18537
|
1 |
%
|
|
2 |
\begin{isabellebody}%
|
|
3 |
\def\isabellecontext{prelim}%
|
|
4 |
%
|
|
5 |
\isadelimtheory
|
|
6 |
\isanewline
|
|
7 |
\isanewline
|
|
8 |
\isanewline
|
|
9 |
%
|
|
10 |
\endisadelimtheory
|
|
11 |
%
|
|
12 |
\isatagtheory
|
|
13 |
\isacommand{theory}\isamarkupfalse%
|
|
14 |
\ prelim\ \isakeyword{imports}\ base\ \isakeyword{begin}%
|
|
15 |
\endisatagtheory
|
|
16 |
{\isafoldtheory}%
|
|
17 |
%
|
|
18 |
\isadelimtheory
|
|
19 |
%
|
|
20 |
\endisadelimtheory
|
|
21 |
%
|
|
22 |
\isamarkupchapter{Preliminaries%
|
|
23 |
}
|
|
24 |
\isamarkuptrue%
|
|
25 |
%
|
|
26 |
\isamarkupsection{Named entities%
|
|
27 |
}
|
|
28 |
\isamarkuptrue%
|
|
29 |
%
|
|
30 |
\begin{isamarkuptext}%
|
|
31 |
Named entities of different kinds (logical constant, type,
|
|
32 |
type class, theorem, method etc.) live in separate name spaces. It is
|
|
33 |
usually clear from the occurrence of a name which kind of entity it
|
|
34 |
refers to. For example, proof method \isa{foo} vs.\ theorem
|
|
35 |
\isa{foo} vs.\ logical constant \isa{foo} are easily
|
|
36 |
distinguished by means of the syntactic context. A notable exception
|
|
37 |
are logical identifiers within a term (\secref{sec:terms}): constants,
|
|
38 |
fixed variables, and bound variables all share the same identifier
|
|
39 |
syntax, but are distinguished by their scope.
|
|
40 |
|
|
41 |
Each name space is organized as a collection of \emph{qualified
|
|
42 |
names}, which consist of a sequence of basic name components separated
|
|
43 |
by dots: \isa{Bar{\isachardot}bar{\isachardot}foo}, \isa{Bar{\isachardot}foo}, and \isa{foo}
|
|
44 |
are examples for valid qualified names. Name components are
|
|
45 |
subdivided into \emph{symbols}, which constitute the smallest textual
|
|
46 |
unit in Isabelle --- raw characters are normally not encountered
|
|
47 |
directly.%
|
|
48 |
\end{isamarkuptext}%
|
|
49 |
\isamarkuptrue%
|
|
50 |
%
|
|
51 |
\isamarkupsubsection{Strings of symbols%
|
|
52 |
}
|
|
53 |
\isamarkuptrue%
|
|
54 |
%
|
|
55 |
\begin{isamarkuptext}%
|
|
56 |
Isabelle strings consist of a sequence of
|
|
57 |
symbols\glossary{Symbol}{The smalles unit of text in Isabelle,
|
|
58 |
subsumes plain ASCII characters as well as an infinite collection of
|
|
59 |
named symbols (for greek, math etc.).}, which are either packed as an
|
|
60 |
actual \isa{string}, or represented as a list. Each symbol is in
|
|
61 |
itself a small string of the following form:
|
|
62 |
|
|
63 |
\begin{enumerate}
|
|
64 |
|
|
65 |
\item either a singleton ASCII character ``\isa{c}'' (with
|
|
66 |
character code 0--127), for example ``\verb,a,'',
|
|
67 |
|
|
68 |
\item or a regular symbol ``\verb,\,\verb,<,\isa{ident}\verb,>,'',
|
|
69 |
for example ``\verb,\,\verb,<alpha>,'',
|
|
70 |
|
|
71 |
\item or a control symbol ``\verb,\,\verb,<^,\isa{ident}\verb,>,'', for example ``\verb,\,\verb,<^bold>,'',
|
|
72 |
|
20206
|
73 |
\item or a raw control symbol ``\verb,\,\verb,<^raw:,\isa{{\isasymdots}}\verb,>,'' where ``\isa{{\isasymdots}}'' refers to any
|
|
74 |
printable ASCII character (excluding ``\verb,.,'' and ``\verb,>,'') or
|
20215
|
75 |
non-ASCII character, for example ``\verb,\,\verb,<^raw:$\sum_{i = 1}^n$>,'',
|
18537
|
76 |
|
|
77 |
\item or a numbered raw control symbol ``\verb,\,\verb,<^raw,\isa{nnn}\verb,>, where \isa{nnn} are digits, for example
|
|
78 |
``\verb,\,\verb,<^raw42>,''.
