Mercurial > hg > Members > ryokka > HoareLogic
annotate whileTestGears.agda @ 36:320b765a6424
fix loopProof
| author | ryokka |
|---|---|
| date | Fri, 13 Dec 2019 19:45:34 +0900 |
| parents | 7c739972cd26 |
| children | 2db6120a02e6 |
| rev | line source |
|---|---|
| 4 | 1 module whileTestGears where |
| 2 | |
| 3 open import Function | |
| 4 open import Data.Nat | |
| 34 | 5 open import Data.Bool hiding ( _≟_ ; _≤?_ ; _≤_ ; _<_) |
| 4 | 6 open import Level renaming ( suc to succ ; zero to Zero ) |
| 7 open import Relation.Nullary using (¬_; Dec; yes; no) | |
| 8 open import Relation.Binary.PropositionalEquality | |
| 9 | |
| 10 | 10 open import utilities |
| 11 open _/\_ | |
| 4 | 12 |
| 6 | 13 record Env : Set where |
| 14 field | |
| 15 varn : ℕ | |
| 16 vari : ℕ | |
| 17 open Env | |
| 18 | |
| 33 | 19 whileTest : {l : Level} {t : Set l} → (c10 : ℕ) → (Code : Env → t) → t |
| 14 | 20 whileTest c10 next = next (record {varn = c10 ; vari = 0} ) |
| 4 | 21 |
| 22 {-# TERMINATING #-} | |
| 33 | 23 whileLoop : {l : Level} {t : Set l} → Env → (Code : Env → t) → t |
| 4 | 24 whileLoop env next with lt 0 (varn env) |
| 25 whileLoop env next | false = next env | |
| 26 whileLoop env next | true = | |
| 27 whileLoop (record {varn = (varn env) - 1 ; vari = (vari env) + 1}) next | |
| 28 | |
| 29 test1 : Env | |
| 14 | 30 test1 = whileTest 10 (λ env → whileLoop env (λ env1 → env1 )) |
| 4 | 31 |
| 32 | |
| 14 | 33 proof1 : whileTest 10 (λ env → whileLoop env (λ e → (vari e) ≡ 10 )) |
| 4 | 34 proof1 = refl |
| 35 | |
| 16 | 36 -- ↓PostCondition |
| 33 | 37 whileTest' : {l : Level} {t : Set l} → {c10 : ℕ } → (Code : (env : Env) → ((vari env) ≡ 0) /\ ((varn env) ≡ c10) → t) → t |
| 14 | 38 whileTest' {_} {_} {c10} next = next env proof2 |
| 4 | 39 where |
| 40 env : Env | |
| 14 | 41 env = record {vari = 0 ; varn = c10} |
| 16 | 42 proof2 : ((vari env) ≡ 0) /\ ((varn env) ≡ c10) -- PostCondition |
| 4 | 43 proof2 = record {pi1 = refl ; pi2 = refl} |
| 11 | 44 |
| 45 open import Data.Empty | |
| 46 open import Data.Nat.Properties | |
| 47 | |
| 48 | |
| 16 | 49 {-# TERMINATING #-} -- ↓PreCondition(Invaliant) |
| 33 | 50 whileLoop' : {l : Level} {t : Set l} → (env : Env) → {c10 : ℕ } → ((varn env) + (vari env) ≡ c10) → (Code : Env → t) → t |
| 9 | 51 whileLoop' env proof next with ( suc zero ≤? (varn env) ) |
| 52 whileLoop' env proof next | no p = next env | |
| 14 | 53 whileLoop' env {c10} proof next | yes p = whileLoop' env1 (proof3 p ) next |
| 4 | 54 where |
| 55 env1 = record {varn = (varn env) - 1 ; vari = (vari env) + 1} | |
| 11 | 56 1<0 : 1 ≤ zero → ⊥ |
| 57 1<0 () | |
| 14 | 58 proof3 : (suc zero ≤ (varn env)) → varn env1 + vari env1 ≡ c10 |
| 9 | 59 proof3 (s≤s lt) with varn env |
| 11 | 60 proof3 (s≤s z≤n) | zero = ⊥-elim (1<0 p) |
| 61 proof3 (s≤s (z≤n {n'}) ) | suc n = let open ≡-Reasoning in | |
| 62 begin | |
| 63 n' + (vari env + 1) | |
| 64 ≡⟨ cong ( λ z → n' + z ) ( +-sym {vari env} {1} ) ⟩ | |
| 65 n' + (1 + vari env ) | |
| 66 ≡⟨ sym ( +-assoc (n') 1 (vari env) ) ⟩ | |
| 13 | 67 (n' + 1) + vari env |
| 11 | 68 ≡⟨ cong ( λ z → z + vari env ) +1≡suc ⟩ |
| 69 (suc n' ) + vari env | |
| 70 ≡⟨⟩ | |
| 71 varn env + vari env | |
| 72 ≡⟨ proof ⟩ | |
| 14 | 73 c10 |
| 11 | 74 ∎ |
| 6 | 75 |
| 16 | 76 -- Condition to Invaliant |
| 33 | 77 conversion1 : {l : Level} {t : Set l } → (env : Env) → {c10 : ℕ } → ((vari env) ≡ 0) /\ ((varn env) ≡ c10) |
| 78 → (Code : (env1 : Env) → (varn env1 + vari env1 ≡ c10) → t) → t | |
| 14 | 79 conversion1 env {c10} p1 next = next env proof4 |
| 6 | 80 where |
| 14 | 81 proof4 : varn env + vari env ≡ c10 |
| 6 | 82 proof4 = let open ≡-Reasoning in |
| 83 begin | |
| 84 varn env + vari env | |
| 85 ≡⟨ cong ( λ n → n + vari env ) (pi2 p1 ) ⟩ | |
| 14 | 86 c10 + vari env |
| 87 ≡⟨ cong ( λ n → c10 + n ) (pi1 p1 ) ⟩ | |
