<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="es">
	<id>https://www.glc.us.es/~jalonso/LMF2019/index.php?action=history&amp;feed=atom&amp;title=Razonamiento_por_casos_y_por_inducci%C2%A2n</id>
	<title>Razonamiento por casos y por inducci¢n - Historial de revisiones</title>
	<link rel="self" type="application/atom+xml" href="https://www.glc.us.es/~jalonso/LMF2019/index.php?action=history&amp;feed=atom&amp;title=Razonamiento_por_casos_y_por_inducci%C2%A2n"/>
	<link rel="alternate" type="text/html" href="https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;action=history"/>
	<updated>2026-10-05T13:23:53Z</updated>
	<subtitle>Historial de revisiones para esta página en el wiki</subtitle>
	<generator>MediaWiki 1.31.14</generator>
	<entry>
		<id>https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=822&amp;oldid=prev</id>
		<title>Jalonso en 17:00 6 may 2020</title>
		<link rel="alternate" type="text/html" href="https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=822&amp;oldid=prev"/>
		<updated>2020-05-06T17:00:20Z</updated>

		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;a href=&quot;https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;amp;diff=822&amp;amp;oldid=627&quot;&gt;Mostrar los cambios&lt;/a&gt;</summary>
		<author><name>Jalonso</name></author>
		
	</entry>
	<entry>
		<id>https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=627&amp;oldid=prev</id>
		<title>Jalonso en 08:22 2 may 2019</title>
		<link rel="alternate" type="text/html" href="https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=627&amp;oldid=prev"/>
		<updated>2019-05-02T08:22:35Z</updated>

		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;a href=&quot;https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;amp;diff=627&amp;amp;oldid=622&quot;&gt;Mostrar los cambios&lt;/a&gt;</summary>
		<author><name>Jalonso</name></author>
		
	</entry>
	<entry>
		<id>https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=622&amp;oldid=prev</id>
		<title>Jalonso en 14:45 1 may 2019</title>
		<link rel="alternate" type="text/html" href="https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=622&amp;oldid=prev"/>
		<updated>2019-05-01T14:45:22Z</updated>

		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;a href=&quot;https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;amp;diff=622&amp;amp;oldid=27&quot;&gt;Mostrar los cambios&lt;/a&gt;</summary>
		<author><name>Jalonso</name></author>
		
	</entry>
	<entry>
		<id>https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=27&amp;oldid=prev</id>
		<title>Jalonso en 11:13 7 feb 2019</title>
		<link rel="alternate" type="text/html" href="https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=27&amp;oldid=prev"/>
		<updated>2019-02-07T11:13:56Z</updated>

		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;table class=&quot;diff diff-contentalign-left&quot; data-mw=&quot;interface&quot;&gt;
				&lt;tr class=&quot;diff-title&quot; lang=&quot;es&quot;&gt;
				&lt;td colspan=&quot;1&quot; style=&quot;background-color: #fff; color: #222; text-align: center;&quot;&gt;← Revisión anterior&lt;/td&gt;
				&lt;td colspan=&quot;1&quot; style=&quot;background-color: #fff; color: #222; text-align: center;&quot;&gt;Revisión del 11:13 7 feb 2019&lt;/td&gt;
				&lt;/tr&gt;&lt;tr&gt;&lt;td colspan=&quot;2&quot; class=&quot;diff-notice&quot; lang=&quot;es&quot;&gt;&lt;div class=&quot;mw-diff-empty&quot;&gt;(Sin diferencias)&lt;/div&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/table&gt;</summary>
		<author><name>Jalonso</name></author>
		
	</entry>
	<entry>
		<id>https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=16&amp;oldid=prev</id>
		<title>Jalonso en 11:06 7 feb 2019</title>
		<link rel="alternate" type="text/html" href="https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=16&amp;oldid=prev"/>
		<updated>2019-02-07T11:06:28Z</updated>

		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;a href=&quot;https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;amp;diff=16&amp;amp;oldid=15&quot;&gt;Mostrar los cambios&lt;/a&gt;</summary>
