PrincetonUniversity / VST

Verified Software Toolchain
https://vst.cs.princeton.edu
Other
424 stars 91 forks source link

Wrap functor facts in abstract lemmas. #774

Closed ppedrot closed 4 weeks ago

ppedrot commented 1 month ago

Exposing the proof terms leads to potentially explosive kernel conversions that are avoided as of today by chance (see coq/coq#19038).

The proofs of basic type formers should probably be made Qed-opaque as well, but the current patch already solves the problem in the above Coq PR.