

@2274

9 years 
sacerdot 
Dead code commented out and code out of place moved to Test.ma.



@2273

9 years 
sacerdot 
1. lemmas moved from all files to Test.ma
2. most of the lemmas in …



@2272

9 years 
mulligan 
Changed proof strategy for main lemma after noticed that the current …



@2270

9 years 
mulligan 
Bug spotted and fixed in write_at_stack_pointer



@2269

9 years 
sacerdot 
Proof completely repaired up to …



@2268

9 years 
mulligan 
Bug spotted in instruction_size (lookup_datalabels cannot just be a …



@2267

9 years 
sacerdot 
Call is now proved using the new strategy.



@2266

9 years 
sacerdot 
All daemons closed in Jmp case.



@2265

9 years 
sacerdot 
Commented out code removed.



@2264

9 years 
sacerdot 
1) Major change: we now always use the efficient way of resolving …



@2262

9 years 
mulligan 
Changes from today.



@2261

9 years 
mulligan 
Resolved conflict



@2260

9 years 
sacerdot 
Now we use the efficient lookup_address.



@2259

9 years 
mulligan 
For Claudio



@2258

9 years 
sacerdot 
1. lemma generalized
2. automation replaced with expansion to make …



@2257

9 years 
mulligan 
Daemon in SETB case closed.



@2256

9 years 
mulligan 
MOV and MOVX cases complete



@2248

9 years 
sacerdot 
Final changes. All daemons removed, but the real one (open goal).



@2247

9 years 
mulligan 
Work on the MOV instruction from today and bug fixes in set_arg_1.



@2246

9 years 
sacerdot 
Final technical lemma streamlined. Maybe it can be streamlined even more.



@2245

9 years 
sacerdot 
Temporary commit to have a backtracking point. Yes, I know this breaks …



@2244

9 years 
sacerdot 
Technical lemma used.



@2243

9 years 
sacerdot 
One more lemma streamlined, one to go + one to be completed.



@2242

9 years 
sacerdot 
jump_expansion_step3 streamlined



@2241

9 years 
boender 
 merged changes by Claudio



@2240

9 years 
sacerdot 
All "interesting" technical lemmas singled out, proofs to be uncommented.



@2239

9 years 
sacerdot 
One more lemma polished.



@2238

9 years 
sacerdot 
Taken out lemma integrated.



@2237

9 years 
sacerdot 
Even shorter version.



@2236

9 years 
sacerdot 
One subproof made shorter.



@2235

9 years 
sacerdot 
Towards smaller proofs.



@2230

9 years 
sacerdot 
Glue proof maximally simplified or sort of.



@2229

9 years 
sacerdot 
More cleaning up, ready for more aggressive factorization.



@2228

9 years 
sacerdot 
Further proof reduction.



@2225

9 years 
sacerdot 
Minor and major improvements everywhere, shortened proofs.



@2222

9 years 
sacerdot 
More robust to possible future changes to the "in match" semantics …



@2221

9 years 
boender 
 removed cases daemon from PolicyFront?



@2220

9 years 
sacerdot 
Some minor speed up and daemonuncommenting.



@2216

9 years 
mulligan 
More work on the big lemma. Nearly there now.



@2215

9 years 
sacerdot 
Some speed up.



@2213

9 years 
boender 
 removed one cases daemon



@2212

9 years 
mulligan 
More work on the INC case



@2211

9 years 
boender 
 finished proof of sigma specification
 added some stuff to Util, as …



@2210

9 years 
mulligan 
XOR case completely finished.



@2209

9 years 
mulligan 
Closed major daemons in the supporting lemmas of the main lemma.



@2207

9 years 
mulligan 
Improvements and corrections to the main lemma proof in …



@2204

9 years 
sacerdot 
Shuffling around, suggestions, improvements.



@2200

9 years 
tranquil 
* updated joint semantics: generation of linear and graph semantics
* …



@2199

9 years 
sacerdot 
No longer used lemma containing the last daemon removed.
The proof is …



@2198

9 years 
mulligan 
Work from today.