		<author><name>Jalonso</name></author>
		
	</entry>
	<entry>
		<id>https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=15&amp;oldid=prev</id>
		<title>Jalonso en 11:05 7 feb 2019</title>
		<link rel="alternate" type="text/html" href="https://www.glc.us.es/~jalonso/LMF2019/index.php?title=Razonamiento_por_casos_y_por_inducci%C2%A2n&amp;diff=15&amp;oldid=prev"/>
		<updated>2019-02-07T11:05:26Z</updated>

		<summary type="html">&lt;p&gt;&lt;/p&gt;
&lt;p&gt;&lt;b&gt;Página nueva&lt;/b&gt;&lt;/p&gt;&lt;div&gt;&amp;lt;source lang=&amp;quot;isabelle&amp;quot;&amp;gt;&lt;br /&gt;
chapter {* Tema 6: Razonamiento estructurado sobre programas *}&lt;br /&gt;
&lt;br /&gt;
theory T6_Razonamiento_sobre_programas&lt;br /&gt;
imports Main &lt;br /&gt;
begin&lt;br /&gt;
&lt;br /&gt;
text {* &lt;br /&gt;
  En este tema se demuestra con Isabelle las propiedades de los&lt;br /&gt;
  programas funcionales como se expone en el tema 2a y se demostraron&lt;br /&gt;
  automáticamente en el tema 2b. A diferencia del tema 2b, ahora&lt;br /&gt;
  nos fijamos no sólo en el método de demostración sino en la estructura&lt;br /&gt;
  de la prueba resaltando su semejanza con las del tema 2a. *}&lt;br /&gt;
&lt;br /&gt;
declare [[names_short]]&lt;br /&gt;
&lt;br /&gt;
section {* Razonamiento ecuacional *}&lt;br /&gt;
&lt;br /&gt;
text {* ----------------------------------------------------------------&lt;br /&gt;
  Ejemplo 1. Definir, por recursión, la función&lt;br /&gt;
     longitud :: &amp;#039;a list ⇒ nat&lt;br /&gt;
  tal que (longitud xs) es la longitud de la listas xs. Por ejemplo,&lt;br /&gt;
     longitud [a,c,d] = 3&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
fun longitud :: &amp;quot;&amp;#039;a list ⇒ nat&amp;quot; where&lt;br /&gt;
  &amp;quot;longitud []     = 0&amp;quot;&lt;br /&gt;
| &amp;quot;longitud (x#xs) = 1 + longitud xs&amp;quot;&lt;br /&gt;
   &lt;br /&gt;
value &amp;quot;longitud [a,c,d] = 3&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 2. Demostrar que &lt;br /&gt;
     longitud [a,c,d] = 3&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
lemma &amp;quot;longitud [a,c,d] = 3&amp;quot;&lt;br /&gt;
by simp&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 3. Definir la función&lt;br /&gt;
     fun intercambia :: &amp;#039;a × &amp;#039;b ⇒ &amp;#039;b × &amp;#039;a&lt;br /&gt;
  tal que (intercambia p) es el par obtenido intercambiando las&lt;br /&gt;
  componentes del par p. Por ejemplo,&lt;br /&gt;
     intercambia (u,v) = (v,u)&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun intercambia :: &amp;quot;&amp;#039;a × &amp;#039;b ⇒ &amp;#039;b × &amp;#039;a&amp;quot; where&lt;br /&gt;
  &amp;quot;intercambia (x,y) = (y,x)&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;intercambia (u,v) = (v,u)&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  La definición de la función intercambia genera una regla de&lt;br /&gt;
  simplificación&lt;br /&gt;
  · intercambia.simps: intercambia (x,y) = (y,x)&lt;br /&gt;
  &lt;br /&gt;
  Se puede ver con &lt;br /&gt;
  · thm intercambia.simps &lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 4. (p.6) Demostrar que &lt;br /&gt;
     intercambia (intercambia (x,y)) = (x,y)&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* Demostración aplicativa *)&lt;br /&gt;
lemma &amp;quot;intercambia (intercambia (x,y)) = (x,y)&amp;quot;&lt;br /&gt;
  apply (simp only: intercambia.simps)&lt;br /&gt;
  done&lt;br /&gt;
&lt;br /&gt;
(* Demostración declarativa *)&lt;br /&gt;
lemma &amp;quot;intercambia (intercambia (x,y)) = (x,y)&amp;quot;&lt;br /&gt;
proof -&lt;br /&gt;
  have &amp;quot;intercambia (intercambia (x,y)) = intercambia (y,x)&amp;quot;  &lt;br /&gt;
    by (simp only: intercambia.simps)&lt;br /&gt;
  also have &amp;quot;... = (x,y)&amp;quot; &lt;br /&gt;
    by (simp only: intercambia.simps)&lt;br /&gt;
  finally show &amp;quot;intercambia (intercambia (x,y)) = (x,y)&amp;quot; &lt;br /&gt;
    by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Notas sobre el lenguaje: En la demostración anterior se ha usado&lt;br /&gt;
