This is a listing of all goals defined over the current specification. Axioms are marked yellow, proved theorems green and unproved theorems blue. Click on individual names to get more information on the proof.
| Name: | Sequent: | Type: |
|---|---|---|
| del-sw | ⊦ h -- r -- r0 = h -- r0 -- r | A User Theorem |
| write-del | r ∈ h ⊦ h(r := o) -- r = h -- r | A User Theorem |
| at-write-same-alloc | ⊦ ¬ r ∈ h ∧ r ≠ null → (h ++ r)(r := o)(r) = o | A User Theorem |
| sanity | ⊦ ¬ null ∈ h | An Axiom |
| del-new | ¬ r ∈ h, r ≠ null ⊦ (h ++ r) -- r = h | A User Theorem |
| at-del | r ∈ h ⊦ r ≠ r0 → (h -- r0)(r) = h(r) | An Axiom |
| in-alloc | r0 ≠ null, ¬ r0 ∈ h ⊦ r ∈ h ++ r0 ↔ r = r0 ∨ r ∈ h | An Axiom |
| size-emp | ⊦ # ∅ = 0 | An Axiom |
| at-write-mod-three-other-4 | ⊦ r ∈ h ∧ r ≠ r2 → h(r0 := o0)(r1 := o1)(r := o)(r2 := o2)(r) = o | A User Theorem |
| at-write-mod-three-other-3 | ⊦ r ∈ h ∧ r ≠ r1 ∧ r ≠ r2 → h(r0 := o0)(r := o)(r1 := o1)(r2 := o2)(r) = o | A User Theorem |
| at-write-mod-three-other-2 | ⊦ r ∈ h → h(r0 := o0)(r1 := o1)(r2 := o2)(r := o)(r) = o | A User Theorem |
| overwrite | ⊦ h(r := o0)(r := o1) = h(r := o1) | A User Theorem |
| ext | ⊦ h0 = h1 ↔ (∀ r. (r ∈ h0 ↔ r ∈ h1) ∧ (r ∈ h0 → h0(r) = h1(r))) | An Axiom |
| overwrite-split | ⊦ h(r := o0)(r0 := o1)(r := o2) = h(r0 := o1)(r := o2) | A User Theorem |
| size-zero | ⊦ # h = 0 ↔ h = ∅ | A User Theorem |
| at-write-mod-two-other | ⊦ r ∈ h ∧ r ≠ r0 ∧ r ≠ r1 → h(r := o)(r0 := o0)(r1 := o1)(r) = o | A User Theorem |
| at-write-mod-other | ⊦ r ∈ h ∧ r ≠ r0 → h(r := o)(r0 := o0)(r) = o | A User Theorem |
| write-again | r ∈ h ⊦ h(r) = o → h(r := o) = h | A User Theorem |
| in-del | ⊦ r ∈ h -- r0 ↔ r ≠ r0 ∧ r ∈ h | An Axiom |
| exin | ⊦ r ≠ null → (r ∈ h ↔ (∃ h0, o. h = (h0 ++ r)(r := o) ∧ ¬ r ∈ h0)) | A User Theorem |
| at-write-other | ⊦ r ≠ r0 → h(r0 := o)(r) = h(r) | A User Theorem |
| alloc | alloc#(; h){choose r0 with ¬ r0 ∈ h ∧ r0 ≠ null in {h := h ++ r0; r0} ifnone null} | An Axiom |
| at-write-same | ⊦ r ∈ h → h(r := o)(r) = o | A User Theorem |
| sw-del-add | r ≠ null ∧ ¬ r ∈ h ⊦ r0 ≠ r → ((h -- r0) ++ r)(r := o) = (h ++ r)(r := o) -- r0 | A User Theorem |
| sw-put | r0 ∈ h, r1 ∈ h ⊦ r0 ≠ r1 → h(r0 := o0)(r1 := o1) = h(r1 := o1)(r0 := o0) | A User Theorem |
| sw-del-add-01 | r ≠ null ∧ ¬ r ∈ h ⊦ r0 ∈ h1 ∧ ¬ r ∈ h1 → ((h -- r0) ++ r)(r := o) = (h ++ r)(r := o) -- r0 | A User Theorem |
| sw-alloc-put | ¬ r0 ∈ h, r0 ≠ null, r1 ∈ h ⊦ r0 ≠ r1 → (h ++ r0)(r0 := o0)(r1 := o1) = (h(r1 := o1) ++ r0)(r0 := o0) | A User Theorem |
| del-notin | ⊦ ¬ r ∈ h → h -- r = h | A User Theorem |
| nonnull | ⊦ r ∈ h → r ≠ null | A User Theorem |
| gen | Heap[A] generated by ∅, ++, . ( . := . ); | An Axiom |
| size-write | r ∈ h ⊦ # h(r := o) = # h | An Axiom |
| at-write-mod-three-other | ⊦ r ∈ h ∧ r ≠ r0 ∧ r ≠ r1 ∧ r ≠ r2 → h(r := o)(r0 := o0)(r1 := o1)(r2 := o2)(r) = o | A User Theorem |
| at-write-mod-other-2 | ⊦ r ∈ h → h(r0 := o0)(r := o)(r) = o | A User Theorem |
| sw-delwr | r ∈ h ⊦ r ≠ r0 → h(r := o) -- r0 = (h -- r0)(r := o) | A User Theorem |
| in-write | ⊦ r ∈ h(r0 := o) ↔ r ∈ h | An Axiom |
| at-alloc | r ∈ h, r0 ≠ null, ¬ r0 ∈ h ⊦ (h ++ r0)(r) = h(r) | An Axiom |
| rm-size | ⊦ r ∈ h → #(h -- r) = # h - 1 | A User Theorem |
| overwrite-split2 | ⊦ h(r := o0)(r0 := o1)(r1 := o2)(r := o3) = h(r0 := o1)(r1 := o2)(r := o3) | A User Theorem |
| in-write-strong | r0 ∈ h ⊦ r ∈ h(r0 := o) ↔ r ∈ h | A User Theorem |
| put-eq | ⊦ r ∈ h → (h(r := d) = h(r := d1) ↔ d = d1) | A User Theorem |
| size-alloc | ¬ r ∈ h, r ≠ null ⊦ #(h ++ r) = # h + 1 | An Axiom |
| in-emp | ⊦ ¬ r ∈ ∅ | An Axiom |
| del-twice | ⊦ h -- r -- r = h -- r | A User Theorem |
| at-write | ⊦ h(r0 := o)(r) = (r = r0 ∧ r0 ∈ h ⊃ o;h(r)) | An Axiom |
| at-write-mod-two-other-3 | ⊦ r ∈ h ∧ r ≠ r1 → h(r0 := o0)(r := o)(r1 := o1)(r) = o | A User Theorem |
| structind | hP(∅), ∀ h, r. hP(h) ∧ ¬ r ∈ h ∧ r ≠ null → hP(h ++ r), ∀ h, r, o. hP(h) ∧ r ∈ h → hP(h(r := o)) ⊦ hP(h) | A User Theorem |
| at-write-mod-two-other-2 | ⊦ r ∈ h → h(r0 := o0)(r1 := o1)(r := o)(r) = o | A User Theorem |
| alloc-write | r ≠ null, ¬ r ∈ h, r0 ∈ h ⊦ (h ++ r)(r0 := o0)(r := o) = (h(r0 := o0) ++ r)(r := o) | A User Theorem |