|
|
79 |
|
|
80 |
\end{enumerate}
|
|
81 |
|
|
82 |
The \isa{ident} syntax for symbol names is \isa{letter\ {\isacharparenleft}letter\ {\isacharbar}\ digit{\isacharparenright}\isactrlsup {\isacharasterisk}}, where \isa{letter\ {\isacharequal}\ A{\isachardot}{\isachardot}Za{\isachardot}{\isachardot}Z} and \isa{digit\ {\isacharequal}\ {\isadigit{0}}{\isachardot}{\isachardot}{\isadigit{9}}}. There are infinitely many regular symbols and
|
|
83 |
control symbols available, but a certain collection of standard
|
|
84 |
symbols is treated specifically. For example,
|
|
85 |
``\verb,\,\verb,<alpha>,'' is classified as a (non-ASCII) letter,
|
|
86 |
which means it may occur within regular Isabelle identifier syntax.
|
|
87 |
|
|
88 |
Output of symbols depends on the print mode (\secref{sec:print-mode}).
|
|
89 |
For example, the standard {\LaTeX} setup of the Isabelle document
|
|
90 |
preparation system would present ``\verb,\,\verb,<alpha>,'' as \isa{{\isasymalpha}}, and ``\verb,\,\verb,<^bold>,\verb,\,\verb,<alpha>,'' as \isa{\isactrlbold {\isasymalpha}}.
|
|
91 |
|
|
92 |
\medskip It is important to note that the character set underlying
|
|
93 |
Isabelle symbols is plain 7-bit ASCII. Since 8-bit characters are
|
|
94 |
passed through transparently, Isabelle may easily process actual
|
|
95 |
Unicode/UCS data (using the well-known UTF-8 encoding, for example).
|
|
96 |
Unicode provides its own collection of mathematical symbols, but there
|
|
97 |
is presently no link to Isabelle's named ones; both kinds of symbols
|
|
98 |
coexist independently.%
|
|
99 |
\end{isamarkuptext}%
|
|
100 |
\isamarkuptrue%
|
|
101 |
%
|
|
102 |
\isadelimmlref
|
|
103 |
%
|
|
104 |
\endisadelimmlref
|
|
105 |
%
|
|
106 |
\isatagmlref
|
|
107 |
%
|
|
108 |
\begin{isamarkuptext}%
|
|
109 |
\begin{mldecls}
|
|
110 |
\indexmltype{Symbol.symbol}\verb|type Symbol.symbol| \\
|
|
111 |
\indexml{Symbol.explode}\verb|Symbol.explode: string -> Symbol.symbol list| \\
|
|
112 |
\indexml{Symbol.is-letter}\verb|Symbol.is_letter: Symbol.symbol -> bool| \\
|
|
113 |
\indexml{Symbol.is-digit}\verb|Symbol.is_digit: Symbol.symbol -> bool| \\
|
|
114 |
\indexml{Symbol.is-quasi}\verb|Symbol.is_quasi: Symbol.symbol -> bool| \\
|
|
115 |
\indexml{Symbol.is-blank}\verb|Symbol.is_blank: Symbol.symbol -> bool| \\
|
|
116 |
\indexmltype{Symbol.sym}\verb|type Symbol.sym| \\
|
|
117 |
\indexml{Symbol.decode}\verb|Symbol.decode: Symbol.symbol -> Symbol.sym| \\
|
|
118 |
\end{mldecls}
|
|
119 |
|
|
120 |
\begin{description}
|
|
121 |
|
|
122 |
\item \verb|Symbol.symbol| represents Isabelle symbols; this type
|
|
123 |
is merely an alias for \verb|string|, but emphasizes the
|
|
124 |
specific format encountered here.
