Abstract

. IVY is a verified theorem prover for first-order logic with equality. It is coded in ACL2, and it makes calls to the theorem prover Otter to search for proofs and to the program MACE to search for countermodels. Verifications of Otter and MACE are not practical because they are coded in C. Instead, Otter and MACE give detailed proofs and models that are checked by verified ACL2 programs. In addition, the initial conversion to clause form is done by verified ACL2 code. The verification is done with respect to finite interpretations. 1 Introduction Our theorem provers Otter [6, 7, 10] and EQP [4, 8] and our model searcher MACE [3, 5] are being used for practical work in several areas. Therefore, we wish to have very high confidence that the proofs and models they produce are correct. However, these are high-performance programs, coded in C, with many tricks, hacks, and optimizations, so formal verification of the programs is not practical. Instead, our approach is to have the...

Citations