Library Stalmarck.state
Require Import List.
Require Export triplet.
Definition State := list (rZ * rZ).
Inductive eqStateRz : State -> rZ -> rZ -> Prop :=
| eqStateRzRef : forall (a : rZ) (S : State), eqStateRz S a a
| eqStateRzIn :
forall (a b : rZ) (S : State), In (a, b) S -> eqStateRz S a b
| eqStateRzInv :
forall (a b : rZ) (S : State),
eqStateRz S a b -> eqStateRz S (rZComp a) (rZComp b)
| eqStateRzSym :
forall (a b : rZ) (S : State), eqStateRz S a b -> eqStateRz S b a
| eqStateRzTrans :
forall (a b c : rZ) (S : State),
eqStateRz S a b -> eqStateRz S b c -> eqStateRz S a c
| eqStateRzContr :
forall (a b c : rZ) (S : State),
eqStateRz S a (rZComp a) -> eqStateRz S b c.
Hint Resolve eqStateRzRef eqStateRzIn eqStateRzInv.
Theorem eqStateInvInv :
forall (S : State) (p q : rZ),
eqStateRz S (rZComp p) (rZComp q) -> eqStateRz S p q.
intros S p0 q0 H'; rewrite <- (rZCompInv p0); rewrite <- (rZCompInv q0); auto.
Qed.
Lemma eqStateContr :
forall (S : State) (p q r s : rZ),
eqStateRz S p q -> eqStateRz S p (rZComp q) -> eqStateRz S r s.
intros S p q r s H' H'0.
apply eqStateRzContr with (a := q); auto.
apply eqStateRzTrans with (b := p); auto.
apply eqStateRzSym; auto.
Qed.
Lemma eqStateContrSimpl1 :
forall (S : State) (p q : rZ),
eqStateRz S p (rZComp q) -> eqStateRz S (rZComp p) q.
intros S p q H'.
apply eqStateInvInv; rewrite rZCompInv; auto.
Qed.
Hint Resolve eqStateContrSimpl1.
Hint Immediate eqStateRzSym eqStateInvInv.
Definition addEq (p : rZ * rZ) (S : State) : State := p :: S.
Hint Unfold addEq.
Lemma eqStateaddEq1 :
forall (S : State) (p q : rZ), eqStateRz (addEq (p, q) S) p q.
intros S p q.
apply eqStateRzIn; simpl in |- *; auto.
Qed.
Lemma eqStateaddEq2 :
forall (S : State) (a b p q : rZ),
eqStateRz S p q -> eqStateRz (addEq (a, b) S) p q.
intros S a b p q H'; generalize a b; Elimc H'; clear a b p q S; auto.
intros a b S H' a0 b0; apply eqStateRzIn; simpl in |- *; auto.
intros a b c S H' H'0 H'1 H'2 a0 b0.
apply eqStateRzTrans with (b := b); auto.
intros a b c S H' H'0 a0 b0.
apply eqStateRzContr with (a := a); auto.
Qed.
Hint Resolve eqStateaddEq1 eqStateaddEq2.
Definition inclState (S1 S2 : State) : Prop :=
forall i j : rZ, eqStateRz S1 i j -> eqStateRz S2 i j.
Theorem inclStateRef : forall S : State, inclState S S.
red in |- *; auto.
Qed.
Hint Resolve inclStateRef.
Theorem inclStateIn :
forall S1 S2 : State,
(forall a b : rZ, In (a, b) S1 -> eqStateRz S2 a b) -> inclState S1 S2.
intros S1 S2 H'; red in |- *.
intros i j H'0; generalize H'; elim H'0; auto.
intros a b L0 H'1 H'2 H'3; apply eqStateRzSym; auto.
intros a b c0 L0 H'1 H'2 H'3 H'4 H'5; apply eqStateRzTrans with (b := b);
auto.
intros a b c0 L0 H'1 H'2 H'3; apply eqStateRzContr with (a := a); auto.
Qed.
Definition eqState (S1 S2 : State) : Prop :=
inclState S1 S2 /\ inclState S2 S1.
Theorem eqStateRef : forall S : State, eqState S S.
intros; red in |- *; split; auto.
Qed.
Hint Resolve eqStateRef.
Theorem eqStateSym : forall S1 S2 : State, eqState S1 S2 -> eqState S2 S1.
intros S1 S2 H'; elim H'; red in |- *; auto.
Qed.
Hint Immediate eqStateSym.
Theorem eqStateInv :
forall (S1 S2 : State) (a b : rZ),
eqState S1 S2 -> (eqStateRz S1 a b <-> eqStateRz S2 a b).
intros S1 S2 a b H'; inversion H'; red in |- *; auto.
