

@2015

9 years 
mulligan 
Changes following a conversation with Jaap: as it stands computation …



@2014

9 years 
mulligan 
Fixed problem in James' email message.



@2011

9 years 
garnier 
Minor cleanup.



@2010

9 years 
campbell 
Make globalenvs use proper maps.



@2009

9 years 
garnier 
Proof of simulation completed for singestep executions.



@2008

9 years 
boender 
 substantial closing of holes in proof



@2006

9 years 
boender 
 added alias for bitvector zero
 changed extralib bounded …



@2005

9 years 
boender 
 minor changes to make things compile with a clean checkout



@2004

9 years 
campbell 
Minor edits from discussion.



@2003

9 years 
campbell 
Some discussion of correctness statements.



@2001

9 years 
campbell 
Get the compiler to output more.



@2000

9 years 
campbell 
Fix g.e. glitch in label simulation.



@1999

9 years 
campbell 
Make backend use the main global envs.



@1996

9 years 
campbell 
Work on correctness from yesterday.



@1995

9 years 
campbell 
Overall compiler definition; bits and pieces to
make everything happy(ish).



@1994

9 years 
campbell 
Remove redundant allocation definition in Globalenvs.



@1993

9 years 
campbell 
Make frontend memory model only depend on the general definitions by …



@1991

9 years 
campbell 
Put the front end transformations together and make an example use it.



@1988

9 years 
campbell 
Abstraction of the memory contents in the memory models is no longer …



@1987

9 years 
campbell 
Move BEValues to common to reflect their use in the memory model for …



@1986

9 years 
campbell 
Get rid of unused abstraction of Globalenvs.



@1985

9 years 
mulligan 
A single `false' case for unconditional jumps completed.



@1984

9 years 
mulligan 
Most proof obligations closed in main_lemma apart from those of the …



@1983

9 years 
mulligan 
Changes to simplify the simpler cases of the main_lemma.



@1979

9 years 
sacerdot 
Very very very tricky lemma closed. A dreadful mix of JM equality …



@1978

9 years 
sacerdot 
Two more cases completed.



@1977

9 years 
sacerdot 
Unblocked: let ... as hides two different terms, one that uses Leibniz …



@1976

9 years 
tranquil 
* monads: just changed some defs, which had to be propagated in some …



@1975

9 years 
mulligan 
Work from today on closing main_thm.



@1974

9 years 
garnier 
Progress on the cast simplification proof.



@1973

9 years 
boender 
 removed superfluous match
 displaced 'cases daemon'



@1972

9 years 
mulligan 
Simple lemma with strangely complex proof complete.



@1971

9 years 
sacerdot 
1. Interpret.ma:
we need to prove
\sigma (execute_preinstruction …



@1970

9 years 
garnier 
Workinprogress: correction proof for the cast removal on expressions.



@1969

9 years 
sacerdot 
Some more progress, but now we must prove something on a Russell …



@1967

9 years 
sacerdot 
Mov case completed.



@1966

9 years 
mulligan 
Progress made on main_thm proof: trying to find a pattern to use …



@1965

9 years 
boender 
 further completed proof, changed jump_expansion' to reflect new type …



@1964

9 years 
tranquil 
introduced as_label_of_cost and adapted accordingly. Equality of cost …



@1963

9 years 
sacerdot 
More progress in restoring the original proof.



@1962

9 years 
sacerdot 
More examples are now indexed.



@1961

9 years 
sacerdot 
No more interaction required.



@1960

9 years 
campbell 
Update RTLabs structured traces to make minor changes in definitions.



@1959

9 years 
mulligan 
Commented out diverging application of demodulation and closed goals …



@1958

9 years 
mulligan 
Marked divergence in StatusProofs?.ma



@1957

9 years 
mulligan 
Stitching proofs back together after slight change in statement of …



@1956

9 years 
boender 
 finished proof of lemma (where auto does strange things again)



@1955

9 years 
mulligan 
Completed proof of snd_assembly_1_pseudoinstruction_ok, modulo some …



@1954

9 years 
campbell 
Initial state is in the labelling simulation
(modulo global envs results).



@1953

9 years 
mulligan 
Commit to avoid conflicts.



@1952

9 years 
sacerdot 
AssemblyProof? splitted.



