Linear Contextual Modal Type Theory

Total Page:16

File Type:pdf, Size:1020Kb

Linear Contextual Modal Type Theory Linear Contextual Modal Type Theory Anders Schack-Nielsen Carsten Schurmann¨ IT University of Copenhagen IT University of Copenhagen Copenhagen, Denmark Copenhagen, Denmark [email protected] [email protected] Abstract where we write F for the logic variable, x; y for the two resources that need to be consumed exactly once, c for con- When one develops, implements, and studies type theo- stant symbols, and b for linear application. If b were ries based on linear logic, for example, in the context of the- intuitionistic application then any instantiation of F with a orem proving, logic programming, and formal reasoning, constant function is a solution. In the multiplicative frag- one is immediately confronted with questions about their ment of linear logic, the problem is not solvable because equational theory and how to deal with logic variables. In any instantiation of F will need to mention x and y exactly this paper, we propose linear contextual modal type theory once on two different rigid paths. Thus the left hand side that gives a mathematical account of the nature of logic and the right hand side of the equation above will differ in variables. Our type theory is conservative over intuition- these two places. If we were to work in linear logic with istic contextual modal type theory proposed by Nanevski, >, the problem is also solvable by choosing the constant Pfenning, and Pientka. As a technical contribution we pro- 0 function F = λxb : λyb : F b hi where we write λb for linear vide a proof of soundness, and, as a justification for its use- functional abstraction and hi for the proof term of >. fulness, we shed some light on the difficulties working with This little example illustrates the complex nature of logic logic variables in linear logics that contain >. variables in linear logic and their role in higher-order linear unification. In the >-free case, every linear resource needs to be consumed by the same term on either side of the equa- 1 Introduction tion. If this is impossible, unification fails. In the presence of > this is no longer the case. Therefore, without a clear Over recent years, linear logic has become increasingly understanding of the nature of logic variables from a mathe- popular as a logic for concurrency, stateful computation, matical point of view, it seems hopeless to try to devise and and even security. So far, the idea of resource awareness design algorithms for equality in linear logic. has had far reaching consequences for the design and imple- In this paper we provide such an understanding by the mentation of logics and logical frameworks; LLF [CP96], means of linear contextual modal type theory that gives a CLF [CPWW02] and even separation logic [Rey02] use precise mathematical meaning to logic variables for linear ideas borrowed from linear logic at their cores. There are logic, building on ideas from contextual modal type theory implementations of theorem provers, logic programming by Nanevski, Pfenning, and Pientka [NPP08]. In their paper languages, and proof assistants that do implement linear they work out a modal explanation of contextual validity, logic, as for example, Lolli [HM94], and Celf [SNS08]. which accounts for the contexts that are usually associated All of these implementations depend crucially on the with logic variables in the intuitionistic setting [DHKP96]. choice of fragment of linear logic and the choice of logic In this paper we define a contextual modal type theory for variable. Logic variables stand for still to be proven leaves linear logic, which accounts for (in part at least) the defini- in a derivation tree or simply holes in a term that is to be tion of logic variables used for Cervesato’s and Pfenning’s instantiated via unification. It is a widely accepted fact that linear preunification algorithm [CP97]. multiplicative connectives are better behaved than, for ex- The underlying philosophical basis for this work is pro- ample, their additive siblings. It is also widely accepted vided by Martin-Lof’s¨ view of logical truth in form of judg- that logic variables are useful. ments and evidence in form of axioms and inference rules. As a motivating example consider the unification prob- Using his technique we construct the meaning of availabil- lem ity, which corresponds to the multiplicative fragment of lin- c b (F b x b y) = c b (F b y b x) ear logic with ( as the main connective, truth, which cor- 1 responds to truth in intuitionistic logic with ! as the main 2 Linear Contextual Modal Logic connective, and contextual validity, which corresponds to the logic of logic variables with [Γ; ∆]! as the main con- The central idea in linear logic [Gir87] is that of a re- nective (pronounced box arrow Γ, ∆). If we know that source. Linear assumptions play the role of a fixed set of A [Γ; ∆]! B is true, then a proof of B may mention a logic available resources that must be consumed (exactly once) in variable of type [Γ; ∆]A, which may refer arbitrarily many a derivation. Therefore, available resources form the philo- times to assumptions in Γ and exactly once to assumptions sophical foundation of linear contextual modal logic. The in ∆. The justification of this construction can be found in idea of linear logic as a resource oriented logic has rendered Section 2. it attractive to many application areas. In Petri nets, tokens Next we show the soundness of linear contextual modal can be modeled as resources, in programming language the- logic in Section 3. To this end we give a sound and complete ory it is state, and in security simply messages