Improved WD Lemma Generation
From Event-B
This page describes work in progress for optimising well-definedness lemmas generated by the Core Rodin platform.
Motivating examples
With Rodin 1.3, the well-definedness lemma generated for predicate
is
This predicate is sub-optimal as it contains twice the same sub-predicate (
). Consequently, when the prover is fed with the generated lemma, it will have to prove twice the same goal.
The well-definedness lemma generated for predicate
is
This predicate is sub-optimal as the sub-predicate
is subsumed by the sub-predicate
. The prover doesn't need to prove
if
has been proved.
The well-definedness lemma generated for predicate
is
This predicate is sub-optimal as
is unneccesary.