Skip to Content.
Sympa Menu

coq-club - Re: [Coq-Club] VST question about Redblack.elements_relate

coq-club AT inria.fr

Subject: The Coq mailing list

List archive

Re: [Coq-Club] VST question about Redblack.elements_relate


Chronological Thread 
  • From: Andrew Appel <appel AT CS.Princeton.EDU>
  • To: coq-club AT inria.fr
  • Subject: Re: [Coq-Club] VST question about Redblack.elements_relate
  • Date: Thu, 25 Aug 2016 17:32:01 -0400 (EDT)
  • Authentication-results: mail2-smtp-roc.national.inria.fr; spf=None smtp.pra=appel AT CS.Princeton.EDU; spf=Pass smtp.mailfrom=appel AT cs.princeton.edu; spf=None smtp.helo=postmaster AT yellowcard.cs.princeton.edu
  • Ironport-phdr: 9a23:tMjinBF7NOUTQuv2hHqZj51GYnF86YWxBRYc798ds5kLTJ76oM+wAkXT6L1XgUPTWs2DsrQf2rOQ6PGrATBIoc7Y9itdINoUD15NoP5VtjJjKfbNMVf8Iv/uYn5yN+V5f3ghwUuGN1NIEt31fVzYry76xzcTHhLiKVg9fbytScaBx/iwguu14tjYZxhCrDu7e7J7ahus/ivLscxDqI1uMKsugjLRunZMM7Bf3XtlIXq4pFDE/Ma295N/9CIWlt4coZ0TGZ7mdrg1GOQLRA8tNHo4sZXm

I agree, an injectivity axiom for int2Z is necessary.

In this beta release, there are a few places (such as RedBlack.elements_relate)
where I had not yet written the solution.  Indeed, the instruction for
proving this one,
  "its proof should be a simple copy-paste from SearchTree.v,
    with only minor edits."
is an oversimplification.  The proof does follow the corresponding
theorem from SearchTree.v, but it's not quite as simple as a copy-paste.
I apologize for this incompleteness.

I'll fix this in the next release of Verified Functional Algorithms.

REQUEST:  If you're an expert and you're tempted to post your
adjustments and "better solutions" to this mailing list, 
why not instead ask to participate in the subversion repository
where you can work with the authors on this construction?
For Software Foundations, you can request this from Benjamin Pierce.
For VFA, you can request this from Andrew Appel.

Sincerely,

Andrew Appel




Archive powered by MHonArc 2.6.18.

Top of Page