that are being proof theoretical account of availability, truth, and contex- created and consumed. tual validity in form of a sequent calculus. Next we prove Traditionally one recovers intuitionistic logic from linear the admissibility of cut, which guarantees the existence of logic by singling out those resources that can be constructed canonical proofs in linear contextual modal logic. The cut- from no other resources. They can be used as often as de- elimination result of this section is formalized and machine- sired, and thus, constructively speaking, they are true. checked in Twelf [PS99]. Finally, we introduce the judgment of contextual valid- Our logic is a bit non-standard because we do not explic- ity, which will ultimately serve as the logical justification itly internalize the judgments for truth and linear contextual of the existence of logic variables. Usually we say a propo- validity. That this is not a loss is argued in Section 4, where sition is valid if it is true in all contexts. But here we re- we define an equivalent logic in terms of a ! modality that re- fine this idea one step further and refer to the validity of a stores the intuitionistic implication A ! B = !A ( B and proposition in a context Γ; ∆, where Γ is a collection of true a linear contextual modality [Γ; ∆] that restores the modal propositions, and ∆ is a collection of available resources. box implication A [Γ; ∆]! B = [Γ; ∆]A ( B. In ad- These three judgments can be defined by a set of infer- dition, this discussion justifies why linear contextual modal ence rules and axioms following the ideas of the judgmental logic is in fact a modal logic. reconstruction of modal logic that goes back to Davies and In Section 5 we introduce a Curry-Howard correspon- Pfenning [DP01]. dence. Every proof rule is endowed with a proof term in the spirit of Bierman [Bie94]. In this section we define all basic Linear Judgments In linear logic, resources are con- operations on logic variables including abstraction, instanti- structed from other resources, all of which are necessarily ation, and substitution application. The choice of canonical consumed during the process. We call judgments of this proofs induces the equational theory based on β reduction form linear judgments. If A is constructed using each lin- and η expansion. We show that every term is equivalent to ear resource among A1 :::An exactly once, we write a β-normal η-long form. Finally, in Section 6 we describe how we use linear con- x1 : A1 avail; : : : ; xn : An avail ` A avail textual modal type theory to help us understand the role of The list of linear resources to the left of the ` symbol enjoys the additive unit hi : >. Consider the following unification among the three structural properties only exchange (and equation, where F and G are logic variables: neither weakening nor contraction) and will be abbreviated in the remainder of this paper by the aforementioned ∆. In c hi (F x) = c hi (d G) b b b b b b the remainder of the paper we refer to xi : Ai avail as a This time, there is only one resource x. On the left the re- linear assumption and to Ai as a resource. source x needs to be consumed by the F , but on the right the In our formulation of the rules that define introduction second argument of c cannot consume x, and it must there- and elimination forms for the linear implication connective fore be consumed by the first argument, the hi. But now, af- (, we use the ` symbol as a notational convenience for ac- ter decomposition the two resulting unification problems are counting all resources consumed by the derivation A avail. no longer well-typed! The resource x must to be consumed lhypx on the right but not on the left in the first and vice versa in x:A avail ` A avail the second. Thus we would expect that there is no solution (∆; x:A avail) ` B avail and wrong again.
Recommended publications
  • Foundational Proof Checkers with Small Witnesses
    Foundational Proof Checkers with Small Witnesses Dinghao Wu Andrew W. Appel Aaron Stump Princeton University Washington University in St. Louis dinghao,appel @cs.princeton.edu [email protected] f g ABSTRACT tion of the proof witness to the size of the binary machine- Proof checkers for proof-carrying code (and similar) systems language program. Necula's LFi proof witnesses were about can suffer from two problems: huge proof witnesses and un- 4 times as big as the programs whose properties they proved. trustworthy proof rules. No previous design has addressed both of these problems simultaneously. We show the theory, Pfenning's Elf and Twelf systems [14, 15] are implementa- design, and implementation of a proof-checker that permits tions of the Edinburgh Logical Framework. In these sys- small proof witnesses and machine-checkable proofs of the tems, proof-search engines can be represented as logic pro- soundness of the system. grams, much like (dependently typed, higher-order) Prolog. Elf and Twelf build proof witnesses automatically; if each logic-program clause is viewed as an inference rule, then the 1. INTRODUCTION proof witness is a trace of the successful goals and subgoals In a proof-carrying code (PCC) system [10], or in other executed by the logic program. That is, the proof witness proof-carrying applications [3], an untrusted prover must is a tree whose nodes are the names of clauses and whose convince a trusted checker of the validity of a theorem by subtrees correspond to the subgoals of these clauses. sending a proof. Two of the potential problems with this approach are that the proofs might be too large, and that Necula's theorem provers were written in this style, origi- the checker might not be trustworthy.