  · &amp;quot;proof&amp;quot; para iniciar la prueba,&lt;br /&gt;
  · &amp;quot;-&amp;quot; (después de &amp;quot;proof&amp;quot;) para no usar el método por defecto,&lt;br /&gt;
  · &amp;quot;have&amp;quot; para establecer un paso,&lt;br /&gt;
  · &amp;quot;by (simp only: intercambia.simps)&amp;quot; para indicar que sólo se usa&lt;br /&gt;
    como regla de escritura la correspondiente a la definición de&lt;br /&gt;
    intercambia,&lt;br /&gt;
  · &amp;quot;also&amp;quot; para encadenar pasos ecuacionales,&lt;br /&gt;
  · &amp;quot;...&amp;quot; para representar la derecha de la igualdad anterior en un&lt;br /&gt;
    razonamiento ecuacional,&lt;br /&gt;
  · &amp;quot;finally&amp;quot; para indicar el último pasa de un razonamiento ecuacional,&lt;br /&gt;
  · &amp;quot;show&amp;quot; para establecer la conclusión.&lt;br /&gt;
  · &amp;quot;by simp&amp;quot; para indicar el método de demostración por simplificación y &lt;br /&gt;
  · &amp;quot;qed&amp;quot; para terminar la pruebas,&lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
(* Demostración declarativa simplificada *)&lt;br /&gt;
lemma &amp;quot;intercambia (intercambia (x,y)) = (x,y)&amp;quot;&lt;br /&gt;
proof -&lt;br /&gt;
  have &amp;quot;intercambia (intercambia (x,y)) = intercambia (y,x)&amp;quot;  by simp&lt;br /&gt;
  also have &amp;quot;... = (x,y)&amp;quot; by simp &lt;br /&gt;
  finally show &amp;quot;intercambia (intercambia (x,y)) = (x,y)&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Nota: La diferencia entre las dos demostraciones es que en los dos&lt;br /&gt;
  primeros pasos no se explicita la regla de simplificación.&lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
(* Demostración automática *)&lt;br /&gt;
lemma &amp;quot;intercambia (intercambia (x,y)) = (x,y)&amp;quot;&lt;br /&gt;
  by simp&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 5. Definir, por recursión, la función&lt;br /&gt;
     inversa :: &amp;#039;a list ⇒ &amp;#039;a list&lt;br /&gt;
  tal que (inversa xs) es la lista obtenida invirtiendo el orden de los&lt;br /&gt;
  elementos de xs. Por ejemplo,&lt;br /&gt;
     inversa [a,d,c] = [c,d,a]&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun inversa :: &amp;quot;&amp;#039;a list ⇒ &amp;#039;a list&amp;quot; where&lt;br /&gt;
  &amp;quot;inversa []     = []&amp;quot;&lt;br /&gt;
| &amp;quot;inversa (x#xs) = inversa xs @ [x]&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;inversa [a,d,c] = [c,d,a]&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 6. (p. 9) Demostrar que &lt;br /&gt;
     inversa [x] = [x]&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración aplicativa es *)&lt;br /&gt;
lemma &amp;quot;inversa [x] = [x]&amp;quot;&lt;br /&gt;
  apply simp&lt;br /&gt;
  done&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  En la demostración anterior se usaron las siguientes reglas:&lt;br /&gt;
  · inversa.simps(1): inversa [] = []&lt;br /&gt;
  · inversa.simps(2): inversa (x#xs) = inversa xs @ [x]&lt;br /&gt;
  · append_Nil:       [] @ ys = ys&lt;br /&gt;
  Vamos a explicitar su aplicación.&lt;br /&gt;
*}&lt;br /&gt;
  &lt;br /&gt;
(* La demostración aplicativa detallada es *)&lt;br /&gt;
lemma &amp;quot;inversa [x] = [x]&amp;quot;&lt;br /&gt;
  apply (simp only: inversa.simps(2))&lt;br /&gt;
  apply (simp only: inversa.simps(1))&lt;br /&gt;
  apply (simp only: append_Nil)&lt;br /&gt;
  done&lt;br /&gt;
&lt;br /&gt;
(* La demostración declarativa es *)&lt;br /&gt;
lemma &amp;quot;inversa [x] = [x]&amp;quot;&lt;br /&gt;
proof -&lt;br /&gt;
  have &amp;quot;inversa [x] = inversa (x#[])&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = (inversa []) @ [x]&amp;quot; by (simp only: inversa.simps(2))&lt;br /&gt;
  also have &amp;quot;... = [] @ [x]&amp;quot; by (simp only: inversa.simps(1))&lt;br /&gt;
  also have &amp;quot;... = [x]&amp;quot; by (simp only: append_Nil) &lt;br /&gt;
  finally show &amp;quot;inversa [x] = [x]&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
(* La demostración declarativa simplificada es *)&lt;br /&gt;
