[ICFP'26] Assertions for Free: Transferring Invariants from Algorithm to Implementation Proofs(…)
ACM SIGPLAN · 19:37
The trick: put assert statements in the abstract algorithm. The algorithm proof shows they never fail, and through a relational logic with "error simulation," the C implementation proof can simply assume those facts (...