Claim ยท pairs 0.1.3
pairs^21 At most two unmatched cards face up
An invariant of pairs 0.1.3.
- Id
pairs^21- Kind
- invariant
- Reads as
- proved
- Version
- 0.1.3
What it says
At most two cards are face up and unmatched at any time: turning a third turns the mismatched two back first.
Evidence
| proved | init | Pairs.twoUp.init |
| proved | step | Pairs.twoUp.step |
| proved | receive | Pairs.twoUp.receive |
| proved | reachable | Pairs.twoUp.reachable |
| proved | reachableAll | Pairs.twoUp.reachableAll |
| fuzzed | Not shown yet: the claim-driven fuzzer held it in every random sequence (docs/fuzz.md). A CI step will publish it (#95). | |
| tested | Not shown yet: the running app matched the model at every step that exercised it (docs/conformance.md). A CI step will publish it (#95). | |
Where it's defined
- Declaration
Pairs.twoUp- Module
Pairs.Claims- Source
lean/Pairs/Claims.lean:328atv0.1.3- Machine
Pairs.machine- Statement
Pairs.twoUp.holds- Statement hash
326b9cab9ce6feac
Ledger
pairs^21 is active in this version's claims.lock, statement 326b9cab9ce6feac. An id never moves or changes meaning.