summaryrefslogtreecommitdiff
path: root/contrib/correctness/ProgBool.v
blob: 38448efcc80cabb6fe3fd3c471aa78eb46f51637 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
(************************************************************************)
(*  v      *   The Coq Proof Assistant  /  The Coq Development Team     *)
(* <O___,, * CNRS-Ecole Polytechnique-INRIA Futurs-Universite Paris Sud *)
(*   \VV/  **************************************************************)
(*    //   *      This file is distributed under the terms of the       *)
(*         *       GNU Lesser General Public License Version 2.1        *)
(************************************************************************)

(* Certification of Imperative Programs / Jean-Christophe Filliâtre *)

(* $Id: ProgBool.v 5920 2004-07-16 20:01:26Z herbelin $ *)

Require Import ZArith.
Require Export Bool_nat.
Require Export Sumbool.

Definition annot_bool :
  forall b:bool, {b' : bool | if b' then b = true else b = false}.
Proof.
intro b.
exists b. case b; trivial.
Qed.


(* Logical connectives *)

Definition spec_and (A B C D:Prop) (b:bool) := if b then A /\ C else B \/ D.

Definition prog_bool_and :
  forall Q1 Q2:bool -> Prop,
    sig Q1 ->
    sig Q2 ->
    {b : bool | if b then Q1 true /\ Q2 true else Q1 false \/ Q2 false}.
Proof.
intros Q1 Q2 H1 H2.
elim H1. intro b1. elim H2. intro b2. 
case b1; case b2; intros.
exists true; auto.
exists false; auto. exists false; auto. exists false; auto.
Qed.

Definition spec_or (A B C D:Prop) (b:bool) := if b then A \/ C else B /\ D.

Definition prog_bool_or :
  forall Q1 Q2:bool -> Prop,
    sig Q1 ->
    sig Q2 ->
    {b : bool | if b then Q1 true \/ Q2 true else Q1 false /\ Q2 false}.
Proof.
intros Q1 Q2 H1 H2.
elim H1. intro b1. elim H2. intro b2. 
case b1; case b2; intros.
exists true; auto. exists true; auto. exists true; auto.
exists false; auto.
Qed.

Definition spec_not (A B:Prop) (b:bool) := if b then B else A.

Definition prog_bool_not :
  forall Q:bool -> Prop, sig Q -> {b : bool | if b then Q false else Q true}.
Proof.
intros Q H.
elim H. intro b.
case b; intro.
exists false; auto. exists true; auto.
Qed.