lemma &amp;quot;inversa [x] = [x]&amp;quot;&lt;br /&gt;
proof -&lt;br /&gt;
  have &amp;quot;inversa [x] = inversa (x#[])&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = (inversa []) @ [x]&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = [] @ [x]&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = [x]&amp;quot; by simp &lt;br /&gt;
  finally show &amp;quot;inversa [x] = [x]&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;inversa [x] = [x]&amp;quot;&lt;br /&gt;
  by simp&lt;br /&gt;
&lt;br /&gt;
section {* Razonamiento por inducción sobre los naturales *}&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  [Principio de inducción sobre los naturales] Para demostrar una&lt;br /&gt;
  propiedad P para todos los números naturales basta probar que el 0&lt;br /&gt;
  tiene la propiedad P y que si n tiene la propiedad P, entonces n+1&lt;br /&gt;
  también la tiene.  &lt;br /&gt;
     ⟦P 0; ⋀n. P n ⟹ P (Suc n)⟧ ⟹ P m&lt;br /&gt;
&lt;br /&gt;
  En Isabelle el principio de inducción sobre los naturales está&lt;br /&gt;
  formalizado en el teorema nat.induct y puede verse con&lt;br /&gt;
     thm nat.induct&lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 7. Definir la función&lt;br /&gt;
     repite :: nat ⇒ &amp;#039;a ⇒ &amp;#039;a list&lt;br /&gt;
  tal que (repite n x) es la lista formada por n copias del elemento&lt;br /&gt;
  x. Por ejemplo, &lt;br /&gt;
     repite 3 a = [a,a,a]&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun repite :: &amp;quot;nat ⇒ &amp;#039;a ⇒ &amp;#039;a list&amp;quot; where&lt;br /&gt;
  &amp;quot;repite 0 x       = []&amp;quot;&lt;br /&gt;
| &amp;quot;repite (Suc n) x = x # (repite n x)&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;repite 3 a = [a,a,a]&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 8. (p. 18) Demostrar que &lt;br /&gt;
     longitud (repite n x) = n&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración aplicativa es *)&lt;br /&gt;
lemma &amp;quot;longitud (repite n x) = n&amp;quot;&lt;br /&gt;
  apply (induct n)&lt;br /&gt;
   apply simp_all&lt;br /&gt;
  done&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada es *)&lt;br /&gt;
lemma &amp;quot;longitud (repite n x) = n&amp;quot;&lt;br /&gt;
proof (induct n)&lt;br /&gt;
  show &amp;quot;longitud (repite 0 x) = 0&amp;quot; by simp&lt;br /&gt;
next &lt;br /&gt;
  fix n&lt;br /&gt;
  assume HI: &amp;quot;longitud (repite n x) = n&amp;quot;&lt;br /&gt;
  have &amp;quot;longitud (repite (Suc n) x) = longitud (x # (repite n x))&amp;quot; &lt;br /&gt;
    by simp&lt;br /&gt;
  also have &amp;quot;... = 1 + longitud (repite n x)&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = 1 + n&amp;quot; using HI by simp&lt;br /&gt;
  finally show &amp;quot;longitud (repite (Suc n) x) = Suc n&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Comentarios sobre la demostración anterior:&lt;br /&gt;
  · A la derecha de proof se indica el método de la demostración.&lt;br /&gt;
  · (induct n) indica que la demostración se hará por inducción en n.&lt;br /&gt;
  · Se generan dos subobjetivos correspondientes a la base y el paso de&lt;br /&gt;
    inducción:&lt;br /&gt;
    1. longitud (repite 0 x) = 0&lt;br /&gt;
    2. ⋀n. longitud (repite n x) = n ⟹ longitud (repite (Suc n) x) = Suc n&lt;br /&gt;
    donde ⋀n se lee &amp;quot;para todo n&amp;quot;.  &lt;br /&gt;
  · &amp;quot;next&amp;quot; indica el siguiente subobjetivo.&lt;br /&gt;
  · &amp;quot;fix n&amp;quot; indica &amp;quot;sea n un número natural cualquiera&amp;quot;&lt;br /&gt;
  · assume HI: &amp;quot;longitud (repite n x) = n&amp;quot; indica «supongamos que &lt;br /&gt;
    &amp;quot;longitud (repite n x) = n&amp;quot; y sea HI la etiqueta de este supuesto».&lt;br /&gt;
  · &amp;quot;using HI&amp;quot; usando la propiedad etiquetada con HI. &lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;longitud (repite n x) = n&amp;quot;&lt;br /&gt;
  by (induct n) auto&lt;br /&gt;
&lt;br /&gt;
