|
160 | 160 | integerSimplificationRules: {full, /*! @choiceIncomplete */ minimal}; // TODO: further refine this option |
161 | 161 | permissions: {off, on}; |
162 | 162 |
|
163 | | - /*! |
164 | | - Treatment of formulas and terms for welldefinedness checks: |
165 | | - */ |
166 | | - wdOperator: { |
167 | | - /*! |
168 | | - More intuitive for software developers and along the lines of |
169 | | - runtime assertion semantics. Well-Definedness checks will be |
170 | | - stricter using this operator, since the order of terms/formulas |
171 | | - matters. It is based on McCarthy logic. |
172 | | - Cf. "Are the Logical Foundations of Verifying Compiler |
173 | | - Prototypes Matching User Expectations?" by Patrice Chalin. |
174 | | - |
175 | | - @choiceDefaultOption |
176 | | - */ |
177 | | - L, |
178 | | - /*! |
179 | | - Complete and along the lines of classical logic, where the |
180 | | - order of terms/formulas is irrelevant. This operator is |
181 | | - equivalent to the D-operator, but more efficient. |
182 | | - Cf. "Efficient Well-Definedness Checking" by Ádám Darvas, |
183 | | - Farhad Mehta, and Arsenii Rudich. |
184 | | - */ |
185 | | - Y, |
186 | | - /*! |
187 | | - Complete and along the lines of classical logic, where the |
188 | | - order of terms/formulas is irrelevant. This operator is not as |
189 | | - strict as the L-operator, based on strong Kleene logic. To be |
190 | | - used with care, since formulas may blow up exponentially. |
191 | | - Cf. "Well Defined B" by Patrick Behm, Lilian Burdy, and |
192 | | - Jean-Marc Meynadier*/ |
193 | | - D |
194 | | - }; |
195 | 163 |
|
196 | | - /*! |
197 | | - Welldefinedness checks of JML specifications can be turned on/off. |
198 | | - This includes class invariants, operation contracts, model fields |
199 | | - as well as JML (annotation) statements as loop invariants and |
200 | | - block contracts. The former ones are checked "on-the-fly", i.e., |
201 | | - directly when they are applied in the code while proving an operation |
202 | | - contract, since the context is needed. |
203 | | - */ |
204 | | - wdChecks: {off, on}; |
205 | 164 | /*! |
206 | 165 | Specifies whether a special goal "Joined node is weakening" should be |
207 | 166 | generated as a child of the partner node of a join operation. |
|
0 commit comments