@1951

9 years 
sacerdot 
Bug with overloaded names in the context.



@1950

9 years 
boender 
 advances in policy



@1949

9 years 
tranquil 
* lemma trace rel to eq flatten trace
* some more properties of …



@1948

9 years 
mulligan 
Weakened statements of ASM/Assembly.ma and ASM/AssemblyProof.ma, so …



@1947

9 years 
sacerdot 
Failure of automation/demod investigated a little bit.



@1946

9 years 
sacerdot 
\snd half_add => add everywhere



@1945

9 years 
sacerdot 
All proof statements repaired.



@1944

9 years 
sacerdot 
common/StructuredTraces no longer depends on ASM/AbstractStatus (again)



@1943

9 years 
boender 
 changed 'labels okay' part of create_label_cost_map



@1942

9 years 
mulligan 
Work on showing the equivalence of two methods of looking up from the maps.



@1941

9 years 
mulligan 
Changes to the AssemblyProof? with a few more (large) axioms closed.



@1940

9 years 
boender 
 committed new version of final invariant



@1939

9 years 
mulligan 
Changes to get things to compile and to avoid the dependency …



@1938

9 years 
sacerdot 
Definitions moved to the right places, now everything compiles again.



@1937

9 years 
boender 
 filled in some of the gaps in the proof of Policy
 reverted …



@1936

9 years 
mulligan 
Some holes filled in AssemblyProof?.ma.



@1935

9 years 
mulligan 
Generalized some lemma in ASM/CostsProof.ma to work on abstract …



@1934

9 years 
boender 
 various & sundry moves of lemmas to better places
 integrated …



@1933

9 years 
boender 
 slight revamp



@1932

9 years 
boender 
 added some more dependent types (we love 'em)



@1931

9 years 
boender 
 added latest bvt alias
 temporary "cases daemon" commit of new …



@1930

9 years 
campbell 
Tidy up labelling simulation stuff a bit.



@1929

9 years 
mulligan 
Simplified proof by removing most of the invariants on the statements …



@1928

9 years 
mulligan 
Moved code from in ASM/ASMCosts*.ma and ASM/CostsProof.ma that should …



@1927

9 years 
mulligan 
Reduced complexity of good_program predicate, ported to new notion of …



@1926

9 years 
tranquil 
* added as_label to abstract status, with as_costed defined with it. …



@1925

9 years 
boender 
 readded jump_lenggh



@1924

9 years 
mulligan 
Added comment



@1923

9 years 
mulligan 
Small change, closing daemon that went under the RADAR



@1922

9 years 
campbell 
Main labelling simulation proof complete.



@1921

9 years 
mulligan 
Horror proof mostly finished (compiles all way until end of CostsProof?.ma).



@1920

9 years 
campbell 
Most of the labelling simulation. Still need to sort out switch …



@1919

9 years 
mulligan 
Fixes to get everything compiling again



@1918

9 years 
tranquil 
using listb.ma now



@1917

9 years 
tranquil 
predicate for unrepeating traces, fused final_abstract_status with …



@1916

9 years 
mulligan 
Closed remaining daemons in block_cost'. Rest of file now typechecks …



@1915

9 years 
garnier 
Correction of a typo in switchRemoval.



@1914

9 years 
campbell 
Fix bug in Clight semantics that misses gotolabels inside a cost …



@1913

9 years 
mulligan 
Got the rest of the file to typecheck as before.



@1912

9 years 
mulligan 
Patches to get block_cost' and dependencies working again after change …



@1911

9 years 
mulligan 
Changed statement of block_cost' to start on new termination argument



@1910

9 years 
mulligan 
Finished proof modulo termination argument



@1909

9 years 
mulligan 
Ported new statements to remainder of Interpret.ma file.



@1908

9 years 
fguidi 
notation fixup following last commit of matita
we shifted the levels …



@1907

9 years 
mulligan 
Fixes to get file to compile



@1906

9 years 
mulligan 
Statements simplified in block_cost and dependencies



@1905

9 years 
boender 
 plugging gap in assembly proof



@1904

9 years 
mulligan 
Problem with proof fixed by noting that problem is actually irrelevant



@1903

9 years 
mulligan 
Small changes prior to experiment


