author | blanchet |
Fri, 06 Aug 2010 17:23:11 +0200 | |
changeset 38242 | f26d590dce0f |
parent 38184 | 6a221fffbc8a |
child 38284 | 9f98107ad8b4 |
permissions | -rw-r--r-- |
33197 | 1 |
(* Title: HOL/Nitpick_Examples/Manual_Nits.thy |
2 |
Author: Jasmin Blanchette, TU Muenchen |
|
35076
cc19e2aef17e
added hotel key card example for Nitpick, and renumber atoms in Nitpick's output for increased readability
blanchet
parents:
34982
diff
changeset
|
3 |
Copyright 2009, 2010 |
33197 | 4 |
|
5 |
Examples from the Nitpick manual. |
|
6 |
*) |
|
7 |
||
8 |
header {* Examples from the Nitpick Manual *} |
|
9 |
||
37477
e482320bcbfe
adjusted Nitpick examples to latest changes + make them slightly faster
blanchet
parents:
36268
diff
changeset
|
10 |
(* The "expect" arguments to Nitpick in this theory and the other example |
e482320bcbfe
adjusted Nitpick examples to latest changes + make them slightly faster
blanchet
parents:
36268
diff
changeset
|
11 |
theories are there so that the example can also serve as a regression test |
e482320bcbfe
adjusted Nitpick examples to latest changes + make them slightly faster
blanchet
parents:
36268
diff
changeset
|
12 |
suite. *) |
e482320bcbfe
adjusted Nitpick examples to latest changes + make them slightly faster
blanchet
parents:
36268
diff
changeset
|
13 |
|
33197 | 14 |
theory Manual_Nits |
35665
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
15 |
imports Main Quotient_Product RealDef |
33197 | 16 |
begin |
17 |
||
18 |
chapter {* 3. First Steps *} |
|
19 |
||
37477
e482320bcbfe
adjusted Nitpick examples to latest changes + make them slightly faster
blanchet
parents:
36268
diff
changeset
|
20 |
nitpick_params [sat_solver = MiniSat_JNI, max_threads = 1, timeout = 60 s] |
33197 | 21 |
|
22 |
subsection {* 3.1. Propositional Logic *} |
|
23 |
||
24 |
lemma "P \<longleftrightarrow> Q" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
25 |
nitpick [expect = genuine] |
33197 | 26 |
apply auto |
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
27 |
nitpick [expect = genuine] 1 |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
28 |
nitpick [expect = genuine] 2 |
33197 | 29 |
oops |
30 |
||
31 |
subsection {* 3.2. Type Variables *} |
|
32 |
||
33 |
lemma "P x \<Longrightarrow> P (THE y. P y)" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
34 |
nitpick [verbose, expect = genuine] |
33197 | 35 |
oops |
36 |
||
37 |
subsection {* 3.3. Constants *} |
|
38 |
||
39 |
lemma "P x \<Longrightarrow> P (THE y. P y)" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
40 |
nitpick [show_consts, expect = genuine] |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
41 |
nitpick [full_descrs, show_consts, expect = genuine] |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
42 |
nitpick [dont_specialize, full_descrs, show_consts, expect = genuine] |
33197 | 43 |
oops |
44 |
||
45 |
lemma "\<exists>!x. P x \<Longrightarrow> P (THE y. P y)" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
46 |
nitpick [expect = none] |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
47 |
nitpick [card 'a = 1\<midarrow>50, expect = none] |
33197 | 48 |
(* sledgehammer *) |
49 |
apply (metis the_equality) |
|
50 |
done |
|
51 |
||
52 |
subsection {* 3.4. Skolemization *} |
|
53 |
||
54 |
lemma "\<exists>g. \<forall>x. g (f x) = x \<Longrightarrow> \<forall>y. \<exists>x. y = f x" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
55 |
nitpick [expect = genuine] |
33197 | 56 |
oops |
57 |
||
58 |
lemma "\<exists>x. \<forall>f. f x = x" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
59 |
nitpick [expect = genuine] |
33197 | 60 |
oops |
61 |
||
62 |
lemma "refl r \<Longrightarrow> sym r" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
63 |
nitpick [expect = genuine] |
33197 | 64 |
oops |
65 |
||
34126 | 66 |
subsection {* 3.5. Natural Numbers and Integers *} |
33197 | 67 |
|
68 |
lemma "\<lbrakk>i \<le> j; n \<le> (m\<Colon>int)\<rbrakk> \<Longrightarrow> i * n + j * m \<le> i * m + j * n" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
