ROADMAP 33.1 KB
Newer Older
MARCHE Claude's avatar
MARCHE Claude committed
1

MARCHE Claude's avatar
MARCHE Claude committed
2

MARCHE Claude's avatar
MARCHE Claude committed
3
============ Long-term Roadmap (see below for roadmaps to next release) ===========
MARCHE Claude's avatar
MARCHE Claude committed
4

MARCHE Claude's avatar
MARCHE Claude committed
5

MARCHE Claude's avatar
MARCHE Claude committed
6
== long-term projects ==
MARCHE Claude's avatar
MARCHE Claude committed
7

MARCHE Claude's avatar
MARCHE Claude committed
8 9
* entiers machines

MARCHE Claude's avatar
MARCHE Claude committed
10
* modules, raffinement (these de Leon)
MARCHE Claude's avatar
MARCHE Claude committed
11

MARCHE Claude's avatar
MARCHE Claude committed
12 13 14 15
* support for higher-order

* extraction, more generally how to turn Why3 into a real programming language (these de Martin)

MARCHE Claude's avatar
MARCHE Claude committed
16 17 18 19 20
* rapprocher la logique et les programmes
** variant dans la logique ?
** monter les fonctions de programmes pures dans la logique ?


MARCHE Claude's avatar
MARCHE Claude committed
21 22 23 24 25 26 27 28 29 30
* internal interpreter, test of specifications, quickcheck

* BWare project, support for rewrite rules, improved support for provers,
  extensions of set theory and their Coq realizations.

* LABCOM avec Adacore
** calculs non-linéaires, calculs en virgule flottante
** production de contre-exemples de preuves solides et exprimés dans le langage d’origine
** support efficace des invariants de données
** développer des composants réutilisables prouvés.
MARCHE Claude's avatar
MARCHE Claude committed
31

MARCHE Claude's avatar
MARCHE Claude committed
32 33
* jessie3

MARCHE Claude's avatar
MARCHE Claude committed
34
== Papers to write ==
35

36
  * paper on the module system, its semantics, realizations, avec en
MARCHE Claude's avatar
MARCHE Claude committed
37
    particulier la solution avec les types classes
38

MARCHE Claude's avatar
MARCHE Claude committed
39
  * DONE paper on the proof management system
40

41
  * DONE Encodings and transformations (Andrei+Francois FroCos 11)
MARCHE Claude's avatar
MARCHE Claude committed
42

43
  * DONE Why presentation at the IVL workshop of CADE:
44 45
    (http://research.microsoft.com/en-us/um/people/moskal/boogie2011/)
    deadline: May 1st
MARCHE Claude's avatar
MARCHE Claude committed
46

47
  * Caml code ?
MARCHE Claude's avatar
MARCHE Claude committed
48

49
  * logic language for talking to provers
50 51 52
    - DONE (Boogie 11)
    - DONE FOL + poly (FroCos 11)
    -  alg + ind + rec ? + theories
MARCHE Claude's avatar
MARCHE Claude committed
53

54
  * VACID-0
MARCHE Claude's avatar
MARCHE Claude committed
55 56 57

  * system description (e.g. at CADE, TACAS) DONE at ESOP

58
  * rapports recherche ?
MARCHE Claude's avatar
MARCHE Claude committed
59

MARCHE Claude's avatar
MARCHE Claude committed
60
== stages ==
MARCHE Claude's avatar
MARCHE Claude committed
61

MARCHE Claude's avatar
MARCHE Claude committed
62
* M1. preuve d'un petit compilateur, pas de pb de lieur,
63 64
   eventuellement outils pour les preuves par recurrence
   a la Leino, + fct size automatique
MARCHE Claude's avatar
MARCHE Claude committed
65
  DONE (Stage M1 de Leon)
MARCHE Claude's avatar
MARCHE Claude committed
66

MARCHE Claude's avatar
MARCHE Claude committed
67
* M2. Lieur en Why3, POPLmark challenge. vers
68
   un theorie et/ou un module réutilisable de lieurs
MARCHE Claude's avatar
MARCHE Claude committed
69 70
  DONE (Stage M2 de Martin)

MARCHE Claude's avatar
MARCHE Claude committed
71
* (M2?) Stage Airbus, "TIP" avec Frama-C/Jessie ou WP/Why/Coq
MARCHE Claude's avatar
MARCHE Claude committed
72
   besoin de la tactique Coq?
73

MARCHE Claude's avatar
MARCHE Claude committed
74
== new major features ==
MARCHE Claude's avatar
MARCHE Claude committed
75

MARCHE Claude's avatar
MARCHE Claude committed
76 77 78 79 80 81 82 83 84
* Logic language
 - support for higher-order logic
 - rename andb, orb, xorb and notb into and, or, xor and not

* more libraries (theories and modules)

* A true Jessie3 front-end

* Why3ML
MARCHE Claude's avatar
MARCHE Claude committed
85
 - Fast WP a la Leino (DONE ?)
MARCHE Claude's avatar
MARCHE Claude committed
86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103
 - assert qui ne donne pas une hypothese dans la suite -> "check"
   also: in a black box

* Add more examples in the regression tests and in the proval gallery

* A literate programming tool for Why3 (JCF)


* IDE:
 - edition, navigation (partially done)
 - saving session: add shortcut "ctrl-S", but beware of confusion with saving the input file
 - reimplement "hide proved goals" feature
  + suggested solution: replace model + filter_model by a custom model
  (JC + ?)
 - restore provers detection in the middle of a session.
 - commentaires dans les sessions, attachés a chaque ligne


104 105 106 107 108 109
* Projets interessant Cesar ?
** Preuve de prog flottants avec Frama-C+WP+Why3+PVS
** Generation d'annotations
** porter multirounding a jessie->Why3. Completer le mode full et faire passer
   interval_arith.c. Completer la galerie
** preuve sur l'assembleur
MARCHE Claude's avatar
MARCHE Claude committed
110 111
** support de Yices 2 ? interesserait Cesar

MARCHE Claude's avatar
MARCHE Claude committed
112
==================== Roadmap for next releases ========================
113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136

HighOrd: Coq output and OCaml extraction should produce lambda's from lambda's
and no epsilon

* terminaison
** generer une obligation de preuve de well-foundedness quand on utilise
   un variant avec "with R" (une seule fois pour chaque R !)
** quand une definition logique recursive ne peut pas etre verifiee
   bien-fondee statiquement, generer une obligation de preuve
   (feature wish de F Besson)

