Reasoning with equalities¶
There are multiple notions of equality in Coq:
Leibniz equality is the standard way to define equality in Coq and the Calculus of Inductive Constructions, which is in terms of a binary relation, i.e. a binary function that returns a
Prop. The standard library defineseqsimilar to this:Inductive eq {A : Type} (x : A) : A -> Prop := eq_refl : eq x x.The notation
x = yrepresents the termeq x y. The notationx = y :> Agives the type of x and y explicitly.Setoid equality defines equality in terms of an equivalence relation. A setoid is a set that is equipped with an equivalence relation (see https://en.wikipedia.org/wiki/Setoid). These are needed to form a quotient set or quotient (see https://en.wikipedia.org/wiki/Equivalence_class). In Coq, users generally work with setoids rather than constructing quotients, for which there is no specific support.
Definitional equality is equality based on the conversion rules, which Coq can determine automatically. When two terms are definitionally equal, Coq knows it can replace one with the other, such as with
changeX with Y, among many other advantages. "Convertible" is another way of saying that two terms are definitionally equal.
Tactics for dealing with equality of inductive types such as injection
and inversion are described here.
Tactics for simple equalities¶
- Tactic reflexivity¶
For a goal with the form
forall open_binders ,? t = u, verifies thattanduare definitionally equal, and if so, solves the goal (by applyingeq_refl). If not, it fails.The tactic may also be applied to goals with the form
forall open_binders ,? R term1 term2whereRis a reflexive relation registered with theEquivalenceorReflexivetypeclasses. SeeClassandInstance.
- Tactic symmetry simple_occurrences?¶
Changes a goal that has the form
forall open_binders ,? t = uintou = t.simple_occurrencesmay be used to apply the change in the selected hypotheses and/or the conclusion.The tactic may also be applied to goals with the form
forall open_binders ,? R term1 term2whereRis a symmetric relation registered with theEquivalenceorSymmetrictypeclasses. SeeClassandInstance.
- Tactic transitivity one_term¶
Changes a goal that has the form
forall open_binders ,? t = uinto the two subgoalst = one_termandone_term = u.The tactic may also be applied to goals with the form
forall open_binders ,? R term1 term2whereRis a transitive relation registered with theEquivalenceorTransitivitytypeclasses. SeeClassandInstance.- Tactic etransitivity¶
This tactic behaves like
transitivity, using a fresh evar instead of a concreteone_term.
- Tactic f_equal¶
For a goal with the form
f a1 ... an = g b1 ... bn, creates subgoalsf = gandai = bifor thenarguments. Subgoals that can be proven byreflexivityorcongruenceare solved automatically.
Rewriting with Leibniz and setoid equality¶
- Tactic rewrite oriented_rewriter+, occurrences? by ltac_expr3?¶
- oriented_rewriter
::=-><-? natural? ?!? one_term_with_bindingsReplaces subterms with other subterms that have been proven to be equal. The type of
one_termmust have the form:forall open_binders ,? EQ term1 term2where
EQis the Leibniz equalityeqor a registered setoid equality. Note thateq term1 term2is typically written with the infix notationterm1 = term2. You mustRequire Setoidto use the tactic with a setoid equality or with setoid rewriting.rewrite one_termfinds subterms matchingterm1in the goal, and replaces them withterm2(or the reverse if<-is given). Some of the variablesxi are solved by unification, and some of the typesA1, …, Anmay become new subgoals.rewritewon't find occurrences insideforallthat refer to variables bound by theforall; use the more advancedsetoid_rewriteif you want to find such occurrences.oriented_rewriter+,The
oriented_rewriters are applied sequentially to the first goal generated by the previousoriented_rewriter. If any of them fail, the tactic fails.-><-?For
->(the default),term1is rewritten intoterm2. For<-,term2is rewritten intoterm1.natural? ?!?naturalis the number of rewrites to perform. If?is given,naturalis the maximum number of rewrites to perform; otherwisenaturalis the exact number of rewrites to perform.?(withoutnatural) performs the rewrite as many times as possible (possibly zero times). This form never fails.!(withoutnatural) performs the rewrite as many times as possible and at least once. The tactic fails if the requested number of rewrites can't be performed.natural !is equivalent tonatural.occurrencesIf
occurrencesspecifies multiple occurrences, the tactic succeeds if any of them can be rewritten. If not specified, only the first occurrence in the conclusion is replaced.Note
If
at occs_numsis specified, rewriting is always done with setoid rewriting, even for Leibniz equality, which means that you mustRequire Setoidto use that form. However, note thatrewrite(even when using setoid rewriting) andsetoid_rewritedon't behave identically (as is noted above and below).by ltac_expr3If specified, is used to resolve all side conditions generated by the tactic.
