1 (* Title: HOL/Predicate.thy
2 Author: Stefan Berghofer and Lukas Bulwahn and Florian Haftmann, TU Muenchen
5 header {* Predicates as relations and enumerations *}
8 imports Inductive Relation
14 inf (infixl "\<sqinter>" 70) and
15 sup (infixl "\<squnion>" 65) and
16 Inf ("\<Sqinter>_" [900] 900) and
17 Sup ("\<Squnion>_" [900] 900)
20 "_INF1" :: "pttrns \<Rightarrow> 'b \<Rightarrow> 'b" ("(3\<Sqinter>_./ _)" [0, 10] 10)
21 "_INF" :: "pttrn \<Rightarrow> 'a set \<Rightarrow> 'b \<Rightarrow> 'b" ("(3\<Sqinter>_\<in>_./ _)" [0, 0, 10] 10)
22 "_SUP1" :: "pttrns \<Rightarrow> 'b \<Rightarrow> 'b" ("(3\<Squnion>_./ _)" [0, 10] 10)
23 "_SUP" :: "pttrn \<Rightarrow> 'a set \<Rightarrow> 'b \<Rightarrow> 'b" ("(3\<Squnion>_\<in>_./ _)" [0, 0, 10] 10)
26 subsection {* Predicates as (complete) lattices *}
30 Handy introduction and elimination rules for @{text "\<le>"}
31 on unary and binary predicates
35 assumes PQ: "\<And>x. P x \<Longrightarrow> Q x"
43 lemma predicate1D [Pure.dest?, dest?]:
44 "P \<le> Q \<Longrightarrow> P x \<Longrightarrow> Q x"
46 apply (erule le_boolE)
50 lemma rev_predicate1D:
51 "P x ==> P <= Q ==> Q x"
54 lemma predicate2I [Pure.intro!, intro!]:
55 assumes PQ: "\<And>x y. P x y \<Longrightarrow> Q x y"
63 lemma predicate2D [Pure.dest, dest]:
64 "P \<le> Q \<Longrightarrow> P x y \<Longrightarrow> Q x y"
65 apply (erule le_funE)+
66 apply (erule le_boolE)
70 lemma rev_predicate2D:
71 "P x y ==> P <= Q ==> Q x y"
75 subsubsection {* Equality *}
77 lemma pred_equals_eq: "((\<lambda>x. x \<in> R) = (\<lambda>x. x \<in> S)) = (R = S)"
78 by (simp add: mem_def)
80 lemma pred_equals_eq2 [pred_set_conv]: "((\<lambda>x y. (x, y) \<in> R) = (\<lambda>x y. (x, y) \<in> S)) = (R = S)"
81 by (simp add: fun_eq_iff mem_def)
84 subsubsection {* Order relation *}
86 lemma pred_subset_eq: "((\<lambda>x. x \<in> R) <= (\<lambda>x. x \<in> S)) = (R <= S)"
87 by (simp add: mem_def)
89 lemma pred_subset_eq2 [pred_set_conv]: "((\<lambda>x y. (x, y) \<in> R) <= (\<lambda>x y. (x, y) \<in> S)) = (R <= S)"
93 subsubsection {* Top and bottom elements *}
95 lemma bot1E [no_atp, elim!]: "bot x \<Longrightarrow> P"
96 by (simp add: bot_fun_def)
98 lemma bot2E [elim!]: "bot x y \<Longrightarrow> P"
99 by (simp add: bot_fun_def)
101 lemma bot_empty_eq: "bot = (\<lambda>x. x \<in> {})"
102 by (auto simp add: fun_eq_iff)
104 lemma bot_empty_eq2: "bot = (\<lambda>x y. (x, y) \<in> {})"
105 by (auto simp add: fun_eq_iff)
107 lemma top1I [intro!]: "top x"
108 by (simp add: top_fun_def)
110 lemma top2I [intro!]: "top x y"
111 by (simp add: top_fun_def)
114 subsubsection {* Binary intersection *}
116 lemma inf1I [intro!]: "A x ==> B x ==> inf A B x"
117 by (simp add: inf_fun_def)
119 lemma inf2I [intro!]: "A x y ==> B x y ==> inf A B x y"
120 by (simp add: inf_fun_def)
122 lemma inf1E [elim!]: "inf A B x ==> (A x ==> B x ==> P) ==> P"
123 by (simp add: inf_fun_def)
125 lemma inf2E [elim!]: "inf A B x y ==> (A x y ==> B x y ==> P) ==> P"
126 by (simp add: inf_fun_def)
128 lemma inf1D1: "inf A B x ==> A x"
129 by (simp add: inf_fun_def)
131 lemma inf2D1: "inf A B x y ==> A x y"
132 by (simp add: inf_fun_def)
134 lemma inf1D2: "inf A B x ==> B x"
135 by (simp add: inf_fun_def)
137 lemma inf2D2: "inf A B x y ==> B x y"
138 by (simp add: inf_fun_def)
140 lemma inf_Int_eq: "inf (\<lambda>x. x \<in> R) (\<lambda>x. x \<in> S) = (\<lambda>x. x \<in> R \<inter> S)"
141 by (simp add: inf_fun_def mem_def)
143 lemma inf_Int_eq2 [pred_set_conv]: "inf (\<lambda>x y. (x, y) \<in> R) (\<lambda>x y. (x, y) \<in> S) = (\<lambda>x y. (x, y) \<in> R \<inter> S)"
144 by (simp add: inf_fun_def mem_def)
147 subsubsection {* Binary union *}
149 lemma sup1I1 [elim?]: "A x \<Longrightarrow> sup A B x"
150 by (simp add: sup_fun_def)
152 lemma sup2I1 [elim?]: "A x y \<Longrightarrow> sup A B x y"
153 by (simp add: sup_fun_def)
155 lemma sup1I2 [elim?]: "B x \<Longrightarrow> sup A B x"
156 by (simp add: sup_fun_def)
158 lemma sup2I2 [elim?]: "B x y \<Longrightarrow> sup A B x y"
