Lean migration: Phase 6 (forward analysis framework)
- Spa.Analysis.Forward.Lattices: VariableValues/StateVariables (FiniteMap instantiations), fixed heights, variablesAt, joinForKey/joinAll, interpV and its sup/foldr lemmas - Spa.Analysis.Forward.Evaluation: StmtEvaluator/ExprEvaluator + validity (the Agda Valid* instance records become plain Props) - Spa.Analysis.Forward.Adapters: expr-to-stmt evaluator adapter + validity - Spa.Analysis.Forward: updateAll, analyze, result (least fixpoint via the gas-based Fixedpoint), walkTrace, analyze_correct — the framework's main soundness theorem Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
164
lean/Spa/Analysis/Forward.lean
Normal file
164
lean/Spa/Analysis/Forward.lean
Normal file
@@ -0,0 +1,164 @@
|
||||
/-
|
||||
Port of `Analysis/Forward.agda` (`WithProg`, `WithStmtEvaluator`,
|
||||
`WithValidInterpretation`).
|
||||
|
||||
Correspondence:
|
||||
updateVariablesForState, -Monoʳ ↦ updateVariablesForState, _mono
|
||||
updateAll, updateAll-Mono,
|
||||
updateAll-k∈ks-≡ ↦ updateAll, updateAll_mono, updateAll_mem_eq
|
||||
analyze, analyze-Mono ↦ analyze, analyze_mono
|
||||
result, result≈analyze-result ↦ result, result_eq
|
||||
variablesAt-updateAll ↦ variablesAt_updateAll
|
||||
eval-fold-valid ↦ eval_fold_valid
|
||||
updateVariablesForState-matches ↦ updateVariablesForState_matches
|
||||
updateAll-matches ↦ updateAll_matches
|
||||
stepTrace ↦ stepTrace (the `subst`/`⟦⟧ᵛ-respects-≈ᵛ`
|
||||
plumbing becomes plain rewriting with `=`)
|
||||
walkTrace ↦ walkTrace
|
||||
joinForKey-initialState-⊥ᵛ ↦ joinForKey_initialState
|
||||
⟦joinAll-initialState⟧ᵛ∅ ↦ interpV_joinForKey_initialState
|
||||
analyze-correct ↦ analyze_correct
|
||||
-/
|
||||
import Spa.Analysis.Forward.Lattices
|
||||
import Spa.Analysis.Forward.Evaluation
|
||||
import Spa.Analysis.Forward.Adapters
|
||||
import Spa.Fixedpoint
|
||||
|
||||
namespace Spa
|
||||
|
||||
variable {L : Type} [Lattice L] [DecidableEq L] {prog : Program} {h : ℕ}
|
||||
(fhL : FixedHeight L h) (E : StmtEvaluator L prog)
|
||||
|
||||
/-- Agda: `updateVariablesForState`. -/
|
||||
def updateVariablesForState (s : prog.State) (sv : StateVariables L prog) :
|
||||
VariableValues L prog :=
|
||||
(prog.code s).foldl (fun vs bs => E.eval s bs vs) (variablesAt s sv)
|
||||
|
||||
omit [DecidableEq L] in
|
||||
/-- Agda: `updateVariablesForState-Monoʳ`. -/
|
||||
theorem updateVariablesForState_mono (s : prog.State) :
|
||||
Monotone (updateVariablesForState E s) := fun _ _ hle =>
|
||||
foldl_mono' (prog.code s) _ (fun bs => E.eval_mono s bs) (variablesAt_le hle s)
|
||||
|
||||
/-- Agda: `updateAll`. -/
|
||||
def updateAll (sv : StateVariables L prog) : StateVariables L prog :=
