Proof Obligation Names (Rodin User Manual): Difference between revisions
imported>Nicolas m Changed theorems for derived predicates |
imported>Mathieu |
||
Line 107: | Line 107: | ||
[[Category:Rodin Platform|Proof Obligation Names]] | [[Category:Rodin Platform|Proof Obligation Names]] | ||
[[Category:User manual|Proof Obligation Names]] | [[Category:User manual|Proof Obligation Names]] | ||
[[Category:Proof]] |
Revision as of 12:55, 12 August 2009
Next is a table describing the names of context proof obligations:
Well-definedness of an Axiom | ![]() |
![]() |
Well-definedness of a Derived Axiom | ![]() |
![]() |
Derived Axiom | ![]() |
![]() |
Next is a table showing the name of machine proof obligations:
Well-definedness of an Invariant | ![]() |
![]() |
Well-definedness of a Derived Invariant | ![]() |
![]() |
Well-definedness of an event Guard | ![]() ![]() |
![]()
|
Well-definedness of an event Action | ![]() ![]() |
![]()
|
Feasibility of a non-det. event Action | ![]() ![]() |
![]()
|
Derived Invariant | ![]() |
![]() |
Invariant Establishment | INIT. / ![]() |
![]() |
Invariant Preservation | ![]() ![]() |
![]()
|
Next are the proof obligations concerned with machine refinements:
Guard Strengthening | ![]() ![]() |
![]()
|
Guard Strengthening (merge) | ![]() |
![]() |
Action Simulation | ![]() ![]() |
![]()
|
Equality of a preserved Variable | ![]() ![]() |
![]()
|
Next are the proof obligations concerned with the new events variant:
Well definedness of Variant | VWD | |
Finiteness for a set Variant | FIN | |
Natural number for a numeric Variant | ![]() |
![]() |
Decreasing of Variant | ![]() |
![]() |
Finally, here are the proof obligations concerned with witnesses:
Well definedness of Witness | ![]() ![]() |
![]()
or a primed variable name |
Feasibility of non-det. Witness | ![]() ![]() |
![]()
or a primed variable name |
Remark: At the moment, the deadlock freeness proof obligation generation is missing. If you need it, you can generate it yourself as a derived invariant saying the the disjunction of the abstract guards imply the disjunction of the concrete guards.