Chapter 16: Proof of imperative programs
Jean-Christophe Filliātre
This chapter describes a new tactic
to prove the correctness and termination of imperative
programs annotated in a Floyd-Hoare logic style.
The theoretical fundations of this tactic are described
in [Filliatre99, Filliatre00a].
This tactic is provided in the Coq module Correctness,
which does not belong to the initial state of Coq. So you must import
it when necessary, with the following command:
Require Correctness.