]> matita.cs.unibo.it Git - helm.git/commit
Better implementation of the trusting machinery: some CicEnvironment functions
authorClaudio Sacerdoti Coen <claudio.sacerdoticoen@unibo.it>
Wed, 30 Oct 2002 14:10:01 +0000 (14:10 +0000)
committerClaudio Sacerdoti Coen <claudio.sacerdoticoen@unibo.it>
Wed, 30 Oct 2002 14:10:01 +0000 (14:10 +0000)
commit3158af584f7fdd261a39757d979bd4369197c2bb
treed425fbbedf1317d7d6a68285956a4008fac81697
parent6aedc4a96e3dce6b41befe20c6814f063ab958ac
Better implementation of the trusting machinery: some CicEnvironment functions
now have a trust optional attribute (that defaults to true). The TypeChecker
uses the false value only when type-checking the topmost object.

Every other operation of the kernel uses the true value (i.e. it trusts).
Is this really a safe behaviour? Hmmmmm. We need a proof here.
helm/ocaml/cic_proof_checking/cicEnvironment.ml
helm/ocaml/cic_proof_checking/cicEnvironment.mli
helm/ocaml/cic_proof_checking/cicReductionMachine.ml
helm/ocaml/cic_proof_checking/cicReductionNaif.ml
helm/ocaml/cic_proof_checking/cicSubstitution.ml
helm/ocaml/cic_proof_checking/cicTypeChecker.ml