159 by (simp add: sup_fun_def)
161 lemma sup1E [elim!]: "sup A B x ==> (A x ==> P) ==> (B x ==> P) ==> P"
162 by (simp add: sup_fun_def) iprover
164 lemma sup2E [elim!]: "sup A B x y ==> (A x y ==> P) ==> (B x y ==> P) ==> P"
165 by (simp add: sup_fun_def) iprover
168 \medskip Classical introduction rule: no commitment to @{text A} vs
172 lemma sup1CI [intro!]: "(~ B x ==> A x) ==> sup A B x"
173 by (auto simp add: sup_fun_def)
175 lemma sup2CI [intro!]: "(~ B x y ==> A x y) ==> sup A B x y"
176 by (auto simp add: sup_fun_def)
178 lemma sup_Un_eq: "sup (\<lambda>x. x \<in> R) (\<lambda>x. x \<in> S) = (\<lambda>x. x \<in> R \<union> S)"
179 by (simp add: sup_fun_def mem_def)
181 lemma sup_Un_eq2 [pred_set_conv]: "sup (\<lambda>x y. (x, y) \<in> R) (\<lambda>x y. (x, y) \<in> S) = (\<lambda>x y. (x, y) \<in> R \<union> S)"
182 by (simp add: sup_fun_def mem_def)
185 subsubsection {* Intersections of families *}
187 lemma INF1_iff: "(INF x:A. B x) b = (ALL x:A. B x b)"
188 by (simp add: INFI_apply)
190 lemma INF2_iff: "(INF x:A. B x) b c = (ALL x:A. B x b c)"
191 by (simp add: INFI_apply)
193 lemma INF1_I [intro!]: "(!!x. x : A ==> B x b) ==> (INF x:A. B x) b"
194 by (auto simp add: INFI_apply)
196 lemma INF2_I [intro!]: "(!!x. x : A ==> B x b c) ==> (INF x:A. B x) b c"
197 by (auto simp add: INFI_apply)
199 lemma INF1_D [elim]: "(INF x:A. B x) b ==> a : A ==> B a b"
200 by (auto simp add: INFI_apply)
202 lemma INF2_D [elim]: "(INF x:A. B x) b c ==> a : A ==> B a b c"
203 by (auto simp add: INFI_apply)
205 lemma INF1_E [elim]: "(INF x:A. B x) b ==> (B a b ==> R) ==> (a ~: A ==> R) ==> R"
206 by (auto simp add: INFI_apply)
208 lemma INF2_E [elim]: "(INF x:A. B x) b c ==> (B a b c ==> R) ==> (a ~: A ==> R) ==> R"
209 by (auto simp add: INFI_apply)
211 lemma INF_INT_eq: "(INF i. (\<lambda>x. x \<in> r i)) = (\<lambda>x. x \<in> (INT i. r i))"
212 by (simp add: INFI_apply fun_eq_iff)
214 lemma INF_INT_eq2: "(INF i. (\<lambda>x y. (x, y) \<in> r i)) = (\<lambda>x y. (x, y) \<in> (INT i. r i))"
215 by (simp add: INFI_apply fun_eq_iff)
218 subsubsection {* Unions of families *}
220 lemma SUP1_iff: "(SUP x:A. B x) b = (EX x:A. B x b)"
221 by (simp add: SUPR_apply)
223 lemma SUP2_iff: "(SUP x:A. B x) b c = (EX x:A. B x b c)"
224 by (simp add: SUPR_apply)
226 lemma SUP1_I [intro]: "a : A ==> B a b ==> (SUP x:A. B x) b"
227 by (auto simp add: SUPR_apply)
229 lemma SUP2_I [intro]: "a : A ==> B a b c ==> (SUP x:A. B x) b c"
230 by (auto simp add: SUPR_apply)
232 lemma SUP1_E [elim!]: "(SUP x:A. B x) b ==> (!!x. x : A ==> B x b ==> R) ==> R"
233 by (auto simp add: SUPR_apply)
235 lemma SUP2_E [elim!]: "(SUP x:A. B x) b c ==> (!!x. x : A ==> B x b c ==> R) ==> R"
236 by (auto simp add: SUPR_apply)
238 lemma SUP_UN_eq: "(SUP i. (\<lambda>x. x \<in> r i)) = (\<lambda>x. x \<in> (UN i. r i))"
239 by (simp add: SUPR_apply fun_eq_iff)
241 lemma SUP_UN_eq2: "(SUP i. (\<lambda>x y. (x, y) \<in> r i)) = (\<lambda>x y. (x, y) \<in> (UN i. r i))"
242 by (simp add: SUPR_apply fun_eq_iff)
245 subsection {* Predicates as relations *}
247 subsubsection {* Composition *}
250 pred_comp :: "['a => 'b => bool, 'b => 'c => bool] => 'a => 'c => bool"
252 for r :: "'a => 'b => bool" and s :: "'b => 'c => bool"
254 pred_compI [intro]: "r a b ==> s b c ==> (r OO s) a c"
256 inductive_cases pred_compE [elim!]: "(r OO s) a c"
258 lemma pred_comp_rel_comp_eq [pred_set_conv]:
259 "((\<lambda>x y. (x, y) \<in> r) OO (\<lambda>x y. (x, y) \<in> s)) = (\<lambda>x y. (x, y) \<in> r O s)"
260 by (auto simp add: fun_eq_iff)
263 subsubsection {* Converse *}
266 conversep :: "('a => 'b => bool) => 'b => 'a => bool"
267 ("(_^--1)" [1000] 1000)
268 for r :: "'a => 'b => bool"
270 conversepI: "r a b ==> r^--1 b a"
273 conversep ("(_\<inverse>\<inverse>)" [1000] 1000)
276 assumes ab: "r^--1 a b"
277 shows "r b a" using ab
280 lemma conversep_iff [iff]: "r^--1 a b = r b a"
281 by (iprover intro: conversepI dest: conversepD)
283 lemma conversep_converse_eq [pred_set_conv]:
284 "(\<lambda>x y. (x, y) \<in> r)^--1 = (\<lambda>x y. (x, y) \<in> r^-1)"
285 by (auto simp add: fun_eq_iff)
287 lemma conversep_conversep [simp]: "(r^--1)^--1 = r"
288 by (iprover intro: order_antisym conversepI dest: conversepD)
290 lemma converse_pred_comp: "(r OO s)^--1 = s^--1 OO r^--1"
291 by (iprover intro: order_antisym conversepI pred_compI
292 elim: pred_compE dest: conversepD)
294 lemma converse_meet: "(inf r s)^--1 = inf r^--1 s^--1"
295 by (simp add: inf_fun_def) (iprover intro: conversepI ext dest: conversepD)
297 lemma converse_join: "(sup r s)^--1 = sup r^--1 s^--1"
298 by (simp add: sup_fun_def) (iprover intro: conversepI ext dest: conversepD)
300 lemma conversep_noteq [simp]: "(op ~=)^--1 = op ~="
301 by (auto simp add: fun_eq_iff)
303 lemma conversep_eq [simp]: "(op =)^--1 = op ="
304 by (auto simp add: fun_eq_iff)
307 subsubsection {* Domain *}
310 DomainP :: "('a => 'b => bool) => 'a => bool"
311 for r :: "'a => 'b => bool"
313 DomainPI [intro]: "r a b ==> DomainP r a"
315 inductive_cases DomainPE [elim!]: "DomainP r a"
317 lemma DomainP_Domain_eq [pred_set_conv]: "DomainP (\<lambda>x y. (x, y) \<in> r) = (\<lambda>x. x \<in> Domain r)"
318 by (blast intro!: Orderings.order_antisym predicate1I)
321 subsubsection {* Range *}
324 RangeP :: "('a => 'b => bool) => 'b => bool"
325 for r :: "'a => 'b => bool"
327 RangePI [intro]: "r a b ==> RangeP r b"
329 inductive_cases RangePE [elim!]: "RangeP r b"
331 lemma RangeP_Range_eq [pred_set_conv]: "RangeP (\<lambda>x y. (x, y) \<in> r) = (\<lambda>x. x \<in> Range r)"
332 by (blast intro!: Orderings.order_antisym predicate1I)
335 subsubsection {* Inverse image *}
338 inv_imagep :: "('b => 'b => bool) => ('a => 'b) => 'a => 'a => bool" where
339 "inv_imagep r f == %x y. r (f x) (f y)"
341 lemma [pred_set_conv]: "inv_imagep (\<lambda>x y. (x, y) \<in> r) f = (\<lambda>x y. (x, y) \<in> inv_image r f)"
342 by (simp add: inv_image_def inv_imagep_def)
344 lemma in_inv_imagep [simp]: "inv_imagep r f x y = r (f x) (f y)"
345 by (simp add: inv_imagep_def)
348 subsubsection {* Powerset *}
350 definition Powp :: "('a \<Rightarrow> bool) \<Rightarrow> 'a set \<Rightarrow> bool" where
351 "Powp A == \<lambda>B. \<forall>x \<in> B. A x"
353 lemma Powp_Pow_eq [pred_set_conv]: "Powp (\<lambda>x. x \<in> A) = (\<lambda>x. x \<in> Pow A)"
354 by (auto simp add: Powp_def fun_eq_iff)
356 lemmas Powp_mono [mono] = Pow_mono [to_pred pred_subset_eq]
359 subsubsection {* Properties of relations *}
361 abbreviation antisymP :: "('a => 'a => bool) => bool" where
362 "antisymP r == antisym {(x, y). r x y}"
364 abbreviation transP :: "('a => 'a => bool) => bool" where
365 "transP r == trans {(x, y). r x y}"
367 abbreviation single_valuedP :: "('a => 'b => bool) => bool" where
368 "single_valuedP r == single_valued {(x, y). r x y}"
370 (*FIXME inconsistencies: abbreviations vs. definitions, suffix `P` vs. suffix `p`*)
372 definition reflp :: "('a \<Rightarrow> 'a \<Rightarrow> bool) \<Rightarrow> bool" where
373 "reflp r \<longleftrightarrow> refl {(x, y). r x y}"
375 definition symp :: "('a \<Rightarrow> 'a \<Rightarrow> bool) \<Rightarrow> bool" where
376 "symp r \<longleftrightarrow> sym {(x, y). r x y}"
378 definition transp :: "('a \<Rightarrow> 'a \<Rightarrow> bool) \<Rightarrow> bool" where
379 "transp r \<longleftrightarrow> trans {(x, y). r x y}"
382 "(\<And>x. r x x) \<Longrightarrow> reflp r"
383 by (auto intro: refl_onI simp add: reflp_def)
388 using assms by (auto dest: refl_onD simp add: reflp_def)
391 "(\<And>x y. r x y \<Longrightarrow> r y x) \<Longrightarrow> symp r"
392 by (auto intro: symI simp add: symp_def)
395 assumes "symp r" and "r x y"
397 using assms by (auto dest: symD simp add: symp_def)
400 "(\<And>x y z. r x y \<Longrightarrow> r y z \<Longrightarrow> r x z) \<Longrightarrow> transp r"
401 by (auto intro: transI simp add: transp_def)
404 assumes "transp r" and "r x y" and "r y z"
406 using assms by (auto dest: transD simp add: transp_def)
409 subsection {* Predicates as enumerations *}