69 |
nitpick [expect = genuine] |
33197 | 70 |
oops |
71 |
||
72 |
lemma "\<forall>n. Suc n \<noteq> n \<Longrightarrow> P" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
73 |
nitpick [card nat = 100, check_potential, expect = genuine] |
33197 | 74 |
oops |
75 |
||
76 |
lemma "P Suc" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
77 |
nitpick [expect = none] |
33197 | 78 |
oops |
79 |
||
80 |
lemma "P (op +\<Colon>nat\<Rightarrow>nat\<Rightarrow>nat)" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
81 |
nitpick [card nat = 1, expect = genuine] |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
82 |
nitpick [card nat = 2, expect = none] |
33197 | 83 |
oops |
84 |
||
85 |
subsection {* 3.6. Inductive Datatypes *} |
|
86 |
||
87 |
lemma "hd (xs @ [y, y]) = hd xs" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
88 |
nitpick [expect = genuine] |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
89 |
nitpick [show_consts, show_datatypes, expect = genuine] |
33197 | 90 |
oops |
91 |
||
92 |
lemma "\<lbrakk>length xs = 1; length ys = 1\<rbrakk> \<Longrightarrow> xs = ys" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
93 |
nitpick [show_datatypes, expect = genuine] |
33197 | 94 |
oops |
95 |
||
96 |
subsection {* 3.7. Typedefs, Records, Rationals, and Reals *} |
|
97 |
||
98 |
typedef three = "{0\<Colon>nat, 1, 2}" |
|
99 |
by blast |
|
100 |
||
101 |
definition A :: three where "A \<equiv> Abs_three 0" |
|
102 |
definition B :: three where "B \<equiv> Abs_three 1" |
|
103 |
definition C :: three where "C \<equiv> Abs_three 2" |
|
104 |
||
105 |
lemma "\<lbrakk>P A; P B\<rbrakk> \<Longrightarrow> P x" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
106 |
nitpick [show_datatypes, expect = genuine] |
33197 | 107 |
oops |
108 |
||
35284
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
109 |
fun my_int_rel where |
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
110 |
"my_int_rel (x, y) (u, v) = (x + v = u + y)" |
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
111 |
|
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
112 |
quotient_type my_int = "nat \<times> nat" / my_int_rel |
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
113 |
by (auto simp add: equivp_def expand_fun_eq) |
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
114 |
|
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
115 |
definition add_raw where |
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
116 |
"add_raw \<equiv> \<lambda>(x, y) (u, v). (x + (u\<Colon>nat), y + (v\<Colon>nat))" |
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
117 |
|
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
118 |
quotient_definition "add\<Colon>my_int \<Rightarrow> my_int \<Rightarrow> my_int" is add_raw |
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
119 |
|
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
120 |
lemma "add x y = add x x" |
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
121 |
nitpick [show_datatypes, expect = genuine] |
35284
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
122 |
oops |
9edc2bd6d2bd
enabled Nitpick's support for quotient types + shortened the Nitpick tests a bit
blanchet
parents:
35185
diff
changeset
|
123 |
|
35711
548d3f16404b
added term postprocessor to Nitpick, to provide custom syntax for typedefs
blanchet
parents:
35710
diff
changeset
|
124 |
ML {* |
35712
77aa29bf14ee
added a mechanism to Nitpick to support custom rendering of terms, and used it for multisets
blanchet
parents:
35711
diff
changeset
|
125 |
fun my_int_postproc _ _ _ T (Const _ $ (Const _ $ t1 $ t2)) = |
77aa29bf14ee
added a mechanism to Nitpick to support custom rendering of terms, and used it for multisets
blanchet
parents:
35711
diff
changeset
|
126 |
HOLogic.mk_number T (snd (HOLogic.dest_number t1) |
77aa29bf14ee
added a mechanism to Nitpick to support custom rendering of terms, and used it for multisets
blanchet
parents:
35711
diff
