At:
vc trace correctness
1
3
2
1
2
2
2
1
1
1
1
1
1
1
2
1
1.
A: ioa{i:l}()
2.
I: Fmla
3.
rho: Decl
4.
de: sig()
5.
e: {[[de]] rho}
6.
te: Label
Label
7.
tc_ioa(A;de)
8.
ioa_mentions_trace(A)
9.
trace_consistent_pred(rho;A.da;te;I)
10.
guarded_trace(A.da;te;I)
11.
tc_pred(I;A.ds; < > ;de)
12.
covers_pred(A;I)
13.
closed_pred(I)
14.
single_valued_decls(A.ds)
15.
s0: [[A]] rho de e.state
16.
x: [[A]] rho de e.state
17.
act: [[A]] rho de e.action
18.
x': [[A]] rho de e.state
19.
l: [[A]] rho de e.action List
20.
[[A]] rho de e.init(s0)
21.
trace_reachable([[A]] rho de e;s0;l;x)
22.
mk_trace_env(l, te) 
trace_env([[A.da]] rho)
23.
t:dec(). t A.da & t.lbl = kind(act)
24.
[[I]] rho A.ds < > de e x 
mk_trace_env(l, te)
25.
[[A]] rho de e.trans(x,act,x')
26.
l (
[[A.da]] rho) List
27.
v:vc{i:l}().
v < *vc_imp(mk_imp(A.init, I))* > 
(a:dec(). a A.da & v = ioa_trans(A;a.lbl;I))
vc_mng(v;rho;A.ds;A.da;de;e;x;mk_trace_env(l, te))
28.
act ([[A.da]] rho)
29.
v:[[dec_lookup(A.da;kind(act))]] rho.
[[I 
action_pre(kind(act);A.pre)]] rho A.ds dec_lookup(A.da;kind(act)) de e x v mk_trace_env(l, te)
[[wp(A;kind(act);I)]] rho A.ds dec_lookup(A.da;kind(act)) de e x v tappend(mk_trace_env(l,
te); < kind(act),v > )
value(act) [[dec_lookup(A.da;kind(act))]] rho
By:
Easy
Generated subgoals:
None
About:
