Module CL := CL_Sound VSM. Import CL.
(* rule w2 *)
Ltac dsepcon :=
match goal with
[ H : sepcon _ _ _ |- _ ] =>
let s1 := fresh "s" in
let s2 := fresh "s" in
let JOIN := fresh "JOIN" in
let H1 := fresh "H" in
let H2 := fresh "H" in
destruct H as [s1 [s2 [JOIN [H1 H2]]]]
end.
Hint Resolve nil_or_loc_full.
Proof with auto; try congruence; try solve [
destruct B as [x' [y' [C [D E]]]]; destruct (IHsigma A y' E) as [s0 [z [F G]]];
subst; exists s0; exists z; split; simpl; auto;
apply join_sub_trans with (b := y'); simpl; auto;
eapply join_join_sub'; eauto].
intros A B; revert s B; induction sigma; intros s B. simpl in A...
simpl in A. remember a as b; destruct b... remember e as b'; destruct b'...
destruct (Ident.eq_dec x v)... destruct B as [x' [y' [C [D E]]]].
subst; exists x'; exists e0; split... solve [eapply join_join_sub'; eauto].
Qed.
Proof with try congruence.
intros A B C D; destruct (next_in_dom_rawnext _ _ _ A B) as [s' [z' [F G]]].
simpl in F, C. cut (stk s2 = stk s'). intro Heq; rewrite Heq in *; clear Heq.
destruct (val2loc (env_get (stk s') x))...
destruct F as [H I]; destruct C as [J K].
assert (L : join_sub (hp s') (hp s1)).
destruct G as [x0 [G1 G2]]; exists (hp x0)...
assert (M : joins (hp s1) (hp s2)).
destruct D as [x0 [D1 D2]]; exists (hp x0)...
generalize (next_next_join_False _ _ (hp s2) _ _ _ _ H L J)... intro N.
apply N... apply join_sub_refl.
destruct G as [? [[G0 G1] G']]; destruct D as [? [[D0 D1] D']].
solve [rewrite G0, G1, D0; auto].
Qed.
Local Notation "'inter'" := (@andp _).
Local Notation "'un'" := (@orp _).
Proof with try solve [simpl; auto | congruence].
intros A B. destruct atm as [e e0]... destruct B as [s1 B]. simpl.
solve [eapply state_join_var_eq; eauto].
Qed.
Proof with simpl; auto.
induction atms... intros [A B] C. split... solve [eapply pure_atomd_pure; eauto].
Qed.
Proof with simpl; auto.
induction atms... intros [A | A] B.
left; eapply pure_atomd_pure; eauto. right...
Qed.
Proof with simpl; auto.
induction atms... intros [A B] C. split... eapply listd_pure_atomdi; eauto.
Qed.
Proof with simpl; auto.
induction atms... intros [A B] C. split... eapply listd_pure_atomdu; eauto.
Qed.
Proof with try solve [simpl; auto | congruence | inversion 1
| apply listd_pure_atomd_pureu with (s0 := y);
[ | exists x; apply join_comm; auto ]; solve [apply IHsigma; auto]].
revert s; induction sigma... intros s H.
remember a as b; destruct b as [e e0 | ]; simpl.
remember e as b1; destruct b1.
generalize (w_next_nil e0 sigma s H)... generalize H; intros [x [y [A [B C]]]]...
remember e as b; destruct b... generalize (w_lseg_nil e0 sigma s H) as A...
intro. inversion A as [B | B]; [ | inversion B ]. split...
generalize H; intros [x [y [C [D E]]]]...
generalize H; intros [x [y [C [D E]]]]...
Qed.
Proof with try solve [simpl; auto | congruence | inversion 1
| apply listd_pure_atomd_pureu with (s0 := y);
[ | exists x; apply join_comm; auto ]; solve [apply IHsigma; auto] ].
revert s; induction sigma... simpl; intros s [x [y [A [B C]]]].
remember a as b; destruct b... remember e as c; destruct c...
remember (next_in_dom v sigma) as d. if_tac... split...
exfalso. symmetry in Heqd. eapply nn_njoin; eauto.
Qed.
Proof with try solve [simpl; auto; try congruence; try inversion A
| destruct (join_assoc B (join_comm C)) as [q1 [q2 Q]];
apply listd_pure_atomdi with (s0 := q1); [ | eexists; eauto ];
solve [apply IHsigma with (s2 := w2); auto] ].
intros A B C. revert s s2 B C; induction sigma... intros s s2 B C.
simpl in B; destruct B as [w1 [w2 [B [D E]]]]. destruct a...
destruct e... unfold lseg_in_dom_atoms. if_tac...
try unfold Ident.eq in H.
subst x. split...
rewrite <- order_eqv_sound. simpl in A, D.
inversion D; subst. simpl. destruct (join_assoc B (join_comm C)) as [q [Q1 Q2]].
solve [eapply state_join_var_eq; eauto].
cut (stk w1 = stk s1); [ intro Heq; rewrite Heq in * | ].
rewrite H0 in A; destruct A as [A _].
exfalso. destruct B as [_ B]. destruct (join_assoc H3 B) as [q [Q1 Q2]].
eapply next_next_join_False with
(s0 := h0) (s0' := hp s2) (s2 := hp s1) (s1 := hp s1); eauto.
econstructor; eauto.
apply join_sub_refl.
destruct (join_assoc (join_comm B) (join_comm C)) as [q [Q1 Q2]].
destruct (join_stacks_eq _ _ _ Q1)...