Note
For each selected hypothesis and/or the conclusion,
rewritefinds the first matching subterm in depth-first search order. Only subterms identical to that first matched subterm are rewritten. If theatclause is specified, only these subterms are considered when counting occurrences. To select a different set of matching subterms, you can specify how some or all of the free variables are bound by using awithclause (seeone_term_with_bindings).For instance, if we want to rewrite the right-hand side in the following goal, this will not work:
- Require Import Arith.
- [Loading ML file ring_plugin.cmxs (using legacy method) ... done]
- Lemma example x y : x + y = y + x.
- 1 goal x, y : nat ============================ x + y = y + x
- rewrite Nat.add_comm at 2.
- Toplevel input, characters 0-25: > rewrite Nat.add_comm at 2. > ^^^^^^^^^^^^^^^^^^^^^^^^^ Error: Invalid occurrence number: 2.
One can explicitly specify how some variables are bound to match a different subterm:
- rewrite Nat.add_comm with (m := x).
- 1 goal x, y : nat ============================ x + y = x + y
Note that the more advanced
setoid_rewritetactic behaves differently, and thus the number of occurrences available to rewrite may differ between the two tactics.- Error Tactic failure: Setoid library not loaded.¶
- Error Cannot find a relation to rewrite.¶
- Error Tactic generated a subgoal identical to the original goal.¶
- Error Found no subterm matching term in ident.¶
- Error Found no subterm matching term in the current goal.¶
This happens if
termdoes not occur in, respectively, the named hypothesis or the goal.
- Tactic erewrite oriented_rewriter+, occurrences? by ltac_expr3?¶
Works like
rewrite, but turns unresolved bindings, if any, into existential variables instead of failing. It has the same parameters asrewrite.
- Flag Keyed Unification¶
This flag makes higher-order unification used by
rewriterely on a set of keys to drive unification. The subterms, considered as rewriting candidates, must start with the same key as the left- or right-hand side of the lemma given to rewrite, and the arguments are then unified up to full reduction.
- Command Print Equivalent Keys¶
- Tactic rewrite * -><-? one_term in ident? at rewrite_occs? by ltac_expr3?¶
- Tactic rewrite * -><-? one_term at rewrite_occs in ident by ltac_expr3?¶
- Tactic replace one_termfrom with one_termto occurrences? by ltac_expr3?¶
- Tactic replace -><-? one_termfrom occurrences?¶
The first form replaces all free occurrences of
one_termfromin the current goal withone_termtoand generates an equalityone_termto = one_termfromas a subgoal. (Note the generated equality is reversed with respect to the order of the two terms in the tactic syntax; see issue #13480.) Whenby ltac_expr3is not present, this equality is automatically solved if it occurs among the hypotheses, or if its symmetric form occurs.The second form, with
->or no arrow, replacesone_termfromwithtermtousing the first hypothesis whose type has the formone_termfrom = termto. If<-is given, the tactic uses the first hypothesis with the reverse form, i.e.termto = one_termfrom.occurrencesThe
type ofandvalue offorms are not supported. Note you mustRequire Setoidto use theatclause inoccurrences.by ltac_expr3Applies the
ltac_expr3to solve the generated equality.
- Error Terms do not have convertible types.¶
- Tactic substitute -><-? one_term_with_bindings¶
- Tactic subst ident*¶
For each
ident, in order, for which there is a hypothesis in the formident = termorterm = ident, replacesidentwithtermeverywhere in the hypotheses and the conclusion and clearsidentand the hypothesis from the context. If there are multiple hypotheses that match theident, the first one is used. If noidentis given, replacement is done for all hypotheses in the appropriate form in top to bottom order.If
identis a local definition of the formident := term, it is also unfolded and cleared.If
identis a section variable it must have no indirect occurrences in the goal, i.e. no global declarations implicitly depending on the section variable may be present in the goal.Note
If the hypothesis is itself dependent in the goal, it is replaced by the proof of reflexivity of equality.