411 subsubsection {* The type of predicate enumerations (a monad) *}
413 datatype 'a pred = Pred "'a \<Rightarrow> bool"
415 primrec eval :: "'a pred \<Rightarrow> 'a \<Rightarrow> bool" where
416 eval_pred: "eval (Pred f) = f"
418 lemma Pred_eval [simp]:
423 "(\<And>w. eval P w \<longleftrightarrow> eval Q w) \<Longrightarrow> P = Q"
424 by (cases P, cases Q) (auto simp add: fun_eq_iff)
426 lemma eval_mem [simp]:
427 "x \<in> eval P \<longleftrightarrow> eval P x"
428 by (simp add: mem_def)
431 "x \<in> (op =) y \<longleftrightarrow> x = y"
432 by (auto simp add: mem_def)
434 instantiation pred :: (type) "{complete_lattice, boolean_algebra}"
438 "P \<le> Q \<longleftrightarrow> eval P \<le> eval Q"
441 "P < Q \<longleftrightarrow> eval P < eval Q"
444 "\<bottom> = Pred \<bottom>"
446 lemma eval_bot [simp]:
447 "eval \<bottom> = \<bottom>"
448 by (simp add: bot_pred_def)
451 "\<top> = Pred \<top>"
453 lemma eval_top [simp]:
454 "eval \<top> = \<top>"
455 by (simp add: top_pred_def)
458 "P \<sqinter> Q = Pred (eval P \<sqinter> eval Q)"
460 lemma eval_inf [simp]:
461 "eval (P \<sqinter> Q) = eval P \<sqinter> eval Q"
462 by (simp add: inf_pred_def)
465 "P \<squnion> Q = Pred (eval P \<squnion> eval Q)"
467 lemma eval_sup [simp]:
468 "eval (P \<squnion> Q) = eval P \<squnion> eval Q"
469 by (simp add: sup_pred_def)
472 "\<Sqinter>A = Pred (INFI A eval)"
474 lemma eval_Inf [simp]:
475 "eval (\<Sqinter>A) = INFI A eval"
476 by (simp add: Inf_pred_def)
479 "\<Squnion>A = Pred (SUPR A eval)"
481 lemma eval_Sup [simp]:
482 "eval (\<Squnion>A) = SUPR A eval"
483 by (simp add: Sup_pred_def)
486 "- P = Pred (- eval P)"
488 lemma eval_compl [simp]:
489 "eval (- P) = - eval P"
490 by (simp add: uminus_pred_def)
493 "P - Q = Pred (eval P - eval Q)"
495 lemma eval_minus [simp]:
496 "eval (P - Q) = eval P - eval Q"
497 by (simp add: minus_pred_def)
500 qed (auto intro!: pred_eqI simp add: less_eq_pred_def less_pred_def uminus_apply minus_apply)
504 lemma eval_INFI [simp]:
505 "eval (INFI A f) = INFI A (eval \<circ> f)"
506 by (unfold INFI_def) simp
508 lemma eval_SUPR [simp]:
509 "eval (SUPR A f) = SUPR A (eval \<circ> f)"
510 by (unfold SUPR_def) simp
512 definition single :: "'a \<Rightarrow> 'a pred" where
513 "single x = Pred ((op =) x)"
515 lemma eval_single [simp]:
516 "eval (single x) = (op =) x"
517 by (simp add: single_def)
519 definition bind :: "'a pred \<Rightarrow> ('a \<Rightarrow> 'b pred) \<Rightarrow> 'b pred" (infixl "\<guillemotright>=" 70) where
520 "P \<guillemotright>= f = (SUPR {x. eval P x} f)"
522 lemma eval_bind [simp]:
523 "eval (P \<guillemotright>= f) = eval (SUPR {x. eval P x} f)"
524 by (simp add: bind_def)
527 "(P \<guillemotright>= Q) \<guillemotright>= R = P \<guillemotright>= (\<lambda>x. Q x \<guillemotright>= R)"
528 by (rule pred_eqI) auto
531 "P \<guillemotright>= single = P"
532 by (rule pred_eqI) auto
535 "single x \<guillemotright>= P = P x"
536 by (rule pred_eqI) auto
539 "\<bottom> \<guillemotright>= P = \<bottom>"
540 by (rule pred_eqI) auto
543 "(P \<squnion> Q) \<guillemotright>= R = P \<guillemotright>= R \<squnion> Q \<guillemotright>= R"
544 by (rule pred_eqI) auto
547 "(\<Squnion>A \<guillemotright>= f) = \<Squnion>((\<lambda>x. x \<guillemotright>= f) ` A)"
548 by (rule pred_eqI) auto
551 assumes "\<And>x. eval A x \<Longrightarrow> eval B x"
552 and "\<And>x. eval B x \<Longrightarrow> eval A x"
554 using assms by (auto intro: pred_eqI)
556 lemma singleI: "eval (single x) x"
559 lemma singleI_unit: "eval (single ()) x"
562 lemma singleE: "eval (single x) y \<Longrightarrow> (y = x \<Longrightarrow> P) \<Longrightarrow> P"
565 lemma singleE': "eval (single x) y \<Longrightarrow> (x = y \<Longrightarrow> P) \<Longrightarrow> P"
568 lemma bindI: "eval P x \<Longrightarrow> eval (Q x) y \<Longrightarrow> eval (P \<guillemotright>= Q) y"
571 lemma bindE: "eval (R \<guillemotright>= Q) y \<Longrightarrow> (\<And>x. eval R x \<Longrightarrow> eval (Q x) y \<Longrightarrow> P) \<Longrightarrow> P"