section {* Razonamiento por inducción sobre listas *}&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Para demostrar una propiedad para todas las listas basta demostrar&lt;br /&gt;
  que la lista vacía tiene la propiedad y que al añadir un elemento a&lt;br /&gt;
  una lista que tiene la propiedad se obtiene otra lista que también&lt;br /&gt;
  tiene la propiedad. &lt;br /&gt;
&lt;br /&gt;
  En Isabelle el principio de inducción sobre listas está formalizado&lt;br /&gt;
  mediante el teorema list.induct &lt;br /&gt;
     ⟦P []; &lt;br /&gt;
      ⋀x xs. P xs ⟹ P (x#xs)⟧ &lt;br /&gt;
     ⟹ P xs&lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 9. Definir la función&lt;br /&gt;
     conc :: &amp;#039;a list ⇒ &amp;#039;a list ⇒ &amp;#039;a list&lt;br /&gt;
  tal que (conc xs ys) es la concatención de las listas xs e ys. Por&lt;br /&gt;
  ejemplo, &lt;br /&gt;
     conc [a,d] [b,d,a,c] = [a,d,b,d,a,c]&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun conc :: &amp;quot;&amp;#039;a list ⇒ &amp;#039;a list ⇒ &amp;#039;a list&amp;quot; where&lt;br /&gt;
  &amp;quot;conc []     ys = ys&amp;quot;&lt;br /&gt;
| &amp;quot;conc (x#xs) ys = x # (conc xs ys)&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;conc [a,d] [b,d,a,c] = [a,d,b,d,a,c]&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 10. (p. 24) Demostrar que &lt;br /&gt;
     conc xs (conc ys zs) = (conc xs ys) zs&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada es *)&lt;br /&gt;
lemma &amp;quot;conc xs (conc ys zs) = conc (conc xs ys) zs&amp;quot;&lt;br /&gt;
proof (induct xs)&lt;br /&gt;
  show &amp;quot;conc [] (conc ys zs) = conc (conc [] ys) zs&amp;quot; by simp&lt;br /&gt;
next&lt;br /&gt;
  fix x xs&lt;br /&gt;
  assume HI: &amp;quot;conc xs (conc ys zs) = conc (conc xs ys) zs&amp;quot; &lt;br /&gt;
  have &amp;quot;conc (x # xs) (conc ys zs) = x # (conc xs (conc ys zs))&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = x # (conc (conc xs ys) zs)&amp;quot; using HI by simp&lt;br /&gt;
  also have &amp;quot;... = conc (conc (x # xs) ys) zs&amp;quot; by simp&lt;br /&gt;
  finally show &amp;quot;conc (x # xs) (conc ys zs) = conc (conc (x # xs) ys) zs&amp;quot; &lt;br /&gt;
    by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Comentario sobre la demostración anterior&lt;br /&gt;
  · (induct xs) genera dos subobjetivos:&lt;br /&gt;
    1. conc [] (conc ys zs) = conc (conc [] ys) zs&lt;br /&gt;
    2. ⋀a xs. conc xs (conc ys zs) = conc (conc xs ys) zs ⟹&lt;br /&gt;
              conc (a#xs) (conc ys zs) = conc (conc (a#xs) ys) zs&lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;conc xs (conc ys zs) = conc (conc xs ys) zs&amp;quot;&lt;br /&gt;
  by (induct xs) auto&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 11. Refutar que &lt;br /&gt;
     conc xs ys = conc ys xs&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
lemma &amp;quot;conc xs ys = conc ys xs&amp;quot;&lt;br /&gt;
  quickcheck&lt;br /&gt;
  oops&lt;br /&gt;
&lt;br /&gt;
text {* Encuentra el contraejemplo, &lt;br /&gt;
  xs = [a2]&lt;br /&gt;
  ys = [a1] *}&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 12. (p. 28) Demostrar que &lt;br /&gt;
     conc xs [] = xs&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada es *)&lt;br /&gt;
lemma &amp;quot;conc xs [] = xs&amp;quot;&lt;br /&gt;
proof (induct xs)&lt;br /&gt;
  show &amp;quot;conc [] [] = []&amp;quot; by simp&lt;br /&gt;
next &lt;br /&gt;
  fix x xs&lt;br /&gt;
  assume HI: &amp;quot;conc xs [] = xs&amp;quot; &lt;br /&gt;
  have &amp;quot;conc (x # xs) [] = x # (conc xs [])&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = x # xs&amp;quot; using HI by simp&lt;br /&gt;
  finally show &amp;quot;conc (x # xs) [] = x # xs&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;conc xs [] = xs&amp;quot;&lt;br /&gt;
  by (induct xs) simp_all&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 13. (p. 30) Demostrar que &lt;br /&gt;
     longitud (conc xs ys) = longitud xs + longitud ys&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada es *)&lt;br /&gt;
lemma &amp;quot;longitud (conc xs ys) = longitud xs + longitud ys&amp;quot;&lt;br /&gt;
