\hyperlink{command.HOL.code-modulename}{\mbox{\isa{\isacommand{code{\isacharunderscore}modulename}}}}] declares aliasings from
wenzelm@26849
  1071
  one module name onto another.
wenzelm@26849
  1072
haftmann@27103
  1073
  \item [\hyperlink{command.HOL.code-abort}{\mbox{\isa{\isacommand{code{\isacharunderscore}abort}}}}] declares constants which
haftmann@27103
  1074
  are not required to have a definition by a defining equations;
haftmann@27103
  1075
  if needed these are implemented by program abort instead.
wenzelm@26849
  1076
wenzelm@26902
  1077
  \item [\hyperlink{attribute.HOL.code}{\mbox{\isa{code}}}~\isa{func}] explicitly selects (or
wenzelm@26849
  1078
  with option ``\isa{{\isachardoublequote}del{\isacharcolon}{\isachardoublequote}}'' deselects) a defining equation for
wenzelm@26849
  1079
  code generation.  Usually packages introducing defining equations
wenzelm@26849
  1080
  provide a resonable default setup for selection.
wenzelm@26849
  1081
wenzelm@26902
  1082
  \item [\hyperlink{attribute.HOL.code}{\mbox{\isa{code}}}\isa{inline}] declares (or with
wenzelm@26849
  1083
  option ``\isa{{\isachardoublequote}del{\isacharcolon}{\isachardoublequote}}'' removes) inlining theorems which are
wenzelm@26849
  1084
  applied as rewrite rules to any defining equation during
wenzelm@26849
  1085
  preprocessing.
wenzelm@26849
  1086
wenzelm@26907
  1087
  \item [\hyperlink{command.HOL.print-codesetup}{\mbox{\isa{\isacommand{print{\isacharunderscore}codesetup}}}}] gives an overview on
wenzelm@26849
  1088
  selected defining equations, code generator datatypes and
wenzelm@26849
  1089
  preprocessor setup.
wenzelm@26849
  1090
wenzelm@26849
  1091
  \end{descr}%
wenzelm@26849
  1092
\end{isamarkuptext}%
wenzelm@26849
  1093
\isamarkuptrue%
wenzelm@26849
  1094
%
wenzelm@27047
  1095
\isamarkupsection{Definition by specification \label{sec:hol-specification}%
wenzelm@27047
  1096
}
wenzelm@27047
  1097
\isamarkuptrue%
wenzelm@27047
  1098
%
wenzelm@27047
  1099
\begin{isamarkuptext}%
wenzelm@27047
  1100
\begin{matharray}{rcl}
wenzelm@27047
  1101
    \indexdef{HOL}{command}{specification}\hypertarget{command.HOL.specification}{\hyperlink{command.HOL.specification}{\mbox{\isa{\isacommand{specification}}}}} & : & \isartrans{theory}{proof(prove)} \\
wenzelm@27047
  1102
    \indexdef{HOL}{command}{ax\_specification}\hypertarget{command.HOL.ax-specification}{\hyperlink{command.HOL.ax-specification}{\mbox{\isa{\isacommand{ax{\isacharunderscore}specification}}}}} & : & \isartrans{theory}{proof(prove)} \\
wenzelm@27047
  1103
  \end{matharray}
wenzelm@27047
  1104
wenzelm@27047
  1105
  \begin{rail}
wenzelm@27047
  1106
  ('specification' | 'ax\_specification') '(' (decl +) ')' \\ (thmdecl? prop +)
wenzelm@27047
  1107
  ;
wenzelm@27047
  1108
  decl: ((name ':')? term '(' 'overloaded' ')'?)
wenzelm@27047
  1109
  \end{rail}
wenzelm@27047
  1110
wenzelm@27047
  1111
  \begin{descr}
wenzelm@27047
  1112
wenzelm@27047
  1113
  \item [\hyperlink{command.HOL.specification}{\mbox{\isa{\isacommand{specification}}}}~\isa{{\isachardoublequote}decls\ {\isasymphi}{\isachardoublequote}}] sets up a
wenzelm@27047
  1114
  goal stating the existence of terms with the properties specified to
wenzelm@27047
  1115
  hold for the constants given in \isa{decls}.  After finishing the
wenzelm@27047
  1116
  proof, the theory will be augmented with definitions for the given
wenzelm@27047
  1117
  constants, as well as with theorems stating the properties for these
wenzelm@27047
  1118
  constants.
