From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00
	autolearn=unavailable autolearn_force=no version=3.4.4
Path: 
 eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!news.eternal-september.org!news.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Simon Wright <simon@pushface.org>
Newsgroups: comp.lang.ada
Subject: Declaration of function in precondition
Date: Thu, 24 Apr 2014 11:12:55 +0100
Organization: A noiseless patient Spider
Message-ID: <lyzjjbt4rc.fsf@pushface.org>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: mx05.eternal-september.org;
 posting-host="17b46ff0ef6492aedc2232708a5c5eff";
	logging-data="31511"; mail-complaints-to="abuse@eternal-september.org";
	posting-account="U2FsdGVkX181dV5r8ViM0DDqvPtpnRBEYB2S3MQsBrQ="
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (darwin)
Cancel-Lock: sha1:JfK11+yQ5Oe8jQKoWVtJyFEQPos=
	sha1:shB5w9J4X/k4hxnklMyMM0tr3J0=
Xref: news.eternal-september.org comp.lang.ada:19564
Date: 2014-04-24T11:12:55+01:00
List-Id: <comp.lang.ada>

I proposed this in answer to a question[1] on StackOverflow:

   package RingBuffer is
      function Is_Full return Boolean;
      procedure Push(value: T) with Pre => not Is_Full;
      function Pop return T;
   private
      buffer: array(0..size) of T;
      readptr: integer := 0;
      writeptr: integer := 1;
      function Is_Full return Boolean is (Readptr = Writeptr);
   end RingBuffer;

and it turns out that GNAT (GPL 2013, 4.9-20140119) is happy if I put
the spec of Is_Full after its use (but still in the visible part):

      procedure Push(value: T) with Pre => not Is_Full;
      function Is_Full return Boolean;

I can't see where in the ARM this is legalised?

[1] http://stackoverflow.com/questions/23203022/ada-aspects-which-are-private-to-a-package