* replayer
** deplacer option -bench dans une commande de why3session

* IDE
** todo: run detection immediately at start up if conf file absent or
    outdated. should become doable with the new Session module
** "detect provers" menu

* Contre-exemples de Alt-Ergo

* detect editors
*** check if coqide and also emacs/proof-general is installed

MARCHE Claude's avatar
MARCHE Claude committed
137
* documentation des nouvelles features higher-order
138

MARCHE Claude's avatar
MARCHE Claude committed
139 140 141 142 143 144
* eliminate_match:
** faire un cas particulier pour "bool", le match pouvant se traduire
   vers ite qui est supporté par pas mal de prouveurs
** introduire des symboles _match non polymorphes differents pour
   chaque instance necessaires. plutot qu'un seul symbole _match
   polymorphe.
145

146

147
==================== Roadmap for release 0.88 ========================
148

149 150
DATE : au plus tard en novembre 2016, pour que ce soit dispo pour les
etudiants MPRI (pour la feature strategies en particulier)
151

152
* integrate server feature done by Johannes
153

MARCHE Claude's avatar
MARCHE Claude committed
154 155 156 157
* Document src/core/trans.mli, and fill the paragraph on
  transformations in the tutorial: doc/api.tex, section 4.7 "Applying
  transformations"

158
* fix bug 18953 : (<>) not allowed as prefix form
159

160 161 162
  solution possible: symbol builtin t_neq, inlining systematique au typage
  (ou laisser inline_trivial le faire)

163 164
* make counter-examples feature more robust

165 166 167 168
* use the file generated by altgr-ergo to replay proofs edited by altgr-ergo

  alt-ergo -replay <file>.agr

169 170
  -> on pourrait le faire en considerant altgr-ergo comme un prouveur interactif

171
* DONE make the strategy feature public and documented. Possibly generate
MARCHE Claude's avatar
MARCHE Claude committed
172
  default strategies dynamically at the time of why3 config --detect,
173 174 175 176 177 178
  using the provers detected : for that, we can annotated the provers in
  prover-detection-data.conf to tell if they should be used in the strategies,
  with which priority

  2 possible default strategies

179
  . favor use of many prover before splitting or increasing timeout
180 181 182

  . or, on the contrary, favor splitting

MARCHE Claude's avatar
MARCHE Claude committed
183
  . or, favor timelimit increase...
184

185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205
* take some time to fix some bugs of the BTS: 18029 at least


==================== Roadmap for release 0.87 ========================

DATE : mars 2016

Release Notes (details in file CHANGES):

== TODO ==

* DONE finalize detect_polymorphism. Allow polymorphic tuples (supported by SMT ?)

  C'est finalisé. Mais les tuples restent polymorphes.

* DONE Coq realization of bitvector theory

* DONE support for both isabelle 2014 and 2015
  + bugfix for installation

* DONE review support for division operators by SMT provers
206

MARCHE Claude's avatar
MARCHE Claude committed
207 208
==================== Roadmap for release 0.86 ========================

MARCHE Claude's avatar
MARCHE Claude committed
209
DATE : fin avril / début mai
MARCHE Claude's avatar
MARCHE Claude committed
210 211 212 213

Release Notes (details in file CHANGES):

* Support for new provers or new versions of provers
MARCHE Claude's avatar
MARCHE Claude committed
214 215
* Stdlib: new theories for sequences and bitvectors
* bug fixes
MARCHE Claude's avatar
MARCHE Claude committed
216 217 218

== TODO ==

MARCHE Claude's avatar
MARCHE Claude committed
219 220 221 222
* decide if GUI with tabs is convenient enough
-> onglets dans why3 ide : est-ce apprécié ? OUI
    mais enlever l'onglet "Counterexamples" avant la release

MARCHE Claude's avatar
MARCHE Claude committed
223 224
* for next release: complete realization of bitvector library

MARCHE Claude's avatar
MARCHE Claude committed
225 226
== DONE ==

MARCHE Claude's avatar
MARCHE Claude committed
227 228 229 230 231
* clean up the support for SMTLIB bitvectors: there are 2 theories in the stdlib: thoeries/bv.why and modules/bitvectors.mlw
-> not anymore, but more cleaning can be done: no need to separate all theories in drivers for Z3 and CVC4, since the same theory can be put several times in a driver (or imported sub-drivers)

* DONE plusieurs drivers acceptés sur la ligne de commande (AP)

232 233 234 235
* solve issues with metitarski
. DONE theory PowerReal
. DONE crashes when applied on a WP (see examples/my_cosine.mlw)

236 237 238 239 240 241 242 243 244 245 246 247 248
* determine which is the minumum version of Ocaml to compile, and then
updated configure.in and the manual
-> vérification compilation avec OCaml 3.12 -> Claude va le faire

  . 3.11.2: opam install menhir plante car ocamlfind ne compile pas
  . 3.12.1: Why3 ne compile pas:
    File "src/core/ident.ml", line 208, characters 2-14:
    Error: Unbound value String.iteri
  . 4.00.0: pas teste, et sans doute pas recommande
  . 4.00.1: ca fonctionne

-> ocaml minimal = 4.00.1

MARCHE Claude's avatar
MARCHE Claude committed
249
DONE * sauvegarde de la configuration : à quel endroit dans l'IDE ?
MARCHE Claude's avatar
MARCHE Claude committed
250 251
-> Claude le met dans la fenetre preferences a cote du bouton "Close"

MARCHE Claude's avatar
MARCHE Claude committed
252 253 254 255 256
* support for veriT recent
-> DONE: version 201410

* support for Yices2 recent
-> DONE: 2.3.0, but still does not support quantifiers
MARCHE Claude's avatar
MARCHE Claude committed
257 258


MARCHE Claude's avatar
MARCHE Claude committed
259 260 261 262 263 264 265 266 267
==================== Roadmap for release 0.85 ========================

Release Notes:

Mainly a bug-fix release, in particular to fix two soundness bugs

See CHANGES


Guillaume Melquiond's avatar
Guillaume Melquiond committed
268
==================== Roadmap for release 0.84 ========================
MARCHE Claude's avatar
MARCHE Claude committed
269

MARCHE Claude's avatar
MARCHE Claude committed
270 271 272 273 274 275
== TODOs ==

* verifier support des nouveaux prouveurs: Coq8.4pl4, Isabelle-2014,
  CVC4 1.4, yices2 (quantifiers ?)  beagle ? driver TPTP TFA ? autres ?