|
||||
FiniteMap.generalizedUpdate id (fun s sv => updateVariablesForState E s sv)
|
||||
prog.states sv
|
||||
|
||||
omit [DecidableEq L] in
|
||||
/-- Agda: `updateAll-Mono`. -/
|
||||
theorem updateAll_mono : Monotone (updateAll E) :=
|
||||
FiniteMap.generalizedUpdate_monotone monotone_id (updateVariablesForState_mono E)
|
||||
|
||||
omit [DecidableEq L] in
|
||||
/-- Agda: `updateAll-k∈ks-≡`. -/
|
||||
theorem updateAll_mem_eq {s : prog.State} {vs : VariableValues L prog}
|
||||
{sv : StateVariables L prog} (hmem : (s, vs) ∈ updateAll E sv) :
|
||||
vs = updateVariablesForState E s sv :=
|
||||
FiniteMap.generalizedUpdate_mem_eq (prog.states_complete s) hmem
|
||||
|
||||
omit [DecidableEq L] in
|
||||
/-- Agda: `variablesAt-updateAll`. -/
|
||||
theorem variablesAt_updateAll (s : prog.State) (sv : StateVariables L prog) :
|
||||
variablesAt s (updateAll E sv) = updateVariablesForState E s sv :=
|
||||
updateAll_mem_eq E (variablesAt_mem s (updateAll E sv))
|
||||
|
||||
/-- Agda: `analyze`. -/
|
||||
def analyze (sv : StateVariables L prog) : StateVariables L prog :=
|
||||
updateAll E (joinAll fhL sv)
|
||||
|
||||
omit [DecidableEq L] in
|
||||
/-- Agda: `analyze-Mono`. -/
|
||||
theorem analyze_mono : Monotone (analyze fhL E) := fun _ _ hle =>
|
||||
updateAll_mono E (joinAll_mono fhL hle)
|
||||
|
||||
/-- Agda: `result` (the least fixpoint of `analyze`). -/
|
||||
def result : StateVariables L prog :=
|
||||
Fixedpoint.aFix (statesFixedHeight L prog fhL) (analyze fhL E) (analyze_mono fhL E)
|
||||
|
||||
/-- Agda: `result≈analyze-result`. -/
|
||||
theorem result_eq : result fhL E = analyze fhL E (result fhL E) :=
|
||||
Fixedpoint.aFix_eq (statesFixedHeight L prog fhL) (analyze fhL E) (analyze_mono fhL E)
|
||||
|
||||
/-! ### Semantic correctness (Agda: `WithValidInterpretation`) -/
|
||||
|
||||
variable {I : LatticeInterpretation L} {E}
|
||||
variable (hE : IsValidStmtEvaluator E I)
|
||||
include hE
|
||||
|
||||
omit [DecidableEq L] in
|
||||
/-- Agda: `eval-fold-valid`. -/
|
||||
theorem eval_fold_valid {s : prog.State} {bss : List BasicStmt}
|
||||
{vs : VariableValues L prog} {ρ₁ ρ₂ : Env}
|
||||
(hbss : EvalBasicStmts ρ₁ bss ρ₂) (hvs : interpV I vs ρ₁) :
|
||||
interpV I (bss.foldl (fun vs bs => E.eval s bs vs) vs) ρ₂ := by
|
||||
induction hbss generalizing vs with
|
||||
| nil => exact hvs
|
||||
| cons hbs _ ih => exact ih (hE hbs hvs)
|
||||
|
||||
omit [DecidableEq L] in
|
||||
/-- Agda: `updateVariablesForState-matches`. -/
|
||||
theorem updateVariablesForState_matches {s : prog.State}
|
||||
{sv : StateVariables L prog} {ρ₁ ρ₂ : Env}
|
||||
(hbss : EvalBasicStmts ρ₁ (prog.code s) ρ₂)
|
||||
(hvs : interpV I (variablesAt s sv) ρ₁) :