| 88 c10 + 0 | |
| 89 ≡⟨ +-sym {c10} {0} ⟩ | |
| 90 c10 | |
| 6 | 91 ∎ |
| 4 | 92 |
| 6 | 93 |
| 14 | 94 proofGears : {c10 : ℕ } → Set |
| 95 proofGears {c10} = whileTest' {_} {_} {c10} (λ n p1 → conversion1 n p1 (λ n1 p2 → whileLoop' n1 p2 (λ n2 → ( vari n2 ≡ c10 )))) | |
| 9 | 96 |
| 33 | 97 data whileTestState (c10 : ℕ ) (env : Env ) : Set where |
| 98 error : whileTestState c10 env | |
| 99 state1 : ((vari env) ≡ 0) /\ ((varn env) ≡ c10) → whileTestState c10 env | |
| 100 state2 : (varn env + vari env ≡ c10) → whileTestState c10 env | |
| 101 finstate : ((vari env) ≡ c10 ) → whileTestState c10 env | |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
102 |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
103 record Context : Set where |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
104 field |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
105 c10 : ℕ |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
106 whileDG : Env |
| 33 | 107 whileCond : whileTestState c10 whileDG |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
108 |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
109 open Context |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
110 |
| 33 | 111 whileTestContext : {l : Level} {t : Set l} → Context → (Code : Context → t) → t |
| 112 whileTestContext cxt next = next (record cxt { whileDG = record (whileDG cxt) {varn = c10 cxt ; vari = 0} ; whileCond = {!!} } ) | |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
113 |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
114 {-# TERMINATING #-} |
| 33 | 115 whileLoopContext : {l : Level} {t : Set l} → Context → (Code : Context → t) → t |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
116 whileLoopContext cxt next with lt 0 (varn (whileDG cxt) ) |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
117 whileLoopContext cxt next | false = next cxt |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
118 whileLoopContext cxt next | true = |
| 33 | 119 whileLoopContext (record cxt { whileDG = record {varn = (varn (whileDG cxt)) - 1 ; vari = (vari (whileDG cxt)) + 1} ; whileCond = {!!} } ) next |
| 120 | |
| 121 open import Relation.Nullary | |
| 122 open import Relation.Binary | |
| 123 | |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
124 |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
125 {-# TERMINATING #-} |
| 35 | 126 whileLoopStep : {l : Level} {t : Set l} → Env → (Code : (e : Env ) → 1 ≤ varn e → t) (Code : (e : Env) → 0 ≡ varn e → t) → t |
| 33 | 127 whileLoopStep env next exit with <-cmp 0 (varn env) |
| 128 whileLoopStep env next exit | tri≈ _ eq _ = exit env eq | |
| 35 | 129 whileLoopStep env next exit | tri< gt _ _ = {!!} |
| 34 | 130 where |
| 131 lem : (env : Env) → (1 ≤ varn env) → 1 ≤ (varn env - 1) | |
| 35 | 132 lem env 1<varn = {!!} |
| 133 -- n が 0 の時 は正しい、 n が1の時正しくない | |
| 34 | 134 |
| 135 whileLoopStep env next exit | tri> _ _ c = ⊥-elim (m<n⇒n≢0 {varn env} {0} c refl) -- can't happen | |
| 27 | 136 |
| 33 | 137 whileTestProof : {l : Level} {t : Set l} → Context → (Code : Context → t) → t |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
138 whileTestProof cxt next = next record cxt { whileDG = out ; whileCond = init } where |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
139 out : Env |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
140 out = whileTest (c10 cxt) ( λ e → e ) |
| 33 | 141 init : whileTestState (c10 cxt) out |
| 142 init = state1 record { pi1 = refl ; pi2 = refl } | |
| 27 | 143 |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
144 {-# TERMINATING #-} |
| 33 | 145 whileLoopProof : {l : Level} {t : Set l} → Context → (Code : Context → t) (Code : Context → t) → t |
| 31 | 146 whileLoopProof cxt next exit = whileLoopStep (whileDG cxt) |
| 33 | 147 ( λ env lt → next record cxt { whileDG = env ; whileCond = {!!} } ) |
