Closed mattulbrich closed 4 years ago
Why is here the required
keyword used, rather than ensures
?
Because it does not matter. The term x>y>z
must be digested by the parser and it is irrelevant in what context. Hence, requires is as good as ensures or any other construct.
I see. requires
does not load the lemma as a rule in DIVE, though. But that has nothing to do with this issue, so I was confused.
The following should be parsable in Dafny, but are not all in DIVE:
lemma m(x: int, y:int, z:int)
requires x == y == z
requires x > y > z
requires x > y == z
requires x == y >= z
requires (x > 0) == true
requires (x == 0) == true
{}