1 import Base 2 import ../../../src/math/u64.bend as W 3 import ../../../src/math/w64.bend as X 4 import ../../../src/math/random/rand.bend as R 5 import ../../../spec/math/w64.bend as SW 6 import ../../../spec/math/random.bend as SRM 7 import ../../../spec/math/random/rand.bend as SR 8 import ../../lib/logic.bend as L 9 import ../typed/w64add.bend as WA 10 import ./uint64n.bend as UN 11 import ./below.bend as BL 12 13 # Uint64n.lt: uint64n(n) is the specification's bounded draw 14 # (Uint64n.value), which is below n. 15 16 def fst_val(-S: Data, r: W.U64 & S) -> {BL.pfst(S, SRM.val_pair(S, r)) == SW.value(R.fst(W.U64, S, r)) : Nat}: 17 match r: 18 case Tuple{x, s}: 19 {==} 20 21 def nz_pos(+v: Nat, +h: {Nat.is_eq(v, 0n) == False{} : Bool}) -> {Nat.is_lt(0n, v) == True{} : Bool}: 22 match v: 23 case 0n: 24 Empty.absurd({Nat.is_lt(0n, 0n) == True{} : Bool}, L.true_false(h)) 25 case 1n+p: 26 {==} 27 28 def uint64n_lt(~S: Data, ~next: S -> W.U64 & S, +s: S, +n: W.U64, +hn: {X.is_zero(n) == False{} : Bool}) -> SRM.Uint64n.lt(~S, ~next, s, n, hn): 29 +vn = SW.value(n) 30 +hv = Equal.trans(Bool, Nat.is_eq(vn, 0n), X.is_zero(n), False{}, Equal.sym(Bool, X.is_zero(n), Nat.is_eq(vn, 0n), WA.is_zero_value(n)), hn) 31 +e = Equal.trans(Nat, SW.value(R.fst(W.U64, S, R.uint64n(~S, ~next, s, n))), BL.pfst(S, SRM.val_pair(S, R.uint64n(~S, ~next, s, n))), BL.pfst(S, SR.below(~S, ~next, 127n, vn, s)), 32 Equal.sym(Nat, BL.pfst(S, SRM.val_pair(S, R.uint64n(~S, ~next, s, n))), SW.value(R.fst(W.U64, S, R.uint64n(~S, ~next, s, n))), fst_val(S, R.uint64n(~S, ~next, s, n))), 33 Equal.cong(Nat & S, Nat, p => BL.pfst(S, p), SRM.val_pair(S, R.uint64n(~S, ~next, s, n)), SR.below(~S, ~next, 127n, vn, s), UN.uint64n_value(~S, ~next, s, n))) 34 Equal.trans(Bool, Nat.is_lt(SW.value(R.fst(W.U64, S, R.uint64n(~S, ~next, s, n))), vn), Nat.is_lt(BL.pfst(S, SR.below(~S, ~next, 127n, vn, s)), vn), True{}, 35 Equal.cong(Nat, Bool, z => Nat.is_lt(z, vn), SW.value(R.fst(W.U64, S, R.uint64n(~S, ~next, s, n))), BL.pfst(S, SR.below(~S, ~next, 127n, vn, s)), e), 36 BL.below_lt(~S, ~next, 127n, vn, s, nz_pos(vn, hv))) 37