lean4-htt/tests/lean/run/grind_11081.lean
Leonardo de Moura 61186629d6
feat: grind -revert (#11248)
This PR implements the option `revert`, which is set to `false` by
default. To recover the old `grind` behavior, you should use `grind
+revert`. Previously, `grind` used the `RevSimpIntro` idiom, i.e., it
would revert all hypotheses and then re-introduce them while simplifying
and applying eager `cases`. This idiom created several problems:

* Users reported that `grind` would include unnecessary parameters. See
[here](https://leanprover.zulipchat.com/#narrow/channel/270676-lean4/topic/Grind.20aggressively.20includes.20local.20hypotheses.2E/near/554887715).
* Unnecessary section variables were also being introduced. See the new
test contributed by Sebastian Graf.
* Finally, it prevented us from supporting arbitrary parameters as we do
in `simp`. In `simp`, I implemented a mechanism that simulates local
universe-polymorphic theorems, but this approach could not be used in
`grind` because there is no mechanism for reverting (and re-introducing)
local universe-polymorphic theorems. Adding such a mechanism would
require substantial work: I would need to modify the local context
object. I considered maintaining a substitution from the original
variables to the new ones, but this is also tricky, because the mapping
would have to be stored in the `grind` goal objects, and it is not just
a simple mapping. After reverting everything, I would need to keep a
sequence of original variables that must be added to the mapping as we
re-introduce them, but eager case splits complicate this quite a bit.
The whole approach felt overly messy.

The new behavior `grind -revert` addresses all these issues. None of the
`grind` proofs in our test suite broke after we fixed the bugs exposed
by the new feature. That said, the traces and counterexamples produced
by `grind` are different. The new proof terms are also different.
2025-11-19 05:28:31 +00:00

79 lines
2.4 KiB
Text
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

namespace List
protected def diff {α} [BEq α] : List α → List α → List α
| l, [] => l
| l₁, a :: l₂ => if l₁.elem a then List.diff (l₁.erase a) l₂ else List.diff l₁ l₂
def Subperm (l₁ l₂ : List α) : Prop := ∃ l, l ~ l₁ ∧ l <+ l₂
open Perm (swap)
theorem Perm.subperm_left {l l₁ l₂ : List α} (p : l₁ ~ l₂) : Subperm l l₁ ↔ Subperm l l₂ :=
sorry
theorem Sublist.subperm {l₁ l₂ : List α} (s : l₁ <+ l₂) : Subperm l₁ l₂ := sorry
theorem Subperm.perm_of_length_le {l₁ l₂ : List α} :
Subperm l₁ l₂ → length l₂ ≤ length l₁ → l₁ ~ l₂ :=
sorry
end List
variable {α : Type} [DecidableEq α] {l₁ l₂ : List α}
open List
/--
error: `grind` failed
case grind.1.1.1.1.1.1.1.1.1
α : Type
inst : DecidableEq α
l₁ l₂ : List α
hl : l₂.Subperm l₁
p : α → Bool
h : ¬countP p l₁ = countP p (l₁.diff l₂ ++ l₂)
w : α
h_2 : ¬count w (l₁.diff l₂ ++ l₂) = count w l₁
w_1 : α
h_4 : ¬count w_1 l₁ = count w_1 (l₁.diff l₂ ++ l₂)
left : l₂ ⊆ l₁
right : ∀ {a : α}, a ∈ l₂ → a ∈ l₁
left_1 : filter p l₂ <+ filter p l₁
w_2 : List α
left_2 : w_2 <+ l₁
right_2 : filter p l₂ = filter p w_2
w_3 : List α
left_3 : w_3 <+ l₁
right_3 : filter p l₂ = filter p w_3
h_9 : (filter p l₂).length = (filter p l₁).length
w_4 : α
h_11 : ¬count w_4 (l₁.diff l₂ ++ l₂) = count w_4 l₂
w_5 : α
h_13 : ¬count w_5 l₂ = count w_5 (l₁.diff l₂ ++ l₂)
left_4 : l₁.diff l₂ ~ l₁
right_4 : ∀ (a : α), count a (l₁.diff l₂) = count a l₁
w_6 : α
h_16 : ¬count w_6 (l₁.diff l₂ ++ l₂) = count w_6 (l₁.diff l₂)
w_7 : α
h_18 : ¬count w_7 (l₁.diff l₂) = count w_7 (l₁.diff l₂ ++ l₂)
left_5 : l₁.diff l₂ ~ l₂
right_5 : ∀ (a : α), count a (l₁.diff l₂) = count a l₂
left_6 : l₂ ~ l₁
right_6 : ∀ (a : α), count a l₂ = count a l₁
left_7 : l₂ ~ l₁.diff l₂
right_7 : ∀ (a : α), count a l₂ = count a (l₁.diff l₂)
left_8 : l₁ ~ l₁.diff l₂
right_8 : ∀ (a : α), count a l₁ = count a (l₁.diff l₂)
left_9 : l₁ ~ l₂
right_9 : ∀ (a : α), count a l₁ = count a l₂
⊢ False
-/
#guard_msgs in
theorem countP_diff (hl : Subperm l₂ l₁) (p : α → Bool) :
countP p l₁ = countP p (l₁.diff l₂ ++ l₂) := by
grind -verbose [
List.Perm.subperm_left,
List.Sublist.subperm,
List.Subperm.perm_of_length_le,
List.Perm.countP_congr
]