News for hackers. Stuff that matters.
Re:Coming Soon: Machine-Checked Proofs in Everyday Development by mcguire on Sunday December 31, 2017 @12:17PM (#16041358)
Good talk!

So, one question: Adam gives one example of a proof where the initial automation fails because it does not consider a theorem that was previously proved. He also gives an example of some complex code where the proof is too tedious to do without lots of automation. What happens when your complex code changes in such a way that you need some extra lemmas but don't know what they are?

Re:Coming Soon: Machine-Checked Proofs in Everyday Development by yaantc on Sunday December 31, 2017 @04:42PM (#16043163)
It's manageable in practice I believe, and Adam quickly shows a feature related to this in the demo.

First, if some new features are added with associated properties, then some theorems/lemmas related to these properties will have to be added and proven. I don't think that part is problematic, because it's a "local" decision. This work is focused on the change.

The possible problems come from the impact of these changes to existing results. If you need to go and make other changes all over the place it wouldn't be scalable. But then automation and coq hint database can help. In the demo example you referred to Adam adds the lemma as a rewrite hint, and then it's picked by coq automation elsewhere. That's how local changes can automatically be leveraged globally by proof automation in existing proofs, with no changes (ok, not always. But that limits the impact).