Abstract:Functional programs typically interact with stateful libraries that hide state behind typed abstractions. One particularly important class of applications are data structure implementations that rely on such libraries to provide a level of efficiency and scalability that may be otherwise difficult to achieve. However, because the specifications of the methods provided by these libraries are necessarily general and rarely specialized to the needs of any specific client, any required application-level invariants must often be expressed in terms of additional constraints on the (often) opaque state maintained by the library. In this paper, we consider the specification and verification of such representation invariants using symbolic finite automata (SFA). We show that SFAs can be used to succinctly and precisely capture fine-grained temporal and data-dependent histories of interactions between functional clients and stateful libraries. To facilitate modular and compositional reasoning, we integrate SFAs into a refinement type system to qualify stateful computations resulting from such interactions. The particular instantiation we consider, Hoare Automata Types (HATs), allows us to both specify and automatically type-check the representation invariants of a datatype, even when its implementation depends on stateful library methods that operate over hidden state. We also develop a new bidirectional type checking algorithm that implements an efficient subtyping inclusion check over HATs, enabling their translation into a form amenable for SMT-based automated verification. We present extensive experimental results on an implementation of this algorithm that demonstrates the feasibility of type-checking complex and sophisticated HAT-specified OCaml data structure implementations.

GADTs and Exhaustiveness: Looking for the Impossible

GADTs meet subtyping

GADT meet Subtyping

GADTs are not (Even partial) functors

Extending the Quantitative Pattern-Matching Paradigm

Towards Tree Automata-based Success Types

Early Announcement: Parametricity for GADTs

Practical Deductive Verification of OCaml Programs (Extended Version)

A Note on the Incompleteness of Gödel's Incompleteness Theorems

Representing permutations without permutations, or the expressive power of sequence types

A Type Checking Algorithm for Higher-rank, Impredicative and Second-order Types

Type checking data structures more complex than trees

Totality for Mixed Inductive and Coinductive Types

Automating Sized Type Inference for Complexity Analysis (Technical Report)

Ready, set, verify! applying hs-to-coq to real-world Haskell code (experience report)

The Undecidability of Third Order Pattern Matching in Calculi with Dependent Types or Type Constructors

A Complete Inference System for Skip-free Guarded Kleene Algebra with Tests

On Tools for Completeness of Kleene Algebra with Hypotheses

A graded dependent type system with a usage-aware semantics (extended version)

A HAT Trick: Automatically Verifying Representation Invariants Using Symbolic Finite Automata

Algebras for Deterministic Computation Are Inherently Incomplete