574 lemma botE: "eval \<bottom> x \<Longrightarrow> P"
577 lemma supI1: "eval A x \<Longrightarrow> eval (A \<squnion> B) x"
580 lemma supI2: "eval B x \<Longrightarrow> eval (A \<squnion> B) x"
583 lemma supE: "eval (A \<squnion> B) x \<Longrightarrow> (eval A x \<Longrightarrow> P) \<Longrightarrow> (eval B x \<Longrightarrow> P) \<Longrightarrow> P"
586 lemma single_not_bot [simp]:
587 "single x \<noteq> \<bottom>"
588 by (auto simp add: single_def bot_pred_def fun_eq_iff)
591 assumes "A \<noteq> \<bottom>"
592 obtains x where "eval A x"
593 using assms by (cases A)
594 (auto simp add: bot_pred_def, auto simp add: mem_def)
597 subsubsection {* Emptiness check and definite choice *}
599 definition is_empty :: "'a pred \<Rightarrow> bool" where
600 "is_empty A \<longleftrightarrow> A = \<bottom>"
604 by (simp add: is_empty_def)
606 lemma not_is_empty_single:
607 "\<not> is_empty (single x)"
608 by (auto simp add: is_empty_def single_def bot_pred_def fun_eq_iff)
611 "is_empty (A \<squnion> B) \<longleftrightarrow> is_empty A \<and> is_empty B"
612 by (auto simp add: is_empty_def)
614 definition singleton :: "(unit \<Rightarrow> 'a) \<Rightarrow> 'a pred \<Rightarrow> 'a" where
615 "singleton dfault A = (if \<exists>!x. eval A x then THE x. eval A x else dfault ())"
618 "\<exists>!x. eval A x \<Longrightarrow> eval A x \<Longrightarrow> singleton dfault A = x"
619 by (auto simp add: singleton_def)
621 lemma eval_singletonI:
622 "\<exists>!x. eval A x \<Longrightarrow> eval A (singleton dfault A)"
624 assume assm: "\<exists>!x. eval A x"
625 then obtain x where "eval A x" ..
626 moreover with assm have "singleton dfault A = x" by (rule singleton_eqI)
627 ultimately show ?thesis by simp
630 lemma single_singleton:
631 "\<exists>!x. eval A x \<Longrightarrow> single (singleton dfault A) = A"
633 assume assm: "\<exists>!x. eval A x"
634 then have "eval A (singleton dfault A)"
635 by (rule eval_singletonI)
636 moreover from assm have "\<And>x. eval A x \<Longrightarrow> singleton dfault A = x"
637 by (rule singleton_eqI)
638 ultimately have "eval (single (singleton dfault A)) = eval A"
639 by (simp (no_asm_use) add: single_def fun_eq_iff) blast
640 then have "\<And>x. eval (single (singleton dfault A)) x = eval A x"
642 then show ?thesis by (rule pred_eqI)
645 lemma singleton_undefinedI:
646 "\<not> (\<exists>!x. eval A x) \<Longrightarrow> singleton dfault A = dfault ()"
647 by (simp add: singleton_def)
650 "singleton dfault \<bottom> = dfault ()"
651 by (auto simp add: bot_pred_def intro: singleton_undefinedI)
653 lemma singleton_single:
654 "singleton dfault (single x) = x"
655 by (auto simp add: intro: singleton_eqI singleI elim: singleE)
657 lemma singleton_sup_single_single:
658 "singleton dfault (single x \<squnion> single y) = (if x = y then x else dfault ())"
659 proof (cases "x = y")
660 case True then show ?thesis by (simp add: singleton_single)
663 have "eval (single x \<squnion> single y) x"
664 and "eval (single x \<squnion> single y) y"
665 by (auto intro: supI1 supI2 singleI)
666 with False have "\<not> (\<exists>!z. eval (single x \<squnion> single y) z)"
668 then have "singleton dfault (single x \<squnion> single y) = dfault ()"
669 by (rule singleton_undefinedI)
670 with False show ?thesis by simp
673 lemma singleton_sup_aux:
674 "singleton dfault (A \<squnion> B) = (if A = \<bottom> then singleton dfault B
675 else if B = \<bottom> then singleton dfault A
676 else singleton dfault
677 (single (singleton dfault A) \<squnion> single (singleton dfault B)))"
678 proof (cases "(\<exists>!x. eval A x) \<and> (\<exists>!y. eval B y)")
679 case True then show ?thesis by (simp add: single_singleton)
682 from False have A_or_B:
683 "singleton dfault A = dfault () \<or> singleton dfault B = dfault ()"
684 by (auto intro!: singleton_undefinedI)
685 then have rhs: "singleton dfault
686 (single (singleton dfault A) \<squnion> single (singleton dfault B)) = dfault ()"
687 by (auto simp add: singleton_sup_single_single singleton_single)
688 from False have not_unique:
689 "\<not> (\<exists>!x. eval A x) \<or> \<not> (\<exists>!y. eval B y)" by simp
690 show ?thesis proof (cases "A \<noteq> \<bottom> \<and> B \<noteq> \<bottom>")
692 then obtain a b where a: "eval A a" and b: "eval B b"
693 by (blast elim: not_bot)
694 with True not_unique have "\<not> (\<exists>!x. eval (A \<squnion> B) x)"
695 by (auto simp add: sup_pred_def bot_pred_def)
696 then have "singleton dfault (A \<squnion> B) = dfault ()" by (rule singleton_undefinedI)
697 with True rhs show ?thesis by simp
699 case False then show ?thesis by auto
704 "singleton dfault (A \<squnion> B) = (if A = \<bottom> then singleton dfault B
705 else if B = \<bottom> then singleton dfault A
706 else if singleton dfault A = singleton dfault B then singleton dfault A else dfault ())"
707 using singleton_sup_aux [of dfault A B] by (simp only: singleton_sup_single_single)
710 subsubsection {* Derived operations *}
712 definition if_pred :: "bool \<Rightarrow> unit pred" where
713 if_pred_eq: "if_pred b = (if b then single () else \<bottom>)"
715 definition holds :: "unit pred \<Rightarrow> bool" where
716 holds_eq: "holds P = eval P ()"
718 definition not_pred :: "unit pred \<Rightarrow> unit pred" where
719 not_pred_eq: "not_pred P = (if eval P () then \<bottom> else single ())"
721 lemma if_predI: "P \<Longrightarrow> eval (if_pred P) ()"
722 unfolding if_pred_eq by (auto intro: singleI)
724 lemma if_predE: "eval (if_pred b) x \<Longrightarrow> (b \<Longrightarrow> x = () \<Longrightarrow> P) \<Longrightarrow> P"
725 unfolding if_pred_eq by (cases b) (auto elim: botE)
727 lemma not_predI: "\<not> P \<Longrightarrow> eval (not_pred (Pred (\<lambda>u. P))) ()"
728 unfolding not_pred_eq eval_pred by (auto intro: singleI)
730 lemma not_predI': "\<not> eval P () \<Longrightarrow> eval (not_pred P) ()"
731 unfolding not_pred_eq by (auto intro: singleI)
733 lemma not_predE: "eval (not_pred (Pred (\<lambda>u. P))) x \<Longrightarrow> (\<not> P \<Longrightarrow> thesis) \<Longrightarrow> thesis"
734 unfolding not_pred_eq
735 by (auto split: split_if_asm elim: botE)
737 lemma not_predE': "eval (not_pred P) x \<Longrightarrow> (\<not> eval P x \<Longrightarrow> thesis) \<Longrightarrow> thesis"
738 unfolding not_pred_eq
739 by (auto split: split_if_asm elim: botE)
740 lemma "f () = False \<or> f () = True"
743 lemma closure_of_bool_cases [no_atp]:
744 fixes f :: "unit \<Rightarrow> bool"
745 assumes "f = (\<lambda>u. False) \<Longrightarrow> P f"
746 assumes "f = (\<lambda>u. True) \<Longrightarrow> P f"
749 have "f = (\<lambda>u. False) \<or> f = (\<lambda>u. True)"
753 apply (simp add: unit_eq)
756 apply (simp add: unit_eq)
758 from this assms show ?thesis by blast
761 lemma unit_pred_cases:
762 assumes "P \<bottom>"
763 assumes "P (single ())"
765 using assms unfolding bot_pred_def Collect_def empty_def single_def proof (cases Q)
767 assume "P (Pred (\<lambda>u. False))" "P (Pred (\<lambda>u. () = u))"
768 then have "P (Pred f)"
769 by (cases _ f rule: closure_of_bool_cases) simp_all
770 moreover assume "Q = Pred f"
771 ultimately show "P Q" by simp
775 "holds (if_pred b) = b"
776 unfolding if_pred_eq holds_eq
777 by (cases b) (auto intro: singleI elim: botE)
780 "if_pred (holds P) = P"
781 unfolding if_pred_eq holds_eq
782 by (rule unit_pred_cases) (auto intro: singleI elim: botE)
784 lemma is_empty_holds:
785 "is_empty P \<longleftrightarrow> \<not> holds P"
786 unfolding is_empty_def holds_eq
787 by (rule unit_pred_cases) (auto elim: botE intro: singleI)
789 definition map :: "('a \<Rightarrow> 'b) \<Rightarrow> 'a pred \<Rightarrow> 'b pred" where
790 "map f P = P \<guillemotright>= (single o f)"
792 lemma eval_map [simp]:
793 "eval (map f P) = image f (eval P)"
794 by (auto simp add: map_def)
796 enriched_type map: map
797 by (auto intro!: pred_eqI simp add: fun_eq_iff image_compose)
800 subsubsection {* Implementation *}
802 datatype 'a seq = Empty | Insert "'a" "'a pred" | Join "'a pred" "'a seq"
804 primrec pred_of_seq :: "'a seq \<Rightarrow> 'a pred" where