|
|
125 |
|
|
126 |
\item \verb|Symbol.explode|~\isa{s} produces an actual symbol
|
|
127 |
list from the packed form usually encountered as user input. This
|
|
128 |
function replaces \verb|String.explode| for virtually all purposes
|
|
129 |
of manipulating text in Isabelle! Plain \isa{implode} may be
|
|
130 |
used for the reverse operation.
|
|
131 |
|
|
132 |
\item \verb|Symbol.is_letter|, \verb|Symbol.is_digit|, \verb|Symbol.is_quasi|, \verb|Symbol.is_blank| classify certain symbols
|
|
133 |
(both ASCII and several named ones) according to fixed syntactic
|
|
134 |
convections of Isabelle, e.g.\ see \cite{isabelle-isar-ref}.
|
|
135 |
|
|
136 |
\item \verb|Symbol.sym| is a concrete datatype that represents
|
|
137 |
the different kinds of symbols explicitly as \verb|Symbol.Char|,
|
|
138 |
\verb|Symbol.Sym|, \verb|Symbol.Ctrl|, or \verb|Symbol.Raw|.
|
|
139 |
|
|
140 |
\item \verb|Symbol.decode| converts the string representation of a
|
|
141 |
symbol into the explicit datatype version.
|
|
142 |
|
|
143 |
\end{description}%
|
|
144 |
\end{isamarkuptext}%
|
|
145 |
\isamarkuptrue%
|
|
146 |
%
|
|
147 |
\endisatagmlref
|
|
148 |
{\isafoldmlref}%
|
|
149 |
%
|
|
150 |
\isadelimmlref
|
|
151 |
%
|
|
152 |
\endisadelimmlref
|
|
153 |
%
|
20429
|
154 |
\isamarkupsubsection{Simple names%
|
|
155 |
}
|
|
156 |
\isamarkuptrue%
|
|
157 |
%
|
|
158 |
\begin{isamarkuptext}%
|
|
159 |
FIXME%
|
|
160 |
\end{isamarkuptext}%
|
|
161 |
\isamarkuptrue%
|
|
162 |
%
|
18537
|
163 |
\isamarkupsubsection{Qualified names and name spaces%
|
|
164 |
}
|
|
165 |
\isamarkuptrue%
|
|
166 |
%
|
|
167 |
\isadelimFIXME
|
|
168 |
%
|
|
169 |
\endisadelimFIXME
|
|
170 |
%
|
|
171 |
\isatagFIXME
|
|
172 |
%
|
|
173 |
\begin{isamarkuptext}%
|
|
174 |
Qualified names are constructed according to implicit naming
|
|
175 |
principles of the present context.
|
|
176 |
|
|
177 |
|
|
178 |
The last component is called \emph{base name}; the remaining prefix of
|
|
179 |
qualification may be empty.
|
|
180 |
|
|
181 |
Some practical conventions help to organize named entities more
|
|
182 |
systematically:
|
|
183 |
|
|
184 |
\begin{itemize}
|
|
185 |
|
|
186 |
\item Names are qualified first by the theory name, second by an
|
|
187 |
optional ``structure''. For example, a constant \isa{c} declared
|
|
188 |
as part of a certain structure \isa{b} (say a type definition) in
|
|
189 |
theory \isa{A} will be named \isa{A{\isachardot}b{\isachardot}c} internally.
