author | Christian Urban <urbanc@in.tum.de> |
Fri, 27 Mar 2009 12:49:28 +0000 | |
changeset 211 | d5accbc67e1b |
parent 210 | db8e302f44c8 |
child 212 | ac01ddb285f6 |
permissions | -rw-r--r-- |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
1 |
theory Ind_General_Scheme |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
2 |
imports Simple_Inductive_Package Ind_Prelims |
32 | 3 |
begin |
4 |
||
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
5 |
(*<*) |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
6 |
datatype trm = |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
7 |
Var "string" |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
8 |
| App "trm" "trm" |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
9 |
| Lam "string" "trm" |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
10 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
11 |
simple_inductive |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
12 |
fresh :: "string \<Rightarrow> trm \<Rightarrow> bool" |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
13 |
where |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
14 |
fresh_var: "a\<noteq>b \<Longrightarrow> fresh a (Var b)" |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
15 |
| fresh_app: "\<lbrakk>fresh a t; fresh a s\<rbrakk> \<Longrightarrow> fresh a (App t s)" |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
16 |
| fresh_lam1: "fresh a (Lam a t)" |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
17 |
| fresh_lam2: "\<lbrakk>a\<noteq>b; fresh a t\<rbrakk> \<Longrightarrow> fresh a (Lam b t)" |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
18 |
(*>*) |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
19 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
20 |
section {* The Code in a Nutshell\label{sec:nutshell} *} |
32 | 21 |
|
22 |
text {* |
|
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
23 |
(FIXME: perhaps move somewhere else) |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
24 |
|
127
74846cb0fff9
updated and added two tentative recipes
Christian Urban <urbanc@in.tum.de>
parents:
120
diff
changeset
|
25 |
The point of these examples is to get a feeling what the automatic proofs |
74846cb0fff9
updated and added two tentative recipes
Christian Urban <urbanc@in.tum.de>
parents:
120
diff
changeset
|
26 |
should do in order to solve all inductive definitions we throw at them. For this |
74846cb0fff9
updated and added two tentative recipes
Christian Urban <urbanc@in.tum.de>
parents:
120
diff
changeset
|
27 |
it is instructive to look at the general construction principle |
74846cb0fff9
updated and added two tentative recipes
Christian Urban <urbanc@in.tum.de>
parents:
120
diff
changeset
|
28 |
of inductive definitions, which we shall do in the next section. |
32 | 29 |
*} |
30 |
||
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
31 |
text {* |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
32 |
The inductive package will generate the reasoning infrastructure |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
33 |
for mutually recursive predicates @{text "pred\<^isub>1\<dots>pred\<^isub>n"}. In what |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
34 |
follows we will have the convention that various, possibly empty collections of |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
35 |
``things'' are indicated either by adding an @{text "s"} or by adding |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
36 |
a superscript @{text [quotes] "\<^isup>*"}. The shorthand for the predicates |
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
37 |
will therefore be @{text "preds"} or @{text "pred\<^sup>*"}. In the case of the |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
38 |
predicates there must be, of course, at least a single one in order to obtain a |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
39 |
meaningful definition. |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
40 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
41 |
The input for the inductive package will be some @{text "preds"} with possible |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
42 |
typing and syntax annotations, and also some introduction rules. We call below the |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
43 |
introduction rules short as @{text "rules"}. Borrowing some idealised Isabelle |
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
44 |
notation, one such @{text "rule"} is assumed to be of the form |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
45 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
46 |
\begin{isabelle} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
47 |
@{text "rule ::= |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
48 |
\<And>xs. \<^raw:$\underbrace{\mbox{>As\<^raw:}}_{\text{\makebox[0mm]{\rm non-recursive premises}}}$> \<Longrightarrow> |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
49 |
\<^raw:$\underbrace{\mbox{>(\<And>ys. Bs \<Longrightarrow> pred ss)\<^isup>*\<^raw:}}_{\text{\rm recursive premises}}$> |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
50 |
\<Longrightarrow> pred ts"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
51 |
\end{isabelle} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
52 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
53 |
For the purposes here, we will assume the @{text rules} have |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
54 |
this format and omit any code that actually tests this. Therefore ``things'' |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
55 |
can go horribly wrong, if the @{text "rules"} are not of this |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
56 |
form.\footnote{FIXME: Exercise to test this format.} The @{text As} and |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
57 |
@{text Bs} in a @{text "rule"} are formulae not involving the inductive |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
58 |