Qed.
Theorem addEqInclState :
forall (S : State) (a b : rZ), inclState S (addEq (a, b) S).
intros S a b; red in |- *; auto.
Qed.
Hint Resolve addEqInclState.
Theorem inclStateTrans :
forall S1 S2 S3 : State,
inclState S1 S2 -> inclState S2 S3 -> inclState S1 S3.
intros S1 S2 S3 H' H'0; red in |- *; auto.
Qed.
Theorem eqStateIncl :
forall (S1 S2 : State) (p q : rZ),
inclState S1 S2 -> eqStateRz S1 p q -> eqStateRz S2 p q.
intros S1 S2 p q H' H'0; auto.
Qed.
Theorem eqStateEq :
forall (S1 S2 : State) (p q : rZ),
eqState S1 S2 -> eqStateRz S1 p q -> eqStateRz S2 p q.
intros S1 S2 p q H' H'0.
apply eqStateIncl with (S1 := S1); auto.
inversion H'; auto.
Qed.
Theorem addEqInclState2 :
forall (S : State) (a b c d : rZ),
inclState S (addEq (a, b) (addEq (c, d) S)).
intros S a b c d.
apply inclStateTrans with (S2 := addEq (c, d) S); auto.
Qed.
Hint Resolve addEqInclState2.
Theorem inclStateAddEqInv :
forall (p q : rZ) (S1 S2 : State),
inclState S1 S2 -> eqStateRz S2 p q -> inclState (addEq (p, q) S1) S2.
intros p0 q0 S1 S2 H' H'0; red in |- *; auto.
intros i j H'1; generalize H'0 H'; auto.
cut (exists S3 : State, S3 = addEq (p0, q0) S1); auto.
intros H'2; Elimc H'2; intros S3 E; rewrite <- E in H'1; auto.
generalize E; elim H'1; auto.
intros a b L H'2 H'3; rewrite H'3 in H'2; simpl in H'2; case H'2; auto.
intros H'4; inversion H'4; auto.
intros a b S H'2 H'3 H'4 H'5 H'6; auto.
apply eqStateRzSym; auto.
intros a b c S H'2 H'3 H'4 H'5 H'6 H'7 H'8.
apply eqStateRzTrans with (b := b); auto.
intros a b c S H'2 H'3 H'4 H'5 H'6.
apply eqStateRzContr with (a := a); auto.
exists (addEq (p0, q0) S1); auto.
Qed.
Hint Resolve inclStateAddEqInv.
Theorem inclStateAddEq :
forall (S1 S2 : State) (a b : rZ),
inclState S1 S2 -> inclState (addEq (a, b) S1) (addEq (a, b) S2).
intros S1 S2 a b H'.
apply inclStateAddEqInv; simpl in |- *.
apply inclStateTrans with (S2 := S2); auto.
apply eqStateRzIn; auto.
simpl in |- *.
auto.
Qed.
Hint Resolve inclStateAddEq.
Theorem eqStateAddEq :
forall (S1 S2 : State) (a b : rZ),
eqState S1 S2 -> eqState (addEq (a, b) S1) (addEq (a, b) S2).
intros S1 S2 a b H'; inversion H'; red in |- *; auto.
Qed.
Hint Resolve eqStateAddEq.
Theorem inclStateEqStateComp :
forall S1 S2 S3 S4 : State,
eqState S1 S2 -> eqState S3 S4 -> inclState S1 S3 -> inclState S2 S4.
intros S1 S2 S3 S4 H' H'0 H'1; inversion H'; inversion H'0.
apply inclStateTrans with (S2 := S3); auto.
apply inclStateTrans with (S2 := S1); auto.
Qed.
Theorem eqStateTrans :
forall S1 S2 S3 : State, eqState S1 S2 -> eqState S2 S3 -> eqState S1 S3.
intros S1 S2 S3 H' H'0; inversion H'; inversion H'0.
red in |- *; split; apply inclStateTrans with (S2 := S2); auto.
Qed.
Theorem addEqComp :
forall (a b a' b' : rZ) (S : State),
eqStateRz S a a' ->
eqStateRz S b b' -> eqState (addEq (a, b) S) (addEq (a', b') S).
intros a b a' b' S H' H'0.
red in |- *; split; apply inclStateIn; simpl in |- *;
(intros a0 b0 H'1; Elimc H'1; intros H'1; [ inversion H'1 | idtac ]);
auto; rewrite <- H1; rewrite <- H0.
apply eqStateRzTrans with (b := a'); auto.
apply eqStateRzTrans with (b := b'); auto.
apply eqStateRzTrans with (b := a); auto.
apply eqStateRzTrans with (b := b); auto.