proof (induct xs)&lt;br /&gt;
  show &amp;quot;longitud (conc [] ys) = longitud [] + longitud ys&amp;quot; by simp&lt;br /&gt;
next&lt;br /&gt;
  fix x xs&lt;br /&gt;
  assume HI: &amp;quot;longitud (conc xs ys) = longitud xs + longitud ys&amp;quot;&lt;br /&gt;
  have &amp;quot;longitud (conc (x # xs) ys) = longitud (x # (conc xs ys))&amp;quot; &lt;br /&gt;
    by simp&lt;br /&gt;
  also have &amp;quot;... = 1 + longitud (conc xs ys)&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = 1 + longitud xs + longitud ys&amp;quot; using HI by simp&lt;br /&gt;
  also have &amp;quot;... = longitud (x # xs) + longitud ys&amp;quot; by simp&lt;br /&gt;
  finally show &amp;quot;longitud (conc (x # xs) ys) = &lt;br /&gt;
                longitud (x # xs) + longitud ys&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;longitud (conc xs ys) = longitud xs + longitud ys&amp;quot;&lt;br /&gt;
  by (induct xs) auto&lt;br /&gt;
&lt;br /&gt;
section {* Inducción correspondiente a la definición recursiva *}&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 14. Definir la función&lt;br /&gt;
     coge :: nat ⇒ &amp;#039;a list ⇒ &amp;#039;a list&lt;br /&gt;
  tal que (coge n xs) es la lista de los n primeros elementos de xs. Por &lt;br /&gt;
  ejemplo, &lt;br /&gt;
     coge 2 [a,c,d,b,e] = [a,c]&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun coge :: &amp;quot;nat ⇒ &amp;#039;a list ⇒ &amp;#039;a list&amp;quot; where&lt;br /&gt;
  &amp;quot;coge n []           = []&amp;quot;&lt;br /&gt;
| &amp;quot;coge 0 xs           = []&amp;quot;&lt;br /&gt;
| &amp;quot;coge (Suc n) (x#xs) = x # (coge n xs)&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;coge 2 [a,c,d,b,e] = [a,c]&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 15. Definir la función&lt;br /&gt;
     elimina :: nat ⇒ &amp;#039;a list ⇒ &amp;#039;a list&lt;br /&gt;
  tal que (elimina n xs) es la lista obtenida eliminando los n primeros&lt;br /&gt;
  elementos de xs. Por ejemplo, &lt;br /&gt;
     elimina 2 [a,c,d,b,e] = [d,b,e]&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun elimina :: &amp;quot;nat ⇒ &amp;#039;a list ⇒ &amp;#039;a list&amp;quot; where&lt;br /&gt;
  &amp;quot;elimina n []           = []&amp;quot;&lt;br /&gt;
| &amp;quot;elimina 0 xs           = xs&amp;quot;&lt;br /&gt;
| &amp;quot;elimina (Suc n) (x#xs) = elimina n xs&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;elimina 2 [a,c,d,b,e] = [d,b,e]&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* &lt;br /&gt;
  La definición coge genera el esquema de inducción coge.induct:&lt;br /&gt;
     ⟦⋀n. P n []; &lt;br /&gt;
      ⋀x xs. P 0 (x#xs); &lt;br /&gt;
      ⋀n x xs. P n xs ⟹ P (Suc n) (x#xs)⟧&lt;br /&gt;
     ⟹ P n x&lt;br /&gt;
&lt;br /&gt;
  Puede verse usando &amp;quot;thm coge.induct&amp;quot;. *}&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 16. (p. 35) Demostrar que &lt;br /&gt;
     conc (coge n xs) (elimina n xs) = xs&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada es *)&lt;br /&gt;
lemma &amp;quot;conc (coge n xs) (elimina n xs) = xs&amp;quot;&lt;br /&gt;
proof (induct rule: coge.induct)&lt;br /&gt;
  fix n&lt;br /&gt;
  show &amp;quot;conc (coge n []) (elimina n []) = []&amp;quot; by simp&lt;br /&gt;
next&lt;br /&gt;
  fix x xs&lt;br /&gt;
  show &amp;quot;conc (coge 0 (x#xs)) (elimina 0 (x#xs)) = x#xs&amp;quot; by simp&lt;br /&gt;
next&lt;br /&gt;
  fix n x xs&lt;br /&gt;
  assume HI: &amp;quot;conc (coge n xs) (elimina n xs) = xs&amp;quot;&lt;br /&gt;
  have &amp;quot;conc (coge (Suc n) (x#xs)) (elimina (Suc n) (x#xs)) = &lt;br /&gt;
        conc (x#(coge n xs)) (elimina n xs)&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = x#(conc (coge n xs) (elimina n xs))&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = x#xs&amp;quot; using HI by simp  &lt;br /&gt;
  finally show &amp;quot;conc (coge (Suc n) (x#xs)) (elimina (Suc n) (x#xs)) = &lt;br /&gt;
                x#xs&amp;quot;&lt;br /&gt;
    by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Comentario sobre la demostración anterior:&lt;br /&gt;