|
||||
interpV I (updateVariablesForState E s sv) ρ₂ :=
|
||||
eval_fold_valid hE hbss hvs
|
||||
|
||||
omit [DecidableEq L] in
|
||||
/-- Agda: `updateAll-matches`. -/
|
||||
theorem updateAll_matches {s : prog.State} {sv : StateVariables L prog}
|
||||
{ρ₁ ρ₂ : Env} (hbss : EvalBasicStmts ρ₁ (prog.code s) ρ₂)
|
||||
(hvs : interpV I (variablesAt s sv) ρ₁) :
|
||||
interpV I (variablesAt s (updateAll E sv)) ρ₂ := by
|
||||
rw [variablesAt_updateAll]
|
||||
exact updateVariablesForState_matches hE hbss hvs
|
||||
|
||||
/-- Agda: `stepTrace`. -/
|
||||
theorem stepTrace {s₁ : prog.State} {ρ₁ ρ₂ : Env}
|
||||
(hjoin : interpV I (joinForKey fhL s₁ (result fhL E)) ρ₁)
|
||||
(hbss : EvalBasicStmts ρ₁ (prog.code s₁) ρ₂) :
|
||||
interpV I (variablesAt s₁ (result fhL E)) ρ₂ := by
|
||||
rw [result_eq fhL E]
|
||||
refine updateAll_matches hE hbss ?_
|
||||
rw [variablesAt_joinAll]
|
||||
exact hjoin
|
||||
|
||||
/-- Agda: `walkTrace`. -/
|
||||
theorem walkTrace {s₁ s₂ : prog.State} {ρ₁ ρ₂ : Env}
|
||||
(hjoin : interpV I (joinForKey fhL s₁ (result fhL E)) ρ₁)
|
||||
(tr : Trace prog.graph s₁ s₂ ρ₁ ρ₂) :
|
||||
interpV I (variablesAt s₂ (result fhL E)) ρ₂ := by
|
||||
induction tr with
|
||||
| single hbss => exact stepTrace fhL hE hjoin hbss
|
||||
| @edge _ ρ' _ i₁ i₂ _ hbss hedge _ ih =>
|
||||
have hstep : interpV I (variablesAt i₁ (result fhL E)) ρ' :=
|
||||
stepTrace fhL hE hjoin hbss
|
||||
have hmem : variablesAt i₁ (result fhL E)
|
||||
∈ (result fhL E).valuesAt (prog.incoming i₂) :=
|
||||
FiniteMap.mem_valuesAt prog.states_nodup
|
||||
(prog.mem_incoming_of_edge hedge) (variablesAt_mem i₁ (result fhL E))
|
||||
exact ih (interpV_foldr fhL I hstep hmem)
|
||||
|
||||
omit hE in
|
||||
/-- Agda: `joinForKey-initialState-⊥ᵛ`. -/
|
||||
theorem joinForKey_initialState :
|
||||
joinForKey fhL prog.initialState (result fhL E) = botV L prog fhL := by
|
||||
rw [joinForKey, prog.incoming_initialState_eq_nil]
|
||||
rfl
|
||||
|
||||
omit hE in
|
||||
/-- Agda: `⟦joinAll-initialState⟧ᵛ∅`. -/
|
||||
theorem interpV_joinForKey_initialState :
|
||||
interpV I (joinForKey fhL prog.initialState (result fhL E)) [] := by
|
||||
rw [joinForKey_initialState]
|
||||
exact interpV_botV_nil fhL I
|
||||
|
||||
/-- Agda: `analyze-correct` — the analysis result at the final state soundly
|
||||
describes every terminating execution of the program. -/
|
||||
theorem analyze_correct {ρ : Env} (hrun : EvalStmt [] prog.rootStmt ρ) :
|
||||
interpV I (variablesAt prog.finalState (result fhL E)) ρ :=
|
||||
walkTrace fhL hE (interpV_joinForKey_initialState fhL (E := E) (I := I))
|
||||
(prog.trace hrun)
|
||||
|
||||
end Spa
|
||||
Reference in New Issue
Block a user