In order to prove that a sequence of actions can transform an initial situation of the world to a goal situation when complete knowledge of the world is never available, default rules that serve to complete partial descriptions of the world are usually deemed necessary. This leads to non-monotonic reasoning which has proven to be difficult to formalize. In this paper, we present a mechanized fo...

We introduce a Sumii-Pierce-Koutavas-Wand-style bisimulation for Pitts and Stark’s nucalculus, a simply-typed lambda calculus with fresh name generation. This bisimulation coincides with contextual equivalence and provides a usable and elementary method for establishing all the subtle equivalences given by Stark [29]. We also describe the formalization of soundness and of the examples in the Co...

Various mechanisms have been used for adapting functional languages to parallel machines, ranging from semantics{preserving annotations to concurrent language extensions. Concurrent extensions are applicable to both lazy and strict languages, and give the programmer full control over parallel evaluation; however, they complicate the proofs of program correct-ness. This paper pursues the concurr...

Cleaning and shaping are important steps in the root canal treatment. Despite the technological advances in endodontics, K and Hedstroen files are still widely used. In an attempt to be more effective in preparing the root canals, faster and more cutting efficient kinematic, alloys and design alternatives utilizing mechanically oscillating or rotary files are proposed. Even with all these techn...

The probabilistic guarded-command language pGCL [15] contains both demonic and probabilistic nondeterminism, which makes it suitable for reasoning about distributed random algorithms [14]. Proofs are based on weakest precondition semantics, using an underlying logic of real(rather than Boolean-) valued functions. We present a mechanization of the quantitative logic for pGCL [16] using the HOL t...

It is widely recognised that the integration of diierent (sub)-provers is a key issue in the construction of reasoning tools of practical usage. Unfortunately experience shows that eeective integration is very diicult to achieve. The Open Mechanized Reasoning Systems (OMRS) Project started in 1992 with the objective to design a formal framework for the speciication of state-of-the-art provers. ...

We propose a practical verification framework for preemptive OS kernels. The framework models the correctness of API implementations in OS kernels as contextual refinement of their abstract specifications. It provides a specification language for defining the high-level abstract model of OS kernels, a program logic for refinement verification of concurrent kernel code with multi-level hardware ...

It is commonly accepted that tree form has an impact on the productivity of single-grip harvesters. However, it remains unclear, which elements of tree form are significant and to what degree they impact harvesting productivity. This is of particular importance in hardwood dominated stands, where hardwood trees often exhibit complex and variable stem and crown architecture that can complicate a...

This article discusses the relationship between mathematical proof and the digital computer from the viewpoint of the 'sociology of proof': that is, an understanding of what kinds of procedures and arguments count for whom, under what circumstances, as proofs. After describing briefly the first instance of litigation focusing on the nature of mathematical proof, the article describes a variety ...

Ben-Amram and Codish described SCNP [2], a subclass of the size-change termination criterion SCT [8], which permits efficient certificate checking. Termination problems in this class have a global ranking function of a certain form, which can be found using SAT solving. This note describes an automated proof reconstruction for this certificate scheme, implemented in the theorem prover Isabelle/...