• Top
    • Documentation
    • Books
    • Recursion-and-induction
    • Boolean-reasoning
    • Debugging
    • Projects
    • Std
    • Proof-automation
    • Macro-libraries
    • ACL2
    • Interfacing-tools
    • Hardware-verification
    • Software-verification
      • Kestrel-books
        • Crypto-hdwallet
        • Error-checking
          • Def-error-checker
          • Ensure-function/macro/lambda
          • Ensure-symbol-is-fresh-event-name
          • Ensure-function/lambda/term-number-of-results
          • Ensure-function/lambda-no-stobjs
          • Ensure-function/lambda-arity
          • Ensure-function-name-or-numbered-wildcard
          • Ensure-function/lambda-guard-verified-fns
          • Ensure-function/lambda-logic-mode
          • Ensure-function/lambda-closed
          • Ensure-value-is-untranslated-term
          • Ensure-function-number-of-results
          • Ensure-boolean-or-auto-and-return-boolean
          • Ensure-term-if-call
          • Ensure-is-hints-specifier
          • Ensure-symbol-new-event-name
          • Ensure-symbol-different
          • Ensure-value-is-not-in-list
          • Ensure-term-free-vars-subset
          • Ensure-function/lambda-guard-verified-exec-fns
          • Ensure-value-is-in-list
          • Ensure-list-subset
          • Ensure-lambda-guard-verified-fns
          • Ensure-function-no-stobjs
          • Ensure-function-known-measure
            • Ensure-function-known-measure$
          • Ensure-term-not-call-of
          • Ensure-lambda-arity
          • Ensure-function-arity
          • Ensure-term-no-stobjs
          • Ensure-term-guard-verified-fns
          • Ensure-term-does-not-call
          • Ensure-lambda-logic-mode
          • Ensure-function-singly-recursive
          • Ensure-function-is-guard-verified
          • Ensure-term-logic-mode
          • Ensure-term-ground
          • Ensure-symbol-function
          • Ensure-list-functions
          • Ensure-keyword-value-list
          • Ensure-function-program-mode
          • Ensure-function-non-recursive
          • Ensure-function-is-pure-if-raw
          • Ensure-function-is-logic-mode
          • Ensure-function-is-defined
          • Ensure-function-has-args
          • Ensure-value-is-legal-variable-name
          • Ensure-value-is-function-name
          • Ensure-value-is-constant-name
          • Ensure-symbol-truelist-alist
          • Ensure-symbol-not-stobj
          • Ensure-symbol-not-keyword
          • Ensure-list-has-no-duplicates
          • Ensure-lambda-closed
          • Ensure-function-recursive
          • Ensure-function-name-list
          • Ensure-value-is-true-list
          • Ensure-value-is-symbol-list
          • Ensure-value-is-boolean
          • Ensure-tuple
          • Ensure-symbol-alist
          • Ensure-defun-mode-or-auto
          • Ensure-constant-name
          • Ensure-boolean-or-auto
          • Ensure-value-is-symbol
          • Ensure-value-is-string
          • Ensure-value-is-nil
          • Ensure-string-or-nil
          • Ensure-doublet-list
          • Ensure-defun-mode
          • Ensure-function-not-in-termination-thm
          • Ensure-lambda-guard-verified-exec-fns
          • Ensure-term-guard-verified-exec-fns
        • Apt
        • Abnf
        • Fty-extensions
        • Isar
        • Kestrel-utilities
        • Prime-field-constraint-systems
        • Soft
        • Bv
        • Imp-language
        • Event-macros
        • Bitcoin
        • Ethereum
        • Yul
        • Zcash
        • ACL2-programming-language
        • Prime-fields
        • Java
        • C
        • Syntheto
        • Number-theory
        • Cryptography
        • Lists-light
        • File-io-light
        • Json
        • Built-ins
        • Solidity
        • Axe
        • Std-extensions
        • Htclient
        • Typed-lists-light
        • Arithmetic-light
      • X86isa
      • Execloader
      • Axe
    • Testing-utilities
    • Math
  • Error-checking

Ensure-function-known-measure

Cause an error if a recursive function has an unknown measure (i.e. one with :?).

Signature
(ensure-function-known-measure fn description 
                               error-erp error-val ctx state) 
 
  → 
(mv erp val state)
Arguments
fn — Function to check.
    Guard (and (logic-function-namep fn (w state)) (recursivep fn nil (w state))) .
description — Guard (msgp description).
error-erp — Flag to return in case of error.
error-val — Value to return in case of error.
ctx — Context for errors.
Returns
erp — Type (implies erp (equal erp error-erp)).
val — Type (and (implies erp (equal val error-val)) (implies (and (not erp) error-erp) (not val))) .

Definitions and Theorems

Function: ensure-function-known-measure

(defun
 ensure-function-known-measure
 (fn description
     error-erp error-val ctx state)
 (declare (xargs :stobjs (state)))
 (declare
      (xargs :guard (and (msgp description)
                         (and (logic-function-namep fn (w state))
                              (recursivep fn nil (w state))))))
 (b*
  (((when (eq (car (measure fn (w state))) :?))
    (er-soft+
     ctx error-erp error-val
     "~@0 must have a known measure, i.e. not one of the form (:? ...)."
     description)))
  (value nil)))

Theorem: return-type-of-ensure-function-known-measure.erp

(defthm
 return-type-of-ensure-function-known-measure.erp
 (b*
   (((mv ?erp ?val ?state)
     (ensure-function-known-measure fn description
                                    error-erp error-val ctx state)))
   (implies erp (equal erp error-erp)))
 :rule-classes :rewrite)

Theorem: return-type-of-ensure-function-known-measure.val

(defthm
 return-type-of-ensure-function-known-measure.val
 (b*
   (((mv ?erp ?val ?state)
     (ensure-function-known-measure fn description
                                    error-erp error-val ctx state)))
   (and (implies erp (equal val error-val))
        (implies (and (not erp) error-erp)
                 (not val))))
 :rule-classes :rewrite)

Subtopics

Ensure-function-known-measure$
Calls ensure-function-known-measure with ctx and state as the last two arguments.