Theorems about List operations. #
For each List operation, we would like theorems describing the following, when relevant:
- if it is a "convenience" function, a 
@[simp]lemma reducing it to more basic operations (e.g.List.partition_eq_filter_filter), and otherwise: - any special cases of equational lemmas that require additional hypotheses
 - lemmas for special cases of the arguments (e.g. 
List.map_id) - the length of the result 
(f L).length - the 
i-th element, described via(f L)[i]and/or(f L)[i]?(these should typically be@[simp]) - consequences for 
f Lof the factx ∈ Lorx ∉ L - conditions characterising 
x ∈ f L(often but not always@[simp]) - injectivity statements, or congruence statements of the form 
p L M → f L = f M. - conditions characterising the result, i.e. of the form 
f L = M ↔ p Mfor some predicatep, along with special cases ofM(e.g.List.append_eq_nil : L ++ M = [] ↔ L = [] ∧ M = []) - negative characterisations are also useful, e.g. 
List.cons_ne_nil - interactions with all previously described 
Listoperations where possible (some of these should be@[simp], particularly if the result can be described by a single operation) - characterising 
(∀ (i) (_ : i ∈ f L), P i), for some predicateP 
Of course for any individual operation, not all of these will be relevant or helpful, so some judgement is required.
General principles for simp normal forms for List operations:
- Conversion operations (e.g. 
toArray, orlength) should be moved inwards aggressively, to make the conversion effective. - Similarly, operations which work on elements should be moved inwards in preference to
"structural" operations on the list, e.g. we prefer to simplify
List.map f (L ++ M) ~> (List.map f L) ++ (List.map f M),List.map f L.reverse ~> (List.map f L).reverse, andList.map f (L.take n) ~> (List.map f L).take n. - Arithmetic operations are "light", so e.g. we prefer to simplify 
drop i (drop j L)todrop (i + j) L, rather than the other way round. - Function compositions are "light", so we prefer to simplify 
(L.map f).map gtoL.map (g ∘ f). - We try to avoid non-linear left hand sides (i.e. with subexpressions appearing multiple times), but this is only a weak preference.
 - Generally, we prefer that the right hand side does not introduce duplication, however generally duplication of higher order arguments (functions, predicates, etc) is allowed, as we expect to be able to compute these once they reach ground terms.
 
See also
Init.Data.List.Attachfor definitions and lemmas aboutList.attachandList.pmap.Init.Data.List.Countfor lemmas aboutList.countPandList.count.Init.Data.List.Erasefor lemmas aboutList.erasePandList.erase.Init.Data.List.Findfor lemmas aboutList.find?,List.findSome?,List.findIdx,List.findIdx?, andList.indexOfInit.Data.List.MinMaxfor lemmas aboutList.minimum?andList.maximum?.Init.Data.List.Pairwisefor lemmas aboutList.PairwiseandList.Nodup.Init.Data.List.Sublistfor lemmas aboutList.Subset,List.Sublist,List.IsPrefix,List.IsSuffix, andList.IsInfix.Init.Data.List.TakeDropfor additional lemmas aboutList.takeandList.drop.Init.Data.List.Zipfor lemmas aboutList.zip,List.zipWith,List.zipWithAll, andList.unzip.
Further results, which first require developing further automation around Nat, appear in
Init.Data.List.Nat.Basic: miscellaneous lemmasInit.Data.List.Nat.Range:List.rangeandList.enumInit.Data.List.Nat.TakeDrop:List.takeandList.drop
Also
Init.Data.List.Monadicfor addiation lemmas aboutList.mapMandList.forM.
Preliminaries #
cons #
Equations
Instances For
length #
Instances For
L[i] and L[i]? #
get and get?. #
We simplify l.get i to l[i.1]'i.2 and l.get? i to l[i]?.
If one has l.get i in an expression (with i : Fin l.length) and h : l = l',
rw [h] will give a "motive it not type correct" error, as it cannot rewrite the
i : Fin l.length to Fin l'.length directly. The theorem get_of_eq can be used to make
such a rewrite, with rw [get_of_eq h].
getD #
We simplify away getD, replacing getD l n a with (l[n]?).getD a.
Because of this, there is only minimal API for getD.
get! #
We simplify l.get! n to l[n]!.
getElem! #
getElem? and getElem #
If one has l[i] in an expression and h : l = l',
rw [h] will give a "motive it not type correct" error, as it cannot rewrite the
implicit i < l.length to i < l'.length directly. The theorem getElem_of_eq can be used to make
such a rewrite, with rw [getElem_of_eq h].
mem #
isEmpty #
any / all #
set #
Lexicographic ordering #
foldlM and foldrM #
foldl and foldr #
getLast #
getLast? #
Head and tail #
head #
headD #
simp unfolds headD in terms of head? and Option.getD.
tailD #
simp unfolds tailD in terms of tail? and Option.getD.
tail #
Basic operations #
map #
Instances For
filter #
Instances For
Equations
Instances For
Equations
Instances For
filterMap #
append #
concat #
Note that concat_eq_append is a @[simp] lemma, so concat should usually not appear in goals.
As such there's no need for a thorough set of lemmas describing concat.
join #
bind #
replicate #
reverse #
Further results about getLast and getLast? #
Additional operations #
leftpad #
List membership #
elem / contains #
Sublists #
partition #
Because we immediately simplify partition into two filters for verification purposes,
we do not separately develop much theory about it.
dropLast #
dropLast is the specification for Array.pop, so theorems about List.dropLast
are often used for theorems about Array.pop.