changeset
|
127 |
- snd (HOLogic.dest_number t2)) |
77aa29bf14ee
added a mechanism to Nitpick to support custom rendering of terms, and used it for multisets
blanchet
parents:
35711
diff
changeset
|
128 |
| my_int_postproc _ _ _ _ t = t |
35711
548d3f16404b
added term postprocessor to Nitpick, to provide custom syntax for typedefs
blanchet
parents:
35710
diff
changeset
|
129 |
*} |
548d3f16404b
added term postprocessor to Nitpick, to provide custom syntax for typedefs
blanchet
parents:
35710
diff
changeset
|
130 |
|
38242 | 131 |
setup {* |
132 |
Nitpick_Model.register_term_postprocessor_global @{typ my_int} |
|
133 |
my_int_postproc |
|
134 |
*} |
|
35711
548d3f16404b
added term postprocessor to Nitpick, to provide custom syntax for typedefs
blanchet
parents:
35710
diff
changeset
|
135 |
|
548d3f16404b
added term postprocessor to Nitpick, to provide custom syntax for typedefs
blanchet
parents:
35710
diff
changeset
|
136 |
lemma "add x y = add x x" |
548d3f16404b
added term postprocessor to Nitpick, to provide custom syntax for typedefs
blanchet
parents:
35710
diff
changeset
|
137 |
nitpick [show_datatypes] |
548d3f16404b
added term postprocessor to Nitpick, to provide custom syntax for typedefs
blanchet
parents:
35710
diff
changeset
|
138 |
oops |
548d3f16404b
added term postprocessor to Nitpick, to provide custom syntax for typedefs
blanchet
parents:
35710
diff
changeset
|
139 |
|
33197 | 140 |
record point = |
141 |
Xcoord :: int |
|
142 |
Ycoord :: int |
|
143 |
||
144 |
lemma "Xcoord (p\<Colon>point) = Xcoord (q\<Colon>point)" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
145 |
nitpick [show_datatypes, expect = genuine] |
33197 | 146 |
oops |
147 |
||
148 |
lemma "4 * x + 3 * (y\<Colon>real) \<noteq> 1 / 2" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
149 |
nitpick [show_datatypes, expect = genuine] |
33197 | 150 |
oops |
151 |
||
152 |
subsection {* 3.8. Inductive and Coinductive Predicates *} |
|
153 |
||
154 |
inductive even where |
|
155 |
"even 0" | |
|
156 |
"even n \<Longrightarrow> even (Suc (Suc n))" |
|
157 |
||
158 |
lemma "\<exists>n. even n \<and> even (Suc n)" |
|
35710 | 159 |
nitpick [card nat = 50, unary_ints, verbose, expect = potential] |
33197 | 160 |
oops |
161 |
||
35710 | 162 |
lemma "\<exists>n \<le> 49. even n \<and> even (Suc n)" |
38184 | 163 |
nitpick [card nat = 50, unary_ints, expect = genuine] |
33197 | 164 |
oops |
165 |
||
166 |
inductive even' where |
|
167 |
"even' (0\<Colon>nat)" | |
|
168 |
"even' 2" | |
|
169 |
"\<lbrakk>even' m; even' n\<rbrakk> \<Longrightarrow> even' (m + n)" |
|
170 |
||
171 |
lemma "\<exists>n \<in> {0, 2, 4, 6, 8}. \<not> even' n" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
172 |
nitpick [card nat = 10, unary_ints, verbose, show_consts, expect = genuine] |
33197 | 173 |
oops |
174 |
||
175 |
lemma "even' (n - 2) \<Longrightarrow> even' n" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
176 |
nitpick [card nat = 10, show_consts, expect = genuine] |
33197 | 177 |
oops |
178 |
||
179 |
coinductive nats where |
|
180 |
"nats (x\<Colon>nat) \<Longrightarrow> nats x" |
|
181 |
||
182 |
lemma "nats = {0, 1, 2, 3, 4}" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
183 |
nitpick [card nat = 10, show_consts, expect = genuine] |
33197 | 184 |
oops |
185 |
||
186 |
inductive odd where |
|
187 |
"odd 1" | |
|
188 |
"\<lbrakk>odd m; even n\<rbrakk> \<Longrightarrow> odd (m + n)" |
|
189 |
||
190 |
lemma "odd n \<Longrightarrow> odd (n - 2)" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
191 |
nitpick [card nat = 10, show_consts, expect = genuine] |
33197 | 192 |
oops |
193 |
||
194 |
subsection {* 3.9. Coinductive Datatypes *} |
|
195 |
||
35665
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
196 |
(* Lazy lists are defined in Andreas Lochbihler's "Coinductive" AFP entry. Since |
38184 | 197 |
we cannot rely on its presence, we expediently provide our own |
198 |
axiomatization. The examples also work unchanged with Lochbihler's |
|
199 |