predicates @{text "preds"}; the instances @{text "pred ss"} and @{text "pred |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
59 |
ts"} can stand for different predicates, like @{text "pred\<^isub>1 ss"} and |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
60 |
@{text "pred\<^isub>2 ts"}; @{text ss} and @{text ts} are the |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
61 |
arguments of the predicates. Every formula left of @{text [quotes] |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
62 |
"\<Longrightarrow> pred ts"} is a premise of the rule. The outermost quantified |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
63 |
variables @{text "xs"} are usually omitted in the user's input. The |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
64 |
quantification for the variables @{text "ys"} is local with respect to |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
65 |
one recursive premise and must be given. Some examples of @{text "rule"}s |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
66 |
are |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
67 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
68 |
@{thm [display] fresh_var[no_vars]} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
69 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
70 |
which has only a single non-recursive premise, whereas |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
71 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
72 |
@{thm [display] evenS[no_vars]} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
73 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
74 |
has a single recursive premise; the rule |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
75 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
76 |
@{thm [display] accpartI[no_vars]} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
77 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
78 |
has a recursive premise that has a precondition. As usual all |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
79 |
rules are stated without the leading meta-quantification @{text "\<And>xs"}. |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
80 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
81 |
The code of the inductive package falls roughly in tree parts: the first |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
82 |
deals with the definitions, the second with the induction principles and |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
83 |
the third with the introduction rules. |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
84 |
|
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
85 |
For the definitions we need to have the @{text rules} in a form where |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
86 |
the meta-quantifiers and meta-implications are replaced by their object |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
87 |
logic equivalents. Therefore an @{text "orule"} is of the form |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
88 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
89 |
@{text [display] "orule ::= \<forall>xs. As \<longrightarrow> (\<forall>ys. Bs \<longrightarrow> pred ss)\<^isup>* \<longrightarrow> pred ts"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
90 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
91 |
A definition for the predicate @{text "pred"} has then the form |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
92 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
93 |
@{text [display] "def ::= pred \<equiv> \<lambda>zs. \<forall>preds. orules \<longrightarrow> pred zs"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
94 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
95 |
The induction principles for every predicate @{text "pred"} are of the |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
96 |
form |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
97 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
98 |
@{text [display] "ind ::= pred ?zs \<Longrightarrow> rules[preds := ?Ps] \<Longrightarrow> ?P ?zs"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
99 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
100 |
where in the @{text "rules"} every @{text pred} is replaced by a fresh |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
101 |
meta-variable @{text "?P"}. |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
102 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
103 |
In order to derive an induction principle for the predicate @{text "pred"}, |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
104 |
we first transform @{text ind} into the object logic and fix the meta-variables. |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
105 |
Hence we have to prove a formula of the form |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
106 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
107 |
@{text [display] "pred zs \<longrightarrow> orules[preds := Ps] \<longrightarrow> P zs"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
108 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
109 |
If we assume @{text "pred zs"} and unfold its definition, then we have |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
110 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
111 |
@{text [display] "\<forall>preds. orules \<longrightarrow> pred zs"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
112 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
113 |
and must prove |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
114 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
115 |
@{text [display] "orules[preds := Ps] \<longrightarrow> P zs"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
116 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
117 |
This can be done by instantiating the @{text "\<forall>preds"}-quantification |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
118 |
with the @{text "Ps"}. Then we are done since we are left with a simple |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