- Flag Regular Subst Tactic¶
This flag controls the behavior of
subst. When it is activated (it is by default),substalso deals with the following corner cases:A context with ordered hypotheses
ident1 = ident2andident1 = t, ort′ = ident1witht′not a variable, and no other hypotheses of the formident2 = uoru = ident2; without the flag, a second call to subst would be necessary to replaceident2bytort′respectively.The presence of a recursive equation which without the flag would be a cause of failure of
subst.A context with cyclic dependencies as with hypotheses
ident1 = f ident2andident2 = g ident1which without the flag would be a cause of failure ofsubst.
Additionally, it prevents a local definition such as
ident := tfrom being unfolded which otherwise would exceptionally unfold in configurations containing hypotheses of the formident = u, oru′ = identwithu′not a variable. Finally, it preserves the initial order of hypotheses, which without the flag it may break.
- Error Section variable ident occurs implicitly in global declaration qualid present in hypothesis ident.¶
- Error Section variable ident occurs implicitly in global declaration qualid present in the conclusion.¶
Raised when the variable is a section variable with indirect dependencies in the goal. If
identis a section variable, it must not have any indirect occurrences in the goal, i.e. no global declarations implicitly depending on the section variable may be present in the goal.
- Tactic simple subst¶
- Tactic stepl one_term by ltac_expr?¶
For chaining rewriting steps. It assumes a goal in the form
R term1 term2whereRis a binary relation and relies on a database of lemmas of the formforall x y z, R x y -> eq x z -> R z ywhereeqis typically a setoid equality. The application ofstepl one_termthen replaces the goal byR one_term term2and adds a new goal statingeq one_term term1.If
ltac_expris specified, it is applied to the side condition.This tactic is especially useful for parametric setoids which are not accepted as regular setoids for
rewriteandsetoid_replace(see Generalized rewriting).
Rewriting with definitional equality¶
- Tactic change one_termfrom at occs_nums? with? one_termto occurrences?¶
Replaces terms with other convertible terms. If
one_termfromis not specified, thenone_termtoreplaces the conclusion and/or the specified hypotheses. Ifone_termfromis specified, the tactic replaces occurrences ofone_termtowithin the conclusion and/or the specified hypotheses.one_termfrom at occs_nums? with?Replaces the occurrences of
one_termfromspecified byoccs_numswithone_termto, provided that the twoone_terms are convertible.one_termfrommay contain pattern variables such as?x, whose value which will substituted forxinone_termto, such as inchange (f ?x ?y) with (g (x, y))orchange (fun x => ?f x) with f.The
at … with …form is deprecated in 8.14; usewith … at …instead. Forat … with … in H |-, usewith … in H at … |-.occurrencesIf
withis not specified,occurrencesmust only specify entire hypotheses and/or the goal; it must not include anyat occs_numsclauses.
- Error Not convertible.¶
- Error Found an "at" clause without "with" clause¶
- Tactic now_show one_type¶
A synonym for
change one_type. It can be used to make some proof steps explicit when refactoring a proof script to make it readable.
See also
- Tactic change_no_check one_termfrom at occs_nums? with? one_termto occurrences?¶
For advanced usage. Similar to
change, but as an optimization, it skips checking thatone_termtois convertible with the goal orone_termfrom.Recall that the Coq kernel typechecks proofs again when they are concluded to ensure correctness. Hence, using
changechecks convertibility twice overall, whilechange_no_checkcan produce ill-typed terms, but checks convertibility only once. Hence,change_no_checkcan be useful to speed up certain proof scripts, especially if one knows by construction that the argument is indeed convertible to the goal.In the following example,
change_no_checkreplacesFalsewithTrue, butQedthen rejects the proof, ensuring consistency.Example
- Goal False.
- 1 goal ============================ False
- change_no_check True.
- 1 goal ============================ True
- exact I.
- No more goals.
- Qed.
- Toplevel input, characters 0-4: > Qed. > ^^^^ Error: The term "I" has type "True" while it is expected to have type "False".
Example
- Goal True -> False.
- 1 goal ============================ True -> False
- intro H.
- 1 goal H : True ============================ False
- change_no_check False in H.
- 1 goal H : False ============================ False
- exact H.
- No more goals.
- Qed.
- Toplevel input, characters 0-4: > Qed. > ^^^^ Error: The term "fun H : True => H" has type "True -> True" while it is expected to have type "True -> False".
Applying conversion rules¶
These tactics apply reductions and expansions, replacing convertible subterms
with others that are equal by definition in CIC.