"Coinductive_List" theory. *) |
|
35665
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
200 |
|
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
201 |
typedef 'a llist = "UNIV\<Colon>('a list + (nat \<Rightarrow> 'a)) set" by auto |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
202 |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
203 |
definition LNil where |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
204 |
"LNil = Abs_llist (Inl [])" |
35665
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
205 |
definition LCons where |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
206 |
"LCons y ys = Abs_llist (case Rep_llist ys of |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
207 |
Inl ys' \<Rightarrow> Inl (y # ys') |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
208 |
| Inr f \<Rightarrow> Inr (\<lambda>n. case n of 0 \<Rightarrow> y | Suc m \<Rightarrow> f m))" |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
209 |
|
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
210 |
axiomatization iterates :: "('a \<Rightarrow> 'a) \<Rightarrow> 'a \<Rightarrow> 'a llist" |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
211 |
|
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
212 |
lemma iterates_def [nitpick_simp]: |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
213 |
"iterates f a = LCons a (iterates f (f a))" |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
214 |
sorry |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
215 |
|
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
216 |
setup {* |
38242 | 217 |
Nitpick_HOL.register_codatatype_global @{typ "'a llist"} "" |
35665
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
218 |
(map dest_Const [@{term LNil}, @{term LCons}]) |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
219 |
*} |
ff2bf50505ab
added "finitize" option to Nitpick + remove dependency on "Coinductive_List"
blanchet
parents:
35312
diff
changeset
|
220 |
|
33197 | 221 |
lemma "xs \<noteq> LCons a xs" |
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
222 |
nitpick [expect = genuine] |
33197 | 223 |
oops |
224 |
||
225 |
lemma "\<lbrakk>xs = LCons a xs; ys = iterates (\<lambda>b. a) b\<rbrakk> \<Longrightarrow> xs = ys" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
226 |
nitpick [verbose, expect = genuine] |
33197 | 227 |
oops |
228 |
||
229 |
lemma "\<lbrakk>xs = LCons a xs; ys = LCons a ys\<rbrakk> \<Longrightarrow> xs = ys" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
230 |
nitpick [bisim_depth = -1, show_datatypes, expect = quasi_genuine] |
38184 | 231 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 232 |
sorry |
233 |
||
234 |
subsection {* 3.10. Boxing *} |
|
235 |
||
236 |
datatype tm = Var nat | Lam tm | App tm tm |
|
237 |
||
238 |
primrec lift where |
|
239 |
"lift (Var j) k = Var (if j < k then j else j + 1)" | |
|
240 |
"lift (Lam t) k = Lam (lift t (k + 1))" | |
|
241 |
"lift (App t u) k = App (lift t k) (lift u k)" |
|
242 |
||
243 |
primrec loose where |
|
244 |
"loose (Var j) k = (j \<ge> k)" | |
|
245 |
"loose (Lam t) k = loose t (Suc k)" | |
|
246 |
"loose (App t u) k = (loose t k \<or> loose u k)" |
|
247 |
||
248 |
primrec subst\<^isub>1 where |
|
249 |
"subst\<^isub>1 \<sigma> (Var j) = \<sigma> j" | |
|
250 |
"subst\<^isub>1 \<sigma> (Lam t) = |
|
251 |
Lam (subst\<^isub>1 (\<lambda>n. case n of 0 \<Rightarrow> Var 0 | Suc m \<Rightarrow> lift (\<sigma> m) 1) t)" | |
|
252 |
"subst\<^isub>1 \<sigma> (App t u) = App (subst\<^isub>1 \<sigma> t) (subst\<^isub>1 \<sigma> u)" |
|
253 |
||
254 |
lemma "\<not> loose t 0 \<Longrightarrow> subst\<^isub>1 \<sigma> t = t" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
255 |
nitpick [verbose, expect = genuine] |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
256 |
nitpick [eval = "subst\<^isub>1 \<sigma> t", expect = genuine] |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
257 |
(* nitpick [dont_box, expect = unknown] *) |
33197 | 258 |
