CountR

vstd_extra::resource::pcm::count

Enum CountR

pub enum CountR {
    Unit,
    Auth(nat),
    Token,
    Tokens(nat),
    Invalid,
}

Expand description

A reference-counting PCM with authority and tokens.

Variants§

Unit

Unit element with no actual meaning.

Auth(nat)

Authority: tracks how many tokens have been minted

Token

Token: represents one reference

Tokens(nat)

Combination of tokens

Invalid

Invalid state

Implementations§

impl CountR

pub fn arrow_0(self) -> nat

pub fn arrow_Auth_0(self) -> nat

pub fn arrow_Tokens_0(self) -> nat

Trait Implementations§

impl PCM for CountR

open spec fn valid(self) -> bool

{ self !is Invalid }

open spec fn op(self, other: Self) -> Self

{
    match (self, other) {
        (CountR::Unit, x) | (x, CountR::Unit) => x,
        (CountR::Token, CountR::Token) => CountR::Tokens(2),
        (CountR::Token, CountR::Tokens(n)) | (CountR::Tokens(n), CountR::Token) => {
            CountR::Tokens(n + 1)
        }
        (CountR::Tokens(n1), CountR::Tokens(n2)) => CountR::Tokens(n1 + n2),
        (CountR::Auth(n), CountR::Token) | (CountR::Token, CountR::Auth(n)) => {
            if n > 0 { CountR::Auth((n - 1) as nat) } else { CountR::Invalid }
        }
        (CountR::Auth(n), CountR::Tokens(m)) | (CountR::Tokens(m), CountR::Auth(n)) => {
            if n >= m { CountR::Auth((n - m) as nat) } else { CountR::Invalid }
        }
        _ => CountR::Invalid,
    }
}

open spec fn unit() -> Self

{ CountR::Unit }

proof fn closed_under_incl(a: Self, b: Self)

proof fn commutative(a: Self, b: Self)

proof fn associative(a: Self, b: Self, c: Self)

proof fn op_unit(a: Self)

proof fn unit_valid()

Auto Trait Implementations§

impl Freeze for CountR

impl RefUnwindSafe for CountR

impl Send for CountR

impl Sync for CountR

impl Unpin for CountR

impl UnwindSafe for CountR

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T, VERUS_SPEC__A> FromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: From<T>,

fn obeys_from_spec() -> bool

fn from_spec(v: T) -> VERUS_SPEC__A

impl<T, U> Into<U> for T
where U: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T, VERUS_SPEC__A> IntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: Into<T>,

fn obeys_into_spec() -> bool

fn into_spec(self) -> T

impl<T, U> IntoSpecImpl<U> for T
where U: From<T>,

fn obeys_into_spec() -> bool

fn into_spec(self) -> U

impl<T, U> TryFrom<U> for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.

impl<T, VERUS_SPEC__A> TryFromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryFrom<T>,

fn obeys_try_from_spec() -> bool

fn try_from_spec( v: T, ) -> Result<VERUS_SPEC__A, <VERUS_SPEC__A as TryFrom<T>>::Error>

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.

impl<T, VERUS_SPEC__A> TryIntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryInto<T>,

fn obeys_try_into_spec() -> bool

fn try_into_spec(self) -> Result<T, <VERUS_SPEC__A as TryInto<T>>::Error>

impl<T, U> TryIntoSpecImpl<U> for T
where U: TryFrom<T>,

fn obeys_try_into_spec() -> bool

fn try_into_spec(self) -> Result<U, <U as TryFrom<T>>::Error>