They implement different specialized uses of the
change tactic. Other ways to apply these reductions are through
the Eval command, the Eval clause in the Definition/Example
command and the eval tactic.
Tactics described in this section include:
lazyandcbv, which allow precise selection of which reduction rules to applysimplandcbn, which are "clever" tactics meant to give the most readable resulthnfandred, which apply reduction rules only to the head of the termvm_computeandnative_compute, which are performance-oriented.
Conversion tactics, with two exceptions, only change the types and contexts
of existential variables
and leave the proof term unchanged. (The vm_compute and native_compute
tactics change existential variables in a way similar to other conversions while
also adding a single explicit cast to the proof term to tell the kernel
which reduction engine to use. See Type cast.) For example:
- Goal 3 + 4 = 7.
- 1 goal ============================ 3 + 4 = 7
- Show Proof.
- ?Goal
- Show Existentials.
- Existential 1 = ?Goal : [ |- 3 + 4 = 7]
- cbv.
- 1 goal ============================ 7 = 7
- Show Proof.
- (?Goal : 3 + 4 = 7)
- Show Existentials.
- Existential 1 = ?Goal : [ |- 7 = 7]
- Abort.
- Tactic lazy reductions? simple_occurrences¶
- Tactic cbv reductions? simple_occurrences¶
- reductions
::=reduction+|head? delta_reductionsreduction::=head|beta|delta delta_reductions?|match|fix|cofix|iota|zetadelta_reductions::=-? [ reference+ ]Normalize the goal as specified by
reductions. If no reductions are specified by name, all reductions are applied. If any reductions are specified by name, then only the named reductions are applied. The reductions include:headDo only head reduction, without going under binders. Supported by
simpl,cbv,cbnandlazy. If this is the only specified reduction, all other reductions are applied.betabeta-reduction of functional application
delta delta_reductions?delta-reduction: unfolding of transparent constants, see Controlling reduction strategies and the conversion algorithm. The form in
reductionswithout the keyworddeltaincludesbeta,iotaandzetareductions in addition todeltausing the givendelta_reductions.-? [ reference+ ]without the
-, limits delta unfolding to the listed constants. If the-is present, unfolding is applied to all constants that are not listed. Notice that thedeltadoesn't apply to variables bound by a let-in construction inside the term itself (usezetato inline these). Opaque constants are never unfolded except byvm_computeandnative_compute(see #4476 and Controlling reduction strategies and the conversion algorithm).
iotaiota-reduction of pattern matching (
match) over a constructed term and reduction offixandcofixexpressions. Shorthand formatch fix cofix.zetazeta-reduction: reduction of let-in definitions
Normalization is done by first evaluating the head of the expression into weak-head normal form, i.e. until the evaluation is blocked by a variable, an opaque constant, an axiom, such as in
x u1 … un,match x with … end,(fix f x {struct x} := …) x, a constructed form (a \(\lambda\)-expression, constructor, cofixpoint, inductive type, product type or sort) or a redex for which flags prevent reduction of the redex. Once a weak-head normal form is obtained, subterms are recursively reduced using the same strategy.There are two strategies for reduction to weak-head normal form: lazy (the
lazytactic), or call-by-value (thecbvtactic). The lazy strategy is a call by need strategy, with sharing of reductions: the arguments of a function call are weakly evaluated only when necessary, and if an argument is used several times then it is weakly computed only once. This reduction is efficient for reducing expressions with dead code. For instance, the proofs of a propositionexists x. P(x)reduce to a pair of a witnesstand a proof thattsatisfies the predicateP. Most of the time,tmay be computed without computing the proof ofP(t), thanks to the lazy strategy.- Flag Kernel Term Sharing¶
Turning this flag off disables the sharing of computations in
lazy, making it a call-by-name reduction. This also affects the reduction procedure used by the kernel when typechecking. By default sharing is activated.
The call-by-value strategy is the one used in ML languages: the arguments of a function call are systematically weakly evaluated first. The lazy strategy is similar to how Haskell reduces terms. Although the lazy strategy always does fewer reductions than the call-by-value strategy, the latter is generally more efficient for evaluating purely computational expressions (i.e. with little dead code).
- Tactic compute delta_reductions? simple_occurrences¶
A variant form of
cbv.
Setting
Debug"Cbv"makescbv(and its derivativecompute) print information about the constants it encounters and the unfolding decisions it makes.