oops |
259 |
||
260 |
primrec subst\<^isub>2 where |
|
261 |
"subst\<^isub>2 \<sigma> (Var j) = \<sigma> j" | |
|
262 |
"subst\<^isub>2 \<sigma> (Lam t) = |
|
263 |
Lam (subst\<^isub>2 (\<lambda>n. case n of 0 \<Rightarrow> Var 0 | Suc m \<Rightarrow> lift (\<sigma> m) 0) t)" | |
|
264 |
"subst\<^isub>2 \<sigma> (App t u) = App (subst\<^isub>2 \<sigma> t) (subst\<^isub>2 \<sigma> u)" |
|
265 |
||
266 |
lemma "\<not> loose t 0 \<Longrightarrow> subst\<^isub>2 \<sigma> t = t" |
|
35710 | 267 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 268 |
sorry |
269 |
||
270 |
subsection {* 3.11. Scope Monotonicity *} |
|
271 |
||
272 |
lemma "length xs = length ys \<Longrightarrow> rev (zip xs ys) = zip xs (rev ys)" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
273 |
nitpick [verbose, expect = genuine] |
33197 | 274 |
oops |
275 |
||
276 |
lemma "\<exists>g. \<forall>x\<Colon>'b. g (f x) = x \<Longrightarrow> \<forall>y\<Colon>'a. \<exists>x. y = f x" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
277 |
nitpick [mono, expect = none] |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
278 |
nitpick [expect = genuine] |
33197 | 279 |
oops |
280 |
||
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
281 |
subsection {* 3.12. Inductive Properties *} |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
282 |
|
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
283 |
inductive_set reach where |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
284 |
"(4\<Colon>nat) \<in> reach" | |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
285 |
"n \<in> reach \<Longrightarrow> n < 4 \<Longrightarrow> 3 * n + 1 \<in> reach" | |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
286 |
"n \<in> reach \<Longrightarrow> n + 2 \<in> reach" |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
287 |
|
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
288 |
lemma "n \<in> reach \<Longrightarrow> 2 dvd n" |
38184 | 289 |
(* nitpick *) |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
290 |
apply (induct set: reach) |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
291 |
apply auto |
38184 | 292 |
nitpick [card = 1\<midarrow>4, bits = 1\<midarrow>4, expect = none] |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
293 |
apply (thin_tac "n \<in> reach") |
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
294 |
nitpick [expect = genuine] |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
295 |
oops |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
296 |
|
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
297 |
lemma "n \<in> reach \<Longrightarrow> 2 dvd n \<and> n \<noteq> 0" |
38184 | 298 |
(* nitpick *) |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
299 |
apply (induct set: reach) |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
300 |
apply auto |
38184 | 301 |
nitpick [card = 1\<midarrow>4, bits = 1\<midarrow>4, expect = none] |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
302 |
apply (thin_tac "n \<in> reach") |
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
303 |
nitpick [expect = genuine] |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
304 |
oops |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
305 |
|
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
306 |
lemma "n \<in> reach \<Longrightarrow> 2 dvd n \<and> n \<ge> 4" |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
307 |
by (induct set: reach) arith+ |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
308 |
|
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
309 |
datatype 'a bin_tree = Leaf 'a | Branch "'a bin_tree" "'a bin_tree" |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
310 |
|
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
311 |
primrec labels where |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
312 |
"labels (Leaf a) = {a}" | |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
313 |
"labels (Branch t u) = labels t \<union> labels u" |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
