From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM
	autolearn=ham autolearn_force=no version=3.4.4
X-Google-Thread: 103376,af40877501f46910
X-Google-NewGroupId: yes
X-Google-Attributes: gida07f3367d7,domainid0,public,usenet
X-Google-Language: ENGLISH,UTF8
Path: 
 g2news1.google.com!news4.google.com!proxad.net!feeder1-2.proxad.net!usenet-fr.net!gegeweb.org!aioe.org!not-for-mail
From: =?utf-8?Q?Yannick_Duch=C3=AAne_=28Hibou57?=
 =?utf-8?Q?=29?=
 <yannick_duchene@yahoo.fr>
Newsgroups: comp.lang.ada
Subject: Re: SPARK understand me very well... me neither
Date: Sat, 14 Aug 2010 18:57:57 +0200
Organization: Ada At Home
Message-ID: <op.vhftevalule2fv@garhos>
References: <op.vhd7rsl2ule2fv@garhos> <op.vhev1mcoule2fv@garhos>
 <2308d0a0-8fdb-41a0-b2dc-6b30a2bf2f18@v41g2000yqv.googlegroups.com>
NNTP-Posting-Host: YYagVKn1YrNkilfPXbyxag.user.speranza.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes
Content-Transfer-Encoding: Quoted-Printable
X-Complaints-To: abuse@aioe.org
X-Notice: Filtered by postfilter v. 0.8.2
User-Agent: Opera Mail/10.60 (Win32)
Xref: g2news1.google.com comp.lang.ada:13291
Date: 2010-08-14T18:57:57+02:00
List-Id: <comp.lang.ada>

Le Sat, 14 Aug 2010 18:04:23 +0200, Phil Thornley  =

<phil.jpthornley@gmail.com> a =C3=A9crit:
> So I would much prefer the simple and obvious version of the
> precondition and code to be the version on Rosetta Code so that anyone=

> browsing that site for information about SPARK doesn't get a wrong
> view of the language.
Updated with this added comment :

> Note: how do you ensure then =E2=80=9CA * B in Natural=E2=80=9D ? Eith=
er with
> a proof prior to Multiply invokation or using another form
> of Multiply where input A and B would be restricted to a range
> which ensures the resulting product is always valid. Exemple :
>    type Input_Type is range 0 .. 10;
>    type Result_Type is range 0 .. 100;
> and had a version of Multiply using these types.
> On the other hand, if arguments of Multiply are constants, this
> is provable straight away.

I wanted to add this comment, because the How is of a practicable  =

importance.


-- =

There is even better than a pragma Assert: a SPARK --# check.
--# check C and WhoKnowWhat and YouKnowWho;
--# assert Ada;
--  i.e. forget about previous premises which leads to conclusion
--  and start with new conclusion as premise.