* completer le fichier CHANGES
MARCHE Claude's avatar
MARCHE Claude committed
276 277 278 279 280 281
** nouvelle facon d'appeler les outils "why3 xxx ..." DONE
** strategies de preuve, NO for next release only
** transformation "compute_in_goal", DONE, but rewrite rules not documented
** support de nouveaux prouveurs, DONE
** nouvelle structure des fichiers de session et de shape (compatibilité), DONE
** new examples ? BOF
MARCHE Claude's avatar
MARCHE Claude committed
282 283

* ajouter dans les instructions de release ci-dessous la procedure de
MARCHE Claude's avatar
MARCHE Claude committed
284
  fabrication du paquet opam DONE
MARCHE Claude's avatar
MARCHE Claude committed
285

286 287
== New Features to announce ==

MARCHE Claude's avatar
MARCHE Claude committed
288 289 290 291 292 293 294 295 296 297 298
Release Notes:

A major visible change in this release is the way Why3 commands are
invoked: instead of several executables why3, why3config, why3ide,
why3replay, why3session, etc., there is only one Why3 executable
called why3, and the former executables are available as commands given
as first argument, e.g. "why3 config", "why3 ide", etc.

Another quite visible change is that session files are split in two
parts, as detailed below in the detailed changes.

MARCHE Claude's avatar
MARCHE Claude committed
299
See CHANGES
300

MARCHE Claude's avatar
MARCHE Claude committed
301 302 303 304 305 306

==================== Roadmap for release 0.83 ========================

== New Features to announce ==

See CHANGES
307 308


MARCHE Claude's avatar
MARCHE Claude committed
309 310
== TODOs ==

311
* DONE replayer: replay should be considered failed if new goals appeared.
MARCHE Claude's avatar
MARCHE Claude committed
312

MARCHE Claude's avatar
MARCHE Claude committed
313
* DONE ? fix problems with installed scripts that are missing a proper executable right (mails Frederic Boulanger)
MARCHE Claude's avatar
MARCHE Claude committed
314 315

* Isabelle Support:
MARCHE Claude's avatar
MARCHE Claude committed
316
** DONE ? fix the problem with why3_jedit script missing executable bit
MARCHE Claude's avatar
MARCHE Claude committed
317
** DONE add a documentation: start "isabelle why3_jedit" before why3ide, use "Close C-w" to signal the end of edit to why3"
MARCHE Claude's avatar
MARCHE Claude committed
318

MARCHE Claude's avatar
MARCHE Claude committed
319
* extraction vers Caml
320
** DONE utiliser ZArith
MARCHE Claude's avatar
MARCHE Claude committed
321

MARCHE Claude's avatar
MARCHE Claude committed
322
==================== Roadmap for release 0.82 ========================
323

MARCHE Claude's avatar
MARCHE Claude committed
324
Scheduled for 9 december 2013
325

326 327
== New Features to announce ==

MARCHE Claude's avatar
MARCHE Claude committed
328 329 330
* input language
** lemma functions
** polymorphic recursion permitted
331
** types "opaques" TODO ???
MARCHE Claude's avatar
MARCHE Claude committed
332

MARCHE Claude's avatar
MARCHE Claude committed
333

MARCHE Claude's avatar
MARCHE Claude committed
334
* new provers:
MARCHE Claude's avatar
MARCHE Claude committed
335
** veriT 201310
336
** Metitarski 2.2 (contribution by Piotr Trojanek)
MARCHE Claude's avatar
MARCHE Claude committed
337 338 339 340
** Metis 2.3
** Beagle 0.4.1
** Princess 2013-05-13
** Yices2 2.0.4
341
** Isabelle 2013-2 (contribution by Stefan Berghofer)
MARCHE Claude's avatar
MARCHE Claude committed
342 343

* new versions of provers:
MARCHE Claude's avatar
MARCHE Claude committed
344
** Alt-Ergo 0.95.2
MARCHE Claude's avatar
MARCHE Claude committed
345
** CVC4 1.1 & 1.2 & 1.3
MARCHE Claude's avatar
MARCHE Claude committed
346
** Coq 8.4pl2
MARCHE Claude's avatar
MARCHE Claude committed
347
** gappa 1.0.0
MARCHE Claude's avatar
MARCHE Claude committed
348 349 350
** SPASS 3.8ds

* API: more examples of use in  examples/use_api/
MARCHE Claude's avatar
MARCHE Claude committed
351

MARCHE Claude's avatar
MARCHE Claude committed
352
* emacs support: why.el renamed into why3.el
MARCHE Claude's avatar
MARCHE Claude committed
353 354 355 356

* why3session
** --stats: changed (detailler, temps, distinction root et subgoals, CLAUDE)

MARCHE Claude's avatar
MARCHE Claude committed
357
* bug fixes:
MARCHE Claude's avatar
MARCHE Claude committed
358
** remove extra leading zeros in decimal literals when a prover don't like them
MARCHE Claude's avatar
MARCHE Claude committed
359 360 361
** PVS output: types are always non-empty
** PVS: fixed configuration and installation process
** improved shape mecanism for session updates (see VSTTE'13 paper).
362 363
  Compatibility with session files from version 0.81 and earlier is
  assured.
MARCHE Claude's avatar
MARCHE Claude committed
364 365
** Coq tactic: now loads dynamic plug-ins
** Coq output: fixed printing of polymorphic recursive datatypes
MARCHE Claude's avatar
MARCHE Claude committed
366 367 368 369 370
** bug #15493: correct Coq output for polymorphic algebraic data types
** wish #15053: Remove proof time from "Goals proved by only one prover" section of why3session info --stats
** bug #13736: why3ml was slow when there are many inclusions
** bug #16488: decimals in TPTP syntax
** bug #16454: do not send arithmetic triggers anymore to alt-Ergo
MARCHE Claude's avatar
MARCHE Claude committed
371 372
** syntax highlighting bugs: should be fixed by removing the old language
   file alt-ergo.lang from alt-ergo distribution
MARCHE Claude's avatar
MARCHE Claude committed
373

