An attempt at proving a frame rule
An attempt at proving a frame rule

This is surprisingly hard. It really does involve induction over the
program and looking at what executions are possible. The proof isn't
complete, but many of the pieces that indicate why it's true are there.

mit-pdos/fscq-impl,mit-pdos/fscq-impl,mit-pdos/fscq-impl,mit-pdos/fscq-impl,mit-pdos/fscq-impl