314 |
|
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
315 |
primrec swap where |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
316 |
"swap (Leaf c) a b = |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
317 |
(if c = a then Leaf b else if c = b then Leaf a else Leaf c)" | |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
318 |
"swap (Branch t u) a b = Branch (swap t a b) (swap u a b)" |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
319 |
|
35180
c57dba973391
more work on Nitpick's support for nonstandard models + fix in model reconstruction
blanchet
parents:
35078
diff
changeset
|
320 |
lemma "{a, b} \<subseteq> labels t \<Longrightarrow> labels (swap t a b) = labels t" |
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
321 |
(* nitpick *) |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
322 |
proof (induct t) |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
323 |
case Leaf thus ?case by simp |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
324 |
next |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
325 |
case (Branch t u) thus ?case |
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
326 |
(* nitpick *) |
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
327 |
nitpick [non_std, show_all, expect = genuine] |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
328 |
oops |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
329 |
|
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
330 |
lemma "labels (swap t a b) = |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
331 |
(if a \<in> labels t then |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
332 |
if b \<in> labels t then labels t else (labels t - {a}) \<union> {b} |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
333 |
else |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
334 |
if b \<in> labels t then (labels t - {b}) \<union> {a} else labels t)" |
35309
997aa3a3e4bb
catch IO errors in Nitpick's "kodkodi" invocation + shorten execution time of "Manual_Nits" example
blanchet
parents:
35284
diff
changeset
|
335 |
(* nitpick *) |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
336 |
proof (induct t) |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
337 |
case Leaf thus ?case by simp |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
338 |
next |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
339 |
case (Branch t u) thus ?case |
38184 | 340 |
nitpick [non_std, card = 1\<midarrow>4, expect = none] |
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
341 |
by auto |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
342 |
qed |
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
343 |
|
33197 | 344 |
section {* 4. Case Studies *} |
345 |
||
36268 | 346 |
nitpick_params [max_potential = 0] |
33197 | 347 |
|
348 |
subsection {* 4.1. A Context-Free Grammar *} |
|
349 |
||
350 |
datatype alphabet = a | b |
|
351 |
||
352 |
inductive_set S\<^isub>1 and A\<^isub>1 and B\<^isub>1 where |
|
353 |
"[] \<in> S\<^isub>1" |
|
354 |
| "w \<in> A\<^isub>1 \<Longrightarrow> b # w \<in> S\<^isub>1" |
|
355 |
| "w \<in> B\<^isub>1 \<Longrightarrow> a # w \<in> S\<^isub>1" |
|
356 |
| "w \<in> S\<^isub>1 \<Longrightarrow> a # w \<in> A\<^isub>1" |
|
357 |
| "w \<in> S\<^isub>1 \<Longrightarrow> b # w \<in> S\<^isub>1" |
|
358 |
| "\<lbrakk>v \<in> B\<^isub>1; v \<in> B\<^isub>1\<rbrakk> \<Longrightarrow> a # v @ w \<in> B\<^isub>1" |
|
359 |
||
360 |
theorem S\<^isub>1_sound: |
|
361 |
"w \<in> S\<^isub>1 \<longrightarrow> length [x \<leftarrow> w. x = a] = length [x \<leftarrow> w. x = b]" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
362 |
nitpick [expect = genuine] |
33197 | 363 |
oops |
364 |
||
365 |
inductive_set S\<^isub>2 and A\<^isub>2 and B\<^isub>2 where |
|
366 |
"[] \<in> S\<^isub>2" |
|
367 |
| "w \<in> A\<^isub>2 \<Longrightarrow> b # w \<in> S\<^isub>2" |
|
368 |
| "w \<in> B\<^isub>2 \<Longrightarrow> a # w \<in> S\<^isub>2" |