|
|
190 |
|
|
191 |
\item
|
|
192 |
|
|
193 |
\item
|
|
194 |
|
|
195 |
\item
|
|
196 |
|
|
197 |
\item
|
|
198 |
|
|
199 |
\end{itemize}
|
|
200 |
|
|
201 |
Names of different kinds of entities are basically independent, but
|
|
202 |
some practical naming conventions relate them to each other. For
|
|
203 |
example, a constant \isa{foo} may be accompanied with theorems
|
|
204 |
\isa{foo{\isachardot}intro}, \isa{foo{\isachardot}elim}, \isa{foo{\isachardot}simps} etc. The
|
|
205 |
same may happen for a type \isa{foo}, which is then apt to cause
|
|
206 |
clashes in the theorem name space! To avoid this, we occasionally
|
|
207 |
follow an additional convention of suffixes that determine the
|
|
208 |
original kind of entity that a name has been derived. For example,
|
|
209 |
constant \isa{foo} is associated with theorem \isa{foo{\isachardot}intro},
|
|
210 |
type \isa{foo} with theorem \isa{foo{\isacharunderscore}type{\isachardot}intro}, and type
|
|
211 |
class \isa{foo} with \isa{foo{\isacharunderscore}class{\isachardot}intro}.%
|
|
212 |
\end{isamarkuptext}%
|
|
213 |
\isamarkuptrue%
|
|
214 |
%
|
|
215 |
\endisatagFIXME
|
|
216 |
{\isafoldFIXME}%
|
|
217 |
%
|
|
218 |
\isadelimFIXME
|
|
219 |
%
|
|
220 |
\endisadelimFIXME
|
|
221 |
%
|
|
222 |
\isamarkupsection{Structured output%
|
|
223 |
}
|
|
224 |
\isamarkuptrue%
|
|
225 |
%
|
|
226 |
\isamarkupsubsection{Pretty printing%
|
|
227 |
}
|
|
228 |
\isamarkuptrue%
|
|
229 |
%
|
|
230 |
\begin{isamarkuptext}%
|
|
231 |
FIXME%
|
|
232 |
\end{isamarkuptext}%
|
|
233 |
\isamarkuptrue%
|
|
234 |
%
|
|
235 |
\isamarkupsubsection{Output channels%
|
|
236 |
}
|
|
237 |
\isamarkuptrue%
|
|
238 |
%
|
|
239 |
\begin{isamarkuptext}%
|
|
240 |
FIXME%
|
|
241 |
\end{isamarkuptext}%
|
|
242 |
\isamarkuptrue%
|
|
243 |
%
|
|
244 |
\isamarkupsubsection{Print modes%
|
|
245 |
}
|
|
246 |
\isamarkuptrue%
|
|
247 |
%
|
|
248 |
\begin{isamarkuptext}%
|
|
249 |
FIXME%
|
|
250 |
\end{isamarkuptext}%
|
|
251 |
\isamarkuptrue%
|
|
252 |
%
|
20429
|
253 |
\isamarkupsection{Contexts \label{sec:context}%
|
18537
|
254 |
}
|
|
255 |
\isamarkuptrue%
|
|
256 |
%
|
|
257 |
\begin{isamarkuptext}%
|
20429
|
258 |
A logical context represents the background that is taken for
|
|
259 |
granted when formulating statements and composing proofs. It acts
|
|
260 |
as a medium to produce formal content, depending on earlier material
|
|
261 |
(declarations, results etc.).
|
18537
|
262 |
|
20429
|
263 |
In particular, derivations within the primitive Pure logic can be
|
|
264 |
described as a judgment \isa{{\isasymGamma}\ {\isasymturnstile}\isactrlsub {\isasymTheta}\ {\isasymphi}}, meaning that a
|
|
265 |
proposition \isa{{\isasymphi}} is derivable from hypotheses \isa{{\isasymGamma}}
|
|
266 |
within the theory \isa{{\isasymTheta}}. There are logical reasons for
|
|
267 |
keeping \isa{{\isasymTheta}} and \isa{{\isasymGamma}} separate: theories support type
|
|
268 |
constructors and schematic polymorphism of constants and axioms,
|
|
269 |
while the inner calculus of \isa{{\isasymGamma}\ {\isasymturnstile}\ {\isasymphi}} is limited to Simple
|
|
270 |
Type Theory (with fixed type variables in the assumptions).
|
18537
|
271 |
|
20429
|
272 |
\medskip Contexts and derivations are linked by the following key
|
|
273 |
principles:
|
|
274 |
|
|
275 |
\begin{itemize}
|
|
276 |
|
|
277 |
\item Transfer: monotonicity of derivations admits results to be
|
|
278 |
transferred into a larger context, i.e.\ \isa{{\isasymGamma}\ {\isasymturnstile}\isactrlsub {\isasymTheta}\ {\isasymphi}}
|
|
279 |
implies \isa{{\isasymGamma}{\isacharprime}\ {\isasymturnstile}\isactrlsub {\isasymTheta}\isactrlsub {\isacharprime}\ {\isasymphi}} for contexts \isa{{\isasymTheta}{\isacharprime}\ {\isasymsupseteq}\ {\isasymTheta}} and \isa{{\isasymGamma}{\isacharprime}\ {\isasymsupseteq}\ {\isasymGamma}}.
