Renaming invariantFor_monotone to invariant_weaken

This commit is contained in:
Adam Chlipala 2016-02-15 18:59:39 -05:00
parent e669e53157
commit 53925f1a1f
2 changed files with 3 additions and 3 deletions

View file

@ -22,7 +22,7 @@ Proof.
firstorder. firstorder.
Qed. Qed.
Theorem invariantFor_monotone : forall {state} (sys : trsys state) Theorem invariant_weaken : forall {state} (sys : trsys state)
(invariant1 invariant2 : state -> Prop), (invariant1 invariant2 : state -> Prop),
invariantFor sys invariant1 invariantFor sys invariant1
-> (forall s, invariant1 s -> invariant2 s) -> (forall s, invariant1 s -> invariant2 s)

View file

@ -647,7 +647,7 @@ Qed.
(* Now, to prove our final result about the two incrementing threads, let's use (* Now, to prove our final result about the two incrementing threads, let's use
* a more general fact, about when one invariant implies another. *) * a more general fact, about when one invariant implies another. *)
Theorem invariantFor_weaken : forall {state} (sys : trsys state) Theorem invariant_weaken : forall {state} (sys : trsys state)
(invariant1 invariant2 : state -> Prop), (invariant1 invariant2 : state -> Prop),
invariantFor sys invariant1 invariantFor sys invariant1
-> (forall s, invariant1 s -> invariant2 s) -> (forall s, invariant1 s -> invariant2 s)
@ -674,7 +674,7 @@ Theorem increment2_sys_correct : forall s,
Proof. Proof.
simplify. simplify.
eapply use_invariant. eapply use_invariant.
apply invariantFor_weaken with (invariant1 := increment2_invariant). apply invariant_weaken with (invariant1 := increment2_invariant).
(* Note the use of a [with] clause to specify a quantified variable's (* Note the use of a [with] clause to specify a quantified variable's
* value. *) * value. *)