|
369 |
| "w \<in> S\<^isub>2 \<Longrightarrow> a # w \<in> A\<^isub>2" |
|
370 |
| "w \<in> S\<^isub>2 \<Longrightarrow> b # w \<in> B\<^isub>2" |
|
371 |
| "\<lbrakk>v \<in> B\<^isub>2; v \<in> B\<^isub>2\<rbrakk> \<Longrightarrow> a # v @ w \<in> B\<^isub>2" |
|
372 |
||
373 |
theorem S\<^isub>2_sound: |
|
374 |
"w \<in> S\<^isub>2 \<longrightarrow> length [x \<leftarrow> w. x = a] = length [x \<leftarrow> w. x = b]" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
375 |
nitpick [expect = genuine] |
33197 | 376 |
oops |
377 |
||
378 |
inductive_set S\<^isub>3 and A\<^isub>3 and B\<^isub>3 where |
|
379 |
"[] \<in> S\<^isub>3" |
|
380 |
| "w \<in> A\<^isub>3 \<Longrightarrow> b # w \<in> S\<^isub>3" |
|
381 |
| "w \<in> B\<^isub>3 \<Longrightarrow> a # w \<in> S\<^isub>3" |
|
382 |
| "w \<in> S\<^isub>3 \<Longrightarrow> a # w \<in> A\<^isub>3" |
|
383 |
| "w \<in> S\<^isub>3 \<Longrightarrow> b # w \<in> B\<^isub>3" |
|
384 |
| "\<lbrakk>v \<in> B\<^isub>3; w \<in> B\<^isub>3\<rbrakk> \<Longrightarrow> a # v @ w \<in> B\<^isub>3" |
|
385 |
||
386 |
theorem S\<^isub>3_sound: |
|
387 |
"w \<in> S\<^isub>3 \<longrightarrow> length [x \<leftarrow> w. x = a] = length [x \<leftarrow> w. x = b]" |
|
37477
e482320bcbfe
adjusted Nitpick examples to latest changes + make them slightly faster
blanchet
parents:
36268
diff
changeset
|
388 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 389 |
sorry |
390 |
||
391 |
theorem S\<^isub>3_complete: |
|
392 |
"length [x \<leftarrow> w. x = a] = length [x \<leftarrow> w. x = b] \<longrightarrow> w \<in> S\<^isub>3" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
393 |
nitpick [expect = genuine] |
33197 | 394 |
oops |
395 |
||
396 |
inductive_set S\<^isub>4 and A\<^isub>4 and B\<^isub>4 where |
|
397 |
"[] \<in> S\<^isub>4" |
|
398 |
| "w \<in> A\<^isub>4 \<Longrightarrow> b # w \<in> S\<^isub>4" |
|
399 |
| "w \<in> B\<^isub>4 \<Longrightarrow> a # w \<in> S\<^isub>4" |
|
400 |
| "w \<in> S\<^isub>4 \<Longrightarrow> a # w \<in> A\<^isub>4" |
|
401 |
| "\<lbrakk>v \<in> A\<^isub>4; w \<in> A\<^isub>4\<rbrakk> \<Longrightarrow> b # v @ w \<in> A\<^isub>4" |
|
402 |
| "w \<in> S\<^isub>4 \<Longrightarrow> b # w \<in> B\<^isub>4" |
|
403 |
| "\<lbrakk>v \<in> B\<^isub>4; w \<in> B\<^isub>4\<rbrakk> \<Longrightarrow> a # v @ w \<in> B\<^isub>4" |
|
404 |
||
405 |
theorem S\<^isub>4_sound: |
|
406 |
"w \<in> S\<^isub>4 \<longrightarrow> length [x \<leftarrow> w. x = a] = length [x \<leftarrow> w. x = b]" |
|
37477
e482320bcbfe
adjusted Nitpick examples to latest changes + make them slightly faster
blanchet
parents:
36268
diff
changeset
|
407 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 408 |
sorry |
409 |
||
410 |
theorem S\<^isub>4_complete: |
|
411 |
"length [x \<leftarrow> w. x = a] = length [x \<leftarrow> w. x = b] \<longrightarrow> w \<in> S\<^isub>4" |
|
37477
e482320bcbfe
adjusted Nitpick examples to latest changes + make them slightly faster
blanchet
parents:
36268
diff
changeset
|
412 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 413 |
sorry |
414 |
||
415 |
theorem S\<^isub>4_A\<^isub>4_B\<^isub>4_sound_and_complete: |
|
416 |
"w \<in> S\<^isub>4 \<longleftrightarrow> length [x \<leftarrow> w. x = a] = length [x \<leftarrow> w. x = b]" |
|
417 |
"w \<in> A\<^isub>4 \<longleftrightarrow> length [x \<leftarrow> w. x = a] = length [x \<leftarrow> w. x = b] + 1" |
|
418 |
"w \<in> B\<^isub>4 \<longleftrightarrow> length [x \<leftarrow> w. x = b] = length [x \<leftarrow> w. x = a] + 1" |
|
37477
e482320bcbfe
adjusted Nitpick examples to latest changes + make them slightly faster
blanchet
parents:
36268
diff
changeset
|
419 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 420 |
sorry |
421 |
||
422 |
subsection {* 4.2. AA Trees *} |
|
423 |
||
34982
7b8c366e34a2
added support for nonstandard models to Nitpick (based on an idea by Koen Claessen) and did other fixes to Nitpick
blanchet
parents:
34126
diff
changeset
|
424 |