|
|
280 |
|
|
281 |
\item Export: discharge of hypotheses admits results to be exported
|
|
282 |
into a smaller context, i.e.\ \isa{{\isasymGamma}{\isacharprime}\ {\isasymturnstile}\isactrlsub {\isasymTheta}\ {\isasymphi}} implies
|
|
283 |
\isa{{\isasymGamma}\ {\isasymturnstile}\isactrlsub {\isasymTheta}\ {\isasymDelta}\ {\isasymLongrightarrow}\ {\isasymphi}} where \isa{{\isasymGamma}{\isacharprime}\ {\isasymsupseteq}\ {\isasymGamma}} and \isa{{\isasymDelta}\ {\isacharequal}\ {\isasymGamma}{\isacharprime}\ {\isacharminus}\ {\isasymGamma}}. Note that \isa{{\isasymTheta}} remains unchanged here, only the
|
|
284 |
\isa{{\isasymGamma}} part is affected.
|
18537
|
285 |
|
20429
|
286 |
\end{itemize}
|
18537
|
287 |
|
20429
|
288 |
\medskip Isabelle/Isar provides two different notions of abstract
|
|
289 |
containers called \emph{theory context} and \emph{proof context},
|
|
290 |
respectively. These model the main characteristics of the primitive
|
|
291 |
\isa{{\isasymTheta}} and \isa{{\isasymGamma}} above, without subscribing to any
|
|
292 |
particular kind of content yet. Instead, contexts merely impose a
|
|
293 |
certain policy of managing arbitrary \emph{context data}. The
|
|
294 |
system provides strongly typed mechanisms to declare new kinds of
|
|
295 |
data at compile time.
|
18537
|
296 |
|
20429
|
297 |
Thus the internal bootstrap process of Isabelle/Pure eventually
|
|
298 |
reaches a stage where certain data slots provide the logical content
|
|
299 |
of \isa{{\isasymTheta}} and \isa{{\isasymGamma}} sketched above, but this does not
|
|
300 |
stop there! Various additional data slots support all kinds of
|
|
301 |
mechanisms that are not necessarily part of the core logic.
|
18537
|
302 |
|
20429
|
303 |
For example, there would be data for canonical introduction and
|
|
304 |
elimination rules for arbitrary operators (depending on the
|
|
305 |
object-logic and application), which enables users to perform
|
|
306 |
standard proof steps implicitly (cf.\ the \isa{rule} method).
|
18537
|
307 |
|
20429
|
308 |
Isabelle is able to bring forth more and more concepts successively.
|
|
309 |
In particular, an object-logic like Isabelle/HOL continues the
|
|
310 |
Isabelle/Pure setup by adding specific components for automated
|
|
311 |
reasoning (classical reasoner, tableau prover, structured induction
|
|
312 |
etc.) and derived specification mechanisms (inductive predicates,
|
|
313 |
recursive functions etc.). All of this is based on the generic data
|
|
314 |
management by theory and proof contexts.%
|
18537
|
315 |
\end{isamarkuptext}%
|
|
316 |
\isamarkuptrue%
|
|
317 |
%
|
|
318 |
\isamarkupsubsection{Theory context \label{sec:context-theory}%
|
|
319 |
}
|
|
320 |
\isamarkuptrue%
|
|
321 |
%
|
|
322 |
\begin{isamarkuptext}%
|
20429
|
323 |
Each theory is explicitly named and holds a unique identifier.
|
|
324 |
There is a separate \emph{theory reference} for pointing backwards
|
|
325 |
to the enclosing theory context of derived entities. Theories are
|
|
326 |
related by a (nominal) sub-theory relation, which corresponds to the
|
|
327 |
canonical dependency graph: each theory is derived from a certain
|
|
328 |
sub-graph of ancestor theories. The \isa{merge} of two theories
|
|
329 |
refers to the least upper bound, which actually degenerates into
|
|
330 |
absorption of one theory into the other, due to the nominal
|
|
331 |
sub-theory relation this.
