Section LeaderSublogProof.
Context {orig_base_params : BaseParams}.
Context {one_node_params : OneNodeParams orig_base_params}.
Context {raft_params : RaftParams orig_base_params}.
Context {rri : raft_refinement_interface}.
Context {cei : candidate_entries_interface}.
Context {vci : votes_correct_interface}.
Context {cci : cronies_correct_interface}.
Context {olpti : one_leader_per_term_interface}.
Ltac prove_in :=
match goal with
| [ _ : nwPackets ?net = _,
_ : In (?p : packet) _ |- _] =>
assert (In p (nwPackets net)) by (repeat find_rewrite; do_in_app; intuition)
| [ _ : nwPackets ?net = _,
_ : pBody ?p = _ |- _] =>
assert (In p (nwPackets net)) by (repeat find_rewrite; intuition)
end.
Notation is_append_entries m :=
(exists t n prevT prevI entries c,
m = AppendEntries t n prevT prevI entries c).
Proof using.
unfold leader_sublog_host_invariant in *. intros.
specialize (H leader e h).
forward H; [apply H1; auto|].
intuition.
rewrite H0 in *. specialize (H1 leader). intuition.
rewrite H7 in *; auto.
rewrite H0 in *. auto.
Qed.
Proof using.
unfold leader_sublog_invariant in *. intros; intuition.
- eauto using leader_sublog_invariant_same_state.
- unfold leader_sublog_nw_invariant in *. intros.
pose proof H1 leader.
pose proof H2 leader; concludes.
pose proof H3 leader. intuition.
symmetry in H13.
repeat find_rewrite.
eapply H11; simpl in *; repeat find_rewrite; eauto.
assert (is_append_entries (pBody p)) by (repeat eexists; eauto).
eauto.
Qed.
Proof using.
unfold raft_net_invariant_do_leader.
intros.
unfold doLeader in *.
break_match; try solve [
find_inversion; simpl in *;
eapply leader_sublog_invariant_subset;
eauto; intuition; simpl in *;
repeat find_apply_hyp_hyp; intuition;
repeat find_higher_order_rewrite; repeat break_if; subst; intuition].
break_if.
- unfold replicaMessage in *. find_inversion. simpl in *.
unfold leader_sublog_invariant in *; intuition.
+ unfold leader_sublog_host_invariant in *. intros.
simpl in *. repeat find_higher_order_rewrite.
repeat break_if; simpl in *; intuition eauto.
+ unfold leader_sublog_nw_invariant in *. intros.
simpl in *. repeat find_higher_order_rewrite.
find_apply_hyp_hyp.
break_if; intuition idtac; simpl in *; subst; intuition eauto;
simpl in *;
repeat do_in_map; subst; simpl in *;
find_inversion; eauto using findGtIndex_in.
- find_inversion.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant, advanceCommitIndex in *.
intuition; find_higher_order_rewrite; repeat break_if; simpl in *; subst;
repeat break_if; simpl in *; eauto;
find_apply_hyp_hyp; intuition; eauto.
Qed.
Proof using olpti.
unfold raft_net_invariant_client_request.
intros.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant, handleClientRequest in *. intuition idtac.
- break_match; find_inversion; simpl in *; repeat find_higher_order_rewrite;
repeat break_if; subst; simpl in *;
intuition eauto;
simpl in *; in_crush_finish; intuition eauto. in_crush; eauto.
exfalso.
match goal with
| H : raft_intermediate_reachable _ |- _ =>
eapply one_leader_per_term_invariant in H
end.
assert (leader = h) by (eapply_prop one_leader_per_term; eauto).
intuition.
- break_match; find_inversion; simpl in *; repeat find_higher_order_rewrite;
repeat break_if; find_apply_hyp_hyp; intuition eauto; subst.
simpl in *.
in_crush; eauto.
Qed.
Proof using.
unfold raft_net_invariant_timeout. intros.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant, handleTimeout, tryToBecomeLeader in *.
intuition idtac; simpl in *.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *;
intuition eauto; solve_by_inversion.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *;
intuition eauto;
find_apply_hyp_hyp; intuition eauto; try solve_by_inversion;
in_crush; repeat find_inversion; discriminate.
Qed.