| 148 ( λ env eq → exit record cxt { whileDG = env ; whileCond = exitCond env eq } ) where | |
| 149 proof5 : (e : Env ) → varn e + vari e ≡ c10 cxt → 0 ≡ varn e → vari e ≡ c10 cxt | |
| 34 | 150 proof5 record { varn = .0 ; vari = vari } refl refl = refl |
| 33 | 151 exitCond : (e : Env ) → 0 ≡ varn e → whileTestState (c10 cxt) e |
| 152 exitCond nenv eq1 with whileCond cxt | inspect whileDG cxt | |
| 153 ... | state2 cond | record { eq = eq2 } = finstate ( proof5 nenv {!!} eq1 ) | |
| 154 ... | _ | _ = error | |
| 27 | 155 |
| 33 | 156 whileConvProof : {l : Level} {t : Set l} → Context → (Code : Context → t) → t |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
157 whileConvProof cxt next = next record cxt { whileCond = postCond } where |
|
32
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
158 proof4 : (e : Env ) → (vari e ≡ 0) /\ (varn e ≡ c10 cxt) → varn e + vari e ≡ c10 cxt |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
159 proof4 env p1 = let open ≡-Reasoning in |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
160 begin |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
161 varn env + vari env |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
162 ≡⟨ cong ( λ n → n + vari env ) (pi2 p1 ) ⟩ |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
163 c10 cxt + vari env |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
164 ≡⟨ cong ( λ n → c10 cxt + n ) (pi1 p1 ) ⟩ |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
165 c10 cxt + 0 |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
166 ≡⟨ +-sym {c10 cxt} {0} ⟩ |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
167 c10 cxt |
|
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
168 ∎ |
| 33 | 169 postCond : whileTestState (c10 cxt) (whileDG cxt) |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
170 postCond with whileCond cxt |
| 33 | 171 ... | state1 cond = state2 (proof4 (whileDG cxt) cond ) |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
172 ... | _ = error |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
173 |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
174 {-# TERMINATING #-} |
| 33 | 175 loop : {l : Level} {t : Set l} → Context → (exit : Context → t) → t |
| 31 | 176 loop cxt exit = whileLoopProof cxt (λ cxt → loop cxt exit ) exit |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
177 |
| 35 | 178 |
| 36 | 179 {-# TERMINATING #-} |
| 180 loopProof : {l : Level} {t : Set l} {P Pre Post Inv : Context → Set } → (c : Context) → (if : (c : Context) → Dec (P c)) | |
| 181 → Pre c → (exit : (c2 : Context) → (P c2) → Post c2 → t) | |
| 182 (f : Context → (exit : (c2 : Context) → (P c2) → Post c2 → t) → t) → t | |
| 183 loopProof {l} {t} {P} {Pre} {Post} {Inv} cxt if pre exit f = lem cxt | |
| 184 where | |
| 185 lem : (c : Context) → t | |
| 186 lem c with if c | |
| 187 lem c | no ¬p = f c exit | |
| 188 lem c | yes p = exit c p {!!} | |
| 189 | |
| 35 | 190 |
| 191 | |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
192 proofWhileGear : (c : ℕ) (cxt : Context) → whileTestProof (record cxt { c10 = c ; whileCond = error }) |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
193 $ λ cxt → whileConvProof cxt |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
194 $ λ cxt → loop cxt |
|
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
195 $ λ cxt → vari (whileDG cxt) ≡ c10 cxt |
|
32
bf7c7bd69e35
conversion. loop needs cases
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
31
diff
changeset
|
196 proofWhileGear c cxt = {!!} |
|
30
dd66b94bf365
loop causes agda inifinite loop
Shinji KONO <kono@ie.u-ryukyu.ac.jp>
parents:
29
diff
changeset
|
197 |
| 35 | 198 |
| 199 CodeGear : {l : Level} {t : Set l} → (cont : Set → t) → (exit : Set → t) → t | |
| 200 CodeGear = {!!} | |
| 201 |