如何在Coq中完成此证明

Question

现在，证明窗口如下所示：

1 subgoals
Case := "WHILE" : String.string
b : bexp
c : com
IHc : forall st' st : state,
      optimize_0plus_com c / st || st' -> c / st || st'
st : state
st' : state
st'' : state
H0 : optimize_0plus_com c / st || st'
IHceval1 : optimize_0plus_com c = optimize_0plus_com (WHILE b DO c END) ->
           (WHILE b DO c END) / st || st'
H : beval st (optimize_0plus_bexp b) = true
Heqloopdef : (WHILE optimize_0plus_bexp b DO optimize_0plus_com c END) =
             optimize_0plus_com (WHILE b DO c END)
H1 : (WHILE optimize_0plus_bexp b DO optimize_0plus_com c END) / st' || st''
IHceval2 : (WHILE optimize_0plus_bexp b DO optimize_0plus_com c END) =
           optimize_0plus_com (WHILE b DO c END) ->
           (WHILE b DO c END) / st' || st''
______________________________________(1/1)
(WHILE b DO c END) / st || st''

我觉得这应该是很容易证明的，但我只是不知道怎么做。上下文中的IHceval假设接近我所需要的，但它们并不完全匹配。有人能帮我一下吗？

Answer 1

我就是这样解决的：

apply E_WhileLoop with st'.
rewrite <- optimize_0plus_bexp_sound in H.
assumption.
apply IHc.
assumption.
apply IHceval2.
(*Look at the definition below*) reflexivity.

rewrite <- optimize_0plus_bexp_sound in H.以H到beval st b = true来解释自反性起作用的原因，下面是optimize_0plus_com的定义：

* match c with
  | SKIP => SKIP
  | i ::= a => i ::= optimize_0plus_aexp a
  | c1;; c2 => optimize_0plus_com c1;; optimize_0plus_com c2
  | IFB b THEN c1 ELSE c2 FI =>
      IFB optimize_0plus_bexp b THEN optimize_0plus_com c1
      ELSE optimize_0plus_com c2 FI
  | ********WHILE b DO c0 END =>
      WHILE optimize_0plus_bexp b DO optimize_0plus_com c0 END