Correctness of ADTs [Hoare]

• Need to define pre- and post-conditions on both the abstract state and also the concrete state

• Relate these through a (many to one) representation function [Liskov & Guttag]

Previous slide

Next slide

Back to first slide

View graphic version