Open
Conversation
Add the data structures and resource algebras needed for invariant mask reasoning in the base logic (wsat, fancy updates). Includes CoPset/GSet types with set operations, CoPsetDisj/GSetDisj disjoint-union CMRAs, hierarchical namespaces with nclose, and PORTING.md updates.
Add `big_sepL` (list) and `big_sepM` (map) iterated separating conjunction, specialized from the algebra-level big ops to the BI separation connective. Includes monoid instance for sep/emp, computation rules, structural lemmas (mono, app, sep, insert, delete, lookup_acc, later, singleton, union), iprop notation, and root imports.
Add Auth resource algebra built on the view construction, including: - authViewRel and IsViewRel instance - Auth type with ● (authoritative) and ◯ (fragment) notation - Validity, inclusion, and injectivity lemmas - Frame-preserving updates: auth_update, auth_update_alloc, auth_update_dealloc, auth_update_auth_persist, auth_local_update - AuthURF/AuthRF functors with URFunctor/RFunctor instances - View, Heap, and HeapView functor additions - CMRA infrastructure extensions (opM lemmas, validN helpers) Based on upstream PR leanprover-community#134 (ahuoguo/AuthCmra).
Stub file for `iris/base_logic/lib/wsat.v` with sorry'd definitions and theorems: WsatGS, ownI, ownE, ownD, wsat, and all key lemmas (open/close, allocation, disjointness).
Implement all definitions and theorems for wsat.v: WsatGS, ownI, ownE, ownD, wsat, open/close lemmas, allocation, and initial world.
Stub file for `iris/base_logic/lib/fancy_updates.v` with sorry'd definitions and theorems: uPred_fupd, FUpd instance, mask intro, mono, trans, frame, bupd lifting, plain interaction, and soundness.
Implement all definitions and theorems for fancy_updates.v: uPred_fupd, FUpd instance, mask intro/mono/trans/frame, bupd lifting, plain interaction, and soundness. ProofMode instances deferred.
Stub file for `iris/base_logic/lib/invariants.v` with sorry'd definitions and theorems: own_inv, inv, persistent, alloc, alloc_open, acc, acc_timeless, alter, iff.
Stub files for Language interface and WeakestPre with sorry'd proofs: - Language.lean: Language structure, LanguageMixin, LanguageCtx, Atomic, Stuckness, reducible/irreducible/stuck, PureStep/PureExec, Step/cfg - WeakestPre.lean: IrisGS class, wp_pre, wp fixpoint, wp_unfold, wp_value_fupd, wp_strong_mono, fupd_wp, wp_fupd, wp_bind, wp_bind_inv, wp_mono, wp_frame_l/r, wp_wand, wp_atomic
Fill in all sorry'd proofs for Language and WeakestPre: - Language.lean: LanguageMixin, LanguageCtx, Atomic, PureStep/PureExec, IntoVal/AsVal, reducible/irreducible/stuck lemmas, fill lemmas - WeakestPre.lean: IrisGS class, wp fixpoint via contractive iteration, wp_unfold, wp_value_fupd, wp_strong_mono, fupd_wp, wp_fupd, wp_bind, wp_bind_inv, wp_mono, wp_frame_l/r, wp_wand, wp_atomic Also includes minor fixes to BigOp, FancyUpdates, Wsat, Invariants, and CancelableInvariants discovered during integration.
