forked from uwplse/verdi
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathLeaderLogsSortedProof.v
246 lines (218 loc) · 7.73 KB
/
LeaderLogsSortedProof.v
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
Require Import List.
Import ListNotations.
Require Import VerdiTactics.
Require Import Util.
Require Import Net.
Require Import GhostSimulations.
Require Import Raft.
Require Import RaftRefinementInterface.
Require Import CommonDefinitions.
Require Import SpecLemmas.
Require Import UpdateLemmas.
Local Arguments update {_} {_} {_} _ _ _ _ : simpl never.
Require Import LeaderLogsSortedInterface.
Require Import SortedInterface.
Section LeaderLogsSorted.
Context {orig_base_params : BaseParams}.
Context {one_node_params : OneNodeParams orig_base_params}.
Context {raft_params : RaftParams orig_base_params}.
Context {rri : raft_refinement_interface}.
Context {si : sorted_interface}.
Ltac update_destruct :=
match goal with
| [ H : context [ update _ ?x _ ?y ] |- _ ] =>
destruct (name_eq_dec x y); subst; rewrite_update; simpl in *
end.
Lemma leaderLogs_sorted_init :
refined_raft_net_invariant_init leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_init, leaderLogs_sorted.
intros. subst. simpl in *. intuition.
Qed.
Lemma leaderLogs_update_elections_data_client_request :
forall me st client id c,
leaderLogs (update_elections_data_client_request me st client id c) =
leaderLogs (fst st).
Proof.
unfold update_elections_data_client_request.
intros.
repeat break_match; auto.
Qed.
Lemma leaderLogs_sorted_client_request :
refined_raft_net_invariant_client_request leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_client_request, leaderLogs_sorted.
intros. subst. simpl in *. find_higher_order_rewrite.
update_destruct; simpl in *.
- rewrite leaderLogs_update_elections_data_client_request in *.
eauto.
- eauto.
Qed.
Lemma sorted_host_lifted :
forall net h,
refined_raft_intermediate_reachable net ->
sorted (log (snd (nwState net h))).
Proof.
intros.
pose proof (lift_prop _ logs_sorted_invariant).
find_insterU. conclude_using eauto.
unfold logs_sorted, logs_sorted_host in *. break_and.
unfold deghost in *. simpl in *. break_match. eauto.
Qed.
Lemma leaderLogs_update_elections_data_timeout :
forall h st,
leaderLogs (update_elections_data_timeout h st) =
leaderLogs (fst st).
Proof.
unfold update_elections_data_timeout.
intros.
repeat break_match; simpl in *; auto.
Qed.
Lemma leaderLogs_sorted_timeout :
refined_raft_net_invariant_timeout leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_timeout, leaderLogs_sorted.
intros. subst. simpl in *. find_higher_order_rewrite.
update_destruct; simpl in *;
try rewrite leaderLogs_update_elections_data_timeout in *;
eauto.
Qed.
Lemma leaderLogs_update_elections_data_AE :
forall me st t li pli plt es lci,
leaderLogs (update_elections_data_appendEntries me st t li pli plt es lci) =
leaderLogs (fst st).
Proof.
unfold update_elections_data_appendEntries.
intros.
repeat break_match; subst; auto.
Qed.
Lemma leaderLogs_sorted_append_entries :
refined_raft_net_invariant_append_entries leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_append_entries, leaderLogs_sorted.
intros. subst. simpl in *. find_higher_order_rewrite.
update_destruct; simpl in *.
- rewrite leaderLogs_update_elections_data_AE in *.
eauto.
- eauto.
Qed.
Lemma leaderLogs_sorted_append_entries_reply :
refined_raft_net_invariant_append_entries_reply leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_append_entries_reply, leaderLogs_sorted.
intros. subst. simpl in *. find_higher_order_rewrite.
update_destruct; simpl in *; eauto.
Qed.
Lemma leaderLogs_sorted_request_vote :
refined_raft_net_invariant_request_vote leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_request_vote, leaderLogs_sorted.
intros.
subst. simpl in *. find_higher_order_rewrite.
update_destruct.