805 "pred_of_seq Empty = \<bottom>"
806 | "pred_of_seq (Insert x P) = single x \<squnion> P"
807 | "pred_of_seq (Join P xq) = P \<squnion> pred_of_seq xq"
809 definition Seq :: "(unit \<Rightarrow> 'a seq) \<Rightarrow> 'a pred" where
810 "Seq f = pred_of_seq (f ())"
814 primrec member :: "'a seq \<Rightarrow> 'a \<Rightarrow> bool" where
815 "member Empty x \<longleftrightarrow> False"
816 | "member (Insert y P) x \<longleftrightarrow> x = y \<or> eval P x"
817 | "member (Join P xq) x \<longleftrightarrow> eval P x \<or> member xq x"
820 "member xq = eval (pred_of_seq xq)"
822 case Empty show ?case
823 by (auto simp add: fun_eq_iff elim: botE)
825 case Insert show ?case
826 by (auto simp add: fun_eq_iff elim: supE singleE intro: supI1 supI2 singleI)
828 case Join then show ?case
829 by (auto simp add: fun_eq_iff elim: supE intro: supI1 supI2)
832 lemma eval_code [code]: "eval (Seq f) = member (f ())"
833 unfolding Seq_def by (rule sym, rule eval_member)
835 lemma single_code [code]:
836 "single x = Seq (\<lambda>u. Insert x \<bottom>)"
837 unfolding Seq_def by simp
839 primrec "apply" :: "('a \<Rightarrow> 'b pred) \<Rightarrow> 'a seq \<Rightarrow> 'b seq" where
840 "apply f Empty = Empty"
841 | "apply f (Insert x P) = Join (f x) (Join (P \<guillemotright>= f) Empty)"
842 | "apply f (Join P xq) = Join (P \<guillemotright>= f) (apply f xq)"
845 "pred_of_seq (apply f xq) = pred_of_seq xq \<guillemotright>= f"
847 case Empty show ?case
848 by (simp add: bottom_bind)
850 case Insert show ?case
851 by (simp add: single_bind sup_bind)
853 case Join then show ?case
854 by (simp add: sup_bind)
857 lemma bind_code [code]:
858 "Seq g \<guillemotright>= f = Seq (\<lambda>u. apply f (g ()))"
859 unfolding Seq_def by (rule sym, rule apply_bind)
861 lemma bot_set_code [code]:
862 "\<bottom> = Seq (\<lambda>u. Empty)"
863 unfolding Seq_def by simp
865 primrec adjunct :: "'a pred \<Rightarrow> 'a seq \<Rightarrow> 'a seq" where
866 "adjunct P Empty = Join P Empty"
867 | "adjunct P (Insert x Q) = Insert x (Q \<squnion> P)"
868 | "adjunct P (Join Q xq) = Join Q (adjunct P xq)"
871 "pred_of_seq (adjunct P xq) = P \<squnion> pred_of_seq xq"
872 by (induct xq) (simp_all add: sup_assoc sup_commute sup_left_commute)
874 lemma sup_code [code]:
875 "Seq f \<squnion> Seq g = Seq (\<lambda>u. case f ()
876 of Empty \<Rightarrow> g ()
877 | Insert x P \<Rightarrow> Insert x (P \<squnion> Seq g)
878 | Join P xq \<Rightarrow> adjunct (Seq g) (Join P xq))"
882 unfolding Seq_def by (simp add: sup_commute [of "\<bottom>"])
886 unfolding Seq_def by (simp add: sup_assoc)
891 by (simp add: adjunct_sup sup_assoc sup_commute sup_left_commute)
894 primrec contained :: "'a seq \<Rightarrow> 'a pred \<Rightarrow> bool" where
895 "contained Empty Q \<longleftrightarrow> True"
896 | "contained (Insert x P) Q \<longleftrightarrow> eval Q x \<and> P \<le> Q"
897 | "contained (Join P xq) Q \<longleftrightarrow> P \<le> Q \<and> contained xq Q"
899 lemma single_less_eq_eval:
900 "single x \<le> P \<longleftrightarrow> eval P x"
901 by (auto simp add: single_def less_eq_pred_def mem_def)
903 lemma contained_less_eq:
904 "contained xq Q \<longleftrightarrow> pred_of_seq xq \<le> Q"
905 by (induct xq) (simp_all add: single_less_eq_eval)
907 lemma less_eq_pred_code [code]:
908 "Seq f \<le> Q = (case f ()
909 of Empty \<Rightarrow> True
910 | Insert x P \<Rightarrow> eval Q x \<and> P \<le> Q
911 | Join P xq \<Rightarrow> P \<le> Q \<and> contained xq Q)"
913 (simp_all add: Seq_def single_less_eq_eval contained_less_eq)
915 lemma eq_pred_code [code]:
916 fixes P Q :: "'a pred"
917 shows "HOL.equal P Q \<longleftrightarrow> P \<le> Q \<and> Q \<le> P"
918 by (auto simp add: equal)
921 "HOL.equal (x :: 'a pred) x \<longleftrightarrow> True"
925 "pred_case f P = f (eval P)"
929 "pred_rec f P = f (eval P)"
932 inductive eq :: "'a \<Rightarrow> 'a \<Rightarrow> bool" where "eq x x"
934 lemma eq_is_eq: "eq x y \<equiv> (x = y)"
935 by (rule eq_reflection) (auto intro: eq.intros elim: eq.cases)
