+++ /dev/null
-(*#* #stop file *)
-
-Require Arith.
-Require base_tactics.
-
-(* eq ***********************************************************************)
-
-Hint eq : ltlc := Constructors eq.
-
-Hint f1N : ltlc := Resolve (f_equal nat).
-
-Hint f2NN : ltlc := Resolve (f_equal2 nat nat).
-
-Hints Resolve sym_equal : ltlc.
-
-Hints Resolve plus_sym plus_n_Sm plus_assoc_r simpl_plus_l : ltlc.
-
-Hints Resolve minus_n_O : ltlc.
-
-(* le ***********************************************************************)
-
-Hint le : ltlc := Constructors le.
-
-Hints Resolve le_O_n le_n_S le_S_n le_trans : ltlc.
-
-Hints Resolve lt_le_S : ltlc.
-
-Hints Resolve le_plus_plus le_plus_trans le_plus_l le_plus_r : ltlc.
-
-(* lt ***********************************************************************)
-
-Hints Resolve lt_trans : ltlc.
-
-Hints Resolve lt_le_trans le_lt_n_Sm : ltlc.
-
-Hints Resolve lt_reg_r lt_le_plus_plus le_lt_plus_plus : ltlc.
-
-(* not **********************************************************************)
-
-Hints Resolve sym_not_equal : ltlc.
-
-(* missing in the standard library ******************************************)
-
- Theorem simpl_plus_r: (n,m,p:?) (plus m n) = (plus p n) -> m = p.
- Intros.
- Apply (simpl_plus_l n).
- Rewrite plus_sym.
- Rewrite H; XAuto.
- Qed.
-
- Theorem minus_plus_r: (m,n:?) (minus (plus m n) n) = m.
- Intros.
- Rewrite plus_sym.
- Apply minus_plus.
- Qed.
-
- Theorem plus_permute_2_in_3: (x,y,z:?) (plus (plus x y) z) = (plus (plus x z) y).
- Intros.
- Rewrite plus_assoc_r.
- Rewrite (plus_sym y z).
- Rewrite <- plus_assoc_r; XAuto.
- Qed.
-
- Theorem plus_permute_2_in_3_assoc: (n,h,k:?) (plus (plus n h) k) = (plus n (plus k h)).
- Intros.
- Rewrite plus_permute_2_in_3; Rewrite plus_assoc_l; XAuto.
- Qed.
-
- Theorem plus_O: (x,y:?) (plus x y) = (0) -> x = (O) /\ y = (O).
- XElim x; [ XAuto | Intros; Inversion H0 ].
- Qed.
-
- Theorem minus_Sx_SO: (x:?) (minus (S x) (1)) = x.
- Intros; Simpl; Rewrite <- minus_n_O; XAuto.
- Qed.
-
- Theorem eq_nat_dec: (i,j:nat) ~i=j \/ i=j.
- XElim i; XElim j; Intros; XAuto.
- Elim (H n0); XAuto.
- Qed.
-
- Theorem neq_eq_e: (i,j:nat; P:Prop) (~i=j -> P) -> (i=j -> P) -> P.
- Intros.
- Pose (eq_nat_dec i j).
- XElim o; XAuto.
- Qed.
-
- Theorem le_false: (m,n:?; P:Prop) (le m n) -> (le (S n) m) -> P.
- XElim m.
-(* case 1 : m = 0 *)
- Intros; Inversion H0.
-(* case 2 : m > 0 *)
- XElim n0; Intros.
-(* case 2.1 : n = 0 *)
- Inversion H0.
-(* case 2.2 : n > 0 *)
- Simpl in H1.
- Apply (H n0); XAuto.
- Qed.
-
- Theorem le_plus_minus_sym: (n,m:?) (le n m) -> m = (plus (minus m n) n).
- Intros.
- Rewrite plus_sym; Apply le_plus_minus; XAuto.
- Qed.
-
- Theorem le_minus_minus: (x,y:?) (le x y) -> (z:?) (le y z) ->
- (le (minus y x) (minus z x)).
- Intros.
- EApply simpl_le_plus_l.
- Rewrite le_plus_minus_r; [ Idtac | XAuto ].
- Rewrite le_plus_minus_r; XEAuto.
- Qed.
-
- Theorem le_minus_plus: (z,x:?) (le z x) -> (y:?)
- (minus (plus x y) z) = (plus (minus x z) y).
- XElim z.
-(* case 1 : z = 0 *)
- Intros x H; Inversion H; XAuto.
-(* case 2 : z > 0 *)
- Intros z; XElim x; Intros.
-(* case 2.1 : x = 0 *)
- Inversion H0.
-(* case 2.2 : x > 0 *)
- Simpl; XAuto.
- Qed.
-
- Theorem le_minus: (x,z,y:?) (le (plus x y) z) -> (le x (minus z y)).
- Intros.
- Rewrite <- (minus_plus_r x y); XAuto.
- Apply le_minus_minus; XAuto.
- Qed.
-
- Theorem le_trans_plus_r: (x,y,z:?) (le (plus x y) z) -> (le y z).
- Intros.
- EApply le_trans; [ EApply le_plus_r | Idtac ]; XEAuto.
- Qed.
-
- Theorem le_gen_S: (m,x:?) (le (S m) x) ->
- (EX n | x = (S n) & (le m n)).
- Intros; Inversion H; XEAuto.
- Qed.
-
- Theorem lt_x_plus_x_Sy: (x,y:?) (lt x (plus x (S y))).