119 |
identity. |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
120 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
121 |
Although the user declares introduction rules @{text rules}, they must |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
122 |
be derived from the @{text defs}. These derivations are a bit involved. |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
123 |
Assuming we want to prove the introduction rule |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
124 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
125 |
@{text [display] "\<And>xs. As \<Longrightarrow> (\<And>ys. Bs \<Longrightarrow> pred ss)\<^isup>* \<Longrightarrow> pred ts"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
126 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
127 |
then we can assume |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
128 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
129 |
\begin{isabelle} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
130 |
(i)~~@{text "As"}\\ |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
131 |
(ii)~@{text "(\<And>ys. Bs \<Longrightarrow> pred ss)\<^isup>*"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
132 |
\end{isabelle} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
133 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
134 |
and must show |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
135 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
136 |
@{text [display] "pred ts"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
137 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
138 |
If we now unfold the definitions for the @{text preds}, we have |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
139 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
140 |
\begin{isabelle} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
141 |
(i)~~~@{text "As"}\\ |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
142 |
(ii)~~@{text "(\<And>ys. Bs \<Longrightarrow> \<forall>preds. orules \<longrightarrow> pred ss)\<^isup>*"}\\ |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
143 |
(iii)~@{text "orules"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
144 |
\end{isabelle} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
145 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
146 |
and need to show |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
147 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
148 |
@{text [display] "pred ts"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
149 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
150 |
In the last step we removed some quantifiers and moved the precondition @{text "orules"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
151 |
into the assumtion. The @{text "orules"} stand for all introduction rules that are given |
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
152 |
by the user. We apply the @{text orule} that corresponds to introduction rule we are |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
153 |
proving. This introduction rule must necessarily be of the form |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
154 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
155 |
@{text [display] "As \<Longrightarrow> (\<And>ys. Bs \<Longrightarrow> pred ss)\<^isup>* \<Longrightarrow> pred ts"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
156 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
157 |
When we apply this rule we end up in the goal state where we have to prove |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
158 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
159 |
\begin{isabelle} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
160 |
(a)~@{text "As"}\\ |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
161 |
(b)~@{text "(\<And>ys. Bs \<Longrightarrow> pred ss)\<^isup>*"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
162 |
\end{isabelle} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
163 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
164 |
We can immediately discharge the goals @{text "As"} using the assumption in |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
165 |
@{text "(i)"}. The goals in @{text "(b)"} can be discharged as follows: we |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
166 |
assume the @{text "Bs"} and prove @{text "pred ss"}. For this we resolve the |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
167 |
@{text "Bs"} with the assumptions in @{text "(ii)"}. This gives us the |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
168 |
assumptions |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
169 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
170 |
@{text [display] "(\<forall>preds. orules \<longrightarrow> pred ss)\<^isup>*"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
171 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
172 |
Instantiating the universal quantifiers and then resolving with the assumptions |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
173 |
in @{text "(iii)"} gives us @{text "pred ss"}, which is the goal we are after. |
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
174 |
This completes the proof for introduction rules. |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
175 |
|
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
176 |
What remains is to implement the reasoning outlined above. We do this in |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
177 |
the next section. For building testcases, we use the shorthands for |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
178 |
@{text "even/odd"}, @{term "fresh"} and @{term "accpart"} |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
179 |
given in Figure~\ref{fig:shorthands}. |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
180 |
*} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
181 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