    [Show full text]
  • Functions-As-Constructors Higher-Order Unification
    Functions-as-constructors Higher-order Unification Tomer Libal and Dale Miller Inria Saclay & LIX/École Polytechnique, Palaiseau, France Abstract Unification is a central operation in the construction of a range of computational logic systems based on first-order and higher-order logics. First-order unification has a number of properties that dominates the way it is incorporated within such systems. In particular, first-order unifi- cation is decidable, unary, and can be performed on untyped term structures. None of these three properties hold for full higher-order unification: unification is undecidable, unifiers can be incomparable, and term-level typing can dominate the search for unifiers. The so-called pattern subset of higher-order unification was designed to be a small extension to first-order unification that respected the basic laws governing λ-binding (the equalities of α, β, and η-conversion) but which also satisfied those three properties. While the pattern fragment of higher-order unification has been popular in various implemented systems and in various theoretical considerations, it is too weak for a number of applications. In this paper, we define an extension of pattern unifica- tion that is motivated by some existing applications and which satisfies these three properties. The main idea behind this extension is that the arguments to a higher-order, free variable can be more than just distinct bound variables: they can also be terms constructed from (sufficient numbers of) such variables using term constructors and where no argument is a subterm of any other argument. We show that this extension to pattern unification satisfies the three properties mentioned above.
    [Show full text]
  • A Survey of Engineering of Formally Verified Software
    The version of record is available at: http://dx.doi.org/10.1561/2500000045 QED at Large: A Survey of Engineering of Formally Verified Software Talia Ringer Karl Palmskog University of Washington University of Texas at Austin [email protected] [email protected] Ilya Sergey Milos Gligoric Yale-NUS College University of Texas at Austin and [email protected] National University of Singapore [email protected] Zachary Tatlock University of Washington [email protected] arXiv:2003.06458v1 [cs.LO] 13 Mar 2020 Errata for the present version of this paper may be found online at https://proofengineering.org/qed_errata.html The version of record is available at: http://dx.doi.org/10.1561/2500000045 Contents 1 Introduction 103 1.1 Challenges at Scale . 104 1.2 Scope: Domain and Literature . 105 1.3 Overview . 106 1.4 Reading Guide . 106 2 Proof Engineering by Example 108 3 Why Proof Engineering Matters 111 3.1 Proof Engineering for Program Verification . 112 3.2 Proof Engineering for Other Domains . 117 3.3 Practical Impact . 124 4 Foundations and Trusted Bases 126 4.1 Proof Assistant Pre-History . 126 4.2 Proof Assistant Early History . 129 4.3 Proof Assistant Foundations . 130 4.4 Trusted Computing Bases of Proofs and Programs . 137 5 Between the Engineer and the Kernel: Languages and Automation 141 5.1 Styles of Automation . 142 5.2 Automation in Practice . 156 The version of record is available at: http://dx.doi.org/10.1561/2500000045 6 Proof Organization and Scalability 162 6.1 Property Specification and Encodings .