|
18537
|
332 |
|
20429
|
333 |
The \isa{begin} operation starts a new theory by importing
|
|
334 |
several parent theories and entering a special \isa{draft} mode,
|
|
335 |
which is sustained until the final \isa{end} operation. A draft
|
|
336 |
mode theory acts like a linear type, where updates invalidate
|
|
337 |
earlier drafts, but theory reference values will be propagated
|
|
338 |
automatically. Thus derived entities that ``belong'' to a draft
|
|
339 |
might be transferred spontaneously to a larger context. An
|
|
340 |
invalidated draft is called ``stale''. The \isa{copy} operation
|
|
341 |
produces an auxiliary version with the same data content, but is
|
|
342 |
unrelated to the original: updates of the copy do not affect the
|
|
343 |
original, neither does the sub-theory relation hold.
|
|
344 |
|
|
345 |
The example below shows a theory graph derived from \isa{Pure}.
|
|
346 |
Theory \isa{Length} imports \isa{Nat} and \isa{List}.
|
|
347 |
The linear draft mode is enabled during the ``\isa{{\isasymdots}}'' stage of
|
|
348 |
the theory body.
|
|
349 |
|
|
350 |
\bigskip
|
|
351 |
\begin{tabular}{rcccl}
|
18537
|
352 |
& & $Pure$ \\
|
|
353 |
& & $\downarrow$ \\
|
|
354 |
& & $FOL$ \\
|
|
355 |
& $\swarrow$ & & $\searrow$ & \\
|
|
356 |
$Nat$ & & & & $List$ \\
|
|
357 |
& $\searrow$ & & $\swarrow$ \\
|
|
358 |
& & $Length$ \\
|
|
359 |
& & \multicolumn{3}{l}{~~$\isarkeyword{imports}$} \\
|
|
360 |
& & \multicolumn{3}{l}{~~$\isarkeyword{begin}$} \\
|
|
361 |
& & $\vdots$~~ \\
|
|
362 |
& & \multicolumn{3}{l}{~~$\isarkeyword{end}$} \\
|
20429
|
363 |
\end{tabular}
|
|
364 |
|
|
365 |
\medskip In practice, derived theory operations mostly operate
|
|
366 |
drafts, namely the body of the current portion of theory that the
|
|
367 |
user happens to be composing.
|
18537
|
368 |
|
20429
|
369 |
\medskip There is also a builtin theory history mechanism that amends for
|
|
370 |
the destructive behaviour of theory drafts. The \isa{checkpoint} operation produces an intermediate stepping stone that
|
|
371 |
survives the next update unscathed: both the original and the
|
|
372 |
changed theory remain valid and are related by the sub-theory
|
|
373 |
relation. This recovering of pure theory values comes at the cost
|
|
374 |
of extra internal bookeeping. The cumulative effect of
|
|
375 |
checkpointing is purged by the \isa{finish} operation.
|
18537
|
376 |
|
20429
|
377 |
History operations are usually managed by the system, e.g.\ notably
|
|
378 |
in the Isar transaction loop.
|
18537
|
379 |
|
20429
|
380 |
\medskip
|
|
381 |
FIXME theory data%
|
18537
|
382 |
\end{isamarkuptext}%
|
|
383 |
\isamarkuptrue%
|
|
384 |
%
|
20430
|
385 |
\isadelimmlref
|
|
386 |
%
|
|
387 |
\endisadelimmlref
|
|
388 |
%
|
|
389 |
\isatagmlref
|
|
390 |
%
|
|
391 |
\begin{isamarkuptext}%
|
|
392 |
%
|
|
393 |
\end{isamarkuptext}%
|
|
394 |
\isamarkuptrue%
|
|
395 |
%
|
|
396 |
\endisatagmlref
|
|
397 |
{\isafoldmlref}%
|
|
398 |
%
|
|
399 |
\isadelimmlref
|
|
400 |
%
|
|
401 |
\endisadelimmlref
|
|
402 |
%
|
18537
|
403 |
\isamarkupsubsection{Proof context \label{sec:context-proof}%
|
|
404 |
}
|
|
405 |
\isamarkuptrue%
|
|
406 |
%
|
|
407 |
\begin{isamarkuptext}%
|
20429
|
408 |
A proof context is an arbitrary container that is initialized from a
|
|
409 |
given theory. The result contains a back-reference to the theory it
|
|
410 |
belongs to, together with pure data. No further bookkeeping is
|
|
411 |
required here, thanks to the lack of destructive features.