- Intros; Rewrite plus_sym; Simpl; XAuto.
- Qed.
-
- Theorem simpl_lt_plus_r: (p,n,m:?) (lt (plus n p) (plus m p)) -> (lt n m).
- Intros.
- EApply simpl_lt_plus_l.
- Rewrite plus_sym in H; Rewrite (plus_sym m p) in H; Apply H.
- Qed.
-
- Theorem minus_x_Sy: (x,y:?) (lt y x) ->
- (minus x y) = (S (minus x (S y))).
- XElim x.
-(* case 1 : x = 0 *)
- Intros; Inversion H.
-(* case 2 : x > 0 *)
- XElim y; Intros; Simpl.
-(* case 2.1 : y = 0 *)
- Rewrite <- minus_n_O; XAuto.
-(* case 2.2 : y > 0 *)
- Cut (lt n0 n); XAuto.
- Qed.
-
- Theorem lt_plus_minus: (x,y:?) (lt x y) ->
- y = (S (plus x (minus y (S x)))).
- Intros.
- Apply (le_plus_minus (S x) y); XAuto.
- Qed.
-
- Theorem lt_plus_minus_r: (x,y:?) (lt x y) ->
- y = (S (plus (minus y (S x)) x)).
- Intros.
- Rewrite plus_sym; Apply lt_plus_minus; XAuto.
- Qed.
-
- Theorem minus_x_SO: (x:?) (lt (0) x) -> x = (S (minus x (1))).
- Intros.
- Rewrite <- minus_x_Sy; [ Rewrite <- minus_n_O; XEAuto | XEAuto ].
- Qed.
-
- Theorem lt_le_minus: (x,y:?) (lt x y) -> (le x (minus y (1))).
- Intros; Apply le_minus; Rewrite plus_sym; Simpl; XAuto.
- Qed.
-
- Theorem lt_le_e: (n,d:?; P:Prop)
- ((lt n d) -> P) -> ((le d n) -> P) -> P.
- Intros.
- Cut (le d n) \/ (lt n d); [ Intros H1; XElim H1; XAuto | Apply le_or_lt ].
- Qed.
-
- Theorem lt_eq_e: (x,y:?; P:Prop) ((lt x y) -> P) ->
- (x = y -> P) -> (le x y) -> P.
- Intros.
- LApply (le_lt_or_eq x y); [ Clear H1; Intros H1 | XAuto ].
- XElim H1; XAuto.
- Qed.
-
- Theorem lt_eq_gt_e: (x,y:?; P:Prop) ((lt x y) -> P) ->
- (x = y -> P) -> ((lt y x) -> P) -> P.
- Intros.
- Apply (lt_le_e x y); [ XAuto | Intros ].
- Apply (lt_eq_e y x); XAuto.
- Qed.
-
- Theorem lt_gen_S': (x,n:?) (lt x (S n)) ->
- x = (0) \/ (EX m | x = (S m) & (lt m n)).
- XElim x; XEAuto.
- Qed.
-
-Hints Resolve le_lt_trans : ltlc.
-
-Hints Resolve simpl_plus_r minus_plus_r minus_x_Sy
- plus_permute_2_in_3 plus_permute_2_in_3_assoc : ltlc.
-
-Hints Resolve le_minus_minus le_minus_plus le_minus le_trans_plus_r : ltlc.
-
-Hints Resolve lt_x_plus_x_Sy simpl_lt_plus_r lt_le_minus lt_plus_minus
- lt_plus_minus_r : ltlc.
-
- Theorem lt_neq: (x,y:?) (lt x y) -> ~x=y.
- Unfold not; Intros; Rewrite H0 in H; Clear H0 x.
- LApply (lt_n_n y); XAuto.
- Qed.
-
-Hints Resolve lt_neq : ltlc.
-
- Theorem arith0: (h2,d2,n:?) (le (plus d2 h2) n) ->
- (h1:?) (le (plus d2 h1) (minus (plus n h1) h2)).
- Intros.
- Rewrite <- (minus_plus h2 (plus d2 h1)).
- Apply le_minus_minus; [ XAuto | Idtac ].
- Rewrite plus_assoc_l; Rewrite (plus_sym h2 d2); XAuto.
- Qed.
-
-Hints Resolve arith0 : ltlc.
-
- Tactic Definition EqFalse :=
- Match Context With
- [ H: ~?1=?1 |- ? ] ->
- LApply H; [ Clear H; Intros H; Inversion H | XAuto ].
-
- Tactic Definition PlusO :=
- Match Context With
- | [ H: (plus ?0 ?1) = (0) |- ? ] ->
- LApply (plus_O ?0 ?1); [ Clear H; Intros H | XAuto ];
- XElim H; Intros.
-
- Tactic Definition SymEqual :=
- Match Context With
- | [ H: ?1 = ?2 |- ? ] ->
- Cut ?2 = ?1; [ Clear H; Intros H | Apply sym_equal; XAuto ].
-
- Tactic Definition LeLtGen :=
- Match Context With
- | [ H: (le (S ?1) ?2) |- ? ] ->
- LApply (le_gen_S ?1 ?2); [ Clear H; Intros H | XAuto ];
- XElim H; Intros
- | [ H: (lt ?1 (S ?2)) |- ? ] ->
- LApply (lt_gen_S' ?1 ?2); [ Clear H; Intros H | XAuto ];
- XElim H; [ Intros | Intros H; XElim H; Intros ].