From 26e6db7c7cd6ff8b2511a1ca397fc779380569db Mon Sep 17 00:00:00 2001 From: Claude Marche Date: Thu, 6 Oct 2011 08:24:07 +0200 Subject: [PATCH] more on hoare logic example --- examples/hoare_logic/imp.why | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/examples/hoare_logic/imp.why b/examples/hoare_logic/imp.why index 8813e9dec..95ab48f46 100644 --- a/examples/hoare_logic/imp.why +++ b/examples/hoare_logic/imp.why @@ -123,7 +123,7 @@ inductive one_step state stmt state stmt = (* many steps of execution *) inductive many_steps state stmt state stmt = | many_steps_refl: - forall s:state, i:stmt. many_steps s i s i + forall s1 s2:state, i1 i2:stmt. s1=s2 /\ i1=i2 -> many_steps s1 i1 s2 i2 | many_steps_trans: forall s1 s2 s3:state, i1 i2 i3:stmt. one_step s1 i1 s2 i2 -> @@ -131,8 +131,8 @@ inductive one_step state stmt state stmt = many_steps s1 i1 s3 i3 lemma many_steps_seq: - forall s1 s3:state, i1 i2:stmt. - many_steps s1 (Sseq i1 i2) s3 Sskip -> + forall s1 s3:state, i i1 i2 i3:stmt. + many_steps s1 i s3 i3 -> i = Sseq i1 i2 -> i3 = Sskip -> exists s2:state. many_steps s1 i1 s2 Sskip /\ many_steps s2 i2 s3 Sskip @@ -197,3 +197,11 @@ lemma seq_rule: end + +(* +Local Variables: +compile-command: "why3ide imp.why" +End: +*) + + -- 2.24.1