Theory RPCParameters

(*  Title:      HOL/TLA/Memory/RPCParameters.thy
    Author:     Stephan Merz, University of Munich

section ‹RPC-Memory example: RPC parameters›

theory RPCParameters
imports MemoryParameters

  For simplicity, specify the instance of RPC that is used in the
  memory implementation.

datatype rpcOp = memcall memOp | othercall Vals
datatype rpcState = rpcA | rpcB

axiomatization RPCFailure :: Vals and BadCall :: Vals
  (* RPCFailure is different from MemVals and exceptions *)
  RFNoMemVal:        "RPCFailure  MemVal" and
  NotAResultNotRF:   "NotAResult  RPCFailure" and
  OKNotRF:           "OK  RPCFailure" and
  BANotRF:           "BadArg  RPCFailure"

(* Translate an rpc call to a memory call and test if the current argument
   is legal for the receiver (i.e., the memory). This can now be a little
   simpler than for the generic RPC component. RelayArg returns an arbitrary
   memory call for illegal arguments. *)

definition IsLegalRcvArg :: "rpcOp  bool"
  where "IsLegalRcvArg ra ==
    case ra of (memcall m)  True
             | (othercall v)  False"

definition RPCRelayArg :: "rpcOp  memOp"
  where "RPCRelayArg ra ==
    case ra of (memcall m)  m
             | (othercall v)  undefined"

lemmas [simp] = RFNoMemVal NotAResultNotRF OKNotRF BANotRF
  NotAResultNotRF [symmetric] OKNotRF [symmetric] BANotRF [symmetric]