Intrinsic verification syntax #
A definition carrying requires P / ensures b => Q clauses expands to the plain definition plus a
vcgen-proven, @[spec]-tagged specification theorem f.spec. An assert element in a do block
elaborates to the assertion gadget that vcgen proves in the course of that theorem.
The identifiers bound by an explicit (…) binder, used to apply the definition in its spec.
Equations
- One or more equations did not get rendered due to their size.
Instances For
Expand a def carrying requires/ensures clauses into the plain def plus a spec theorem
@[spec] theorem f.spec : ⦃P⦄ f args ⦃fun b => Q⦄ proved by vcgen. A
where finally | spec => steps section supplies grind-mode steps for the verification
conditions finish leaves open.
Equations
- One or more equations did not get rendered due to their size.
Instances For
Equations
- One or more equations did not get rendered due to their size.