

@1668

8 years 
boender 
 split build_maps into build_maps and build_maps_ok
 work with CSC …



@1667

8 years 
sacerdot 
Main lemma for the main_thm of AssemblyProof? redeclared as an axiom …



@1666

8 years 
sacerdot 
PreStatus? datatype change: the code_memory field is not a left …



@1649

8 years 
boender 
 changes to Assembly for integration with Policy and easier use of …



@1616

8 years 
sacerdot 
Partially ported to new Matita syntax.
Because of some changes in …



@1607

8 years 
sacerdot 
Porting to new library.



@1484

8 years 
sacerdot 
…



@1333

8 years 
sacerdot 
Avoid using the name of the construction of jmeq.



@1045

8 years 
mulligan 
resolved conflict in rtlabs



@1043

8 years 
sacerdot 
Axiom commented out.



@1042

8 years 
sacerdot 
Dead code removed.
Slow code uncommented.



@1041

8 years 
sacerdot 
fetch_assembly is still working after bug fix



@1039

8 years 
sacerdot 
fetch_assembly_pseudo2 repaired from dependent type madness



@1037

8 years 
sacerdot 
Main theorem: comments are working again.



@1036

8 years 
sacerdot 
…



@1035

8 years 
sacerdot 
Main theorem (broken because of dependent types) almost restored.



@1015

8 years 
sacerdot 
One intermediate version of main_thm0 close to be repaired.



@1014

8 years 
sacerdot 
The main theorem is completely broken (again).



@998

8 years 
sacerdot 
Half repaired, half broken. Most functions no longer return option …



@994

8 years 
mulligan 
small changes



@993

8 years 
sacerdot 
More Russell everywhere; getting closer to the goal.



@992

8 years 
mulligan 
a few more axioms closed



@991

8 years 
mulligan 
loads of axioms related to equality on instructions closed



@989

8 years 
sacerdot 
Type of build_maps strengthened.



@988

8 years 
sacerdot 
Proof restored.



@987

8 years 
sacerdot 
Real parameterization over the policy.



@985

8 years 
sacerdot 
1) Major refactoring: proofs moved where they should be.
2) New …



@982

8 years 
boender 
 this should work (see previous commit)



@979

8 years 
sacerdot 
…



@977

8 years 
sacerdot 
#$%@#$@#$



@975

8 years 
sacerdot 
…



@972

8 years 
sacerdot 
…



@971

8 years 
sacerdot 
…



@959

8 years 
sacerdot 
…



@951

8 years 
sacerdot 
long call case completed



@950

8 years 
sacerdot 
Horrible subproof finished :)



@949

8 years 
mulligan 
resolved conflict, work from today



@948

8 years 
sacerdot 
Some progress on the Call case.



@946

8 years 
sacerdot 
Jmp case repaired after addition of MAP hypothesis.



@945

8 years 
mulligan 
more small changes to proof of main thrm



@944

8 years 
mulligan 
split definition



@943

8 years 
sacerdot 
…



@942

8 years 
sacerdot 
New invariant for the main theorem.
The new invariant is much more …



@941

8 years 
sacerdot 
Jmp case finished up to arithmetical properties.



@940

8 years 
mulligan 
more changes to inc case of main theorem



@939

8 years 
sacerdot 
Long Jmp case finished.



@938

8 years 
sacerdot 
…



@937

8 years 
mulligan 
resolved conflict in assembly_proof, more lemmas added



@936

8 years 
sacerdot 
Ticks are now handled correctly everywhere and the main proof takes …



@935

8 years 
mulligan 
changes to status and assembly proof



@934

8 years 
sacerdot 
…



@933

8 years 
sacerdot 
New proof strategy.



@932

8 years 
sacerdot 
…



@931

8 years 
sacerdot 
…



@930

8 years 
sacerdot 
Comment, Cost, ADD, ADC cases done.



@929

8 years 
mulligan 
added ticks_of function



@926

8 years 
sacerdot 
Main theorem false because of ticks :(



@925

8 years 
sacerdot 
…



@924

8 years 
sacerdot 
…



@923

8 years 
sacerdot 
Main theorem made nice... but unprovable at the moment.



@921

8 years 
mulligan 
resolved conflict, fixed bugs



@919

8 years 
sacerdot 
Back to a readable statement.



@916

8 years 
sacerdot 
Fix for jump_expansion_policy.



@915

8 years 
mulligan 
finished changes to fetch_assembly_pseudo2



@912

8 years 
sacerdot 
Readable main theorem statement.



@911

8 years 
sacerdot 
Type of set_code_memory generalized.



@909

8 years 
sacerdot 
Back to the main theorem.



@908

8 years 
sacerdot 
Next big lemma proved!



@906

8 years 
sacerdot 
…



@905

8 years 
mulligan 
work from today



@904

8 years 
sacerdot 
Cleanup.



@903

8 years 
sacerdot 
Statement of new main lemma (as axiom).



@902

8 years 
sacerdot 
Cleanup.



@901

8 years 
sacerdot 
Second main lemma proved.



@897

8 years 
sacerdot 
Proof completed, fetch and assembly are mutual inverses.



@896

8 years 
sacerdot 
Proof finished (but ugly) :)



@894

8 years 
sacerdot 
Bug more evident.



@893

8 years 
sacerdot 
Cleanup.



@892

8 years 
sacerdot 
First fundamental lemma almost finished.



@890

8 years 
sacerdot 
Better statement, begin of uniform proof.



@889

8 years 
sacerdot 
Minor changes because of the new, weaker (but much faster) delift.



@885

8 years 
sacerdot 
Proof almost finished, but rewritings are extremely slow.



@884

8 years 
sacerdot 
…



@883

8 years 
sacerdot 
Merged done well.



@877

8 years 
mulligan 
work from today