374 375
== TODOs ==

MARCHE Claude's avatar
MARCHE Claude committed
376
* DONE Patch de johannes pour les noms de fichier pour Isabelle
MARCHE Claude's avatar
MARCHE Claude committed
377

MARCHE Claude's avatar
MARCHE Claude committed
378
* DONE discriminate, mettre les bons arguments par defaut (ANDREI)
MARCHE Claude's avatar
MARCHE Claude committed
379

MARCHE Claude's avatar
MARCHE Claude committed
380
* DONE efficiency issues
MARCHE Claude's avatar
MARCHE Claude committed
381 382 383 384 385 386
** understand problems when large number of goals (cf D Mentré examples)
** prouveur de Martin
** tester avant la release sur
*** BWare
*** Prouveur de Martin
*** examples de Frama-C/Jessie et Krakatoa
387

388
* DONE Coq detection (et PVS) (CLAUDE, champ supplementaire compile_support = yes dans le prover-detection-data)
389 390 391
** refuser de detecter Coq si on n'a pas compilé avec le support de Coq
   (i.e. si Coq a ete installé apres)

MARCHE Claude's avatar
MARCHE Claude committed
392
* Coq tactic (CLAUDE, GUILLAUME, JCF, ANDREI)
MARCHE Claude's avatar
MARCHE Claude committed
393
** DONE bug Prod(_,_,_) -> traiter le cas
MARCHE Claude's avatar
MARCHE Claude committed
394

395 396
* Smoke detector and absurd: on pourrait mettre un label particulier
  sur le "false" genéré par absurd, pour indiquer que c'est
MARCHE Claude's avatar
MARCHE Claude committed
397
  intentionel que l'on veuille prouver false. FAIT
MARCHE Claude's avatar
MARCHE Claude committed
398
  Un tel cas pourrait etre
399 400
  traité de facon speciale par le smoke detector avec option "deep",
  pour eviter une fausse alarme.
MARCHE Claude's avatar
MARCHE Claude committed
401
  PAS FAIT
402 403

* faire le menage dans les transformations d'induction : _int _ty
MARCHE Claude's avatar
MARCHE Claude committed
404
  _ty_lex, FAIT et documenter PAS FAIT
405 406 407

* Documentation
 - (ANDREI) make the glossary available
MARCHE Claude's avatar
MARCHE Claude committed
408
 - (CLAUDE) complete api.tex: explain how to build/apply
MARCHE Claude's avatar
MARCHE Claude committed
409
   transformations, write new functions on terms
MARCHE Claude's avatar
MARCHE Claude committed
410 411
 - LEON: add a section "further reading"

MARCHE Claude's avatar
MARCHE Claude committed
412
* DONE bug fix: 16454 (ne pas envoyer des triggers arithmetiques) (GUILLAUME)
MARCHE Claude's avatar
MARCHE Claude committed
413

MARCHE Claude's avatar
MARCHE Claude committed
414
* DONE bug fix: 15652 (ghost code detection)
MARCHE Claude's avatar
MARCHE Claude committed
415 416 417

* support for new provers
** Alt-Ergo 0.95.2 DONE
MARCHE Claude's avatar
MARCHE Claude committed
418
** CVC4 1.2 DONE: pb avec les booleens
MARCHE Claude's avatar
MARCHE Claude committed
419
** DONE Coq 8.4pl2: probleme tactique Why3
MARCHE Claude's avatar
MARCHE Claude committed
420
** DONE Metitarski: improve it (CLAUDE, GUILLAUME)
MARCHE Claude's avatar
MARCHE Claude committed
421

MARCHE Claude's avatar
MARCHE Claude committed
422

MARCHE Claude's avatar
MARCHE Claude committed
423
* DONE simplification de (a && false) ne devrait pas etre false
MARCHE Claude's avatar
MARCHE Claude committed
424

MARCHE Claude's avatar
MARCHE Claude committed
425

MARCHE Claude's avatar
MARCHE Claude committed
426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467
==================== Roadmap for release 0.81 ========================

released on March 25th, 2013

== New Features to announce ==

  o [logic] accept type expressions in clone substitutions
  o [whyml] support for relation chains (e.g., "e1 = e2 < e3")
  * [whyml] every exception raised in a function must be listed
    in as "raises { ... }" clause. A postcondition may be omitted
    and equals to "true" by default.
  * [whyml] if a function definition contains a "writes { ... }"
    clause, then every write effect must be listed. If a function
    definition contains a "reads { ... }" clause, then every read
    _and_ write effect must be listed.
  * [drivers] syntax rules, metas, and preludes are inherited
    through cloning. Keyword "cloned" becomes unnecessary and
    is not accepted anymore.
  o [why3ide] allow several files on the command-line
  o [ocaml API] incompatible changes in Set/Map/Hashtbl modules
  o [ocaml API] examples in the manual extended to API for Why3ml programs
  o [stdlib] fixed inconsistency in map.MapPermut theory
  o [prover] fixed Coq 8.4 support for theory real.Trigonometry
  o [prover] support for Gappa up to 0.16.6
  o [prover] support for Z3 4.2, 4.3.*
  o [prover] support for Alt-Ergo 0.95.1
  o [prover] support for CVC4
  o [prover] support for PVS 6
  o [prover] experimental support for mathematica
  o [prover] experimental support for MathSAT5
  o [examples] several new examples, including solutions to the
    VerifyThis@fm2012 challenges

== TODOs ==

* extraction vers Caml
 - PRIORITAIRE, JCF, ANDREI

* Documentation
 - (CLAUDE) complete api.tex: explain how to build theories


468 469 470
==================== Roadmap for release 0.80 ========================

Change in programs' input syntax deserves incrementing version to 0.80
471

472
scheduled on Oct 2012
473

MARCHE Claude's avatar
MARCHE Claude committed
474 475
== New Features to announce ==

476 477
Programs:
  o new concrete syntax for programs
478
  o new API for programs
479
  o type invariants
480
  o ghost code
481

482
Transformations:
483 484
  o induction (experimental, undocumented)
  o bisection (experimental, undocumented)
485

486
Provers support:
487
  o support for Coq 8.4
488
  o dropped support for Coq 8.2
489
  o support for forthcoming PVS 6.0, including realizations
490
  o support for iProver and Zenon
491