Proof using.
unfold raft_net_invariant_append_entries. intros.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant, handleAppendEntries, advanceCurrentTerm in *.
intuition idtac; simpl in *.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *;
intuition eauto; try solve_by_inversion;
do_in_app; intuition; eauto using removeAfterIndex_in.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *;
intuition eauto;
find_apply_hyp_hyp; intuition eauto; subst; try discriminate.
Qed.
Proof using.
unfold raft_net_invariant_append_entries_reply. intros.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant, handleAppendEntriesReply, advanceCurrentTerm in *.
intuition idtac; simpl in *.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *;
intuition eauto; try solve_by_inversion.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *;
intuition eauto;
find_apply_hyp_hyp; intuition eauto; try discriminate.
Qed.
Proof using.
unfold raft_net_invariant_request_vote. intros.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant, handleRequestVote, advanceCurrentTerm in *.
intuition idtac; simpl in *.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *;
intuition eauto; try solve_by_inversion.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *;
intuition eauto;
find_apply_hyp_hyp; intuition eauto; subst; try discriminate.
Qed.
Definition CandidateEntriesLowered net e h :=
currentTerm (nwState net h) = eTerm e ->
wonElection (dedup name_eq_dec (votesReceived (nwState net h))) = true ->
type (nwState net h) <> Candidate.
Proof using rri.
unfold CandidateEntriesLowered, CandidateEntries, votes_correct, cronies_correct.
intros. break_and.
rewrite deghost_spec.
apply_prop_hyp candidateEntries_host_invariant In.
eapply candidateEntries_wonElection; auto; repeat find_rewrite_lem deghost_spec; eauto.
Qed.
Proof using cci vci cei rri.
intros net H.
pattern net.
apply lower_prop; auto.
clear H net.
intros.
repeat match goal with
| [ H : _ |- _ ] => rewrite deghost_spec in H
end.
eapply candidate_entries_lowered';
eauto using candidate_entries_invariant, votes_correct_invariant, cronies_correct_invariant.
Qed.
Definition CandidateEntriesLowered_rvr net e p :=
In p (nwPackets net) ->
pBody p = RequestVoteReply (eTerm e) true ->
currentTerm (nwState net (pDst p)) = eTerm e ->
wonElection (dedup name_eq_dec (pSrc p :: votesReceived (nwState net (pDst p)))) = true ->
type (nwState net (pDst p)) <> Candidate.
Proof using.
unfold deghost.
simpl.
intros.
do_in_map.
eauto.
Qed.
Proof using rri.
unfold CandidateEntriesLowered_rvr, CandidateEntries.
intros. break_and.
rewrite deghost_spec.
find_apply_lem_hyp deghost_packet_exists.
break_exists.  break_and. subst.
apply_prop_hyp candidateEntries_host_invariant In.
eapply wonElection_candidateEntries_rvr; auto;
repeat find_rewrite_lem deghost_spec; eauto.
Qed.
Proof using cci vci cei rri.
intros net H.
pattern net.
apply lower_prop; auto.
clear H net.
intros.
repeat match goal with
| [ H : _ |- _ ] => rewrite deghost_spec in H
end.
eapply candidate_entries_lowered_rvr';
eauto using candidate_entries_invariant, votes_correct_invariant, cronies_correct_invariant.
Qed.
Proof using rri.
unfold CandidateEntriesLowered, CandidateEntries, votes_correct, cronies_correct.
intros. break_and.
rewrite deghost_spec.
find_apply_lem_hyp deghost_packet_exists.
break_exists. break_and. subst.
eapply_prop_hyp candidateEntries_nw_invariant In; eauto.
unfold candidateEntries in *. break_exists. break_and.
match goal with
| H : wonElection _ = _ |- _ =>
eapply wonElection_one_in_common in H; [|clear H; eauto]
end.
break_exists. break_and.
repeat match goal with
| [ H : _ |- _ ] => rewrite deghost_spec in H
end.
intro.
assert (h = x0).
{
eapply_prop one_vote_per_term;
eapply_prop cronies_votes.
- eapply_prop votes_received_cronies; eauto.
- find_reverse_rewrite. auto.
}
subst.
concludes. contradiction.
Qed.