|
|
412 |
|
|
413 |
There is no restriction on producing proof contexts, although the
|
|
414 |
usual discipline is to follow block structure as a mental model: a
|
|
415 |
given context is extended consecutively, results are exported back
|
|
416 |
into the original context. In particular, the concept of Isar proof
|
|
417 |
state models block-structured reasoning explicitly, using a stack of
|
|
418 |
proof contexts.
|
|
419 |
|
|
420 |
Due to the lack of identification and back-referencing, entities
|
|
421 |
derived in a proof context need to record inherent logical
|
|
422 |
requirements explicitly. For example, hypotheses used in a
|
|
423 |
derivation will be recorded separately within the sequent \isa{{\isasymGamma}\ {\isasymturnstile}\ {\isasymphi}}, just to make double sure. Results could leak into an alien
|
|
424 |
proof context do to programming errors, but Isabelle/Isar
|
|
425 |
occasionally includes extra validity checks at the end of a
|
|
426 |
sub-proof.
|
|
427 |
|
|
428 |
\medskip
|
|
429 |
FIXME proof data
|
18537
|
430 |
|
|
431 |
\glossary{Proof context}{The static context of a structured proof,
|
|
432 |
acts like a local ``theory'' of the current portion of Isar proof
|
|
433 |
text, generalizes the idea of local hypotheses \isa{{\isasymGamma}} in
|
|
434 |
judgments \isa{{\isasymGamma}\ {\isasymturnstile}\ {\isasymphi}} of natural deduction calculi. There is a
|
|
435 |
generic notion of introducing and discharging hypotheses. Arbritrary
|
|
436 |
auxiliary context data may be adjoined.}%
|
|
437 |
\end{isamarkuptext}%
|
|
438 |
\isamarkuptrue%
|
|
439 |
%
|
20430
|
440 |
\isadelimmlref
|
|
441 |
%
|
|
442 |
\endisadelimmlref
|
|
443 |
%
|
|
444 |
\isatagmlref
|
|
445 |
%
|
|
446 |
\begin{isamarkuptext}%
|
|
447 |
FIXME%
|
|
448 |
\end{isamarkuptext}%
|
|
449 |
\isamarkuptrue%
|
|
450 |
%
|
|
451 |
\endisatagmlref
|
|
452 |
{\isafoldmlref}%
|
|
453 |
%
|
|
454 |
\isadelimmlref
|
|
455 |
%
|
|
456 |
\endisadelimmlref
|
|
457 |
%
|
20429
|
458 |
\isamarkupsubsection{Generic contexts%
|
|
459 |
}
|
|
460 |
\isamarkuptrue%
|
|
461 |
%
|
20430
|
462 |
\begin{isamarkuptext}%
|
|
463 |
FIXME%
|
|
464 |
\end{isamarkuptext}%
|
|
465 |
\isamarkuptrue%
|
|
466 |
%
|
|
467 |
\isadelimmlref
|
|
468 |
%
|
|
469 |
\endisadelimmlref
|
|
470 |
%
|
|
471 |
\isatagmlref
|
|
472 |
%
|
|
473 |
\begin{isamarkuptext}%
|
|
474 |
FIXME%
|
|
475 |
\end{isamarkuptext}%
|
|
476 |
\isamarkuptrue%
|
|
477 |
%
|
|
478 |
\endisatagmlref
|
|
479 |
{\isafoldmlref}%
|
|
480 |
%
|
|
481 |
\isadelimmlref
|
|
482 |
%
|
|
483 |
\endisadelimmlref
|
|
484 |
%
|
18537
|
485 |
\isadelimtheory
|
|
486 |
%
|
|
487 |
\endisadelimtheory
|
|
488 |
%
|
|
489 |
\isatagtheory
|
|
490 |
\isacommand{end}\isamarkupfalse%
|
|
491 |
%
|
|
492 |
\endisatagtheory
|
|
493 |
{\isafoldtheory}%
|
|
494 |
%
|
|
495 |
\isadelimtheory
|
|
496 |
%
|
|
497 |
\endisadelimtheory
|
|
498 |
\isanewline
|
|
499 |
\end{isabellebody}%
|
|
500 |
%%% Local Variables:
|
|
501 |
%%% mode: latex
|
|
502 |
%%% TeX-master: "root"
|
|
503 |
%%% End:
|