937 primrec null :: "'a seq \<Rightarrow> bool" where
938 "null Empty \<longleftrightarrow> True"
939 | "null (Insert x P) \<longleftrightarrow> False"
940 | "null (Join P xq) \<longleftrightarrow> is_empty P \<and> null xq"
943 "null xq \<longleftrightarrow> is_empty (pred_of_seq xq)"
944 by (induct xq) (simp_all add: is_empty_bot not_is_empty_single is_empty_sup)
946 lemma is_empty_code [code]:
947 "is_empty (Seq f) \<longleftrightarrow> null (f ())"
948 by (simp add: null_is_empty Seq_def)
950 primrec the_only :: "(unit \<Rightarrow> 'a) \<Rightarrow> 'a seq \<Rightarrow> 'a" where
951 [code del]: "the_only dfault Empty = dfault ()"
952 | "the_only dfault (Insert x P) = (if is_empty P then x else let y = singleton dfault P in if x = y then x else dfault ())"
953 | "the_only dfault (Join P xq) = (if is_empty P then the_only dfault xq else if null xq then singleton dfault P
954 else let x = singleton dfault P; y = the_only dfault xq in
955 if x = y then x else dfault ())"
957 lemma the_only_singleton:
958 "the_only dfault xq = singleton dfault (pred_of_seq xq)"
960 (auto simp add: singleton_bot singleton_single is_empty_def
961 null_is_empty Let_def singleton_sup)
963 lemma singleton_code [code]:
964 "singleton dfault (Seq f) = (case f ()
965 of Empty \<Rightarrow> dfault ()
966 | Insert x P \<Rightarrow> if is_empty P then x
967 else let y = singleton dfault P in
968 if x = y then x else dfault ()
969 | Join P xq \<Rightarrow> if is_empty P then the_only dfault xq
970 else if null xq then singleton dfault P
971 else let x = singleton dfault P; y = the_only dfault xq in
972 if x = y then x else dfault ())"
974 (auto simp add: Seq_def the_only_singleton is_empty_def
975 null_is_empty singleton_bot singleton_single singleton_sup Let_def)
977 definition not_unique :: "'a pred => 'a"
979 [code del]: "not_unique A = (THE x. eval A x)"
981 definition the :: "'a pred => 'a"
983 "the A = (THE x. eval A x)"
986 "(THE x. eval P x) = x \<Longrightarrow> the P = x"
987 by (simp add: the_def)
989 lemma the_eq [code]: "the A = singleton (\<lambda>x. not_unique A) A"
990 by (rule the_eqI) (simp add: singleton_def not_unique_def)
992 code_abort not_unique
994 code_reflect Predicate
995 datatypes pred = Seq and seq = Empty | Insert | Join
999 signature PREDICATE =
1001 datatype 'a pred = Seq of (unit -> 'a seq)
1002 and 'a seq = Empty | Insert of 'a * 'a pred | Join of 'a pred * 'a seq
1003 val yield: 'a pred -> ('a * 'a pred) option
1004 val yieldn: int -> 'a pred -> 'a list * 'a pred
1005 val map: ('a -> 'b) -> 'a pred -> 'b pred
1008 structure Predicate : PREDICATE =
1011 datatype pred = datatype Predicate.pred
1012 datatype seq = datatype Predicate.seq
1014 fun map f = Predicate.map f;
1016 fun yield (Seq f) = next (f ())
1017 and next Empty = NONE
1018 | next (Insert (x, P)) = SOME (x, P)
1019 | next (Join (P, xq)) = (case yield P
1021 | SOME (x, Q) => SOME (x, Seq (fn _ => Join (Q, xq))));
1023 fun anamorph f k x = (if k = 0 then ([], x)
1026 | SOME (v, y) => let
1027 val (vs, z) = anamorph f (k - 1) y
1028 in (v :: vs, z) end);
1030 fun yieldn P = anamorph yield P;
1036 bot ("\<bottom>") and
1038 inf (infixl "\<sqinter>" 70) and
1039 sup (infixl "\<squnion>" 65) and
1040 Inf ("\<Sqinter>_" [900] 900) and
1041 Sup ("\<Squnion>_" [900] 900) and
1042 bind (infixl "\<guillemotright>=" 70)
1044 no_syntax (xsymbols)
1045 "_INF1" :: "pttrns \<Rightarrow> 'b \<Rightarrow> 'b" ("(3\<Sqinter>_./ _)" [0, 10] 10)
1046 "_INF" :: "pttrn \<Rightarrow> 'a set \<Rightarrow> 'b \<Rightarrow> 'b" ("(3\<Sqinter>_\<in>_./ _)" [0, 0, 10] 10)
1047 "_SUP1" :: "pttrns \<Rightarrow> 'b \<Rightarrow> 'b" ("(3\<Squnion>_./ _)" [0, 10] 10)
1048 "_SUP" :: "pttrn \<Rightarrow> 'a set \<Rightarrow> 'b \<Rightarrow> 'b" ("(3\<Squnion>_\<in>_./ _)" [0, 0, 10] 10)
1050 hide_type (open) pred seq
1051 hide_const (open) Pred eval single bind is_empty singleton if_pred not_pred holds
1052 Empty Insert Join Seq member pred_of_seq "apply" adjunct null the_only eq map not_unique the