Struct Count Ghost &nbsp; Copy item path

pub open spec fn valid(self, id: Loc, frac: int) -> bool

{
    &&& self.id() == id
    &&& self.frac() == frac

}

pub proof fn new(v: T) -> tracked result : Self

requires

TOTAL > 0,

ensures

result.frac() == TOTAL as int,

result@ == v,

pub proof fn agree(tracked &self, tracked other: &Self)

requires

self.id() == other.id(),

ensures

self@ == other@,

pub proof fn take(tracked &mut self) -> tracked result : Self

ensures

result == *old(self),

pub proof fn split(tracked &mut self, n: int) -> tracked result : Self

requires

0 < n < old(self).frac(),

ensures

result.id() == final(self).id(),

final(self).id() == old(self).id(),

final(self)@ == old(self)@,

result@ == old(self)@,

final(self).frac() + result.frac() == old(self).frac(),

result.frac() == n,

pub proof fn combine(tracked &mut self, tracked other: Self)

requires

old(self).id() == other.id(),

ensures

final(self).id() == old(self).id(),

final(self)@ == old(self)@,

final(self)@ == other@,

final(self).frac() == old(self).frac() + other.frac(),

pub proof fn update(tracked &mut self, v: T)

requires

old(self).frac() == TOTAL,

ensures

final(self).id() == old(self).id(),

final(self)@ == v,

final(self).frac() == old(self).frac(),

pub proof fn update_with(tracked &mut self, tracked other: &mut Self, v: T)

requires

old(self).id() == old(other).id(),

old(self).frac() + old(other).frac() == TOTAL,

ensures

final(self).id() == old(self).id(),

final(other).id() == old(other).id(),

final(self).frac() == old(self).frac(),

final(other).frac() == old(other).frac(),

old(self)@ == old(other)@,

final(self)@ == v,

final(other)@ == v,

pub proof fn bounded(tracked &self)

ensures

0 < self.frac() <= TOTAL,

pub proof fn dummy() -> tracked result : Self

requires

TOTAL > 0,

Auto Trait Implementations§

impl<T, const TOTAL: u64> Freeze for CountGhost<T, TOTAL>

impl<T, const TOTAL: u64> RefUnwindSafe for CountGhost<T, TOTAL>
where T: RefUnwindSafe,

impl<T, const TOTAL: u64> Send for CountGhost<T, TOTAL>
where T: Send,

impl<T, const TOTAL: u64> Sync for CountGhost<T, TOTAL>
where T: Sync,

impl<T, const TOTAL: u64> Unpin for CountGhost<T, TOTAL>
where T: Unpin,

impl<T, const TOTAL: u64> UnsafeUnpin for CountGhost<T, TOTAL>

impl<T, const TOTAL: u64> UnwindSafe for CountGhost<T, TOTAL>
where T: UnwindSafe,

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T, VERUS_SPEC__A> FromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: From<T>,

fn obeys_from_spec() -> bool

fn from_spec(v: T) -> VERUS_SPEC__A

impl<T, U> Into for T
where U: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T, VERUS_SPEC__A> IntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: Into<T>,

fn obeys_into_spec() -> bool

fn into_spec(self) -> T

impl<T, U> IntoSpecImpl for T
where U: From<T>,

fn obeys_into_spec() -> bool

fn into_spec(self) -> U

impl<T, U> TryFrom for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom>::Error>

Performs the conversion.

impl<T, VERUS_SPEC__A> TryFromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryFrom<T>,

fn obeys_try_from_spec() -> bool

fn try_from_spec( v: T, ) -> Result<VERUS_SPEC__A, <VERUS_SPEC__A as TryFrom<T>>::Error>

impl<T, U> TryInto for T
where U: TryFrom<T>,

type Error = >::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, >::Error>

Performs the conversion.

impl<T, VERUS_SPEC__A> TryIntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryInto<T>,

fn obeys_try_into_spec() -> bool

fn try_into_spec(self) -> Result<T, <VERUS_SPEC__A as TryInto<T>>::Error>

impl<T, U> TryIntoSpecImpl for T
where U: TryFrom<T>,

fn obeys_try_into_spec() -> bool