492
Misc:
493
  o improved output of "why3session latex"
MARCHE Claude's avatar
MARCHE Claude committed
494
    (incompatible changes in LaTeX macros)
495
  o [replayer] new option -q for running quietly
496 497 498 499 500
  o a warning is emitted for unused bound logic variables in "forall",
    "exists" and "let"
  o a warning is emitted for any occurrence of a formula of the form
    "exists x, P -> Q". Formulas of this form are usually a user
    mistake. If this is intended, one can write "exists x, not P \/ Q"
501
    instead
MARCHE Claude's avatar
MARCHE Claude committed
502

503
Bug fixes:
504
  o Coq output uses type classes to ensure Why3 types are inhabited
MARCHE Claude's avatar
MARCHE Claude committed
505 506 507 508
  o fixed bug on merging config files which prevented the use
    of Why3 back-end of the Frama-C/Jessie plugin when Coq is
    not installed. (Bug 14672 of the Bug Tracking System)
  o fixed bugs 13503 and 13375 of the Bug Tracking System
MARCHE Claude's avatar
MARCHE Claude committed
509 510 511

== TODOs ==

512
* DONE (JCF) reject global "val"s in typing environment for logic decls.
MARCHE Claude's avatar
MARCHE Claude committed
513

514
* DONE appliquer les changements de syntaxe des programmes dans la doc : aussi bien dans le tutorial que dans la BNF des manpages
515 516


517
* DONE Sortie PVS, avec mecanisme de realization
518

MARCHE Claude's avatar
MARCHE Claude committed
519
* DONE mettre au propre les loc des fichiers de sessions, en particulier
MARCHE Claude's avatar
MARCHE Claude committed
520 521
  les noms de fichiers doivent etre relatifs au fichier de session
  lui-meme. Utiliser Sysutil.relativize_filename a bon escient.
MARCHE Claude's avatar
MARCHE Claude committed
522

523 524
* DONE sessions: mettre la dtd sur le web et changer l'entête des sessions pour qu'elles
   pointent dessus
525 526


527
* DONE (PRIORITAIRE) Coq output
528 529 530 531 532 533
 - corriger l'incoherence, comprendre si on veut vraiment accepter

  function x : 'a
  (cf: en caml cela ne marche pas)
 Solution proposee: utiliser des types classes, en particulier Inhabited

534
* DONE (PRIORITAIRE), JCF et ANDREI, clone de module
535 536 537 538 539 540 541 542 543 544
 - demarche: ecrire une API avec smart constructors garantissant
   le bon typage, et clone sera en premier lieu un de ces constructors
 - cas d'utilisation: range d'entiers de Jessie, Flottants -> double ou single
   containeurs pour Adacore et Claire
 - NON PRIORITAIRE ?
  + regions : strong update
  + ghost code
  + logic symbols used in programs


MARCHE Claude's avatar
MARCHE Claude committed
545 546 547 548 549 550 551 552 553
==================== Roadmap for release 0.73 ========================

== New Features to announce ==

New features:
  o [Why3ml] new construct "abstract e { q }"
  o [Coq output] default tactic is now "intros ..." with a pattern
    that matches the structure of the goal
  o [why3replayer] option -obsolete-only
MARCHE Claude's avatar
MARCHE Claude committed
554
  o co-inductive predicates
MARCHE Claude's avatar
MARCHE Claude committed
555 556
  o new option -e for "why3session latex" allows to specify when to
    split tables in parts
MARCHE Claude's avatar
MARCHE Claude committed
557 558 559 560
  o [Sessions] a small change in the format. This hopefully improves
    the association of old goals and new goals when the input is
    modified.  For compatibility, Why3 is still able to read session
    files in the old format.
561
  o [Provers] support for Z3 4.0
MARCHE Claude's avatar
MARCHE Claude committed
562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581

Bug fix:
  o completed support for the "Out Of Memory" prover result
  o [Coq output] quotes in identifiers remain quotes in Coq
  o workaround for a bug about modulo operator in Alt-Ergo 0.94
  o fixed a consistency issue with set.Fset theory

== TODOs ==

* DONE Ajouter un result de prouveur "outofmemory" analogue a "timeout"

* Why3ML new language constructs
** NOT NEEDED ANYMORE sandbox
** DONE abstract e { q }
** DELAYED contract e { q }

* replayer
** DONE option pour ne rejouer que si obsolete

* Documentation
MARCHE Claude's avatar
MARCHE Claude committed
582
 - DELAYED document co-inductive predicates
MARCHE Claude's avatar
MARCHE Claude committed
583 584
 - DONE (CLAUDE) revoir documentation du smoke detector

585

MARCHE Claude's avatar
MARCHE Claude committed
586 587
==================== Roadmap for release 0.72 ========================

588
== New Features to announce ==
MARCHE Claude's avatar
MARCHE Claude committed
589

590 591 592 593 594 595
* Coq realizations. See manual Chapter xx
* Coq tactic. See manual Chapter xx
* tool why3session, including commands latex, html, stats. See manual Section xx
* tool why3doc. See manual Section xx
* Support for several versions of the same prover, for prover upgrade.
See manual Section xx
MARCHE Claude's avatar
MARCHE Claude committed
596
* Improved IDE:
597
 - left scrollbar, selection of shown or hidden provers, font enlargement
598 599
 - integration of the support for prover upgrade
 - support for selection of alternate editors
600 601
* Complete support for limiting provers' memory usage
* Improved support of Microsoft Windows OS
MARCHE Claude's avatar
MARCHE Claude committed
602 603 604 605 606
* what else ?
* see also the file CHANGES

== TODOs ==

607

608
* DONE bug CVC3 avec la division par 0, cf examples/tests-provers/cvc3.why
MARCHE Claude's avatar
MARCHE Claude committed
609

610 611 612
* DONE Document the Coq plugin and tactic
** DONE option timelimit <n>
** DONE renommer "coq-plugin" en "coq-tactic"
613

614
* DONE (JCF, ANDREI) add all examples from the VSTTE 2012 competition
MARCHE Claude's avatar
MARCHE Claude committed
615

616
* DONE (CLAUDE) Ajouter page provers sur le site web why3
617
** !TODO! relire
618

