bend-collections-laws-math
Releases (1)
-
1.0.0.0 indexed
Definitions (5,526)
proofs/lib/lemmas/proofs/map_lookup.bend
- def certificate
- law leaf_comparison
- law leaf_lookup
- law lift_left
- law lift_right
- law branch
- law lookup_certificate
- law returned_value_is_storedNo tree validity premise is needed for this direction.
- def listedIndependent list membership for actual Map.to_list output.
- law accumulator_included
- law leaf_enumerated
- law returned_value_enumerated
proofs/lib/lemmas/proofs/map_routing.bend
- def truthLogical forms of the existing executable routing predicates.
- law false_true
- law and_left
- law and_right
- law equal_bit
- def routed
- law route_projection
- law routed_certificate
- def validThis weaker property is precisely the part of critbit needed for lookup.
- law member_routed
- def copies_left
- def copies_right
- law duplicate_memberStructural duplication of a membership witness; no unrestricted Type cast.
- law lookup_leftConverse of native lookup soundness.
- law lookup_right
- law member_lookup
- law critbit_certificate
- law critbit_member_lookup
proofs/lib/lemmas/proofs/modular_addition.bend
- def strideThe binary constructor in the independent specification uses Base Nat.divmod.
- def binary_division
- def binary_quotient
- def binary_remainder
- def bit_roundtrip
- def binary_constructor
- def regroupReconstruct the low n bits after adding ANY multiple of 2^n.
- def reconstruct
- def add_refines_nActual full-width ripple addition equals independent mathematical conversion.
- def add_refines
- def time_add_refines
- def increment_refinesThe same reconstruction discharges wraparound for every metric counter.
- def counter_refines
proofs/lib/lemmas/proofs/modular_negation.bend
- def subtract_sumArithmetic cancellation against actual Base Nat.sub, with no bounds premise.
- def complementary_digits
- def complement_sumComplement and original together, plus one, are exactly 2^width.
- def complement_distance
- def negation_refinesActual two's-complement negation refines mathematical modular subtraction at every width, including zero and the signed minimum pattern.
- def native_negation_refinesThis concrete theorem reaches the actual fixed-width implementation without normalizing a 2^64 unary Nat literal in the checker.
proofs/lib/lemmas/proofs/nat_algebra.bend
- def succ_equalCommutative-semiring laws of Base Nat.add/Nat.mul, by induction on the actual definitions.
- def add_zero
- def add_succ
- def add_comm
- def add_assoc
- def add_swapa + (b + c) == b + (a + c)
- def mul_zero
- def mul_succ
- def mul_comm
- def mul_one
- def mul_add_right
- def mul_add_left
- def mul_assoc
- def double_add
- def double_self
- def double_mul
proofs/lib/lemmas/proofs/native_map.bend
- law empty_lookupThese unfold installed Base algorithms; no map axioms or replacement map.
- law empty_set
- law empty_delete
- law empty_has
- law zero_character_presencePresence bits are the key distinction between zero characters and end of string.
- law empty_presence
- law boolean_compare_self
- law word_compare_self
- law character_compare_self
- law string_compare_self
- law singleton_get
- law singleton_update
- law singleton_delete
- def routed_keyGeneral routing foundation: actual Base bit traversal preserves the entire string, irrespective of the requested bit, character codes, or tree validity.
- law recursive_bit_key
- law bit_go_preserves_key
- law bit_at_preserves_key
- law bit_preserves_key
- def comparison_identityA comparison certificate has content precisely in the EQ branch.
- law word_comparison_step
- law word_comparison_identity
- law comparison_lift
- def comparison_result_identity
- law character_comparison_identity
- law string_comparison_rec_identity
- law string_comparison_fin_identity
- law string_comparison_identity
- def comparison_tag
- law string_comparison_shape_step
- law string_comparison_shape
- law string_comparison_original_identity
- law string_equal_from_comparison
- law string_equal_comparison
- law difference_empty_leftFirst-difference base and common-prefix reduction laws for the existing algorithm.
- law difference_empty_right