Revision 7f08941c82a5d3bdfde6224656f489e5ea6c533b authored by Cameron Low on 19 January 2023, 18:14:06 UTC, committed by Pierre-Yves Strub on 19 January 2023, 21:44:41 UTC
Here is an example of use: ``` require import AllCore. type t = [ A of int | B of bool | C ]. module M = { proc f(x : t) : int = { var y : int <- 0; match x with | A v => y <- `|v|; | B _ => y <- 1; | C => y <- 2; end; return y; } }. lemma L : hoare[M.f : true ==> 0 <= res]. proof. by proc; sp; match => [v|b|]; auto=> /> /#. qed. ```
1 parent ba37062