datatype 'a aa_tree = \<Lambda> | N "'a\<Colon>linorder" nat "'a aa_tree" "'a aa_tree" |
33197 | 425 |
|
426 |
primrec data where |
|
427 |
"data \<Lambda> = undefined" | |
|
428 |
"data (N x _ _ _) = x" |
|
429 |
||
430 |
primrec dataset where |
|
431 |
"dataset \<Lambda> = {}" | |
|
432 |
"dataset (N x _ t u) = {x} \<union> dataset t \<union> dataset u" |
|
433 |
||
434 |
primrec level where |
|
435 |
"level \<Lambda> = 0" | |
|
436 |
"level (N _ k _ _) = k" |
|
437 |
||
438 |
primrec left where |
|
439 |
"left \<Lambda> = \<Lambda>" | |
|
440 |
"left (N _ _ t\<^isub>1 _) = t\<^isub>1" |
|
441 |
||
442 |
primrec right where |
|
443 |
"right \<Lambda> = \<Lambda>" | |
|
444 |
"right (N _ _ _ t\<^isub>2) = t\<^isub>2" |
|
445 |
||
446 |
fun wf where |
|
447 |
"wf \<Lambda> = True" | |
|
448 |
"wf (N _ k t u) = |
|
449 |
(if t = \<Lambda> then |
|
450 |
k = 1 \<and> (u = \<Lambda> \<or> (level u = 1 \<and> left u = \<Lambda> \<and> right u = \<Lambda>)) |
|
451 |
else |
|
452 |
wf t \<and> wf u \<and> u \<noteq> \<Lambda> \<and> level t < k \<and> level u \<le> k \<and> level (right u) < k)" |
|
453 |
||
454 |
fun skew where |
|
455 |
"skew \<Lambda> = \<Lambda>" | |
|
456 |
"skew (N x k t u) = |
|
457 |
(if t \<noteq> \<Lambda> \<and> k = level t then |
|
458 |
N (data t) k (left t) (N x k (right t) u) |
|
459 |
else |
|
460 |
N x k t u)" |
|
461 |
||
462 |
fun split where |
|
463 |
"split \<Lambda> = \<Lambda>" | |
|
464 |
"split (N x k t u) = |
|
465 |
(if u \<noteq> \<Lambda> \<and> k = level (right u) then |
|
466 |
N (data u) (Suc k) (N x k t (left u)) (right u) |
|
467 |
else |
|
468 |
N x k t u)" |
|
469 |
||
470 |
theorem dataset_skew_split: |
|
471 |
"dataset (skew t) = dataset t" |
|
472 |
"dataset (split t) = dataset t" |
|
35747
c910fe606829
make tests less demanding, to prevent sporadic failures
blanchet
parents:
35718
diff
changeset
|
473 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 474 |
sorry |
475 |
||
476 |
theorem wf_skew_split: |
|
477 |
"wf t \<Longrightarrow> skew t = t" |
|
478 |
"wf t \<Longrightarrow> split t = t" |
|
35747
c910fe606829
make tests less demanding, to prevent sporadic failures
blanchet
parents:
35718
diff
changeset
|
479 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 480 |
sorry |
481 |
||
482 |
primrec insort\<^isub>1 where |
|
483 |
"insort\<^isub>1 \<Lambda> x = N x 1 \<Lambda> \<Lambda>" | |
|
484 |
"insort\<^isub>1 (N y k t u) x = |
|
485 |
(* (split \<circ> skew) *) (N y k (if x < y then insort\<^isub>1 t x else t) |
|
486 |
(if x > y then insort\<^isub>1 u x else u))" |
|
487 |
||
488 |
theorem wf_insort\<^isub>1: "wf t \<Longrightarrow> wf (insort\<^isub>1 t x)" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
489 |
nitpick [expect = genuine] |
33197 | 490 |
oops |
491 |
||
492 |
theorem wf_insort\<^isub>1_nat: "wf t \<Longrightarrow> wf (insort\<^isub>1 t (x\<Colon>nat))" |
|
35671
ed2c3830d881
improved Nitpick's precision for "card" and "setsum" + fix incorrect outcome code w.r.t. "bisim_depth = -1"
blanchet
parents:
35665
diff
changeset
|
493 |
nitpick [eval = "insort\<^isub>1 t x", expect = genuine] |
33197 | 494 |
oops |
495 |
||
496 |
primrec insort\<^isub>2 where |
|
497 |
"insort\<^isub>2 \<Lambda> x = N x 1 \<Lambda> \<Lambda>" | |
|
498 |
"insort\<^isub>2 (N y k t u) x = |
|
499 |
(split \<circ> skew) (N y k (if x < y then insort\<^isub>2 t x else t) |
|
500 |
(if x > y then insort\<^isub>2 u x else u))" |
|
501 |
||
502 |
theorem wf_insort\<^isub>2: "wf t \<Longrightarrow> wf (insort\<^isub>2 t x)" |
|
35747
c910fe606829
make tests less demanding, to prevent sporadic failures
blanchet
parents:
35718
diff
changeset
|
503 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 504 |
sorry |
505 |
||
506 |
theorem dataset_insort\<^isub>2: "dataset (insort\<^isub>2 t x) = {x} \<union> dataset t" |
|
35747
c910fe606829
make tests less demanding, to prevent sporadic failures
blanchet
parents:
35718
diff
changeset
|
507 |
nitpick [card = 1\<midarrow>5, expect = none] |
33197 | 508 |
sorry |
509 |
||
510 |
end |