Qed.
Hint Resolve addEqComp.
Definition realizeState (f : rNat -> bool) (S : State) : Prop :=
forall i j : rZ, In (i, j) S -> rZEval f i = rZEval f j.
Theorem realizeStateNil : forall f : rNat -> bool, realizeState f nil.
intros f; red in |- *; simpl in |- *.
intros i j H'; elim H'.
Qed.
Hint Resolve realizeStateNil.
Theorem rZEvalCompInv :
forall (a : rZ) (f : rNat -> bool), rZEval f (rZComp a) = negb (rZEval f a).
intros a f; case a; simpl in |- *; auto.
intros r; case (f r); auto.
Qed.
Theorem realizeStateInv :
forall (f : rNat -> bool) (S : State),
realizeState f S ->
forall i j : rZ, eqStateRz S i j -> rZEval f i = rZEval f j.
intros f S H' i j H'0; generalize H'; elim H'0; auto.
intros a b S0 H'1 H'2 H'3.
rewrite rZEvalCompInv; auto; rewrite rZEvalCompInv; auto.
rewrite H'2; auto.
intros a b S0 H'1 H'2 H'3.
rewrite H'2; auto.
intros a b c S0 H'1 H'2 H'3 H'4 H'5.
rewrite H'2; auto.
intros a b c S0 H'1 H'2 H'3.
absurd (rZEval f a = rZEval f (rZComp a)); auto.
rewrite rZEvalCompInv; case (rZEval f a); simpl in |- *; red in |- *; intros;
discriminate.
Qed.
Theorem realizeStateInvComp :
forall (f : rNat -> bool) (S : State),
realizeState f S ->
forall i j : rZ, eqStateRz S i (rZComp j) -> rZEval f i = negb (rZEval f j).
intros f S H' i j H'0.
rewrite <- rZEvalCompInv.
apply realizeStateInv with (S := S); auto.
Qed.
Theorem realizeStateAddEq :
forall (f : rNat -> bool) (S : State),
realizeState f S ->
forall i j : rZ, rZEval f i = rZEval f j -> realizeState f (addEq (i, j) S).
intros f S H' i j H'0; red in |- *; simpl in |- *; auto.
intros i0 j0 H'1; elim H'1; intros H'2; clear H'1; [ inversion H'2 | idtac ];
auto.
rewrite <- H1; auto.
rewrite <- H0; auto.
Qed.
Hint Resolve realizeStateAddEq.
Theorem realizeStateIncl :
forall (f : rNat -> bool) (S1 S2 : State),
realizeState f S1 -> inclState S2 S1 -> realizeState f S2.
intros f S1 S2 H' H'0; red in |- *; auto.
intros i j H'1.
apply realizeStateInv with (S := S1); auto.
Qed.
Theorem realizeStateInvAddEq :
forall (f : rNat -> bool) (S : State) (i j : rZ),
realizeState f (addEq (i, j) S) -> rZEval f i = rZEval f j.
intros f S i j H'.
apply realizeStateInv with (S := addEq (i, j) S); auto.
Qed.
Theorem realizeStateInvAddEq2 :
forall (f : rNat -> bool) (S : State) (i j k l : rZ),
realizeState f (addEq (i, j) (addEq (k, l) S)) ->
rZEval f k = rZEval f l /\ rZEval f i = rZEval f j.
intros f S i j k l H'; split.
apply realizeStateInvAddEq with (S := S); auto.
apply realizeStateIncl with (S1 := addEq (i, j) (addEq (k, l) S)); auto.
apply realizeStateInvAddEq with (S := addEq (k, l) S); auto.
Qed.
Definition contradictory (S : State) : Prop :=
exists a : rZ, eqStateRz S a (rZComp a).
Theorem contradictoryNotRealize :
forall S : State,
contradictory S -> forall f : rNat -> bool, ~ realizeState f S.
intros S H' f; red in |- *; intros H'0; inversion H'.
absurd (rZEval f x = rZEval f (rZComp x)).
rewrite rZEvalCompInv; case (rZEval f x); auto; red in |- *; intros;
discriminate.
apply realizeStateInv with (S := S); auto.
Qed.
Hint Resolve contradictoryNotRealize.
Theorem ContrIncl :
forall S : State, inclState S ((rZPlus zero, rZMinus zero) :: nil).
intros S; red in |- *; auto.
intros i j H'.
apply eqStateRzContr with (a := rZPlus zero); auto with datatypes.
Qed.
Hint Resolve ContrIncl.