Proof using cci vci cei rri.
intros net H.
pattern net.
apply lower_prop; auto.
clear H net.
intros.
repeat match goal with
| [ H : _ |- _ ] => rewrite deghost_spec in H
end.
eapply candidate_entries_lowered_nw';
eauto using candidate_entries_invariant, votes_correct_invariant, cronies_correct_invariant.
Qed.
Proof using rri.
unfold CandidateEntriesLowered_rvr, CandidateEntries, votes_correct, cronies_correct.
intros. break_and.
rewrite deghost_spec.
find_apply_lem_hyp deghost_packet_exists.
find_apply_lem_hyp deghost_packet_exists.
break_exists.  break_and. subst.
eapply_prop_hyp votes_nw pBody. concludes.
eapply_prop_hyp candidateEntries_nw_invariant pBody; auto.
find_insterU. conclude_using eauto.
unfold candidateEntries in *.
break_exists. break_and.
match goal with
| H : wonElection _ = _ |- _ =>
eapply wonElection_one_in_common in H; [|clear H; eauto]
end.
break_exists. break_and.
repeat match goal with
| [ H : _ |- _ ] => rewrite deghost_spec in H
end.
simpl in *.
break_or_hyp.
- apply_prop_hyp cronies_votes In.
assert (pDst x = x1) by (eapply_prop one_vote_per_term; eauto).
subst. auto.
- intro.
assert (pDst x = x1).
{ eapply_prop one_vote_per_term;
eapply_prop cronies_votes.
- eapply_prop votes_received_cronies; eauto.
- repeat find_reverse_rewrite. auto.
}
subst.
concludes. contradiction.
Qed.
Proof using cci vci cei rri.
intros net H.
pattern net.
apply lower_prop; auto.
clear H net.
intros.
repeat match goal with
| [ H : _ |- _ ] => rewrite deghost_spec in H
end.
eapply candidate_entries_lowered_nw_rvr';
eauto using candidate_entries_invariant, votes_correct_invariant, cronies_correct_invariant.
Qed.
Proof using cci vci cei rri.
unfold raft_net_invariant_request_vote_reply.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant, handleRequestVoteReply, advanceCurrentTerm.
intuition idtac; simpl in *.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *; intuition eauto; try discriminate.
+ exfalso. eapply candidate_entries_lowered; eauto.
+ rewrite dedup_not_in_cons in * by auto.
exfalso. eapply candidate_entries_lowered_rvr; eauto.
do_bool.
find_rewrite.
f_equal.
lia.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
subst; simpl in *; intuition eauto;
find_apply_hyp_hyp; intuition eauto; subst; try discriminate.
+ exfalso. eapply candidate_entries_lowered_nw; eauto.
+ rewrite dedup_not_in_cons in * by auto.
exfalso. eapply candidate_entries_lowered_nw_rvr; eauto.
do_bool.
find_rewrite.
f_equal.
lia.
Qed.
Proof using.
unfold raft_net_invariant_do_generic_server.
intros.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant, doGenericServer in *.
intuition idtac; simpl in *.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
use_applyEntries_spec;
subst; simpl in *;
intuition eauto;
try solve_by_inversion.
- repeat find_higher_order_rewrite; repeat break_match; repeat find_inversion;
use_applyEntries_spec;
subst; simpl in *;
intuition eauto;
find_apply_hyp_hyp; intuition eauto; subst; try discriminate.
Qed.
Proof using.
unfold raft_net_invariant_state_same_packet_subset.
intros.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant in *. intuition idtac;
repeat find_reverse_higher_order_rewrite; intuition eauto.
Qed.
Proof using.
unfold raft_net_invariant_reboot. intros.
unfold leader_sublog_invariant, leader_sublog_nw_invariant,
leader_sublog_host_invariant, reboot in *. intuition idtac.
- repeat find_higher_order_rewrite.
simpl in *. repeat break_match; subst; simpl in *; intuition eauto; discriminate.
- repeat find_higher_order_rewrite.
simpl in *. repeat find_rewrite.
repeat break_match; subst; simpl in *;
intuition eauto; try discriminate.
Qed.
Proof using.
unfold raft_net_invariant_init, leader_sublog_invariant,
leader_sublog_host_invariant, leader_sublog_nw_invariant;
intuition.
Qed.

Theorem leader_sublog_invariant_invariant :
forall net,
raft_intermediate_reachable net ->
leader_sublog_invariant net.