Now rename_params_rule merely issues warnings--and does nothing--if the renaming cannot be performed. Previously it raised a fatal error.

Now Datatype.occs_in_prems prints the necessary warning ITSELF. It is also easier to invoke and even works if the induction variable is a parameter (rather than a free variable).

Uses new version of Datatype.occs_in_prems

auto update

Removal of tactical STATE

fixed polymorphic val;

tuned congs: standard;

improved simp tracing;

added simplification meta rules;

tmp fix to accomodate rep_ss changes;

added rewrite_thm;

tuned apsome;

added error_msg;

tuned error / warning;

added print_ss; improved merge;

added dest_mss, merge_mss; fixed matching of simproc lhss;

tuned title;

added dest and merge operations;

added pretty_cterm;

improved print_cs;

Cosmetic changes: margins, indentation, ...

Now possibility_tac is an explicit function, in order to delay the evaluation of \!simpset

Cosmetic changes: margins, indentation, ...

Now possibility_tac and basic_possibility_tac are explicit functions, in order to delay the evaluation of \!simpset

Deleted the superfluous assumption A ~= B, which must hold anyway by induction

Fixed the spelling of AUTH_NAMES--it could not have worked before\!

Option is a synonym for General because MLWorks does not yet provide Option as a separate structure

Removal of the tactical STATE

Removal of the tactical STATE

tuned error propagation msg;

defs may now be conditional; improved output of warnings / errors;

renamed |-> <-| <-> to Parse/PrintRule;

tuned warning;

tuned warnings; print_current_goals_fn, result_error_fn hooks replace print_goals_ref;

considered removal of print_goals_ref;

defs: allow conditions;

tuned warning; improved comments;

renamed |-> <-| <-> to Parse/PrintRule;

tuned warning;

tuned warning; renamed |-> <-| <-> to Parse/PrintRule;

improved output channels: normal, warning, error;

fixed EqI meta rule;

changes needed for introducing fairness

changes neede for introducing fairness

changes needed for adding fairness

fixed merge of internal simprocs;

Changing "lost" from a parameter of protocol definitions to a constant. Advantages: no "lost" argument everywhere; fewer Vars in subgoals; less need for specially instantiated rules Disadvantage: can no longer prove "Agent_not_see_encrypted_key", but this theorem was never used, and its original proof was also broken the introduction of the "Notes" constructor.

Fixed delIffs to deal correctly with the D-rule

Removed redundant addsimps of Un_insert_left, which is now a default simprule

Removal of monotonicity reasoning involving "lost" and the theorem Agent_not_see_encrypted_key, which (a) is never used and (b) becomes harder to prove when Notes is available.

Now uses the Notes constructor to distinguish the Client (who has chosen M) from the Spy (who may have replayed her messages)

Moved some declarations to Message from Public and Shared

Now loads theory Event, which contains common declarations

Moving common declarations and proofs from theories "Shared" and "Public" to "Event". NB the original "Event" theory was later renamed "Shared". Addition of the Notes constructor to datatype "event".

removed obsolete init_pps and init_thy_reader;

improved type checking errors;

removed init_pps;

removed init_database;

Improved length = size translation.

New proofs involving CERTIFICATE VERIFY

eliminated chmod -w;

-w option;

NOWRITE;

added -w option;

Changed some variables of type msg to lower case (e.g. from NB to nb

New constant "certificate"--just an abbreviation

Reduced priority of postfix ^* etc operators such that they are the same as application. Eg wf r^* now needs to be written wf(r^*).

Automatic update

Now catches the error of calling tgoalw when there are no goals to prove, instead of just letting USyntax.list_mk_conj raise an exception

Simplified the new proofs about division

New comments on how to deal with unproved termination conditions

Fixed comments

Moved MLWorks.ML to its proper place, directory ML-Systems. Note that MLWorks does not quite work yet, especially top-level pretty printing

Automatic update

Modified the \tydx command to set types in italics instead of \tt

Some LaTeX-2e primitives such as \texttt A bit of material on theories Primes and Primrec

Added documentation for recdef, and tidied some other material

Updated references

set_of_list -> set

Now there are TWO spaces after each full stop, so that the Emacs sentence primitives work

Now there are TWO spaces after each full stop, so that the Emacs sentence primitives work

Added the following lemmas tp Divides and a few others to Arith and NatDef: div_le_mono, div_le_mono2, div_le_dividend, div_less_dividend Fixed a broken proof in WF_Rel.ML. No idea what caused this.

Tidying; also simplified the lemma Says_Server_not

New theory TLS

Deleted a redundant A~=B in rules that refer to a previous event

More realistic model: the Spy can compute clientK and serverK

Reordered rules in analz_image_freshK_ss to improve clarity

Removal of the obsolete newN function

New theorem priK_inj_eq, injectivity of priK

spy_analz_tac: Restored iffI to the list of rules used to break down the subgoal

New theory TLS

Baby TLS. Proofs work, but model seems unrealistic

New and stronger lemmas; more default simp/cla rules

Deleted the obsolete operators newK, newN and nPair

Now the possibility proof calls the appropriate tactic

Added a comment