MARCHE Claude's avatar
MARCHE Claude committed
619
* Documentation
620

621
 - DONE traiter les \todo :
622

623 624 625
 DONE install.tex:179:% \todo{que devient l'option -to-known-prover de why3session ?
 DONE manpages.tex:790:% \todo{A adapter en fonction de la decision sur l'upgrade de prover}
 DONE manpages.tex:809:\section{The \texttt{why3doc} tool} \todo{Documenter}
626 627


628 629 630
 - (ANDREI) complete technical.tex: section "Drivers of external
   provers"

631
 - DONE (GUILLAUME) Realisations Coq, comment fait l'utilisateur pour faire
632 633 634 635 636 637 638 639
   ses realisations ne pas oublier de dire que les dependances avec le
   .why ou .mlw: ne sera pas vérifié

 - DONE Documenter l'utilisation de plusieurs versions du meme
   prouveur comme CVC3 et Z3

 - DONE (ANDREI) ajouter option a why3config pour ajouter association
   ident-executable
640
   DONE remplacer le ":" par " " (Arg.Tuple)
641

642
 - DONE (CLAUDE) Documenter les popups qui peuvent apparaitre dans why3ide
643 644
   quand les prouveurs ont changé. Et les mettre au point:

645
   . DONE Lors d'un replay, le dialogue "replace proof" apparait un nombre
646 647 648 649
     important de fois, il faut absolument pouvoir interrompre, ou
     donner une reponse qui soit appliquée pour le reste.  (le 3e
     bouton "never replace..." ne semble pas jourer ce role...)

650
   . DONE le dialogue "replace proof" est de toute facon trop large, et les
651 652
   choix possibles sont confus.

653
 - DONE (CLAUDE) meme ordre d'idee: ne pas ecraser "default editor" et
654
   "timelimit"
655
   en fait c'était déjà le cas
656

657
* DONE permettre d'utiliser emacs/proof general a la place de coqide depuis
658
  why3ide
659
*** DONE allow to choose which one the IDE Preferences
660

MARCHE Claude's avatar
MARCHE Claude committed
661
* (CLAUDE) why3session
662
 - DONE passe sur la documentation ecrite par Francois reecrite par Guillaume
663
 - DONE "why3replayer -latex" remplacé par "why3session latex"
664 665
 - DONE "why3html" remplacé par "why3session html"
 - DONE "why3stats" (src/ide/stats.ml) remplacé par "why3session info --stats"
666

667
* (JCF) ameliorer why3doc
668
 - DONE rajouter la production des liens
669
 - DONE produire un index.html
MARCHE Claude's avatar
MARCHE Claude committed
670

671
* DONE provers
672 673 674 675 676 677 678 679
 - DONE (CLAUDE) Ensure that we kill a prover after some time
   (ressurect %T ? with a meaning like twice the value of %t ?),
   because we cannot be sure they always honor their own -timeout
   option.

 - DONE (ANDREI) better use of Alt-Ergo's builtin theories: records,
   enumeration types (Alt-Ergo >= 0.94) => at least two drivers for
   Alt-Ergo, depending on its version number
MARCHE Claude's avatar
MARCHE Claude committed
680

681
* DONE fix bugs and update the BTS
682
 - DONE (CLAUDE) Refreshing the IDE pane for prover output
MARCHE Claude's avatar
MARCHE Claude committed
683

684
* DONE (CLAUDE) IDE:
MARCHE Claude's avatar
MARCHE Claude committed
685
 - DONE enlarge font (menu + shortcut Ctrl-+)
686
 - DONE Ctrl-A to select all rows
MARCHE Claude's avatar
MARCHE Claude committed
687 688 689 690
 - DONE Do not save if not needed
 - DONE ne pas ecrire saving sessions si on ne sauve pas la session
 - DONE add a scrollbar for the left panel

691 692
* DONE (FRANCOIS) move Session module and its dependencies into the
  Why3 library
MARCHE Claude's avatar
MARCHE Claude committed
693 694 695 696 697
 - but avoid duplication with session_ro
 - avoid also duplication of type like prover_data record
 - do not include task and transf in the data type, so that
   one can reload, and redetect provers
 - session + session_ro -> session_data + session_dynamic
MARCHE Claude's avatar
MARCHE Claude committed
698

MARCHE Claude's avatar
MARCHE Claude committed
699
======================= Roadmap for release 0.71 ========================
MARCHE Claude's avatar
MARCHE Claude committed
700

MARCHE Claude's avatar
MARCHE Claude committed
701
* DONE Final preparation:
MARCHE Claude's avatar
MARCHE Claude committed
702 703 704 705 706 707 708 709 710 711 712 713 714 715 716
** put on the web page
*** why3-0.71.tar.gz
*** manual in PDF: check that macro \todo is commented out
    in ./macros.tex
*** API doc in HTML (suggestion: http://why3.lri.fr/api/)
    Note: check that URL of API doc is correct in doc/api.tex line 9.
** What to put in the announcement:
*** traceability from front-ends work
    (see Krakatoa and Jessie of the next release 2.30 of Why2)
*** many new examples in examples/ and examples/programs
*** significantly improved efficiency of WP calculus
*** improved method for matching old and new goals in proof sessions
*** several bug fixes
*** see also the file CHANGES
** The last commit:
717
*** DONE increment the magic number in config
MARCHE Claude's avatar
MARCHE Claude committed
718
*** add a tag to the git repository
719
*** The next commit : increment why3 version
MARCHE Claude's avatar
MARCHE Claude committed
720

721 722 723
* misc
** DONE fix bug with term shapes, not taking triggers into account
** DONE remove prover coq-realize
724

MARCHE Claude's avatar
MARCHE Claude committed
725 726 727 728 729 730 731 732 733 734
* prover support
** DONE test/debug TPTP output, make Vampire work

* IDE:
** saving session
   * DONE add a "cancel" choice in the "ask" window

* DONE replayer: don't replay a goal that has changed, just display as an
  unsuccessful replay

MARCHE Claude's avatar
MARCHE Claude committed
735 736 737
* DONE reload: improve matching of new and old goals by use a kind a distance
  between some notion of shape of a goal

MARCHE Claude's avatar
MARCHE Claude committed
738
=== Roadmap for third release 0.70, july 2011 ========================
739

