[POPLmark] Adequacy for LF

Stephan Zdancewic stevez at cis.upenn.edu
Mon May 2 21:09:46 EDT 2005


Karl Crary wrote:

> There's been some confusion about the adequacy of our encoding of the 
> operational semantics; in particular, why our encoding is adequate, 
> given that the paper presents the semantics using evaluation contexts 
> and our encoding does not.  We wanted to clarify why it is adequate, 
> and moreover, why we thought its adequacy was obvious.

Hi Karl,
  I would also like to elaborate a bit more on why we originally gave 
the Twelf implementation a grade of "-" with respect to the operational 
semantics.  Part of the confusion (and this is probably our fault 
entirely) is that the point of PoplMark is *not* to prove the soundness 
of FSub.  Instead, the point is to allow us to compare proofs of "the 
same thing" using different theorem proving and term representation 
strategies.  Because different term representations will likely need to 
use different proof techniques, there has to be some wiggle room for 
what exactly "the same thing" is, but by trying to keep as many features 
of the formalism the same across different implementations, we had hoped 
to make comparison easier.  In addition, the other point of the PoplMark 
Challenge is to see how the technologies scale to handle different 
language constructs, including things like exceptions, etc. that are 
more cleanly handled by evaluation contexts.  (See Peter's mail.)
 
  As you rightly point out, the operational semantics for FSub doesn't 
require evaluation contexts and omitting them may make the proofs 
cleaner.  In fact, never have we said that your solution was inadequate 
(in the technical sense).  Our objection was solely to the fact that it 
didn't follow the spirit of the challenge.  We should have clarified 
this from the beginning.

  Putting the adequacy of your original encoding aside for the moment, 
let me ask you this: How hard would it be to formalize the operational 
semantics, using evaluation contexts, following the paper version as 
closely as possible?  My impression is that it wouldn't be that much 
harder than the existing solution.  If it *would* be significantly 
harder, then that in itself is interesting, and I would like to 
understand why. 

Thanks,
  Steve


More information about the Poplmark mailing list