Rodin Handbook





 

Feedback

4.3.3 In INITIALISATION, I get Witness Xyz must be a disappearing abstract variable or parameter

The witness is for the after value of the abstract variable, hence you should use the primed variable. The witness label should be Xyz’, and the predicate should refer to Xyz’ too.