  · (induct rule: coge.induct) indica que el método de demostración es&lt;br /&gt;
    por el esquema de inducción correspondiente a la definición de la&lt;br /&gt;
    función coge.&lt;br /&gt;
  · Se generan 3 subobjetivos:&lt;br /&gt;
    · 1. ⋀n. conc (coge n []) (elimina n []) = []&lt;br /&gt;
    · 2. ⋀x xs. conc (coge 0 (x#xs)) (elimina 0 (x#xs)) = x#xs&lt;br /&gt;
    · 3. ⋀n x xs. &lt;br /&gt;
            conc (coge n xs) (elimina n xs) = xs ⟹&lt;br /&gt;
            conc (coge (Suc n) (x#xs)) (elimina (Suc n) (x#xs)) = x#xs&lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;conc (coge n xs) (elimina n xs) = xs&amp;quot;&lt;br /&gt;
  by (induct rule: coge.induct) auto&lt;br /&gt;
&lt;br /&gt;
section {* Razonamiento por casos *}&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 17. Definir la función&lt;br /&gt;
     esVacia :: &amp;#039;a list ⇒ bool&lt;br /&gt;
  tal que (esVacia xs) se verifica si xs es la lista vacía. Por ejemplo,&lt;br /&gt;
     esVacia []  = True&lt;br /&gt;
     esVacia [1] = False&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun esVacia :: &amp;quot;&amp;#039;a list ⇒ bool&amp;quot; where&lt;br /&gt;
  &amp;quot;esVacia []     = True&amp;quot;&lt;br /&gt;
| &amp;quot;esVacia (x#xs) = False&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;esVacia []  = True&amp;quot;&lt;br /&gt;
value &amp;quot;esVacia [a] = False&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 18 (p. 39) . Demostrar que &lt;br /&gt;
     esVacia xs = esVacia (conc xs xs)&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada es *)&lt;br /&gt;
lemma &amp;quot;esVacia xs = esVacia (conc xs xs)&amp;quot;&lt;br /&gt;
proof (cases xs)&lt;br /&gt;
  assume &amp;quot;xs = []&amp;quot;&lt;br /&gt;
  then show &amp;quot;esVacia xs = esVacia (conc xs xs)&amp;quot; by simp&lt;br /&gt;
next&lt;br /&gt;
  fix y ys&lt;br /&gt;
  assume &amp;quot;xs = y#ys&amp;quot;&lt;br /&gt;
  then show &amp;quot;esVacia xs = esVacia (conc xs xs)&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Comentarios sobre la demostración anterior:&lt;br /&gt;
  · &amp;quot;(cases xs)&amp;quot; es el método de demostración por casos según xs.&lt;br /&gt;
  · Se generan dos subobjetivos  correspondientes a los dos&lt;br /&gt;
    constructores de listas:&lt;br /&gt;
    · 1. xs = [] ⟹ esVacia xs = esVacia (conc xs xs)&lt;br /&gt;
    · 2. ⋀y ys. xs = y#ys ⟹ esVacia xs = esVacia (conc xs xs)&lt;br /&gt;
  · &amp;quot;then&amp;quot; indica &amp;quot;usando la propiedad anterior&amp;quot;&lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada simplificada es *)&lt;br /&gt;
lemma &amp;quot;esVacia xs = esVacia (conc xs xs)&amp;quot;&lt;br /&gt;
proof (cases xs)&lt;br /&gt;
  case Nil&lt;br /&gt;
  then show &amp;quot;esVacia xs = esVacia (conc xs xs)&amp;quot; by simp&lt;br /&gt;
next&lt;br /&gt;
  case Cons&lt;br /&gt;
  then show &amp;quot;esVacia xs = esVacia (conc xs xs)&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Comentarios sobre la demostración anterior:&lt;br /&gt;
  · &amp;quot;case Nil&amp;quot; es una abreviatura de &amp;quot;assume xs = []&amp;quot;&lt;br /&gt;
  · &amp;quot;case Cons&amp;quot; es una abreviatura de &amp;quot;fix y ys assume xs = y#ys&amp;quot;&lt;br /&gt;
  · &amp;quot;thus&amp;quot; es una abreviatura de &amp;quot;then show&amp;quot;.&lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
(* La demostración con el patrón sugerido es *)&lt;br /&gt;
lemma &amp;quot;esVacia xs = esVacia (conc xs xs)&amp;quot;&lt;br /&gt;
proof (cases xs)&lt;br /&gt;
  case Nil&lt;br /&gt;
  then show ?thesis by simp&lt;br /&gt;
next&lt;br /&gt;
  case (Cons x xs)&lt;br /&gt;
  then show ?thesis by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;esVacia xs = esVacia (conc xs xs)&amp;quot;&lt;br /&gt;
  by (cases xs) auto&lt;br /&gt;
&lt;br /&gt;
section {* Heurística de generalización *}&lt;br /&gt;
&lt;br /&gt;
text {* &lt;br /&gt;
  Heurística de generalización: Cuando se use demostración estructural,&lt;br /&gt;
  cuantificar universalmente las variables libres (o, equivalentemente,&lt;br /&gt;
