Closed PetarMax closed 3 weeks ago
(Some of) the added lemmas are tested by some of the dsvalue
tests in the mcd
and mcd-structured
test suites, via the compiler-introduced checks.
I am not sure what a reasonable test that is not direct would look like.
The lemmas removed in this PR slow down execution of some real-world proofs considerably because the
rangeBool
constraints are SMT-checked for every expression of the formnotBool ( X ==Int 0 )
ornotBool ( X ==Int 1 )
.The lemmas brought in reflect the (so-far-observed) checks made by the compiler, and their LHS is complex enough so they it will not be matched against unnecessarily.