<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE book PUBLIC "-//NLM//DTD BITS Book Interchange DTD with OASIS and XHTML Tables v2.0 20151225//EN" "BITS-book-oasis2.dtd">
<book dtd-version="2.0" xml:lang="en" book-type="conference-proceedings" xmlns:xlink="http://www.w3.org/1999/xlink">
  <collection-meta collection-type="book-series">
    <collection-id collection-id-type="doi">10.1145/acmotherconferences</collection-id>
    <title-group>
      <title>ACM Other Conferences</title>
    </title-group>
  </collection-meta>
  <book-meta>
    <book-id book-id-type="acm-id">0000000</book-id>
    <book-id book-id-type="doi">10.5555/0000000</book-id>
    <book-title-group>
      <book-title>Proceedings of the 10th International Conference on Interactive Theorem Proving (ITP 2019)</book-title>
      <alt-title alt-title-type="acronym">ITP 2019</alt-title>
    </book-title-group>
    <contrib-group>
      <contrib contrib-type="editor" id="bkseq-00001">
        <name>
          <surname>Harrison</surname>
          <given-names>John</given-names>
        </name>
        <aff>Amazon AWS, Portland, OR, USA</aff>
        <email>jrh013@gmail.com</email>
        <role>Editor</role>
      </contrib>
      <contrib contrib-type="editor" id="bkseq-00002">
        <name>
          <surname>O'Leary</surname>
          <given-names>John</given-names>
        </name>
        <aff>Intel Corporation</aff>
        <email>john.w.oleary@intel.com</email>
        <role>Editor</role>
      </contrib>
      <contrib contrib-type="editor" id="bkseq-00003">
        <name>
          <surname>Tolmach</surname>
          <given-names>Andrew</given-names>
        </name>
        <aff>Portland State University, Portland, OR, USA</aff>
        <email>tolmach@pdx.edu</email>
        <role>Editor</role>
      </contrib>
    </contrib-group>
    <pub-date date-type="publication">
      <day>05</day>
      <month>09</month>
      <year>2019</year>
    </pub-date>
    <isbn content-type="13-digit">9783959771221</isbn>
    <publisher>
      <publisher-name>Schloss Dagstuhl – Leibniz-Zentrum für Informatik</publisher-name>
      <publisher-name specific-use="publisher-id db-only">PUB7509</publisher-name>
      <publisher-loc>Germany</publisher-loc>
    </publisher>
    <permissions>
      <copyright-year>2019</copyright-year>
    </permissions>
    <conference>
      <conf-date iso-8601-date="2019-09-05">
        <day content-type="start-day">09</day>
        <month content-type="start-month">09</month>
        <year content-type="start-year">2019</year>
        <day content-type="end-day">12</day>
        <month content-type="end-month">09</month>
        <year content-type="end-year">2019</year>
      </conf-date>
      <conf-name>
        <ext-link ext-link-type="url" xlink:href="https://itp19.cecs.pdx.edu/">ITP 2019</ext-link>
      </conf-name>
      <conf-acronym>ITP 2019</conf-acronym>
    </conference>
  </book-meta>
  <front-matter>
    <toc>
      <toc-entry>
        <title>A Million Lines of Proof About a Moving Target (Invited Talk)</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.1</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">1</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>What Makes a Mathematician Tick? (Invited Talk)</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.2</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">2</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>An Increasing Need for Formality (Invited Talk)</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.3</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">3</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>A Verified Compositional Algorithm for AI Planning</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.4</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">4</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Proving Tree Algorithms for Succinct Data Structures</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.5</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">5</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Data Types as Quotients of Polynomial Functors</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.6</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">6</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Primitive Floats in Coq</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.7</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">7</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>A Certificate-Based Approach to Formally Verified Approximations</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.8</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">8</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Higher-Order Tarski Grothendieck as a Foundation for Formal Proof</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.9</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">9</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Generic Authenticated Data Structures, Formally</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.10</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">10</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>A Verified and Compositional Translation of LTL to Deterministic Rabin Automata</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.11</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">11</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Formalizing Computability Theory via Partial Recursive Functions</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.12</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">12</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Formal Proofs of Tarjan’s Strongly Connected Components Algorithm in Why3, Coq and Isabelle</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.13</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">13</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>First-Order Guarded Coinduction in Coq</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.14</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">14</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Formalizing the Solution to the Cap Set Problem</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.15</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">15</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Nine Chapters of Analytic Number Theory in Isabelle/HOL</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.16</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">16</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>A Certifying Extraction with Time Bounds from Coq to Call-By-Value Lambda Calculus</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.17</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">17</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Formal Proof and Analysis of an Incremental Cycle Detection Algorithm</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.18</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">18</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>A Formalization of Forcing and the Unprovability of the Continuum Hypothesis</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.19</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">19</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Refinement with Time - Refining the Run-Time of Algorithms in Isabelle/HOL</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.20</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">20</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Virtualization of HOL4 in Isabelle</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.21</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">21</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Generating Verified LLVM from Isabelle/HOL</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.22</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">22</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Proof Pearl: Purely Functional, Simple and Efficient Priority Search Trees and Applications to Prim and Dijkstra</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.23</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">23</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>A Verified LL(1) Parser Generator</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.24</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">24</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Binary-Compatible Verification of Filesystems with ACL2</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.25</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">25</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Ornaments for Proof Reuse in Coq</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.26</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">26</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Verifying That a Compiler Preserves Concurrent Value-Dependent Information-Flow Security</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.27</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">27</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Quantitative Continuity and Computable Analysis in Coq</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.28</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">28</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Deriving Proved Equality Tests in Coq-Elpi: Stronger Induction Principles for Containers in Coq</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.29</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">29</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Complete Non-Orders and Fixed Points</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.30</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">30</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Verified Decision Procedures for Modal Logics</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.31</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">31</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Characteristic Formulae for Liveness Properties of Non-Terminating CakeML Programs</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.32</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">32</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>The DPRM Theorem in Isabelle (Short Paper)</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.33</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">33</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Hammering Mizar by Learning Clause Guidance (Short Paper)</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.34</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">34</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Declarative Proof Translation (Short Paper)</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.35</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">35</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
      <toc-entry>
        <title>Formalization of the Domination Chain with Weighted Parameters (Short Paper)</title>
        <nav-pointer-group>
          <nav-pointer>
            <ext-link ext-link-type="doi">10.4230/LIPIcs.ITP.2019.36</ext-link>
          </nav-pointer>
          <nav-pointer content-type="label" specific-use="article-no">36</nav-pointer>
        </nav-pointer-group>
      </toc-entry>
    </toc>
  </front-matter>
</book>