    [Show full text]
  • Efficient Verification Techniques For
    Overcoming performance barries: efficient verification techniques for logical frameworks Brigitte Pientka School of Computer Science McGill University Montreal, Canada [email protected] Abstract. In recent years, logical frameworks which support formalizing language specifications to- gether with their meta-theory have been pervasively used in small and large-scale applications, from certifying code [2] to advocating a general infrastructure for formalizing the meta-theory and semantics of programming languages [5]. In particular, the logical framework LF [9], based on the dependently typed lambda-calculus, and light-weight variants of it like LFi [17] have played a major role in these applications. While the acceptance of logical framework technology has grown and they have matured, one of the most criticized points is concerned with the run-time performance. In this tutorial we give a brief introduction to logical frameworks, describe its state-of-the art and present recent advances in addressing some of the existing performance issues. 1 Introduction Logical frameworks [9] provide an experimental platform to specify, and implement formal systems together with the proofs about them. One of its applications lies in proof-carrying code, where it is successfully used to specify and verify formal guarantees about the run-time behavior of programs. More generally, logical frameworks provide an elegant language for encoding and mechanizing the meta-theory and semantics of programming languages. This idea has recently found strong advocates among programming languages researchers who proposed the POPLmark challenge, a set of benchmarks to evaluate and compare tool support to experiment with programming language design, and mechanize the reasoning about programming languages [5].
    [Show full text]
  • Type Theory and Applications
    Type Theory and Applications Harley Eades [email protected] 1 Introduction There are two major problems growing in two areas. The first is in Computer Science, in particular software engineering. Software is becoming more and more complex, and hence more susceptible to software defects. Software bugs have two critical repercussions: they cost companies lots of money and time to fix, and they have the potential to cause harm. The National Institute of Standards and Technology estimated that software errors cost the United State's economy approximately sixty billion dollars annually, while the Federal Bureau of Investigations estimated in a 2005 report that software bugs cost U.S. companies approximately sixty-seven billion a year [90, 108]. Software bugs have the potential to cause harm. In 2010 there were a approximately a hundred reports made to the National Highway Traffic Safety Administration of potential problems with the braking system of the 2010 Toyota Prius [17]. The problem was that the anti-lock braking system would experience a \short delay" when the brakes where pressed by the driver of the vehicle [106]. This actually caused some crashes. Toyota found that this short delay was the result of a software bug, and was able to repair the the vehicles using a software update [91]. Another incident where substantial harm was caused was in 2002 where two planes collided over Uberlingen¨ in Germany. A cargo plane operated by DHL collided with a passenger flight holding fifty-one passengers. Air-traffic control did not notice the intersecting traffic until less than a minute before the collision occurred.
    [Show full text]
  • Twelf User's Guide
    Twelf User’s Guide Version 1.4 Frank Pfenning and Carsten Schuermann Copyright c 1998, 2000, 2002 Frank Pfenning and Carsten Schuermann Chapter 1: Introduction 1 1 Introduction Twelf is the current version of a succession of implementations of the logical framework LF. Previous systems include Elf (which provided type reconstruction and the operational semantics reimplemented in Twelf) and MLF (which implemented module-level constructs loosely based on the signatures and functors of ML still missing from Twelf). Twelf should be understood as research software. This means comments, suggestions, and bug reports are extremely welcome, but there are no guarantees regarding response times. The same remark applies to these notes which constitute the only documentation on the present Twelf implementation. For current information including download instructions, publications, and mailing list, see the Twelf home page at http://www.cs.cmu.edu/~twelf/. This User’s Guide is pub- lished as Frank Pfenning and Carsten Schuermann Twelf User’s Guide Technical Report CMU-CS-98-173, Department of Computer Science, Carnegie Mellon University, November 1998. Below we state the typographic conventions in this manual. code for Twelf or ML code ‘samp’ for characters and small code fragments metavar for placeholders in code keyboard for input in verbatim examples hkeyi for keystrokes math for mathematical expressions emph for emphasized phrases File names for examples given in this guide are relative to the main directory of the Twelf installation. For example ‘examples/guide/nd.elf’ may be found in ‘/usr/local/twelf/examples/guide/nd.elf’ if Twelf was installed into the ‘/usr/local/’ directory.
    [Show full text]
  • A Meta-Programming Approach to Realizing Dependently Typed Logic Programming
    A Meta-Programming Approach to Realizing Dependently Typed Logic Programming Zach Snow David Baelde Gopalan Nadathur Computer Science and Eng. Computer Science and Eng. Computer Science and Eng. University of Minnesota University of Minnesota University of Minnesota [email protected] [email protected] [email protected] ABSTRACT in an elegant way through type dependencies, and they for- Dependently typed lambda calculi such as the Logical Frame- malize the authentication of proofs through type-checking. work (LF) can encode relationships between terms in types Such calculi can also be assigned a logic programming in- and can naturally capture correspondences between formu- terpretation by exploiting the well-known isomorphism be- las and their proofs. Such calculi can also be given a logic tween formulas and types [12]. The Twelf system [17] that programming interpretation: the Twelf system is based on we consider in this paper exploits this possibility relative such an interpretation of LF. We consider here whether a to LF. As such, it has been used successfully in specifying conventional logic programming language can provide the and prototyping varied formal systems and mechanisms have benefits of a Twelf-like system for encoding type and proof- also been built into it to reason about these specifications. and-formula dependencies. In particular, we present a sim- Predicate logics provide the basis for logic programming ple mapping from LF specifications to a set of formulas in languages that are also capable of encoding rule-based spec- the higher-order hereditary Harrop (hohh) language, that ifications. Within this framework, the logic of higher-order relates derivations and proof-search between the two frame- hereditary Harrop (hohh) formulas [13] that underlies the works.