- Tactic simpl head? delta_reductions? reference_occspattern_occs? simple_occurrences¶
- reference_occs
::=reference at occs_nums?pattern_occs::=one_term at occs_nums?Reduces a term to something still readable instead of fully normalizing it. It performs a sort of strong normalization with two key differences:
It unfolds constants only if they lead to an ι-reduction, i.e. reducing a match or unfolding a fixpoint.
When reducing a constant unfolding to (co)fixpoints, the tactic uses the name of the constant the (co)fixpoint comes from instead of the (co)fixpoint definition in recursive calls.
occs_numsSelects which occurrences of
one_termto process (counting from left to right on the expression printed using thePrinting Allflag)simple_occurrencesPermits selecting whether to reduce the conclusion and/or one or more hypotheses. While the
atoption ofoccurrencesis not allowed here,reference_occsandpattern_occshave a somewhat less flexibleatoption for selecting specific occurrences.
simplcan unfold transparent constants whose name can be reused in recursive calls as well as those designated byArgumentsreference … /commands. For instance, a constantplus' := plusmay be unfolded and reused in recursive calls, but a constant such assucc := plus (S O)is not unfolded unless it was specifically designated in anArgumentscommand such asArguments succ /..reference_occspattern_occscan limit the application ofsimplto:
- Tactic cbn reductions? simple_occurrences¶
cbnwas intended to be a more principled, faster and more predictable replacement forsimpl.The main difference between
cbnandsimplis thatcbnmay unfold constants even when they cannot be reused in recursive calls: in the previous example,succ tis reduced toS t.Setting
Debug"RAKAM"makescbnprint various debugging information.RAKAMis the Refolding Algebraic Krivine Abstract Machine.
- Tactic hnf simple_occurrences¶
Replaces the current goal with its weak-head normal form according to the βδιζ-reduction rules, i.e. it reduces the head of the goal until it becomes a product or an irreducible term. All inner βι-redexes are also reduced. While
hnfbehaves similarly tosimplandcbn, unlike them, it does not recurse into subterms. The behavior ofhnfcan be tuned using theArgumentscommand.Example: The term
fun n : nat => S n + S nis not reduced byhnf.Note
The δ rule only applies to transparent constants (see Controlling reduction strategies and the conversion algorithm on transparency and opacity).
- Tactic red simple_occurrences¶
βιζ-reduces the head constant of
T, if possible, in the selected hypotheses and/or the goal which have the form:forall open_binders ,? T(where
Tdoes not begin with aforall) toc t1 … tnwherecis a constant. Ifcis transparent then it replacescwith its definition and reduces again until no further reduction is possible.In the term
forall open_binders ,? t1 ... tn, wheret1is not aterm_application,t1is the head of the term. In a term with the formforall open_binders ,? c t1 ... tn, wherecis a constant,cis the head constant.- Error No head constant to reduce.¶
- Tactic unfold reference_occs+, occurrences?¶
Applies delta-reduction to the constants specified by each
reference_occs. The selected hypotheses and/or goals are then reduced to βιζ-normal form. Use the general reduction tactics if you want to only apply the δ rule, for examplecbvdelta [ reference ].reference_occsIf
referenceis aqualid, it must be a defined transparent constant or local definition (see Top-level definitions and Controlling reduction strategies and the conversion algorithm).If
referenceis astring scope_key?, thestringis the discriminating symbol of a notation (e.g. "+") or an expression defining a notation (e.g."_ + _") and the notation is an application whose head symbol is an unfoldable constant, then the tactic unfolds it.occurrencesIf
occurrencesis specified, the specified occurrences will be replaced in the selected hypotheses and/or goal. Otherwise every occurrence of the constants in the goal is replaced. If multiplereference_occsare given, anyatclauses must be in thereference_occsrather than inoccurrences.
- Error Cannot turn inductiveconstructor into an evaluable reference.¶
Occurs when trying to unfold something that is defined as an inductive type (or constructor) and not as a definition.
Example
- Goal 0 <= 1.
- 1 goal ============================ 0 <= 1
- unfold le.
- Toplevel input, characters 7-9: > unfold le. > ^^ Error: Cannot turn inductive le into an evaluable reference.
- Tactic fold one_term+ simple_occurrences¶
First, this tactic reduces each
one_termusing theredtactic. Then, every occurrence of the resulting terms in the selected hypotheses and/or goal will be replaced by its associatedone_term. This tactic is particularly useful for reversing undesired unfoldings, which may make the goal very hard to read. The undesired unfoldings may be due to the limited capabilities of other reduction tactics. On the other hand, when an unfolded function applied to its argument has been reduced, thefoldtactic doesn't do anything.foldone_term1 one_term2is equivalent tofold one_term1; fold one_term2.Example:
folddoesn't always undounfold- Goal ~0=0.
