

@1006

9 years 
boender 
 added fold + lemmas on fold



@1005

9 years 
sacerdot 
…



@1004

9 years 
mulligan 
changes to typesetting



@1003

9 years 
sacerdot 
…



@1002

9 years 
sacerdot 
…



@1001

9 years 
mulligan 
reworded intro



@1000

9 years 
sacerdot 
…



@999

9 years 
mulligan 
conclusions



@998

9 years 
sacerdot 
Half repaired, half broken. Most functions no longer return option …



@997

9 years 
mulligan 
minor linguistic polishing



@996

9 years 
sacerdot 
Minor fixes.



@995

9 years 
mulligan 
changes



@994

9 years 
mulligan 
small changes



@993

9 years 
sacerdot 
More Russell everywhere; getting closer to the goal.



@992

9 years 
mulligan 
a few more axioms closed



@991

9 years 
mulligan 
loads of axioms related to equality on instructions closed



@990

9 years 
sacerdot 
Do no longer use the daemon automatically :)



@989

9 years 
sacerdot 
Type of build_maps strengthened.



@988

9 years 
sacerdot 
Proof restored.



@987

9 years 
sacerdot 
Real parameterization over the policy.



@986

9 years 
mulligan 
changes to paper



@985

9 years 
sacerdot 
1) Major refactoring: proofs moved where they should be.
2) New …



@984

9 years 
mulligan 
updates



@983

9 years 
mulligan 
more work added



@982

9 years 
boender 
 this should work (see previous commit)



@981

9 years 
mulligan 
added more, worked on conclusions and related work. need just to …



@980

9 years 
boender 
 displaced some lemmas (jmeq) from AssemblyProof?



@979

9 years 
sacerdot 
…



@977

9 years 
sacerdot 
#$%@#$@#$



@976

9 years 
mulligan 
more changes, rearranged paper to put lemmas/defns in correct order, …



@975

9 years 
sacerdot 
…



@974

9 years 
mulligan 
more added



@973

9 years 
mulligan 
work from yesterday that could not be committed



@972

9 years 
sacerdot 
…



@971

9 years 
sacerdot 
…



@970

9 years 
mulligan 
commit as i need some money for the communists



@969

9 years 
mulligan 
more work on paper, nearly finished policy discussion



@968

9 years 
mulligan 
work on paper



@961

9 years 
campbell 
Use precise bitvector sizes throughout the front end, rather than …



@960

9 years 
mulligan 
more work on paper



@959

9 years 
sacerdot 
…



@958

9 years 
sacerdot 
…



@957

9 years 
sacerdot 
…



@956

9 years 
mulligan 
changes prior to claudio's editing



@955

9 years 
mulligan 
more work on conclusions



@954

9 years 
mulligan 
more changes to introduction



@953

9 years 
mulligan 
more changes, including additions to the bibliography, and tightening …



@952

9 years 
mulligan 
work from yesterday



@951

9 years 
sacerdot 
long call case completed



@950

9 years 
sacerdot 
Horrible subproof finished :)



@949

9 years 
mulligan 
resolved conflict, work from today



@948

9 years 
sacerdot 
Some progress on the Call case.



@947

9 years 
sacerdot 
…



@946

9 years 
sacerdot 
Jmp case repaired after addition of MAP hypothesis.



@945

9 years 
mulligan 
more small changes to proof of main thrm



@944

9 years 
mulligan 
split definition



@943

9 years 
sacerdot 
…



@942

9 years 
sacerdot 
New invariant for the main theorem.
The new invariant is much more …



@941

9 years 
sacerdot 
Jmp case finished up to arithmetical properties.



@940

9 years 
mulligan 
more changes to inc case of main theorem



@939

9 years 
sacerdot 
Long Jmp case finished.



@938

9 years 
sacerdot 
…



@937

9 years 
mulligan 
resolved conflict in assembly_proof, more lemmas added



@936

9 years 
sacerdot 
Ticks are now handled correctly everywhere and the main proof takes …



@935

9 years 
mulligan 
changes to status and assembly proof



@934

9 years 
sacerdot 
…



@933

9 years 
sacerdot 
New proof strategy.



@932

9 years 
sacerdot 
…



@931

9 years 
sacerdot 
…



@930

9 years 
sacerdot 
Comment, Cost, ADD, ADC cases done.



@929

9 years 
mulligan 
added ticks_of function



@928

9 years 
sacerdot 
Technical splitting.



@927

9 years 
mulligan 
changes



@926

9 years 
sacerdot 
Main theorem false because of ticks :(



@925

9 years 
sacerdot 
…



@924

9 years 
sacerdot 
…



@923

9 years 
sacerdot 
Main theorem made nice... but unprovable at the moment.



@922

9 years 
mulligan 
changes to get assemblyproof to compile



@921

9 years 
mulligan 
resolved conflict, fixed bugs



@920

9 years 
boender 
 corrected mov instruction



@919

9 years 
sacerdot 
Back to a readable statement.



@918

9 years 
mulligan 
headers added, etc.



@917

9 years 
mulligan 
outline of cpp paper committed



@916

9 years 
sacerdot 
Fix for jump_expansion_policy.



@915

9 years 
mulligan 
finished changes to fetch_assembly_pseudo2



@914

9 years 
boender 
 complete.



@913

9 years 
boender 
 temporary commit s.t. Assembly compiles



@912

9 years 
sacerdot 
Readable main theorem statement.



@911

9 years 
sacerdot 
Type of set_code_memory generalized.



@910

9 years 
mulligan 
removed bug in execute_1_pseudoinstruction



@909

9 years 
sacerdot 
Back to the main theorem.



@908

9 years 
sacerdot 
Next big lemma proved!



@907

9 years 
boender 
 added quadruples to Util
 start of implementation of new jump …



@906

9 years 
sacerdot 
…



@905

9 years 
mulligan 
work from today



@904

9 years 
sacerdot 
Cleanup.



@903

9 years 
sacerdot 
Statement of new main lemma (as axiom).



@902

9 years 
sacerdot 
Cleanup.



@901

9 years 
sacerdot 
Second main lemma proved.



@900

9 years 
sacerdot 
New implementation of flatten was bugged: fixed.


