Revision 7f08941c82a5d3bdfde6224656f489e5ea6c533b authored by Cameron Low on 19 January 2023, 18:14:06 UTC, committed by Pierre-Yves Strub on 19 January 2023, 21:44:41 UTC
Here is an example of use:

```
require import AllCore.

type t = [
  A of int | B of bool | C
].

module M = {
  proc f(x : t) : int = {
    var y : int <- 0;

    match x with
    | A v => y <- `|v|;
    | B _ => y <- 1;
    | C   => y <- 2;
    end;

    return y;
  }
}.

lemma L : hoare[M.f : true ==> 0 <= res].
proof. by proc; sp; match => [v|b|]; auto=> /> /#. qed.
```
1 parent ba37062
History

back to top