@2197

9 years 
sacerdot 
Main lemmas all closed.



@2196

9 years 
sacerdot 
Speed up using patterns.



@2195

9 years 
mulligan 
Got AssemblyProof?.ma compiling again using daemons.



@2194

9 years 
sacerdot 
1. monotone moved to Assembly
2. some easier daemons, one shows an …



@2193

9 years 
sacerdot 
Statement cleanup.



@2192

9 years 
sacerdot 
Shuffling around.



@2191

9 years 
sacerdot 
Only one daemon left.



@2190

9 years 
sacerdot 
Two daemons left.



@2189

9 years 
sacerdot 
Proof very close to completion.



@2188

9 years 
sacerdot 
1. Policy specification generalized
2. All invariants but the main one …



@2187

9 years 
mulligan 
Work from today on the big proof.



@2183

9 years 
mulligan 
More progress on main lemma proof.



@2181

9 years 
mulligan 
Work from the last week on the new formulation of the main lemma for …



@2177

9 years 
campbell 
Tidy up multiplication.



@2173

9 years 
mulligan 
MUL case of main lemma nearly complete (subject to two small holes …



@2172

9 years 
mulligan 
Moved new versions of get_ / set_arg_* into Status.ma. Commented out …



@2171

9 years 
mulligan 
Finished the commutations



@2170

9 years 
sacerdot 
Splitted from AssemblyProofSplit?.ma



@2168

9 years 
sacerdot 
No more daemons left! All axioms are real axioms.



@2167

9 years 
sacerdot 
Only one daemon left.



@2166

9 years 
sacerdot 
1. less daemons
2. more easily usable statement



@2165

9 years 
sacerdot 
Only three daemons left.



@2164

9 years 
sacerdot 
More steady progress.



@2163

9 years 
sacerdot 
Steady progress.



@2161

9 years 
sacerdot 
Most of the old proof restored.



@2160

9 years 
mulligan 
Added a new scratch file Test.ma for working on lemmas that are needed …



@2159

9 years 
sacerdot 
One daemon left, back to original proof.



@2158

9 years 
sacerdot 
One less daemon.



@2157

9 years 
sacerdot 
Anticipating a proof needed before.



@2156

9 years 
sacerdot 
One more invariant, one less daemon.



@2154

9 years 
sacerdot 
Code shuffled around.



@2153

9 years 
boender 
 updated the proof some more



@2152

9 years 
boender 
 this should compile



@2151

9 years 
sacerdot 
1. Lemmas from AssemblyProof? anticipated to Assembly.ma
2. Jaap's …



@2149

9 years 
sacerdot 
Code shuffling to proper places.



@2148

9 years 
sacerdot 
1. specification made more userfriendly for AssemblyProof?
2. no more …



@2147

9 years 
sacerdot 
Theorem closed (up to one more lemma on overflow), but new proof …



@2146

9 years 
sacerdot 
1. specification fixed again
2. the proof in AssemblyProof? is now …



@2144

9 years 
sacerdot 
1. Policy specification fixed
2. Proof of monotonicity of sigma



@2143

9 years 
mulligan 
Changes to the subaddressing mode elim functions moved into their …



@2142

9 years 
sacerdot 
Down to one daemon that requires one lemma (monotonicity of sigma).



@2141

9 years 
boender 
 committed working version



@2140

9 years 
mulligan 
Done the hardest cases in the main theorem. Just got a few daemons to …



@2139

9 years 
mulligan 
Changes to get the main lemma compiling again. Changes pushed into …



@2138

9 years 
sacerdot 
Invariant exported from proof of assembly_ok.



@2137

9 years 
sacerdot 
Bug fixed in specification.



@2136

9 years 
sacerdot 
…



@2135

9 years 
sacerdot 
One complex daemon changed to two simpler ones.



@2132

9 years 
sacerdot 
Two more daemons closed, one left.



@2131

9 years 
sacerdot 
No more need for functional extensionality.


