Munching squares: Difference between revisions
Content added Content deleted
Line 108: | Line 108: | ||
(* Test that the index is not out of bounds high. This could |
(* Test that the index is not out of bounds high. This could |
||
be proven without a runtime check, but doing that is left |
be proven without a runtime check, but doing that is left |
||
as an exercise for |
as an exercise for an advanced reader. For one thing, you |
||
will need a more complicated version of lxor. Then you |
|||
will need to prove, or provide as an axiom, that the XOR |
|||
of two numbers of the same number of significant bits is |
|||
itself restricted to that number of bits. *) |
|||
val () = assertloc (i < numcolors) |
val () = assertloc (i < numcolors) |
||