Formalization and Execution of STE in HOL

(1)

!"

#!

$

"

%

& $

!

! '!

()

* !

! " #$

$ % " &'

' '

$$

"

#$ (

$!"

(( # (

" )

'$")'$

$' "*(

' +

$'"

*+,-*)%

(2)

*)'")$

' + $ ' *)

"&'

"/,3-

" )

'

*)$#

")'

'' "

/'*)

$'

,3-"4'*)

" 5

*) $ '

*) "' $

*) ' #

' ' 2 "" ,3-" 4

'

"

2 !,3-'

,3-"4$

'''!"

4

$") ' "

6

$',0789-"

:+"",7-5$

( ' ;<* " )

( $ '

"

)*)'

" 4 '$

2"" ,0-") %

$'''#

8''

#"

)'$ ' ' ,3=

>-"

+,

(3)

'& ,=-")<

*)" 4 $ 2 "" ,3-

*) '& "

2"" ,>- *) '

6 "

) $ @ ")

")$ $

"

) %( A(

"&'

")'$$''

'"

/ ' " 4

*)"4'

*)

"/*'!$ '*)

' 5 '

'+$"

/* .'''! *)

$ ' *) " /

' "

*+,- '

"/ >(

''$'"5

(

'B '

' B >BB")

%B"4 (

'

' >")'

"

2''

$'#

,-"

(4)

5 ' (

' ") 5

5 %(

")"

/ # ' *)

":' *)

,-"

* + '

>'

$'")'

' > ")

C ' '$'

' >"

)*)'

DEBFG >"4

$DF "

4(,3-

*)"

; D F

$DF'

5"&'Æ

'

"

!

"

"H

"2

(5)

2 # "

) + D F" /'

#

5 $ ' ' '

" &'' $ (

' "*''

D F#DF"

/ *) (

C

!

/(

' " /

*)

& "/

" )

*)!# "

(

"2(

""(D F

#DF ""

* #

# " ) (

"H'' ' #

"2#

#

"5'''! "

" # !!

! $%&

%'(% ! ! $%&

"% $%& ! ! ) *

(6)

/*) +

" /! *) ' '

+ "

'+, -+

% %+

.

%/ !

%* !

012 3

4 (1 3

1( .5

4,80-#$#%&'() *'

'*" &' ' ,3- '

"

)'

DF " )&5 ,1- $

'&5$

' %D''B

5$'5F"

" #

4' + " 4!

&* '+

#"

'" +!

'0%'( %/ ! " ! /

'0%'( %* ! " ! /

* 6 '0%'( * 012 6 ! '0%'( * !

'0%'( 6 !

7'0%'( 4 (1 7 ! 7 3 '0%'( !

'0%'( 1( ! '0%'( ', * !

(7)

< *)$

& ++ ,

'& ,+

!++ $'

& "

) $ !

&

8 + -+

0 9 $%&

'0%9: 0 33 9 $%&

! %'(% ! ! $%& 3

'0%'( 0 ', ! 3

'0%'( 9 ', !

*5,-*)")

# +")

+& ++ ,

*) # ,

# DF + &

,"

4 # D(F

+ D(.F ' '

! $"

4'*)D*#F,- $

D

+(

F''")

Æ

# +

")#

"

'(

0 9 $%&

'(% 0 33 9 $%& ; 2# 9 3

<(<=(> 1 0 0 1 9 3

" 2'" 9 2- 0 $%&

(8)

&0 "4 "

4'

$

*)"

) + '

*)+(

"

# *? 9 '( !#

0 9 $%&

'0%9: 0 33 9 $%&

'(% 0 33 9 $%&

) 5"&

$'*) ' $

*)'(5"

)'

' ' *) +

5#

' '5

' ' *) '

5'

' *) '

5'

4#"

# ( ) # * +

*5' 5

' G "45'

" ) "

' 5

'"

!

2 '5

"45#

"

!

(9)

5#"

= " -+

'0%= %/ ! % ! % /

'0%= %* ! % ! % /

* 6

'0%= * 012 6

! % '0%= * ! % '0%= 6 ! %

7

'0%= 4 (1 7 ! % 7 3 '0%= ! %

'0%= 1(

! % '0%= ',% * ! %

) ' "

Æ5#"

+ *

4 ' 5

' *)'"

2! = 8

4 '

# "

'' #5

#

2

% ,%% % %

2 ? 2 "

! %

,%%" ! %

,%% ! %

2 5 ' ( '

' 5 " )

' '

"4'

" 4 ' ' ''

(10)

25# '

%5(

"

= " # !!

