-
Notifications
You must be signed in to change notification settings - Fork 632
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[wip] Incorrect experiment to clean up some code in the stm #18976
Conversation
It seems these files were never used?
| `Not -> Leaks | ||
|
||
let () = register_proof_block_delimiter | ||
"bullet" static_bullet dynamic_bullet |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this file is here for the effects like this one.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Indeed I don't think we test that in test-suite.
I'll move this PR to draft for now; we could gain a bit from removing the error recovery thing of the STM, which AFAICT newer worked too well (at least in SerAPI / jsCoq we had to disable it, otherwise things got really flaky)
On the other hand that's not a super gain from my own experiments.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
IIRC the advantage of having the analysis of "sub proof boxes" in Coq proper rather than the document manager is that one needs the internals of the proof engine. In particular it makes sense to recover/admit a broken proof as in { broken proof } .. { another proof }
only if the type of the broken proof is ground (no evar the broken proof should be filled occur in it) and if the proof term itself is not occurring in any other goal.
Maybe the code is ugly or broken, but doing it naively in the DM by putting admit
when the structure allows for it is not sound.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We can of course say it is not the STM that lets one skip over broken sub-proofs, but the code doing the analysis really belongs to Coq's proof model.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What's you definition of "sound" in this context?
It seems these files were never used?