Research proof index

Returns a boolean witnessing the sortedness of a HeapLang list. acc is an option of the last value in the list. -/ def checkSorted : Val := hl_val% rec check acc l := match l with | none() => #true | some(x) => let p := !x; let head := fst(p); let tail := snd(p); let ok := (match acc with | none() => #true | some(v) => v ≤ head); ok && check (some(head)...

Writing back a cell's current contents leaves the state unchanged.

Allocation with a dependent function and a predicate on the ghost name. The predicate P must be satisfied by arbitrarily large naturals.

unfoldi preserves unit structure

Let t₂ be a thread pool such that t₁ under state σ₁ makes a (single) step to threadpool t₂ and state σ₂. Let thread pools t₁ and t₃ be such that each thread in t₁ makes (zero or more) pure steps to the corresponding thread in t₃. In this situation, either the step from t₁ to t₂ corresponds to one of the pure steps between t₁ and `t...

adequate gives a WP with a pure postcondition from an adequate fact.