[Imprint][Data Privacy Statement][E-Mail]

Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Theorem base for Specification caterpillar-asm

This is a listing of all goals defined over the current specification. Axioms are marked yellow, proved theorems green and unproved theorems blue. Click on individual names to get more information on the proof.

Name: Sequent: Type:
initcaterpillar_init#(n; ; h, xs, xs_len, ys){h := n, xs := [], xs_len := 0, ys := []} An Axiom
getcaterpillar_get#(h, xs, ys; ; x){x := prefixn(h, xs + ys)} An Axiom
addcaterpillar_add#(a, h; xs, xs_len, ys){if xs_len + 1 = h then {ys := a + xs; xs_len := 0; xs := []} else {xs := a + xs; xs_len := 1 + xs_len}} An Axiom
inv-get# xs < h, # xs = xs_len, # ys = 0 ∨ # ys = h ⊦ ⟪caterpillar_get#(h, xs, ys; ; x)⟫ true A Proof Obligation
inv-add# xs < h, # xs = xs_len, # ys = 0 ∨ # ys = h ⊦ ⟪caterpillar_add#(a, h; xs, xs_len, ys)⟫ (# xs < h ∧ # xs = xs_len ∧ (# ys = 0 ∨ # ys = h)) A Proof Obligation
inv-initn > 0 ⊦ ⟪caterpillar_init#(n; ; h, xs, xs_len, ys)⟫ (# xs < h ∧ # xs = xs_len ∧ (# ys = 0 ∨ # ys = h)) A Proof Obligation