Qed.
Proof with simpl; auto; try solve [congruence
| left; simpl; unfold var_eq, expr_denote, stack_get; rewrite H;
solve [unfold expr_denote, stack_get; rewrite Heq, Heq'; auto]].
intros A1 A2 B1 B2 C.
cut (stk s1 = stk s1'); [ intro Heq; rewrite Heq in * | ].
cut (stk s = stk s1'); [ intro Heq'; rewrite <- Heq' in * | ].
inversion A1; inversion A2; subst...
right; simpl; unfold var_eq, expr_denote, stack_get; rewrite H7.
solve [unfold expr_denote, stack_get; rewrite <- Heq'; auto].
cut (x' = x'0); [ intro Heqx; rewrite <- Heqx in *; clear Heqx | ].
exfalso. clear - H1 H3 H9 H11 B1 B2 C.
assert (D : joins s2 s2') by (apply (join_joins C)).
assert (E : join_sub h2 (hp s2')).
destruct B2 as [sx1 [_ B2]]; destruct (join_assoc H11 B2) as [q [Q1 Q2]].
solve [exists q; auto].
assert (F : join_sub h0 (hp s2)).
destruct B1 as [sx1 [_ B1]]; destruct (join_assoc H3 B1) as [q [Q1 Q2]].
solve [exists q; auto].
apply (next_next_join_False _ _ _ _ _ _ _ H1 F H9 E).
solve [destruct C as [_ C]; exists (hp s); auto].
solve [rewrite H8 in H0; inversion H0; auto].
destruct B2 as [sx B2]; destruct (join_assoc B2 (join_comm C)) as [q [Q1 Q2]].
destruct (join_stacks_eq _ _ _ Q2)...
destruct B1 as [sx1 B1]; destruct B2 as [sx2 B2].
destruct (join_assoc B1 C) as [q [Q1 Q2]].
destruct (join_assoc B2 (join_comm C)) as [q' [Q1' Q2']].
inversion Q2 as [[H1 H2] _]; inversion Q2' as [[H3 H4] _]...
Qed.
Proof with try solve [simpl; auto; try congruence
| destruct (join_assoc B (join_comm C)) as [q1 [q2 Q]];
apply listd_pure_atomd_pureu with (s0 := q1); [ | eexists; eauto ];
solve [apply IHsigma with (s2 := w2); auto]].
intros A B C. revert s s2 B C; induction sigma... intros s s2 B C.
simpl in B; destruct B as [w1 [w2 [B [D E]]]]. destruct a...
destruct e... unfold lseg_in_dom_atoms. if_tac...
try unfold Ident.eq in *. subst x. split...
simpl in A, D. inversion D; subst.
unfold list_denote; rewrite <- union_assoc; left; rewrite <- order_eqv_sound.
eapply (ll_spooky _ _ _ s1 s1 w1 s2 s A D); eauto.
apply join_sub_refl.  econstructor; eauto.
unfold list_denote; rewrite <- union_assoc; left; rewrite <- order_eqv_sound.
eapply (ll_spooky _ _ _ s1 s1 w1 s2 s A D); eauto.
apply join_sub_refl.  econstructor; eauto.
Qed.
Proof with simpl; auto; try congruence; try solve [
apply listd_pure_atomd_pureu with (s0 := y);
[ | exists x; apply join_comm; auto ]; apply IHsigma; auto].
revert s; induction sigma... intros s [x [y [A [B C]]]].
remember a as b; destruct b. destruct e...
rewrite listd_app, (@listd_unfold_inter _ state); split...
generalize (nl_lseg_in_sound _ _ _ _ _ _ B C A); intro D.
clear - D. set (l := lseg_in_dom_atoms v sigma) in D |- *. induction l...
solve [destruct D as [D E]; split; [ left; auto | ]; apply IHl; auto].
destruct e... remember (lseg_in_dom_atoms v sigma) as l. destruct l...
rewrite listd_app; split... unfold normalize_atoms.
rewrite (@listd_sort_uniq_un _ state) with (cmp := pure_atom_cmp).
2: apply pure_atom_cmp_eq.
generalize (ll_lseg_in_sound _ _ _ _ _ _ B C A); rewrite <- Heql.
intro D. simpl in D. destruct D as [D E]. destruct D as [D | D].
left. rewrite <- order_eqv_sound...
destruct D. right; left. rewrite <- order_eqv_sound... inversion H.
rewrite (@listd_unfold_inter _ state); split...
generalize (ll_lseg_in_sound _ _ _ _ _ _ B C A); rewrite <- Heql.
simpl; intros [D E]. clear - E.
induction l... simpl in E; destruct E as [E F].
split... unfold normalize_atoms. rewrite (@listd_sort_uniq_un _ state).
2: apply pure_atom_cmp_eq.
destruct E as [E | E]. left; rewrite <- order_eqv_sound...
destruct E; [ right; left; rewrite <- order_eqv_sound; auto | inversion H].
Qed.

Lemma do_well_sound sigma s :
space_denote sigma s ->
listd (fun atms => listd pure_atom_denote un FF atms) inter TT
(do_well sigma) s.