- unfold update_elections_data_requestVote in *.
repeat break_match; simpl in *; intuition; repeat find_inversion; eauto.
- eauto.
Qed.
Lemma leaderLogs_update_elections_data_request_vote_reply :
forall {h st h' t r st'},
handleRequestVoteReply h (snd st) h' t r = st' ->
forall (P : list (term * list entry) -> Prop),
(forall t, P ((t, log (snd st)) :: leaderLogs (fst st))) ->
(P (leaderLogs (fst st))) ->
(P (leaderLogs (update_elections_data_requestVoteReply h h' t r st))).
Proof.
unfold update_elections_data_requestVoteReply.
intros.
repeat break_match; simpl in *; eauto.
repeat find_rewrite.
match goal with
| H : handleRequestVoteReply _ _ _ _ _ = _ |- _ =>
symmetry in H
end.
find_apply_lem_hyp handleRequestVoteReply_spec.
intuition; repeat find_rewrite; auto.
Qed.
Lemma leaderLogs_sorted_request_vote_reply :
refined_raft_net_invariant_request_vote_reply leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_request_vote_reply, leaderLogs_sorted.
intros. subst. simpl in *. find_higher_order_rewrite.
update_destruct; eauto.
match goal with
| _ : context [ leaderLogs (update_elections_data_requestVoteReply ?h ?s ?t ?v ?st) ] |- _ =>
destruct (leaderLogs (update_elections_data_requestVoteReply h s t v st))
using (leaderLogs_update_elections_data_request_vote_reply ltac:(eauto))
end; eauto.
simpl in *. intuition eauto.
find_inversion. eauto using sorted_host_lifted.
Qed.
Lemma leaderLogs_sorted_do_leader :
refined_raft_net_invariant_do_leader leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_do_leader, leaderLogs_sorted.
intros. subst. simpl in *. find_higher_order_rewrite.
update_destruct.
- match goal with
| [ H : _, H' : _ |- _ ] =>
eapply H; rewrite H'; simpl; eauto
end.
- eauto.
Qed.
Lemma leaderLogs_sorted_do_generic_server :
refined_raft_net_invariant_do_generic_server leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_do_generic_server, leaderLogs_sorted.
intros. subst. simpl in *. find_higher_order_rewrite.
update_destruct.
- match goal with
| [ H : _, H' : _ |- _ ] =>
eapply H; rewrite H'; simpl; eauto
end.
- eauto.
Qed.
Lemma leaderLogs_sorted_state_same_packet_subset :
refined_raft_net_invariant_state_same_packet_subset leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_state_same_packet_subset, leaderLogs_sorted.
intros. subst. simpl in *. find_reverse_higher_order_rewrite.
eauto.
Qed.
Lemma leaderLogs_sorted_reboot :
refined_raft_net_invariant_reboot leaderLogs_sorted.
Proof.
unfold refined_raft_net_invariant_reboot, leaderLogs_sorted.
intros.
find_higher_order_rewrite.
update_destruct.
- match goal with
| [ H : _, H' : _ |- _ ] =>
eapply H; rewrite H'; simpl; eauto
end.
- eauto.
Qed.
Lemma leaderLogs_sorted_invariant :
forall net,
refined_raft_intermediate_reachable net ->
leaderLogs_sorted net.
Proof.
intros.
apply refined_raft_net_invariant; auto.
- apply leaderLogs_sorted_init.
- apply leaderLogs_sorted_client_request.
- apply leaderLogs_sorted_timeout.
- apply leaderLogs_sorted_append_entries.
- apply leaderLogs_sorted_append_entries_reply.
- apply leaderLogs_sorted_request_vote.
- apply leaderLogs_sorted_request_vote_reply.
- apply leaderLogs_sorted_do_leader.
- apply leaderLogs_sorted_do_generic_server.
- apply leaderLogs_sorted_state_same_packet_subset.
- apply leaderLogs_sorted_reboot.
Qed.
Instance llsi : leaderLogs_sorted_interface.
Proof.
split.
eauto using leaderLogs_sorted_invariant.
Defined.
End LeaderLogsSorted.