- 1 goal ============================ 0 <> 0
- unfold not.
- 1 goal ============================ 0 = 0 -> False
This
folddoesn't undo the preceedingunfold(it makes no change):- fold not.
- 1 goal ============================ 0 = 0 -> False
However, this
patternfollowed byfolddoes:- pattern (0 = 0).
- 1 goal ============================ (fun P : Prop => P -> False) (0 = 0)
- fold not.
- 1 goal ============================ 0 <> 0
Example: Use
foldto reverse unfolding offold_right- Require Import Coq.Lists.List.
- Local Open Scope list_scope.
- Goal forall x xs, fold_right and True (x::xs).
- 1 goal ============================ forall (x : Prop) (xs : list Prop), fold_right and True (x :: xs)
- red.
- 1 goal ============================ forall (x : Prop) (xs : list Prop), x /\ (fix fold_right (l : list Prop) : Prop := match l with | nil => True | b :: t => b /\ fold_right t end) xs
- fold (fold_right and True).
- 1 goal ============================ forall (x : Prop) (xs : list Prop), x /\ fold_right and True xs
- Tactic pattern pattern_occs+, occurrences?¶
Performs beta-expansion (the inverse of beta-reduction) for the selected hypotheses and/or goals. The
one_terms inpattern_occsmust be free subterms in the selected items. The expansion is done for each selected itemTfor a set ofone_terms in thepattern_occsby:replacing all selected occurrences of the
one_terms inTwith fresh variablesabstracting these variables
applying the abstracted goal to the
one_terms
For instance, if the current goal
Tis expressible asφ(t1 … tn)where the notation captures all the instances of thetiin φ, thenpatternt1, …, tngenerates the equivalent goal(fun (x1:A1 … (xn:An) => φ(x1 … xn)) t1 … tn. Iftioccurs in one of the generated typesAj(forj > i), occurrences will also be considered and possibly abstracted.This tactic can be used, for instance, when the tactic
applyfails on matching or to better control the behavior ofrewrite.See the example here.
Fast reduction tactics: vm_compute and native_compute¶
vm_compute is a brute-force but efficient tactic that
first normalizes the terms before comparing them. It is based on a
bytecode representation of terms similar to the bytecode
representation used in the ZINC virtual machine [Ler90]. It is
especially useful for intensive computation of algebraic values, such
as numbers, and for reflection-based tactics.
native_compute is based on on converting the Coq code to OCaml.
Note that both these tactics ignore Opaque markings
(see issue #4776), nor do they
apply unfolding strategies such as from Strategy.
native_compute is typically two to five
times faster than vm_compute at applying conversion rules
when Coq is running native code, but native_compute requires
considerably more overhead. We recommend using native_compute
when all of the following are true (otherwise use vm_compute):
the running time in
vm_computeat least 5-10 secondsthe size of the input term is small (e.g. hand-generated code rather than automatically-generated code that may have nested destructs on inductives with dozens or hundreds of constructors)
the output is small (e.g. you're returning a boolean, a natural number or an integer rather than a large abstract syntax tree)
These tactics change existential variables in a way similar to other conversions while also adding a single explicit cast (see Type cast) to the proof term to tell the kernel which reduction engine to use.
- Tactic vm_compute reference_occspattern_occs? occurrences?¶
Evaluates the goal using the optimized call-by-value evaluation bytecode-based virtual machine described in [GregoireL02]. This algorithm is dramatically more efficient than the algorithm used for the
cbvtactic, but it cannot be fine-tuned. It is especially useful for full evaluation of algebraic objects. This includes the case of reflection-based tactics.
- Tactic native_compute reference_occspattern_occs? occurrences?¶
Evaluates the goal by compilation to OCaml as described in [BDenesGregoire11]. Depending on the configuration, this tactic can either default to
vm_compute, recompile dependencies or fail due to some missing precompiled dependencies, see the native-compiler option for details.- Flag NativeCompute Timing¶
This flag causes all calls to the native compiler to print timing information for the conversion to native code, compilation, execution, and reification phases of native compilation. Timing is printed in units of seconds of wall-clock time.
