mirror of
https://github.com/pingcap/tla-plus.git
synced 2024-12-27 04:50:15 +08:00
Fix silly error in Coq proof.
This commit is contained in:
parent
5aee4f13c6
commit
7bf22a8151
@ -142,7 +142,7 @@ Inductive StateMultiStep : State -> State -> Prop :=
|
|||||||
StateMultiStep state state
|
StateMultiStep state state
|
||||||
| StateMultiStep1 :
|
| StateMultiStep1 :
|
||||||
forall state state1 state2,
|
forall state state1 state2,
|
||||||
StateMultiStep state1 state2 ->
|
StateStep state1 state2 ->
|
||||||
StateMultiStep state state1 ->
|
StateMultiStep state state1 ->
|
||||||
StateMultiStep state state2.
|
StateMultiStep state state2.
|
||||||
|
|
||||||
@ -275,7 +275,9 @@ Lemma Safety' :
|
|||||||
Invariant state ->
|
Invariant state ->
|
||||||
Invariant state'.
|
Invariant state'.
|
||||||
Proof.
|
Proof.
|
||||||
induction 1; crush.
|
induction 1; intros.
|
||||||
|
+ auto.
|
||||||
|
+ eapply StateStepKeepsInvariant; eauto.
|
||||||
Qed.
|
Qed.
|
||||||
|
|
||||||
Theorem Safety :
|
Theorem Safety :
|
||||||
|
Loading…
Reference in New Issue
Block a user