Skip to content
Snippets Groups Projects
proofmode.v 3.96 KiB
Newer Older
Robbert Krebbers's avatar
Robbert Krebbers committed
From iris.proofmode Require Import tactics.
From iris.base_logic.lib Require Import invariants.
Set Default Proof Using "Type".
Robbert Krebbers's avatar
Robbert Krebbers committed

Lemma demo_0 {M : ucmraT} (P Q : uPred M) :
   (P  Q) -∗ ( x, x = 0  x = 1)  (Q  P).
Proof.
  iIntros "#H #H2".
  (* should remove the disjunction "H" *)
  iDestruct "H" as "[?|?]"; last by iLeft.
  (* should keep the disjunction "H" because it is instantiated *)
  iDestruct ("H2" $! 10) as "[%|%]". done. done.
Qed.

Lemma demo_1 (M : ucmraT) (P1 P2 P3 : nat  uPred M) :
Robbert Krebbers's avatar
Robbert Krebbers committed
    x  y 
     (uPred_ownM (a  b) -∗
    ( y1 y2 c, P1 ((x + y1) + y2)  True   uPred_ownM c) -∗
      ( z, P2 z  True  P2 z) -∗
     ( n m : nat, P1 n   ((True  P2 n)   (n = n  P3 n))) -∗
     x = 0   x z,  P3 (x + z)  uPred_ownM b  uPred_ownM (core b)))%I.
Robbert Krebbers's avatar
Robbert Krebbers committed
Proof.
  iIntros (i [|j] a b ?) "!# [Ha Hb] H1 #H2 H3"; setoid_subst.
Robbert Krebbers's avatar
Robbert Krebbers committed
  { iLeft. by iNext. }
  iRight.
  iDestruct "H1" as (z1 z2 c) "(H1&_&#Hc)".
  iRevert (a b) "Ha Hb". iIntros (b a) "Hb {foo} Ha".
  iAssert (uPred_ownM (a  core a)) with "[Ha]" as "[Ha #Hac]".
Robbert Krebbers's avatar
Robbert Krebbers committed
  { by rewrite cmra_core_r. }
Robbert Krebbers's avatar
Robbert Krebbers committed
  iExists (S j + z1), z2.
  iNext.
  iApply ("H3" $! _ 0 with "H1 []").
  - iSplit. done. iApply "H2". iLeft. iApply "H2". by iRight.
Robbert Krebbers's avatar
Robbert Krebbers committed
  - done.
Qed.

Lemma demo_2 (M : ucmraT) (P1 P2 P3 P4 Q : uPred M) (P5 : nat  uPredC M):
  P2  (P3  Q)  True  P1  P2  (P4  ( x:nat, P5 x  P3))  True -∗
    P1 -∗ (True  True) -∗
  (((P2  False  P2  0 = 0)  P3)  Q  P1  True) 
Robbert Krebbers's avatar
Robbert Krebbers committed
Proof.
  (* Intro-patterns do something :) *)
  iIntros "[H2 ([H3 HQ]&?&H1&H2'&foo&_)] ? [??]".
  (* To test destruct: can also be part of the intro-pattern *)
  iDestruct "foo" as "[_ meh]".
  repeat iSplit; [|by iLeft|iIntros "#[]"].
  iFrame "H2".
  (* split takes a list of hypotheses just for the LHS *)
  iSplitL "H3".
  * iFrame "H3". by iRight.
  * iSplitL "HQ". iAssumption. by iSplitL "H1".
Lemma demo_3 (M : ucmraT) (P1 P2 P3 : uPred M) :
  P1  P2  P3 -∗  P1   (P2   x, (P3  x = 0)  P3).
Proof. iIntros "($ & $ & H)". iFrame "H". iNext. by iExists 0. Qed.

Definition foo {M} (P : uPred M) := (P  P)%I.
Definition bar {M} : uPred M := ( P, foo P)%I.

Lemma demo_4 (M : ucmraT) : True -∗ @bar M.
Proof. iIntros. iIntros (P) "HP". done. Qed.
Lemma demo_5 (M : ucmraT) (x y : M) (P : uPred M) :
  ( z, P  z  y) -∗ (P -∗ (x,x)  (y,x)).
  iRewrite (uPred.internal_eq_sym x x with "[#]"); first done.
  iRewrite -("H1" $! _ with "[-]"); first done.
Lemma demo_6 (M : ucmraT) (P Q : uPred M) :
  ( x y z : nat,
    x = plus 0 x  y = 0  z = 0  P   Q  foo (x  x))%I.
  iIntros "#Hfoo **".
Lemma demo_7 (M : ucmraT) (P Q1 Q2 : uPred M) : P  (Q1  Q2) -∗ P  Q1.
Proof. iIntros "[H1 [H2 _]]". by iFrame. Qed.

  Implicit Types E : coPset.
    N  E 
    (True -∗ P -∗ inv N Q -∗ True -∗ R) -∗ P -∗  Q ={E}=∗ R.
    iApply ("H" with "[#] HP >[HQ] >").
    - done.
    - by iApply inv_alloc.

Lemma demo_9 (M : ucmraT) (x y z : M) :
   x  y  z -∗ ( x   x  y  z : uPred M).
Proof. iIntros (Hv) "Hxy". by iFrame (Hv Hv) "Hxy". Qed.
Robbert Krebbers's avatar
Robbert Krebbers committed

Lemma demo_10 (M : ucmraT) (P Q : uPred M) : P -∗ Q -∗ True.
Proof.
  iIntros "HP HQ".
  iAssert True%I as "#_". { by iClear "HP HQ". }
  iAssert True%I with "[HP]" as "#_". { Fail iClear "HQ". by iClear "HP". }
  iAssert True%I as %_. { by iClear "HP HQ". }
  iAssert True%I with "[HP]" as %_. { Fail iClear "HQ". by iClear "HP". }
  done.
Qed.