- Flag NativeCompute Profiling¶
On Linux, if you have the
perfprofiler installed, this flag makes it possible to profilenative_computeevaluations.
- Option NativeCompute Profile Filename string¶
This option specifies the profile output; the default is
native_compute_profile.data. The actual filename used will contain extra characters to avoid overwriting an existing file; that filename is reported to the user. That means you can individually profile multiple uses ofnative_computein a script. From the Linux command line, runperf reporton the profile file to see the results. Consult theperfdocumentation for more details.
Computing in a term: eval and Eval¶
Evaluation of a term can be performed with:
- Tactic eval red_expr in term¶
- red_expr
::=lazy reductions?|cbv reductions?|compute delta_reductions?|vm_compute reference_occspattern_occs?|native_compute reference_occspattern_occs?|red|hnf|simpl head? delta_reductions? reference_occspattern_occs?|cbn reductions?|unfold reference_occs+,|fold one_term+|pattern pattern_occs+,|identevalis avalue_tactic. It returns the result of applying the conversion rules specified byred_expr. It does not change the proof state.The
red_expralternatives that begin with a keyword correspond to the tactic with the same name, though in several cases with simpler syntax than the tactic.identis a named reduction expression created withDeclare Reduction.See also
Section Applying conversion rules.
- Command Eval red_expr in term¶
Performs the specified reduction on
termand displays the resulting term with its type. If a proof is open,termmay reference hypotheses of the selected goal.Evalis aquery_command, so it may be prefixed with a goal selector.
- Command Declare Reduction ident := red_expr¶
Declares a short name for the reduction expression
red_expr, for instancelazy beta delta [foo bar]. This short name can then be used inEval ident inorevalconstructs. This command accepts thelocalattribute, which indicates that the reduction will be discarded at the end of the file or module. The name is not qualified. In particular declaring the same name in several modules or in several functor applications will be rejected if these declarations are not local. The nameidentcannot be used directly as an Ltac tactic, but nothing prevents the user from also performing aLtac ident := red_expr.
Controlling reduction strategies and the conversion algorithm¶
The commands to fine-tune the reduction strategies and the lazy conversion algorithm are described in this section. Also see Effects of Arguments on unfolding, which supports additional fine-tuning.
- Command Opaque reference+¶
Marks the specified constants as opaque so tactics won't unfold them with delta-reduction. "Constants" are items defined by commands such as
Definition,Let(with an explicit body),Fixpoint,CoFixpointandFunction.This command accepts the
globalattribute. By default, the scope ofOpaqueis limited to the current section or module.Opaquealso affects Coq's conversion algorithm, causing it to delay unfolding the specified constants as much as possible when it has to check that two distinct applied constants are convertible. See Section Conversion rules.
- Command Transparent reference+¶
The opposite of
Opaque, it marks the specified constants as transparent so that tactics may unfold them. SeeOpaqueabove.This command accepts the
globalattribute. By default, the scope ofTransparentis limited to the current section or module.Note that constants defined by proofs ending with
Qedare irreversibly opaque;Transparentwill not make them transparent. This is consistent with the usual mathematical practice of proof irrelevance: what matters in a mathematical development is the sequence of lemma statements, not their actual proofs. This distinguishes lemmas from the usual defined constants, whose actual values are of course relevant in general.
See also
- Command Strategy strategy_level [ reference+ ]+¶
- strategy_level
::=opaque|integer|expand|transparentGeneralizes the behavior of the
OpaqueandTransparentcommands. It is used to fine-tune the strategy for unfolding constants, both at the tactic level and at the kernel level. This command associates astrategy_levelwith the qualified names in thereferencesequence. Whenever two expressions with two distinct head constants are compared (for example, typecheckingf xwheref : A -> Bandx : Cwill result in convertingAandC), the one with lower level is expanded first. In case of a tie, the second one (appearing in the cast type) is expanded.This command accepts the
localattribute, which limits its effect to the current section or module, in which case the section and module behavior is the same asOpaqueandTransparent(withoutglobal).Levels can be one of the following (higher to lower):
opaque: level of opaque constants. They cannot be expanded by tactics (behaves like +∞, see next item).integer: levels indexed by an integer. Level 0 corresponds to the default behavior, which corresponds to transparent constants. This level can also be referred to astransparent. Negative levels correspond to constants to be expanded before normal transparent constants, while positive levels correspond to constants to be expanded after normal transparent constants.expand: level of constants that should be expanded first (behaves like −∞)transparent: Equivalent to level 0
- Command Print Strategy reference¶
This command prints the strategy currently associated with
reference. It fails ifreferenceis not an unfoldable reference, that is, neither a variable nor a constant.- Error The reference is not unfoldable.¶
- Command Print Strategies¶
Print all the currently non-transparent strategies.