740 741
* Final preparation: put on the web page
** why3-0.70.tar.gz
742
** DONE manual in PDF: check that macro \todo can be commented out
743
   from ./macros.tex
744 745
** API doc in HTML (suggestion: http://why3.lri.fr/api/)
   Note: check that URL of API doc is correct in doc/api.tex line 9.
MARCHE Claude's avatar
MARCHE Claude committed
746 747 748 749 750 751
** What to put in the annoucement
   - WhyML VC generator to prove programs
   - new tool why3replayer
   - incompatible changes in syntax: function, predicate, and, or
   - session database in XML format instead of sqlite3
   - threads problem in IDE solved (by not using threads anymore)
MARCHE Claude's avatar
MARCHE Claude committed
752
   - IDE: not necessary to exit to change the input file: just use "reload"
753

754
* The last commit (A):
755
  ** DONE increment the magic number in config
756 757
  ** add a tag to the git repository
  ** The next commit : increment de why3 version
758

759 760
* DONE Distribution of examples: we should distribute those who have an xml file
  under git, and distribute the XML and Coq proofs (JC)
MARCHE Claude's avatar
MARCHE Claude committed
761

762 763
* DONE document "Make obsolete" (A+C)

764
* DONE update IDE section of starting.tex (C)
765

766
* DONE update doc for why3replayer
MARCHE Claude's avatar
MARCHE Claude committed
767

MARCHE Claude's avatar
MARCHE Claude committed
768 769 770
* DONE fix bug 12934 : Coq syntax
  https://gforge.inria.fr/tracker/index.php?func=detail&aid=12934&group_id=2990&atid=10293

771
* DONE document new IDE features (C)
MARCHE Claude's avatar
MARCHE Claude committed
772

773 774
* DONE doc: citer l'article Boogie 2011 quelque part

Andrei Paskevich's avatar
Andrei Paskevich committed
775 776 777 778 779
* DONE deplacer le bouton "Cancel" dans le menu "tools",
  le renommer en "make obsolete"

* DONE Check if remark in doc/api.tex line 80 is still valid (A)

780 781
* DONE put an up-to-date use_api.ml in the manual (C)

782 783 784 785 786 787
* DONE enlever les caracteres de tab des sources
  et les caracteres latin1 (A)

* DONE faire tourner headache pour refabriquer les headers (A)
  ** dans gappa.ml : ajouter Guillaume en dessous de l'entete

788 789 790 791
* DONE Rendre optionnel la question "would you like to save the session ?"
   (C) -> 3-state options (Yes/No/ask) dans la config
  + DONE dans le menu "file" : "save session" sans raccourci clavier

792
* DONE desactiver "Save" (et editable=false dans la fenetre)
793

794 795
* DONE mettre "Quit" en dernier (C)

796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815
* DONE checkout frais, compilation (local ou non) et make bench chaque nuit sur moloch
  (?)

* DONE IDE: reload
  (claude)

* DONE BD : se passer de sqlite3
  (Claude)
  Solution: un unique fichier XML, qui est ecrit mais pas
  tres souvent (pas plus d'une fois par seconde)
  ne pas oublier neanmoins de mettre une action dans Timeout
  qui enregistre au bout d'un moment
  pb: n'est pas independant de l'IDE, peut-on faire un module
  independant de l'IDE ? qui serait utilisé par why3bench ?

* DONE IDE: avoir des transformations non codees en dur
  (Claude d'abord)

* DONE Bug des md5
  (Claude. pas reproductible ? Pb de duplication des buts ?)
MARCHE Claude's avatar
MARCHE Claude committed
816

817
* DONE IDE: no more threads
MARCHE Claude's avatar
MARCHE Claude committed
818

819 820 821 822 823
* DONE proof replay
  ** DONE IDE: replay all obsolete but previously successful proofs
  ** DONE in why3replay in whybench
  ** DONE add replay of existing proofs in "make bench" to detect regression
  ** DONE add automatic recompilation, install and bench every night on moloch
824

825
* DONE IDE: implement "inline" (use transformation inline_goal)
826
  ** problem 1: detect that transformation did nothing
MARCHE Claude's avatar
MARCHE Claude committed
827
  ** DONE problem 2: reimport from db does apply inline correctly
MARCHE Claude's avatar
MARCHE Claude committed
828

829 830
* DONE IDE: debug "remove" et "clean" qui provoquent des segfaults !!

831 832
* IDE: ajouter "invalid" comme cas de resultats de preuve
  (utiliser call_provers.proof_result dans gmain)
833
  DONE
MARCHE Claude's avatar
MARCHE Claude committed
834 835


836
=== Roadmap for second release 0.64 ========================================
837

838 839
* fix local installation
  ** fix local executables names (DONE)
840

841 842 843 844 845 846 847
* fix problems with .why.conf (DONE)
  ** if we distribute the current state, users who already have a ~/.why.conf
     will get a error message because of missing loadpath to modules
     Done? - the magic number will force to not use the old ~/.why.conf of
             the user
  ** generally speaking, we should rethink the design of that .why.conf: avoid
     absolute paths,
848
     Partially done - libdir, datadir, loadpath, ... are not written in
849
     why.conf if they correspond to the default value.
850 851


852
* IDE, file names in DB: use only file names relative to the db file
853
  DONE
854

855
=== Roadmap for December 2010 ================================================
MARCHE Claude's avatar
MARCHE Claude committed
856 857 858

== Documentation ==

MARCHE Claude's avatar
MARCHE Claude committed
859
1 Introduction (done: suppressed)
860
2 getting started (Claude: done, to be read by others)
861
3 Syntax, tutorial (done: Andrei)
862
4 tutorial for API:
863
** build a task (Claude: done, to be read by others)
MARCHE Claude's avatar
MARCHE Claude committed
864 865 866 867 868
** call a prover (Claude: done, to be read by others)
** apply a transformation (a completer plus tard)
** develop a new transformation (a completer plus tard)
5 syntax reference (a completer plus tard par typage et semantique)
6 Standard lib of theories:
869
  (Claude: done, although quite sparse, to be read by others)
870
7 Manpages
871 872
7.1 Compilation, Installation (done)
7.2 external provers (done)
MARCHE Claude's avatar
MARCHE Claude committed
873 874 875 876
7.3 why3config (done)
7.4 why3 (done)
7.5 whyml (done)
7.6 IDE (done)
877
7.7 whybench (done, to be read by others)
MARCHE Claude's avatar
MARCHE Claude committed
878 879 880
7.8 why.conf (done)
7.9 drivers (to be done later)
7.10 transformations (done)
881
8 API: Andrei + Francois
882
  (should we really add that in the doc ?)
MARCHE Claude's avatar
MARCHE Claude committed
883 884
** on remplace par la version HTML a mettre sur la forge INRIA (Francois)
** TODO: mettre un titre au HTML engendré
MARCHE Claude's avatar
MARCHE Claude committed
885 886 887 888 889