Stub file for EctxLanguage with sorry'd proofs: - EctxLanguageMixin, EctxLanguage structures - ectx_lang: construct Language from EctxLanguage - ectx_prim_step inductive (decompose into context + base redex) - base_reducible, base_irreducible, base_stuck predicates - sub_redexes_are_values, PureBaseStep - 22 sorry'd theorems: fill lemmas, base_redex_unique, ectx_language_atomic, ectx_lang_ctx, pure_base_step_pure_step
Fill in all sorry'd proofs for EctxLanguage and add missing items: - base_atomic definition, ectx_step', fill_reducible_no_obs, base_prim_reducible_no_obs, base_prim_fill_reducible_no_obs - All 22+ theorems fully proved, 0 sorries
Stub files for WP lifting lemmas with sorry'd proofs: - Lifting.lean: wp_lift_step_fupd, wp_lift_step, wp_lift_stuck, wp_lift_pure_step_no_fork, wp_lift_atomic_step_fupd, wp_lift_atomic_step, wp_lift_pure_det_step_no_fork, wp_lift_pure_stuck - EctxLifting.lean: wp_lift_base_step_fupd, wp_lift_base_step, wp_lift_base_stuck, wp_lift_pure_base_stuck, wp_lift_atomic_base_step_fupd, wp_lift_atomic_base_step, wp_lift_atomic_base_step_no_fork_fupd, wp_lift_atomic_base_step_no_fork, wp_lift_pure_det_base_step_no_fork, wp_lift_pure_det_base_step_no_fork'
Fill in all sorry'd proofs for Lifting and EctxLifting: - Lifting.lean: wp_lift_step_fupd, wp_lift_step, wp_lift_stuck, wp_lift_pure_step_no_fork, wp_lift_atomic_step_fupd, wp_lift_atomic_step, wp_lift_pure_det_step_no_fork, wp_lift_pure_stuck - EctxLifting.lean: all 10 base-step lifting lemmas fully proved 0 sorries across both files.
Break the monolithic Adequacy.lean into focused submodules: - ThreadPool: thread pool definitions and operations - WptpHelpersA/B/C: wptp helper lemmas - FUpd: fancy update lemmas - WpStep: single-step WP preservation - WptpStep: thread pool step preservation - Preservation: n-step preservation theorem - Adequate: adequacy record and basic lemmas - StrongAdequacy: strong adequacy theorem - SimplifiedAdequacy: simplified adequacy interface - Invariance: state interpretation invariance
Add explicit BIFUpdate/BIFUpdatePlainly instances scoped to WsatGS W, fix step_fupdN_plain and soundness lemmas to resolve world mismatches, and simplify preservation/strong adequacy helpers.
Wire up strong adequacy, simplified adequacy, invariance, and progress theorems. Add `omit` annotations across all adequacy files to suppress unused section variable warnings for `DecidableEq Positive`, `FiniteMapLaws Positive M`, and `IrisGS` instances. Remove unused simp arguments. Build produces zero errors and zero warnings.
Stub definitions and theorems for ghost_map.v and gen_heap.v with sorry proofs. GhostMap provides authoritative + fragment ownership for ghost maps; GenHeap provides the language-level points-to connective and meta data mechanism for physical heaps.
GhostMap.lean: full ghost map library on HeapView CMRA with auth/elem definitions, validity, agreement, persistence, lookup, insert, delete, update, and allocation. GenHeap.lean: thin wrapper over GhostMap with GenHeapGS singleton typeclass. Meta-data infrastructure omitted.
SavedProp.lean: generic saved_anything_own layer with saved_prop_own specialization. Stubs for alloc, agree, persist, update. GhostVar.lean: ghost_var predicate on DFrac × Agree carrier. Stubs for alloc, agree, update, update_2, persist. All theorems sorry'd pending dfrac_agree algebra infrastructure.
GhostVar.lean: All proofs completed (0 sorry). Implements ghost_var_persistent, ghost_var_alloc, ghost_var_valid_2, ghost_var_agree, ghost_var_update, ghost_var_update_2, ghost_var_persist using DFrac×Agree product CMRA. SavedProp.lean: 9 of 11 theorems proved (2 sorry). Agreement theorems (saved_anything_agree, saved_prop_agree) blocked on internal equality infrastructure not yet ported from Coq.
Port minimal internal equality infrastructure (`UPred.eq` bridge lemmas) and prove `saved_anything_agree` and `saved_prop_agree` — the last two sorries in SavedProp.lean. Agreement conclusions use `UPred.eq` (step- indexed internal equality) rather than `pure` equality, matching Coq's `internal_eq` semantics.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Port of
iris/base_logic/lib/saved_prop.vandiris/base_logic/lib/ghost_var.v.saved_prop_own,saved_prop_alloc,saved_prop_agree. Agreement theorems useUPred.eq(step-indexed internal equality) with bridge infrastructure inInstances/UPred/InternalEq.lean.ghost_var_alloc,ghost_var_agree,ghost_var_update,ghost_var_persist.0 sorries.
Independent — no dependencies beyond already-ported agreement and exclusive RAs.