Generalising a set of proofs in coq











up vote
1
down vote

favorite












I am trying to complete the first part lab of the 6.826 MIT course, but I am unsure about a comment above one of the exercises that says I can solve a bunch of examples using the same proof. here is what i mean:



(* A `nattree` is a tree of natural numbers, where every internal
node has an associated number and leaves are empty. There are
two constructors, L (empty leaf) and I (internal node).
I's arguments are: left-subtree, number, right-subtree. *)
Inductive nattree : Set :=
| L : nattree (* Leaf *)
| I : nattree -> nat -> nattree -> nattree. (* Internal nodes *)

(* Some example nattrees. *)
Definition empty_nattree := L.
Definition singleton_nattree := I L 0 L.
Definition right_nattree := I L 0 (I L 1 (I L 2 (I L 3 L))).
Definition left_nattree := I (I (I (I L 0 L) 1 L) 2 L) 3 L.
Definition balanced_nattree := I (I L 0 (I L 1 L)) 2 (I L 3 L).
Definition unsorted_nattree := I (I L 3 (I L 1 L)) 0 (I L 2 L).

(* EXERCISE: Complete this proposition, which should be `True`
iff `x` is located somewhere in `t` (even if `t` is unsorted,
i.e., not a valid binary search tree). *)
Function btree_in (x:nat) (t:nattree) : Prop :=
match t with
| L => False
| I l n r => n = x / btree_in x l / btree_in x r
end.

(* EXERCISE: Complete these examples, which show `btree_in` works.
Hint: The same proof will work for every example.
End each example with `Qed.`. *)
Example btree_in_ex1 : ~ btree_in 0 empty_nattree.
simpl. auto.
Qed.
Example btree_in_ex2 : btree_in 0 singleton_nattree.
simpl. auto.
Qed.
Example btree_in_ex3 : btree_in 2 right_nattree.
simpl. right. auto.
Qed.
Example btree_in_ex4 : btree_in 2 left_nattree.
simpl. right. auto.
Qed.
Example btree_in_ex5 : btree_in 2 balanced_nattree.
simpl. auto.
Qed.
Example btree_in_ex6 : btree_in 2 unsorted_nattree.
simpl. auto.
Qed.
Example btree_in_ex7 : ~ btree_in 10 balanced_nattree.
simpl. intros G. destruct G. inversion H. destruct H. destruct H. inversion H.
destruct H. inversion H. destruct H. inversion H. destruct H. inversion H.
destruct H. destruct H. inversion H. destruct H. inversion H. destruct H.
Qed.
Example btree_in_ex8 : btree_in 3 unsorted_nattree.
simpl. auto.
Qed.


The code under the comments EXERCISE have been completed as an exercise (though ex7 required some googling...), the hint for the second exercise says 'Hint: The same proof will work for every example.' but i'm unsure how to write a proof for each one that isn't specific to that case.



The course material in question can be found here: http://6826.csail.mit.edu/2017/lab/lab0.html



As a beginner with Coq I'd appreciate being steered in the right direction as opposed to just being given a solution. If there is a particular tactic that would be useful here that I am perhaps missing it would be good to be pointed towards that...










share|improve this question


























    up vote
    1
    down vote

    favorite












    I am trying to complete the first part lab of the 6.826 MIT course, but I am unsure about a comment above one of the exercises that says I can solve a bunch of examples using the same proof. here is what i mean:



    (* A `nattree` is a tree of natural numbers, where every internal
    node has an associated number and leaves are empty. There are
    two constructors, L (empty leaf) and I (internal node).
    I's arguments are: left-subtree, number, right-subtree. *)
    Inductive nattree : Set :=
    | L : nattree (* Leaf *)
    | I : nattree -> nat -> nattree -> nattree. (* Internal nodes *)

    (* Some example nattrees. *)
    Definition empty_nattree := L.
    Definition singleton_nattree := I L 0 L.
    Definition right_nattree := I L 0 (I L 1 (I L 2 (I L 3 L))).
    Definition left_nattree := I (I (I (I L 0 L) 1 L) 2 L) 3 L.
    Definition balanced_nattree := I (I L 0 (I L 1 L)) 2 (I L 3 L).
    Definition unsorted_nattree := I (I L 3 (I L 1 L)) 0 (I L 2 L).

