All proofs
Project-declaredLean 4.31.0 · null

Residual well typed is sound

Cedar.Thm.residual_well_typed_is_sound

Plain-language statement

Successful evaluation of a well-typed residual should produce a value of corresponding type.

Exact Lean statement

theorem residual_well_typed_is_sound {r : Residual} {v : Value} {env : TypeEnv} {request : Request} {entities : Entities} :
  InstanceOfWellFormedEnvironment request entities env →
  Residual.WellTyped env r →
  r.evaluate request entities = .ok v →
  InstanceOfType env v r.typeOf

Formal artifact

Lean source

Canonical source
Full Lean sourceLean 4
theorem residual_well_typed_is_sound {r : Residual} {v : Value} {env : TypeEnv} {request : Request} {entities : Entities} :  InstanceOfWellFormedEnvironment request entities env   Residual.WellTyped env r   r.evaluate request entities = .ok v   InstanceOfType env v r.typeOf:= by  intro h₁ h₂ h₃  induction h₂ generalizing v <;> simp only [Residual.typeOf]  case val v ty h₄ =>    exact residual_well_typed_is_sound_val h₄ h₃  case var var ty h₄ =>    exact residual_well_typed_is_sound_var h₁ h₄ h₃  case ite x₁ x₂ x₃ h₁ h₂ h₃ h₄ h₅ h₆ hᵢ₁ hᵢ₂ =>    exact residual_well_typed_is_sound_ite h₄ h₅ h₆ hᵢ₁ hᵢ₂ h₃  case and x₁ x₂ _ _ h₄ h₅ hᵢ₁ hᵢ₂ =>    exact residual_well_typed_is_sound_and h₄ h₅ hᵢ₁ hᵢ₂ h₃  case or x₁ x₂ _ _ h₄ h₅ hᵢ₁ hᵢ₂ =>    exact residual_well_typed_is_sound_or h₄ h₅ hᵢ₁ hᵢ₂ h₃  case unaryApp op₁ x₁ ty _ h₄ hᵢ₁ =>    exact residual_well_typed_is_sound_unary_app h₄ hᵢ₁ h₃  case binaryApp op₂ x₁ x₂ ty _ _ h₄ hᵢ₁ hᵢ₂ =>    exact residual_well_typed_is_sound_binary_app h₁ h₄ hᵢ₁ hᵢ₂ h₃  case hasAttr_entity ety x₁ attr h₁ h₂ h₃ =>    exact residual_well_typed_is_sound_has_attr_entity h₃  case hasAttr_record rty x₁ attr h₁ h₂ h₃ =>    exact residual_well_typed_is_sound_has_attr_record h₃  case getAttr_entity ety rty x₁ attr ty h₄ h₅ h₆ h₇ hᵢ =>    exact residual_well_typed_is_sound_get_attr_entity h₁ hᵢ h₅ h₆ h₇ h₃  case getAttr_record rty x₁ attr ty h₄ h₅ h₆ hᵢ =>    exact residual_well_typed_is_sound_get_attr_record hᵢ h₅ h₆ h₃  case set ls ty h₄ h₅ h₆ h₇ =>    exact residual_well_typed_is_sound_set h₇ h₅ h₃  case record rty m hᵢ₁ h₄ hᵢ =>    exact residual_well_typed_is_sound_record hᵢ h₄ h₃  case call xfn args ty _ h₄ _ =>    exact residual_well_typed_is_sound_call h₄ h₃  case error ty =>    -- Error case should not produce a successful result    simp only [Residual.evaluate] at h₃    -- h₃ : Except.error Error.extensionError = Except.ok v    -- This is a contradiction since error ≠ ok    cases h₃
Project
Cedar Specification
License
Apache-2.0
Commit
3f093947b8ae
Source
cedar-lean/Cedar/Thm/WellTyped/Residual.lean:38-79

Reuse this declaration

Bring the exact result into your workflow

The import identifies the source module. Your project still needs the pinned package dependency shown on this page.

What this badge means

This completion status comes from the project or community source. It has not yet been represented here as an independent rebuild and axiom audit.

Continue in this project

Related declarations

Project-declaredLean 4.31.0

Find? ext

Cedar.Data.Map.find?_ext

Plain-language statement

Two well-formed maps are equal if they have the same find? for every key.

authorizationprogram verificationsemantics

Source project: Cedar Specification

Person-level attribution pending.

View proof record
Project-declaredLean 4.31.0

Find? notmem keys

Cedar.Data.Map.find?_notmem_keys

Plain-language statement

Inverse of find?_mem_toList, except that this requires wf

authorizationprogram verificationsemantics

Source project: Cedar Specification

Person-level attribution pending.

View proof record
Project-declaredLean 4.31.0

Find? some iff in values

Cedar.Data.Map.find?_some_iff_in_values

Plain-language statement

The mp direction of this does not need the wf precondition and, in fact, is available separately as find?_some_implies_in_values above

authorizationprogram verificationsemantics

Source project: Cedar Specification

Person-level attribution pending.

View proof record