

@1024

9 years 
mulligan 
tidied explanation of proof



@1023

9 years 
mulligan 
changes to english in matita section, shrunk diagrams in introduction …



@1022

9 years 
sacerdot 
…



@1021

9 years 
mulligan 
tidied english in sect 3



@1020

9 years 
sacerdot 
More on Matita.



@1019

9 years 
sacerdot 
Finished rewriting of Section 3.



@1018

9 years 
mulligan 
tidying



@1017

9 years 
mulligan 
complete, just under 16 pages



@1016

9 years 
sacerdot 
Many fixes to the code snippets.



@1015

9 years 
sacerdot 
One intermediate version of main_thm0 close to be repaired.



@1014

9 years 
sacerdot 
The main theorem is completely broken (again).



@1013

9 years 
mulligan 
more added



@1012

9 years 
mulligan 
just a few things left to change



@1011

9 years 
mulligan 
…



@1010

9 years 
mulligan 
more added, finished up to end of subsect 3.2



@1009

9 years 
mulligan 
added line number counts, etc.



@1008

9 years 
mulligan 
…



@1007

9 years 
mulligan 
added explanation of sdcc



@1006

9 years 
boender 
 added fold + lemmas on fold



@1005

9 years 
sacerdot 
…



@1004

9 years 
mulligan 
changes to typesetting



@1003

9 years 
sacerdot 
…



@1002

9 years 
sacerdot 
…



@1001

9 years 
mulligan 
reworded intro



@1000

9 years 
sacerdot 
…



@999

9 years 
mulligan 
conclusions



@998

9 years 
sacerdot 
Half repaired, half broken. Most functions no longer return option …



@997

9 years 
mulligan 
minor linguistic polishing



@996

9 years 
sacerdot 
Minor fixes.



@995

9 years 
mulligan 
changes



@994

9 years 
mulligan 
small changes



@993

9 years 
sacerdot 
More Russell everywhere; getting closer to the goal.



@992

9 years 
mulligan 
a few more axioms closed



@991

9 years 
mulligan 
loads of axioms related to equality on instructions closed



@990

9 years 
sacerdot 
Do no longer use the daemon automatically :)



@989

9 years 
sacerdot 
Type of build_maps strengthened.



@988

9 years 
sacerdot 
Proof restored.



@987

9 years 
sacerdot 
Real parameterization over the policy.



@986

9 years 
mulligan 
changes to paper



@985

9 years 
sacerdot 
1) Major refactoring: proofs moved where they should be.
2) New …



@984

9 years 
mulligan 
updates



@983

9 years 
mulligan 
more work added



@982

9 years 
boender 
 this should work (see previous commit)



@981

9 years 
mulligan 
added more, worked on conclusions and related work. need just to …



@980

9 years 
boender 
 displaced some lemmas (jmeq) from AssemblyProof?



@979

9 years 
sacerdot 
…



@978

9 years 
campbell 
Update remaining Clight examples.



@977

9 years 
sacerdot 
#$%@#$@#$



@976

9 years 
mulligan 
more changes, rearranged paper to put lemmas/defns in correct order, …



@975

9 years 
sacerdot 
…



@974

9 years 
mulligan 
more added



@973

9 years 
mulligan 
work from yesterday that could not be committed



@972

9 years 
sacerdot 
…



@971

9 years 
sacerdot 
…



@970

9 years 
mulligan 
commit as i need some money for the communists



@969

9 years 
mulligan 
more work on paper, nearly finished policy discussion



@968

9 years 
mulligan 
work on paper



@967

9 years 
campbell 
Update RTLabs pretty printer and examples.



@966

9 years 
campbell 
Update Cminor pretty printer and some examples.



@965

9 years 
campbell 
Update some Clight examples.



@964

9 years 
campbell 
Rest of cast fix.



@963

9 years 
campbell 
Extra debugging aid for animation of semantics.



@962

9 years 
campbell 
Casts should use source type's signedness, not the target's.



@961

9 years 
campbell 
Use precise bitvector sizes throughout the front end, rather than …



@960

9 years 
mulligan 
more work on paper



@959

9 years 
sacerdot 
…



@958

9 years 
sacerdot 
…



@957

9 years 
sacerdot 
…



@956

9 years 
mulligan 
changes prior to claudio's editing



@955

9 years 
mulligan 
more work on conclusions



@954

9 years 
mulligan 
more changes to introduction



@953

9 years 
mulligan 
more changes, including additions to the bibliography, and tightening …



@952

9 years 
mulligan 
work from yesterday



@951

9 years 
sacerdot 
long call case completed



@950

9 years 
sacerdot 
Horrible subproof finished :)



@949

9 years 
mulligan 
resolved conflict, work from today



@948

9 years 
sacerdot 
Some progress on the Call case.



@947

9 years 
sacerdot 
…



@946

9 years 
sacerdot 
Jmp case repaired after addition of MAP hypothesis.



@945

9 years 
mulligan 
more small changes to proof of main thrm



@944

9 years 
mulligan 
split definition



@943

9 years 
sacerdot 
…



@942

9 years 
sacerdot 
New invariant for the main theorem.
The new invariant is much more …



@941

9 years 
sacerdot 
Jmp case finished up to arithmetical properties.



@940

9 years 
mulligan 
more changes to inc case of main theorem



@939

9 years 
sacerdot 
Long Jmp case finished.



@938

9 years 
sacerdot 
…



@937

9 years 
mulligan 
resolved conflict in assembly_proof, more lemmas added



@936

9 years 
sacerdot 
Ticks are now handled correctly everywhere and the main proof takes …



@935

9 years 
mulligan 
changes to status and assembly proof



@934

9 years 
sacerdot 
…



@933

9 years 
sacerdot 
New proof strategy.



@932

9 years 
sacerdot 
…



@931

9 years 
sacerdot 
…



@930

9 years 
sacerdot 
Comment, Cost, ADD, ADC cases done.



@929

9 years 
mulligan 
added ticks_of function



@928

9 years 
sacerdot 
Technical splitting.



@927

9 years 
mulligan 
changes



@926

9 years 
sacerdot 
Main theorem false because of ticks :(



@925

9 years 
sacerdot 
…


