coq-club AT inria.fr
Subject: The Coq mailing list
List archive
- From: Pierre Courtieu <pierre.courtieu AT gmail.com>
- To: Coq Club <coq-club AT inria.fr>
- Subject: Re: [Coq-Club] Axioms reported by coqchk
- Date: Mon, 22 Aug 2016 00:14:17 +0200
- Authentication-results: mail2-smtp-roc.national.inria.fr; spf=None smtp.pra=pierre.courtieu AT gmail.com; spf=Pass smtp.mailfrom=pierre.courtieu AT gmail.com; spf=None smtp.helo=postmaster AT mail-lf0-f44.google.com
- Ironport-phdr: 9a23:m9sHvh9ZfQrSt/9uRHKM819IXTAuvvDOBiVQ1KB92u8cTK2v8tzYMVDF4r011RmSDNydsKoP0rOe8/i5HzdRudDZ6DFKWacPfidNsd8RkQ0kDZzNImzAB9muURYHGt9fXkRu5XCxPBsdMs//Y1rPvi/6tmZKSV3BPAZ4bt74BpTVx5zukbvjotuIO04R3XL9Oeo0d0Tu612J94E/ushLEu4J0BzHo39FKax95FhDAhatpSv6/dq655V58i5d6LoL/s9EVrjmLexjFeQLRBxvCW0+5dXquB/fVkPPoyJECiRF2iZPViPC9VnRWor7+n/xsfM40y2HN+X3S6o1UHKs9fE4ZgXvjXI/NjMj6myfocttlr5arQ/p8wR+zpTObceeM+dkYqLQYPsVQGNAWoBaUCkXUdD0VJcGE+dUZbUQlIL6vVZb6ELmXQQ=
Hi,
Even if all libraries in the world are split properly one still needs
a tool to certify that a development didn't load axioms anyway. Do I
miss something?
P.
2016-08-21 23:21 GMT+02:00 Ade Umut Huxtable
<tkdtezx AT mail.nu>:
> IMHO the standard library is not enough, I think all library developers
> should recognize that their users might want to stay axiom free, and (if at
> all possible) give them the choice to do so.
>
> And now I repeat myself: since lib splitting will probably not happen, a
> tool's usefulnes likely outweights its negative effects.
>
> PS: In my lib for example I hide the axioms making up the IO monad behind a
> module type, I also demonstrate how a domain can do the same in the
> abstract-domain branch. Opened an issue about demonstrating how to actually
> do axiom free development :) https://gitlab.com/mgshrd/beque/issues/18
>
> ---
> jonikelee AT gmail.com
> wrote:
>
> From: Jonathan Leivent
> <jonikelee AT gmail.com>
> To:
> coq-club AT inria.fr
> Subject: Re: [Coq-Club] Axioms reported by coqchk
> Date: Sun, 21 Aug 2016 11:04:32 -0400
>
> To be clear - are people suggesting that if axioms in the standard
> libraries are placed in separate modules, then they don't believe a tool
> that can check the actual dependency of a development on axioms is
> desirable?
>
> This means they are placing considerable trust that a standard library
> module that is not supposed to have an axiom stays that way. They are
> also placing similar trust in any user-developed modules they use.
> Consider how easy it is to create something in Coq that is an axiom
> without using Axiom - one merely needs a top-level Variable, Context, etc.
>
> Such trust in a module's claim not to involve axioms seems to me to not
> be within the spirit of Coq: small kernel, coqchk that doesn't load
> plugins - both of which (especially when compared to what Coq's
> competitors provide) enhance Coq's trustworthiness.
>
> -- Jonathan
>
>
>
>
>
> _____________________________________________________________
> mail now at http://www.mail.nu
- Re: [Coq-Club] Axioms reported by coqchk, (continued)
- Re: [Coq-Club] Axioms reported by coqchk, Jonathan Leivent, 08/20/2016
- Re: [Coq-Club] Axioms reported by coqchk, Jonathan Leivent, 08/20/2016
- Re: [Coq-Club] Axioms reported by coqchk, Jonathan Leivent, 08/20/2016
- Re: [Coq-Club] Axioms reported by coqchk, Jonathan Leivent, 08/20/2016
- RE: [Coq-Club] Axioms reported by coqchk, Soegtrop, Michael, 08/21/2016
- Re: [Coq-Club] Axioms reported by coqchk, Jonathan Leivent, 08/21/2016
- RE: [Coq-Club] Axioms reported by coqchk, Soegtrop, Michael, 08/22/2016
- Re: [Coq-Club] Axioms reported by coqchk, Ralf Jung, 08/22/2016
- Re: [Coq-Club] Axioms reported by coqchk, Jonathan Leivent, 08/20/2016
- Re: [Coq-Club] Axioms reported by coqchk, Jonathan Leivent, 08/20/2016
- Re: [Coq-Club] Axioms reported by coqchk, Pierre Courtieu, 08/22/2016
- Re: [Coq-Club] Axioms reported by coqchk, Chris Dams, 08/22/2016
Archive powered by MHonArc 2.6.18.