    (* EXERCISE: Complete this proposition, which should be `True`
    iff `x` is located somewhere in `t` (even if `t` is unsorted,
    i.e., not a valid binary search tree). *)
    Function btree_in (x:nat) (t:nattree) : Prop :=
    match t with
    | L => False
    | I l n r => n = x / btree_in x l / btree_in x r
    end.

    (* EXERCISE: Complete these examples, which show `btree_in` works.
    Hint: The same proof will work for every example.
    End each example with `Qed.`. *)
    Example btree_in_ex1 : ~ btree_in 0 empty_nattree.
    simpl. auto.
    Qed.
    Example btree_in_ex2 : btree_in 0 singleton_nattree.
    simpl. auto.
    Qed.
    Example btree_in_ex3 : btree_in 2 right_nattree.
    simpl. right. auto.
    Qed.
    Example btree_in_ex4 : btree_in 2 left_nattree.
    simpl. right. auto.
    Qed.
    Example btree_in_ex5 : btree_in 2 balanced_nattree.
    simpl. auto.
    Qed.
    Example btree_in_ex6 : btree_in 2 unsorted_nattree.
    simpl. auto.
    Qed.
    Example btree_in_ex7 : ~ btree_in 10 balanced_nattree.
    simpl. intros G. destruct G. inversion H. destruct H. destruct H. inversion H.
    destruct H. inversion H. destruct H. inversion H. destruct H. inversion H.
    destruct H. destruct H. inversion H. destruct H. inversion H. destruct H.
    Qed.
    Example btree_in_ex8 : btree_in 3 unsorted_nattree.
    simpl. auto.
    Qed.


    The code under the comments EXERCISE have been completed as an exercise (though ex7 required some googling...), the hint for the second exercise says 'Hint: The same proof will work for every example.' but i'm unsure how to write a proof for each one that isn't specific to that case.



    The course material in question can be found here: http://6826.csail.mit.edu/2017/lab/lab0.html



    As a beginner with Coq I'd appreciate being steered in the right direction as opposed to just being given a solution. If there is a particular tactic that would be useful here that I am perhaps missing it would be good to be pointed towards that...










    share|improve this question
























      up vote
      1
      down vote

      favorite









      up vote
      1
      down vote

      favorite











      I am trying to complete the first part lab of the 6.826 MIT course, but I am unsure about a comment above one of the exercises that says I can solve a bunch of examples using the same proof. here is what i mean:



      (* A `nattree` is a tree of natural numbers, where every internal
      node has an associated number and leaves are empty. There are
      two constructors, L (empty leaf) and I (internal node).
      I's arguments are: left-subtree, number, right-subtree. *)
      Inductive nattree : Set :=
      | L : nattree (* Leaf *)
      | I : nattree -> nat -> nattree -> nattree. (* Internal nodes *)

      (* Some example nattrees. *)
      Definition empty_nattree := L.
      Definition singleton_nattree := I L 0 L.
      Definition right_nattree := I L 0 (I L 1 (I L 2 (I L 3 L))).
      Definition left_nattree := I (I (I (I L 0 L) 1 L) 2 L) 3 L.
      Definition balanced_nattree := I (I L 0 (I L 1 L)) 2 (I L 3 L).
      Definition unsorted_nattree := I (I L 3 (I L 1 L)) 0 (I L 2 L).

      (* EXERCISE: Complete this proposition, which should be `True`
      iff `x` is located somewhere in `t` (even if `t` is unsorted,
      i.e., not a valid binary search tree). *)
      Function btree_in (x:nat) (t:nattree) : Prop :=
      match t with
      | L => False
      | I l n r => n = x / btree_in x l / btree_in x r
      end.

      (* EXERCISE: Complete these examples, which show `btree_in` works.
      Hint: The same proof will work for every example.
      End each example with `Qed.`. *)
      Example btree_in_ex1 : ~ btree_in 0 empty_nattree.
      simpl. auto.
      Qed.
      Example btree_in_ex2 : btree_in 0 singleton_nattree.
      simpl. auto.
      Qed.
      Example btree_in_ex3 : btree_in 2 right_nattree.
      simpl. right. auto.
      Qed.
      Example btree_in_ex4 : btree_in 2 left_nattree.
      simpl. right. auto.
      Qed.
      Example btree_in_ex5 : btree_in 2 balanced_nattree.
      simpl. auto.
      Qed.
      Example btree_in_ex6 : btree_in 2 unsorted_nattree.
      simpl. auto.
      Qed.
      Example btree_in_ex7 : ~ btree_in 10 balanced_nattree.
      simpl. intros G. destruct G. inversion H. destruct H. destruct H. inversion H.
      destruct H. inversion H. destruct H. inversion H. destruct H. inversion H.
      destruct H. destruct H. inversion H. destruct H. inversion H. destruct H.
      Qed.
      Example btree_in_ex8 : btree_in 3 unsorted_nattree.
      simpl. auto.
      Qed.


      The code under the comments EXERCISE have been completed as an exercise (though ex7 required some googling...), the hint for the second exercise says 'Hint: The same proof will work for every example.' but i'm unsure how to write a proof for each one that isn't specific to that case.



      The course material in question can be found here: http://6826.csail.mit.edu/2017/lab/lab0.html



      As a beginner with Coq I'd appreciate being steered in the right direction as opposed to just being given a solution. If there is a particular tactic that would be useful here that I am perhaps missing it would be good to be pointed towards that...










      share|improve this question













      I am trying to complete the first part lab of the 6.826 MIT course, but I am unsure about a comment above one of the exercises that says I can solve a bunch of examples using the same proof. here is what i mean:



      (* A `nattree` is a tree of natural numbers, where every internal
      node has an associated number and leaves are empty. There are
      two constructors, L (empty leaf) and I (internal node).
      I's arguments are: left-subtree, number, right-subtree. *)
      Inductive nattree : Set :=
      | L : nattree (* Leaf *)
      | I : nattree -> nat -> nattree -> nattree. (* Internal nodes *)

      (* Some example nattrees. *)
      Definition empty_nattree := L.
      Definition singleton_nattree := I L 0 L.
      Definition right_nattree := I L 0 (I L 1 (I L 2 (I L 3 L))).
      Definition left_nattree := I (I (I (I L 0 L) 1 L) 2 L) 3 L.
      Definition balanced_nattree := I (I L 0 (I L 1 L)) 2 (I L 3 L).
      Definition unsorted_nattree := I (I L 3 (I L 1 L)) 0 (I L 2 L).

      (* EXERCISE: Complete this proposition, which should be `True`
      iff `x` is located somewhere in `t` (even if `t` is unsorted,
      i.e., not a valid binary search tree). *)
      Function btree_in (x:nat) (t:nattree) : Prop :=
      match t with
      | L => False
      | I l n r => n = x / btree_in x l / btree_in x r
      end.

      (* EXERCISE: Complete these examples, which show `btree_in` works.
      Hint: The same proof will work for every example.
      End each example with `Qed.`. *)
      Example btree_in_ex1 : ~ btree_in 0 empty_nattree.
      simpl. auto.
      Qed.
      Example btree_in_ex2 : btree_in 0 singleton_nattree.
      simpl. auto.
      Qed.
      Example btree_in_ex3 : btree_in 2 right_nattree.
      simpl. right. auto.
      Qed.
      Example btree_in_ex4 : btree_in 2 left_nattree.
      simpl. right. auto.
      Qed.
      Example btree_in_ex5 : btree_in 2 balanced_nattree.
      simpl. auto.
      Qed.
      Example btree_in_ex6 : btree_in 2 unsorted_nattree.
      simpl. auto.
      Qed.
      Example btree_in_ex7 : ~ btree_in 10 balanced_nattree.
      simpl. intros G. destruct G. inversion H. destruct H. destruct H. inversion H.
      destruct H. inversion H. destruct H. inversion H. destruct H. inversion H.
      destruct H. destruct H. inversion H. destruct H. inversion H. destruct H.
      Qed.
      Example btree_in_ex8 : btree_in 3 unsorted_nattree.
      simpl. auto.
      Qed.


      The code under the comments EXERCISE have been completed as an exercise (though ex7 required some googling...), the hint for the second exercise says 'Hint: The same proof will work for every example.' but i'm unsure how to write a proof for each one that isn't specific to that case.



      The course material in question can be found here: http://6826.csail.mit.edu/2017/lab/lab0.html



      As a beginner with Coq I'd appreciate being steered in the right direction as opposed to just being given a solution. If there is a particular tactic that would be useful here that I am perhaps missing it would be good to be pointed towards that...







      coq theorem-proving






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 8 at 9:14









      danbroooks

      99431531




      99431531
























          1 Answer
          1






          active

          oldest

          votes

















          up vote
          1
          down vote



          accepted










          I think you're just missing the intuition tactic, which intros hypotheses when it sees A -> B, unfolds ~P to P -> False and intro's that, splits /s and /s in the hypotheses, breaks /s in the goal into multiple subgoals, and uses auto to search both branches of /s in the goal. That may seem like a lot but note that these are all basic strategies from logic (other than the call to auto).



          After you run simpl on each of these exercises you'll see it fits this form and then intuition will work.






          share|improve this answer





















            Your Answer






            StackExchange.ifUsing("editor", function () {
            StackExchange.using("externalEditor", function () {
            StackExchange.using("snippets", function () {
            StackExchange.snippets.init();
            });
            });
            }, "code-snippets");

            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "1"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














             

            draft saved


            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53204593%2fgeneralising-a-set-of-proofs-in-coq%23new-answer', 'question_page');
            }
            );

            Post as a guest
































            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            1
            down vote



            accepted










            I think you're just missing the intuition tactic, which intros hypotheses when it sees A -> B, unfolds ~P to P -> False and intro's that, splits /s and /s in the hypotheses, breaks /s in the goal into multiple subgoals, and uses auto to search both branches of /s in the goal. That may seem like a lot but note that these are all basic strategies from logic (other than the call to auto).



            After you run simpl on each of these exercises you'll see it fits this form and then intuition will work.






            share|improve this answer

























              up vote
              1
              down vote



              accepted










              I think you're just missing the intuition tactic, which intros hypotheses when it sees A -> B, unfolds ~P to P -> False and intro's that, splits /s and /s in the hypotheses, breaks /s in the goal into multiple subgoals, and uses auto to search both branches of /s in the goal. That may seem like a lot but note that these are all basic strategies from logic (other than the call to auto).



              After you run simpl on each of these exercises you'll see it fits this form and then intuition will work.






              share|improve this answer























                up vote
                1
                down vote



                accepted







                up vote
                1
                down vote



                accepted






                I think you're just missing the intuition tactic, which intros hypotheses when it sees A -> B, unfolds ~P to P -> False and intro's that, splits /s and /s in the hypotheses, breaks /s in the goal into multiple subgoals, and uses auto to search both branches of /s in the goal. That may seem like a lot but note that these are all basic strategies from logic (other than the call to auto).



                After you run simpl on each of these exercises you'll see it fits this form and then intuition will work.






                share|improve this answer












                I think you're just missing the intuition tactic, which intros hypotheses when it sees A -> B, unfolds ~P to P -> False and intro's that, splits /s and /s in the hypotheses, breaks /s in the goal into multiple subgoals, and uses auto to search both branches of /s in the goal. That may seem like a lot but note that these are all basic strategies from logic (other than the call to auto).



                After you run simpl on each of these exercises you'll see it fits this form and then intuition will work.







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Nov 8 at 11:51









                Tej Chajed

                2,655715




                2,655715






























                     

                    draft saved


                    draft discarded



















































                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53204593%2fgeneralising-a-set-of-proofs-in-coq%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest




















































































                    Popular posts from this blog

                    Schultheiß

                    Verwaltungsgliederung Dänemarks

                    Liste der Kulturdenkmale in Wilsdruff