    [Show full text]
  • Twelf User's Guide
    Twelf User’s Guide Version 1.3 Frank Pfenning and Carsten Schuermann Copyright c 1998 Frank Pfenning and Carsten Schuermann Chapter 1: Introduction 1 1 Introduction Twelf is the current version of a succession of implementations of the logical framework LF. Previous systems include Elf (which provided type reconstruction and the operational semantics reimplemented in Twelf) and MLF (which implemented module-level constructs loosely based on the signatures and functors of ML still missing from Twelf). Twelf should be understood as research software. This means comments, suggestions, and bug reports are extremely welcome, but there are no guarantees regarding response times. The same remark applies to these notes which constitute the only documentation on the present Twelf implementation. For current information including download instructions, publications, and mailing list, see the Twelf home page at http://www.cs.cmu.edu/~twelf/. This User’s Guide is published as Frank Pfenning and Carsten Schuermann Twelf User’s Guide Technical Report CMU-CS-98-173, Department of Computer Science, Carnegie Mellon University, November 1998. Below we state the typographic conventions in this manual. code for Twelf or ML code ‘samp’ for characters and small code fragments metavar for placeholders in code keyboard for input in verbatim examples KEY for keystrokes math for mathematical expressions emph for emphasized phrases File names for examples given in this guide are relative to the main directory of the Twelf in- stallation. For example ‘examples/guide/nd.elf’ may be found in ‘/usr/local/twelf/examples/guide/nd.elf’ if Twelf was installed into the ‘/usr/local/’ direc- tory.
    [Show full text]
  • A Simple Module System for Twelf
    15-819K: Logic Programming Final Project Report A Simple Module System for Twelf Dan Licata, Rob Simmons, Daniel Lee December 15, 2006 Abstract Twelf is an implementation of the LF logical framework and the Elf logic programming language that provides several automated analy- ses of Elf programs. It is increasingly used in the development and study of large deductive systems, such as programming languages and logics. Such large projects would benefit from language exten- sions that facilitate extensible code reuse and modular development. Drawing on prior work with module systems for LF and Elf, have de- signed and prototyped a simple module system for Twelf. The mod- ule system supports namespace management and simple forms of pa- rameterization and reuse. It is defined by elaboration into the current Twelf implementation. 1 Introduction LF [Harper et al., 1993] is a logical framework used to represent deductive systems such as programming languages and logics. Elf [Pfenning, 1989] is a logic programming language that endows LF with an operational se- mantics based on proof search. Twelf [Pfenning and Schurmann,¨ 1999] is an implementation of LF and Elf that provides various analyses, such as mode, coverage, and termination, of Elf programs. Metatheorems1 about deductive systems can be represented in Twelf as logic programs that sat- isfy certain totality analyses. Consequently, Twelf’s analyses simultane- 1In this report, we will use the words “directive”, “analysis”, and “assertion” for Twelf directives such as mode, worlds, and totality, whereas we will use the word “metatheorem” more broadly to refer to any proposition about a deductive system. FINAL PROJECT REPORT DECEMBER 15, 2006 ASimpleModuleSystemforTwelf 2 ously ensure that logic programs will run correctly and verify metatheo- retic properties of deductive systems.