182 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
183 |
text_raw{* |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
184 |
\begin{figure}[p] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
185 |
\begin{minipage}{\textwidth} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
186 |
\begin{isabelle}*} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
187 |
ML{*(* even-odd example *) |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
188 |
val eo_defs = [@{thm even_def}, @{thm odd_def}] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
189 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
190 |
val eo_rules = |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
191 |
[@{prop "even 0"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
192 |
@{prop "\<And>n. odd n \<Longrightarrow> even (Suc n)"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
193 |
@{prop "\<And>n. even n \<Longrightarrow> odd (Suc n)"}] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
194 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
195 |
val eo_orules = |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
196 |
[@{prop "even 0"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
197 |
@{prop "\<forall>n. odd n \<longrightarrow> even (Suc n)"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
198 |
@{prop "\<forall>n. even n \<longrightarrow> odd (Suc n)"}] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
199 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
200 |
val eo_preds = [@{term "even::nat\<Rightarrow>bool"}, @{term "odd::nat\<Rightarrow>bool"}] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
201 |
val eo_prednames = [@{binding "even"}, @{binding "odd"}] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
202 |
val eo_syns = [NoSyn, NoSyn] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
203 |
val eo_arg_tyss = [[@{typ "nat"}], [@{typ "nat"}]] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
204 |
val e_pred = @{term "even::nat\<Rightarrow>bool"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
205 |
val e_arg_tys = [@{typ "nat"}] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
206 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
207 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
208 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
209 |
(* freshness example *) |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
210 |
val fresh_rules = |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
211 |
[@{prop "\<And>a b. a \<noteq> b \<Longrightarrow> fresh a (Var b)"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
212 |
@{prop "\<And>a s t. fresh a t \<Longrightarrow> fresh a s \<Longrightarrow> fresh a (App t s)"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
213 |
@{prop "\<And>a t. fresh a (Lam a t)"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
214 |
@{prop "\<And>a b t. a \<noteq> b \<Longrightarrow> fresh a t \<Longrightarrow> fresh a (Lam b t)"}] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
215 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
216 |
val fresh_orules = |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
217 |
[@{prop "\<forall>a b. a \<noteq> b \<longrightarrow> fresh a (Var b)"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
218 |
@{prop "\<forall>a s t. fresh a t \<longrightarrow> fresh a s \<longrightarrow> fresh a (App t s)"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
219 |
@{prop "\<forall>a t. fresh a (Lam a t)"}, |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
220 |
@{prop "\<forall>a b t. a \<noteq> b \<longrightarrow> fresh a t \<longrightarrow> fresh a (Lam b t)"}] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
221 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
222 |
val fresh_pred = @{term "fresh::string\<Rightarrow>trm\<Rightarrow>bool"} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
223 |
val fresh_arg_tys = [@{typ "string"}, @{typ "trm"}] |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
224 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
225 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
226 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
227 |
(* accessible-part example *) |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
228 |
val acc_rules = |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
229 |
[@{prop "\<And>R x. (\<And>y. R y x \<Longrightarrow> accpart R y) \<Longrightarrow> accpart R x"}] |
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
230 |
val acc_pred = @{term "accpart::('a \<Rightarrow>'a\<Rightarrow>bool)\<Rightarrow>'a \<Rightarrow>bool"}*} |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
231 |
text_raw{* |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
232 |
\end{isabelle} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
233 |
\end{minipage} |
211
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
234 |
\caption{Shorthands for the inductive predicates @{text "even"}-@{text "odd"}, |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
235 |
@{text "fresh"} and @{text "accpart"}. The names of these shorthands follow |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
236 |
the convention @{text "rules"}, @{text "orules"}, @{text "preds"} and so on. |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
237 |
The purpose of these shorthands is to simplify the construction of testcases |
d5accbc67e1b
more work on simple inductive and marked all sections that are still seriously incomplete with TBD
Christian Urban <urbanc@in.tum.de>
parents:
210
diff
changeset
|
238 |
in Section~\ref{sec:code}.\label{fig:shorthands}} |
210
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
239 |
\end{figure} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
240 |
*} |
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
241 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
242 |
|
db8e302f44c8
more work on the simple inductive section
Christian Urban <urbanc@in.tum.de>
parents:
189
diff
changeset
|
243 |
|
32 | 244 |
end |