- Tactic with_strategy strategy_level_or_var [ reference+ ] ltac_expr3¶
- strategy_level_or_var
::=strategy_level|identExecutes
ltac_expr3, applying the alternate unfolding behavior that theStrategycommand controls, but only forltac_expr3. This can be useful for guarding calls to reduction in tactic automation to ensure that certain constants are never unfolded by tactics likesimplandcbnor to ensure that unfolding does not fail.Example
- Opaque id.
- Goal id 10 = 10.
- 1 goal ============================ id 10 = 10
- Fail unfold id.
- The command has indeed failed with message: id is opaque.
- with_strategy transparent [id] unfold id.
- 1 goal ============================ 10 = 10
Warning
Use this tactic with care, as effects do not persist past the end of the proof script. Notably, this fine-tuning of the conversion strategy is not in effect during
QednorDefined, so this tactic is most useful either in combination withabstract, which will check the proof early while the fine-tuning is still in effect, or to guard calls to conversion in tactic automation to ensure that, e.g.,unfolddoes not fail just because the user made a constantOpaque.This can be illustrated with the following example involving the factorial function.
- Fixpoint fact (n : nat) : nat := match n with | 0 => 1 | S n' => n * fact n' end.
- fact is defined fact is recursively defined (guarded on 1st argument)
Suppose now that, for whatever reason, we want in general to unfold the
idfunction very late during conversion:- Strategy 1000 [id].
If we try to prove
id (fact n) = fact nbyreflexivity, it will now take time proportional to \(n!\), because Coq will keep unfoldingfactand*and+before it unfoldsid, resulting in a full computation offact n(in unary, because we are usingnat), which takes time \(n!\). We can see this cross the relevant threshold at around \(n = 9\):- Goal True.
- 1 goal ============================ True
- Time assert (id (fact 8) = fact 8) by reflexivity.
- Finished transaction in 0.163 secs (0.144u,0.018s) (successful) 1 goal H : id (fact 8) = fact 8 ============================ True
- Time assert (id (fact 9) = fact 9) by reflexivity.
- Finished transaction in 1.088 secs (1.088u,0.s) (successful) 1 goal H : id (fact 8) = fact 8 H0 : id (fact 9) = fact 9 ============================ True
Note that behavior will be the same if you mark
idasOpaquebecause while most reduction tactics refuse to unfoldOpaqueconstants, conversion treatsOpaqueas merely a hint to unfold this constant last.We can get around this issue by using
with_strategy:- Goal True.
- 1 goal ============================ True
- Fail Timeout 1 assert (id (fact 100) = fact 100) by reflexivity.
- The command has indeed failed with message: Timeout!
- Time assert (id (fact 100) = fact 100) by with_strategy -1 [id] reflexivity.
- Finished transaction in 0.001 secs (0.001u,0.s) (successful) 1 goal H : id (fact 100) = fact 100 ============================ True
However, when we go to close the proof, we will run into trouble, because the reduction strategy changes are local to the tactic passed to
with_strategy.- exact I.
- No more goals.
- Timeout 1 Defined.
- Toplevel input, characters 0-18: > Timeout 1 Defined. > ^^^^^^^^^^^^^^^^^^ Error: Timeout!
We can fix this issue by using
abstract:- Goal True.
- 1 goal ============================ True
- Time assert (id (fact 100) = fact 100) by with_strategy -1 [id] abstract reflexivity.
- Finished transaction in 0.002 secs (0.002u,0.s) (successful) 1 goal H : id (fact 100) = fact 100 ============================ True
- exact I.
- No more goals.
- Time Defined.
- Finished transaction in 0. secs (0.u,0.s) (successful)
On small examples this sort of behavior doesn't matter, but because Coq is a super-linear performance domain in so many places, unless great care is taken, tactic automation using
with_strategymay not be robustly performant when scaling the size of the input.Warning
In much the same way this tactic does not play well with
QedandDefinedwithout usingabstractas an intermediary, this tactic does not play well withcoqchk, even when used withabstract, due to the inability of tactics to persist information about conversion hints in the proof term. See #12200 for more details.