== IDE ==

(Claude)

MARCHE Claude's avatar
MARCHE Claude committed
890 891 892 893
* database, session save and restore (done)
* Coq output (done)
* Gappa output (done)
* debug hide goals (TODO)
894
* add "context" options (partially done)
MARCHE Claude's avatar
MARCHE Claude committed
895
** semantics not clear, should be clarified, documented and
896
   implemented accordingly
MARCHE Claude's avatar
MARCHE Claude committed
897
* add transf "inline goal" (to be done later)
898
* add button "remove"
MARCHE Claude's avatar
MARCHE Claude committed
899 900 901
** removing goals: done
** removing transformation: done, but subgoals stay in db (not critical)
* add button "replay" (to be done later)
902
** semantics: replay obsolete proofs
MARCHE Claude's avatar
MARCHE Claude committed
903 904 905

== Misc ==

MARCHE Claude's avatar
MARCHE Claude committed
906 907 908
* README (done)
* INSTALL (done)
* LICENSE (done)
MARCHE Claude's avatar
MARCHE Claude committed
909
* OCAML-LICENSE (done)
MARCHE Claude's avatar
MARCHE Claude committed
910

MARCHE Claude's avatar
MARCHE Claude committed
911 912
* debuguer cpulimit pour gappa (pb de return code)

MARCHE Claude's avatar
MARCHE Claude committed
913
* option --version a tous les executables (done, except IDE: bug 11604)
914
** + affichage dans l'IDE (done)
MARCHE Claude's avatar
MARCHE Claude committed
915
* Builtin arrays in provers (done)
MARCHE Claude's avatar
MARCHE Claude committed
916
* make install (done)
MARCHE Claude's avatar
MARCHE Claude committed
917
* make distrib (done)
MARCHE Claude's avatar
MARCHE Claude committed
918
* "make -j" (done)
919
* META for ocamlfind (done)
MARCHE Claude's avatar
MARCHE Claude committed
920
* headers (done)
MARCHE Claude's avatar
MARCHE Claude committed
921

922 923 924 925 926 927
== Mails announcement ==

----------------------- Why-discuss list ---------------------------

We are happy to announce the first public release of Why3, also known
as the Why platform next generation. It is a new project, independent
MARCHE Claude's avatar
MARCHE Claude committed
928
from Why versions 2.xx.
Andrei Paskevich's avatar
Andrei Paskevich committed
929 930

The home web page of Why3 is http://why3.gforge.inria.fr, where you
931
can find the source distribution and the manual. See the manual for
932 933
installation instructions and contact information.

MARCHE Claude's avatar
MARCHE Claude committed
934
The main new features with respect to Why 2.xx are the following.
935 936 937 938

1) Completely redesigned input syntax for logic declarations

* new syntax for terms and formulas
Andrei Paskevich's avatar
Andrei Paskevich committed
939 940 941
* enumerated and algebraic data types, pattern matching
* recursive definitions of logic functions and predicates,
  with termination checking
942
* inductive definitions of predicates
Andrei Paskevich's avatar
Andrei Paskevich committed
943 944
* declarations are structured in components called "theories",
  which can be reused and instantiated
945 946 947 948 949 950 951

2) More generic handling of goals and lemmas to prove

* concept of proof task
* generic concept of task transformation
* generic approach for communicating with external provers

Andrei Paskevich's avatar
Andrei Paskevich committed
952
3) Source code organized as a library with a documented API,
MARCHE Claude's avatar
MARCHE Claude committed
953
to allow access to Why3 features programmatically.
954 955 956 957 958 959

4) GUI with new features w.r.t. the former GWhy

* session save and restore
* prover calls in parallel
* splitting, and more generally applying task transformations, on demand
960
* ability to edit proofs for interactive provers (Coq only for the moment)
961 962 963 964 965 966 967 968
  on any subtask

5) Extensible architecture via plugins

* users can define new transformations
* users can add connections to additional provers


Andrei Paskevich's avatar
Andrei Paskevich committed
969
Beware that some Why features are not yet available in Why3:
970 971

* There is a VC generator distributed in Why3 in an experimental stage
Andrei Paskevich's avatar
Andrei Paskevich committed
972 973
  and intentionally undocumented in the current documentation (the input
  syntax for programs may change a lot in the future).
974 975 976 977

* There is no front-end for other languages like C or Java. However,
  the last release Why 2.28 is able to use Why3 as a back-end

MARCHE Claude's avatar
MARCHE Claude committed
978 979 980 981 982 983 984 985
Notice that Why3 is expected to replace Why2 in the future. As such,
it is the project where improvements and new features will be
implemented. As this is the first public release of Why3, it is likely
that missing features, and possibly bugs, will raise soon. Please
report those in the bug tracker, we will do our best to fix them and
provide new releases in a short time.


986 987 988 989 990 991 992 993



--------------------- Frama-C list ----------------------------


The first release of Why3, also known as the Why platform next
generation, is publicly available. Why3 is a new project, independent
994
from Why. The detailed announcement is attached below.
995 996 997 998 999 1000 1001 1002

The Jessie plugin of the Why release 2.28 has the ability to use Why3
as back-end. You must install both Why 2.28 and Why3 for this to work.

Using the Why3 GUI on a C file is done as follows
  frama-c -jessie -jessie-atp why3ide <file>.c
(You can also run it in batch mode using
  frama-c -jessie -jessie-atp why3 <file>.c
1003
and process the generated Why3 file "<file>.jessie/why/<file>_why3.why"
1004 1005 1006 1007 1008 1009 1010
with Why3 batch tools).

The main new features of interest in the GUI are

* new provers available
* calling provers in parallel
* splitting on demand
1011
* ability to call Coq on a given VC to provide a proof script. Incidentally,
1012
  this feature can be used to analyse the VC to understand why it is
1013
  not proved automatically.
1014 1015 1016 1017
* proof session saved and restored at startup

Any question, remark or bug report concerning only Why3 should be done
using the Why3 public discussion list and bug tracker.