    [Show full text]
  • Celf – a Logical Framework for Deductive and Concurrent Systems
    Short Talk: Celf – A Logical Framework for Deductive and Concurrent Systems Anders Schack-Nielsen and Carsten Sch¨urmann IT University of Copenhagen Denmark Abstract. CLF (Concurrent LF) [?] is a logical framework for specify- ing and implementing deductive and concurrent systems from areas, such as programming language theory, security protocol analysis, process al- gebras, and logics. Celf is an implementation of the CLF type theory that extends the LF type theory by linear types to support representation of state and a monad to support representation of concurrency. The Celf system is a tool for experimenting with deductive and concurrent systems prevalent in programming language theory, security protocol analysis, process algebras, and logics. It supports the specification of object language syn- tax and semantics through a combination of deductive methods and resource- aware concurrent multiset transition systems. Furthermore it supports the ex- perimentation with those specifications through concurrent logic programming based on multiset rewriting with constraints. Many case studies have been conducted in Celf including all of the motivating examples that were described in the original CLF technical report [?]. In par- ticular, Celf has been successfully employed for experimenting with concurrent ML, its type system, and a destination passing style operational semantics that includes besides the pure core a clean encoding of Haskell-style suspensions with memoizations, futures, mutable references, and concurrency omitting negative acknowledgments. Other examples include various encodings of the π-calculus, security protocols, petri-nets, etc. CLF is a conservative extension over LF, which implies that Celf’s function- ality is compatible with that of Twelf [?]. With a few syntactic modifications Twelf signatures can be read, type checked, and queries can be executed.
    [Show full text]
  • A New Higher-Order Unification Algorithm for Kanren
    A New Higher-order Unification Algorithm for _Kanren WEIXI MA, Indiana University DANIEL P. FRIEDMAN, Indiana University _Kanren, adapted from _Prolog, extends miniKanren with higher-order logic programming. The existing higher-order unification algorithms, however, are neither sound nor complete w.r.t. an “intuitive” under- standing of U-equivalence. This paper shows these gaps and proposes a new method tohandle U-equivalence in higher-order unification. ACM Reference Format: Weixi Ma and Daniel P. Friedman. 2021. A New Higher-order Unification Algorithm for _Kanren. 1, 1 (Au- gust 2021), 10 pages. https://doi.org/10.1145/nnnnnnn.nnnnnnn 1 BACKGROUND Is there a world where true is equal to false? Indeed, there is, if higher-order unification [13] and miniKanren [9] meet each other. Even if all components are already well-established, it may still end up with unnatural or even absurd results, if we combine them naively. This paper unveils the difficulties in handling binders with standard higher-order unification. To solve these problems, we propose a new unification formulation. Higher-order unification [13] solves equations among _-terms modulo UV[-equivalence [3]. Miller [19] finds a decidable fragment of higher-order unification problems by restricting theap- plication forms of the input terms. For an application form 퐹 0, if 퐹 is a unification variable, then 0 must be a list of zero or more distinct bound variables. Such restricted application forms are called patterns and we hereafter refer to the problem identified by Miller as pattern unification. Pattern unification then becomes the coreof _Prolog [20]. _Prolog implements a more expres- sive logic [21] than Prolog does.
    [Show full text]
  • Mechanizing Metatheory in a Logical Framework
    Under consideration for publication in J. Functional Programming 1 Mechanizing Metatheory in a Logical Framework Robert Harper and Daniel R. Licata Carnegie Mellon University (e-mail: frwh,[email protected]) Abstract The LF logical framework codifies a methodology for representing deductive systems, such as programming languages and logics, within a dependently typed λ-calculus. In this methodology, the syntactic and deductive apparatus of a system is encoded as the canonical forms of associated LF types; an encoding is correct (adequate) if and only if it defines a compositional bijection between the apparatus of the deductive system and the associated canonical forms. Given an adequate encoding, one may establish metatheoretic properties of a deductive system by reasoning about the associated LF representation. The Twelf implementation of the LF logical framework is a convenient and powerful tool for putting this methodology into practice. Twelf supports both the representation of a deductive system and the mechanical verification of proofs of metatheorems about it. The purpose of this paper is to provide an up-to-date overview of the LF λ-calculus, the LF methodology for adequate representation, and the Twelf methodology for mechanizing metatheory. We begin by defining a variant of the original LF language, called Canonical LF, in which only canonical forms (long βη-normal forms) are permitted. This variant is parameterized by a subordination relation, which enables modular reasoning about LF representations. We then give an adequate representation of a simply typed λ-calculus in Canonical LF, both to illustrate adequacy and to serve as an object of analysis. Using this representation, we formalize and verify the proofs of some metatheoretic results, including preservation, determinacy, and strengthening.
    [Show full text]