! % $%&

%=% ! ! % $%&

$%& ! % ! % ) *

$ # *

4 ' 5 (

#" / $ '

*)''5'

' $ ' D F

"

/'

'

'5 "D' "

FB

'

5

#DF

5 ""

4 4 ''

"

&! =

$%& $%&

&+ $%&$%&

% %@

$%& % %@ 3

"% $%& ,%% %

,%% %@

-

/' *)'

5'")+

# 5#"

5' '

(11)

$%& $%&

&+ $%& $%& 3

! % %=% ! ! % $%& 3

%'(% ! ,%%" ! % $%&

)''

$D"" 4F5

#'5

#"

2

,3- " ) ,3- ''

4D2 3 ,3-F 5 #

5 # " )

2 3 D ,3-F ' " ?

2 3'#

,3-"

' 2 3 D ,3-F

#" 4 $

4D23F

''''' %D

,3-F"/

2 "

4''' +(

5 #

5#"

6? > ! =

"

"% '0%= "% '0%'( ,%%" "%

H'' / 5"/ 5

' 5

4+

5 # '

5 !

+ D& F

Æ

5##+

(12)

# = A

0 9 $%& $%&

&+ $%&$%& 3

'0%9: 0 33 9 $%& 3

! %

%=% ! ! % $%& 3

'0%= 0 ',% ! % 3

'0%= 9 ',% ! %

/ 5 ''

'"/'$*)

' '" ) '

*) '

+')

'") 5''

' +

"

/ 5 %

*) '

5' ''

4"

/''''/ % / 5

(H

*)

D*#F'# "

/ ' ' (H

' D ,3-F"4

5"5''' "

(13)

1

0

1 1 0

2 # + 1 !

1%

BB #

BB # 1 BB

2 # # + 1 !

% %@

1% % %@

BB 3 %@ C% BB %

BB 3 %@ C%@

4'*)'*)(

*#"/'56%65

'D6% 65F"/

''*)''"

# *

* ..%* BB 4 (1 * 012 %/ BB 4 (1 C*..

# 6

6 ..%* BB 4 (1 6 012 %/ BB 4 (1 C6..

0? BB * BB 6

0 .D* 012 D6.55

9"? 1BB C*6

9 ..1(

%* BB 4 (1 C* 6 012 %/ BB 4 (1 * 6..

4' 6 D

F

'"&''

"

(14)

*#&,-/ 5'

*#+5(

#"4$ ('

"

4 ' ( * 2 $

# D77'0 77F

D77'0 77F8'08 "

)8'08*2

' H"

'(%%= 0 9 ..1% .. ..1% .. B1B5

? *E*// ! ? 6/F/ + ? //G/

< # ?

3

6 * ! %

%=% ! ! % 1% 3

! % BB * ! % BB 6 3

! % ) * BB C! % BB ! % BB

/ +

5 6% 65"* *)

"

/*)B

5DF'#(

''"4

'$ ' $

''$

" ' &*

,7-$"2'(

'$"

) ' ' '

$

(I

4 #"*

#

"

!" #$

/ ' ! *) "4 (

! 2 "B '$ ,- $ +

(15)

' ' DF '

*) /

'' "

*'$ '(

' 2"" ,>-"/ '

'$

D(F $ $" )

'55" )(

$ "/ ' B

*) 5*"

/ 55*'%"4'

&5 $,1-" 2

' &5

' '$") '

'$ " ) ' 5 ' '

' %

"

4 '$ $ * # Æ

! '"

/!*)'

,3-"2

B + '%

''"

% &$

)$ 6$J (

'$ " 6 H

'' "?

B ? J : ? / $

'$" 6 </' $

"

*$)6'%'(

+"

)'$ / "

*2"

'("

67(869 :2 ;<%

" =

! "#

(16)

"C$D= // 333

4 7EF G9 333

' E9 1 / " ;8)

%= )$ '.) H

+?@A>6>>4

+ 6 7 (/ "98 69 :2 E9 1

;( )= )$

)(, / $ "& 0 ,&

-)% 0 9 (1 79 333

>4+ +, - )(, ' H'@ A B

4 6 ( / " 9 E9 1 ;E

% =

,) ">>A4'A@4+

H 67(/"9E91 ;8)

"= 1222,)

"9 >>A

? /%I6, ;(

="3$ "4

)(, 0 2" >>4>'>

A+@>?B

A 99 E9 ;2"77

= 1222,) " 9>>'

> ,7 15;(12

= /) 4

+>>> 44@ ?

3 67 (/"9E91 ;2*-(

= /

)4+>>>B

/ " ;8 ) =

222 / )(," ,'.)

9 >> B3>+3

E91;BJ) -F:=

//>'+4F "E7 E

7>>'

' 69EG ;6#= ,

/ ,) /)5

" !( 6 G6 " 0(

"5E>AA'A?@+'>B"

+ / " ( G 69E G 9 1 9 ;$

12= "

$ "/) ,/.&

27(I%>> >@4HI1

4 E 6 ( 2 E 1 7 6 ;7

=4+/)

(($8$ !(59:*;6 99 9

E91A>@33"1>>+

H 6G $#+%& 0 E2 F E

6 33