wenzelm@27047
  1119
wenzelm@27047
  1120
  \item [\hyperlink{command.HOL.ax-specification}{\mbox{\isa{\isacommand{ax{\isacharunderscore}specification}}}}~\isa{{\isachardoublequote}decls\ {\isasymphi}{\isachardoublequote}}] sets
wenzelm@27047
  1121
  up a goal stating the existence of terms with the properties
wenzelm@27047
  1122
  specified to hold for the constants given in \isa{decls}.  After
wenzelm@27047
  1123
  finishing the proof, the theory will be augmented with axioms
wenzelm@27047
  1124
  expressing the properties given in the first place.
wenzelm@27047
  1125
wenzelm@27047
  1126
  \item [\isa{decl}] declares a constant to be defined by the
wenzelm@27047
  1127
  specification given.  The definition for the constant \isa{c} is
wenzelm@27047
  1128
  bound to the name \isa{c{\isacharunderscore}def} unless a theorem name is given in
wenzelm@27047
  1129
  the declaration.  Overloaded constants should be declared as such.
wenzelm@27047
  1130
wenzelm@27047
  1131
  \end{descr}
wenzelm@27047
  1132
wenzelm@27047
  1133
  Whether to use \hyperlink{command.HOL.specification}{\mbox{\isa{\isacommand{specification}}}} or \hyperlink{command.HOL.ax-specification}{\mbox{\isa{\isacommand{ax{\isacharunderscore}specification}}}} is to some extent a matter of style.  \hyperlink{command.HOL.specification}{\mbox{\isa{\isacommand{specification}}}} introduces no new axioms, and so by
wenzelm@27047
  1134
  construction cannot introduce inconsistencies, whereas \hyperlink{command.HOL.ax-specification}{\mbox{\isa{\isacommand{ax{\isacharunderscore}specification}}}} does introduce axioms, but only after the
wenzelm@27047
  1135
  user has explicitly proven it to be safe.  A practical issue must be
wenzelm@27047
  1136
  considered, though: After introducing two constants with the same
wenzelm@27047
  1137
  properties using \hyperlink{command.HOL.specification}{\mbox{\isa{\isacommand{specification}}}}, one can prove
wenzelm@27047
  1138
  that the two constants are, in fact, equal.  If this might be a
wenzelm@27047
  1139
  problem, one should use \hyperlink{command.HOL.ax-specification}{\mbox{\isa{\isacommand{ax{\isacharunderscore}specification}}}}.%
wenzelm@27047
  1140
\end{isamarkuptext}%
wenzelm@27047
  1141
\isamarkuptrue%
wenzelm@27047
  1142
%
wenzelm@26849
  1143
\isadelimtheory
wenzelm@26849
  1144
%
wenzelm@26849
  1145
\endisadelimtheory
wenzelm@26849
  1146
%
wenzelm@26849
  1147
\isatagtheory
wenzelm@26840
  1148
\isacommand{end}\isamarkupfalse%
wenzelm@26840
  1149
%
wenzelm@26840
  1150
\endisatagtheory
wenzelm@26840
  1151
{\isafoldtheory}%
wenzelm@26840
  1152
%
wenzelm@26840
  1153
\isadelimtheory
wenzelm@26840
  1154
%
wenzelm@26840
  1155
\endisadelimtheory
wenzelm@26849
  1156
\isanewline
wenzelm@26840
  1157
\end{isabellebody}%
wenzelm@26840
  1158
%%% Local Variables:
wenzelm@26840
  1159
%%% mode: latex
wenzelm@26840
  1160
%%% TeX-master: "root"
wenzelm@26840
  1161
%%% End: