Mark Utting

Results 1 comments of Mark Utting

If you want to allow overlapping lvals, I think it should generate a proof obligation: assert i != j; or perhaps more generally: assert i == j ==> rhs1 ==...