  considerar las variables libres como variables arbitrarias). *}&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 19. Definir la función&lt;br /&gt;
     inversaAc :: &amp;#039;a list ⇒ &amp;#039;a list&lt;br /&gt;
  tal que (inversaAc xs) es a inversa de xs calculada usando&lt;br /&gt;
  acumuladores. Por ejemplo, &lt;br /&gt;
     inversaAc [a,c,b,e] = [e,b,c,a]&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun inversaAcAux :: &amp;quot;&amp;#039;a list ⇒ &amp;#039;a list ⇒ &amp;#039;a list&amp;quot; where&lt;br /&gt;
  &amp;quot;inversaAcAux [] ys     = ys&amp;quot;&lt;br /&gt;
| &amp;quot;inversaAcAux (x#xs) ys = inversaAcAux xs (x#ys)&amp;quot;&lt;br /&gt;
&lt;br /&gt;
fun inversaAc :: &amp;quot;&amp;#039;a list ⇒ &amp;#039;a list&amp;quot; where&lt;br /&gt;
  &amp;quot;inversaAc xs = inversaAcAux xs []&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;inversaAc [a,c,b,e] = [e,b,c,a]&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 20. (p. 44) Demostrar que &lt;br /&gt;
     inversaAcAux xs ys = (inversa xs) @ ys&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada es *)&lt;br /&gt;
lemma inversaAcAux_es_inversa:&lt;br /&gt;
  &amp;quot;inversaAcAux xs ys = (inversa xs) @ ys&amp;quot;&lt;br /&gt;
proof (induct xs arbitrary: ys)&lt;br /&gt;
  show &amp;quot;⋀ys. inversaAcAux [] ys = inversa [] @ ys&amp;quot; by simp&lt;br /&gt;
next&lt;br /&gt;
  fix a xs &lt;br /&gt;
  assume HI: &amp;quot;⋀ys. inversaAcAux xs ys = inversa xs@ys&amp;quot;&lt;br /&gt;
  show &amp;quot;⋀ys. inversaAcAux (a#xs) ys = inversa (a#xs)@ys&amp;quot;&lt;br /&gt;
  proof -&lt;br /&gt;
    fix ys&lt;br /&gt;
    have &amp;quot;inversaAcAux (a#xs) ys = inversaAcAux xs (a#ys)&amp;quot; by simp&lt;br /&gt;
    also have &amp;quot;… = inversa xs@(a#ys)&amp;quot; using HI by simp&lt;br /&gt;
    also have &amp;quot;… = inversa (a#xs)@ys&amp;quot; by simp &lt;br /&gt;
    finally show &amp;quot;inversaAcAux (a#xs) ys = inversa (a#xs)@ys&amp;quot; by simp&lt;br /&gt;
  qed&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Comentarios sobre la demostración anterior:&lt;br /&gt;
  · &amp;quot;(induct xs arbitrary: ys)&amp;quot; es el método de demostración por&lt;br /&gt;
    inducción sobre xs usando ys como variable arbitraria.&lt;br /&gt;
  · Se generan dos subobjetivos:&lt;br /&gt;
    · 1. ⋀ys. inversaAcAux [] ys = inversa [] @ ys&lt;br /&gt;
    · 2. ⋀a xs ys. (⋀ys. inversaAcAux xs ys = inversa xs @ ys) ⟹&lt;br /&gt;
                    inversaAcAux (a # xs) ys = inversa (a # xs) @ ys&lt;br /&gt;
  · Dentro de una demostración se pueden incluir otras demostraciones.&lt;br /&gt;
  · Para demostrar la propiedad universal &amp;quot;⋀ys. P(ys)&amp;quot; se elige una&lt;br /&gt;
    lista arbitraria (con &amp;quot;fix ys&amp;quot;) y se demuestra &amp;quot;P(ys)&amp;quot;. &lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;inversaAcAux xs ys = (inversa xs)@ys&amp;quot;&lt;br /&gt;
  by (induct xs arbitrary: ys) auto&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 21. (p. 43) Demostrar que &lt;br /&gt;
     inversaAc xs = inversa xs&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
corollary &amp;quot;inversaAc xs = inversa xs&amp;quot;&lt;br /&gt;
  by (simp add: inversaAcAux_es_inversa)&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  Comentario de la demostración anterior:&lt;br /&gt;
  · &amp;quot;(simp add: inversaAcAux_es_inversa)&amp;quot; es el método de demostración&lt;br /&gt;
    por simplificación usando como regla de simplificación la propiedad&lt;br /&gt;
    inversaAcAux_es_inversa. &lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
section {* Demostración por inducción para funciones de orden superior *}&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 22. Definir la función&lt;br /&gt;
     sum :: nat list ⇒ nat&lt;br /&gt;
  tal que (sum xs) es la suma de los elementos de xs. Por ejemplo,&lt;br /&gt;
     sum [3,2,5] = 10&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun sum :: &amp;quot;nat list ⇒ nat&amp;quot; where&lt;br /&gt;
  &amp;quot;sum []     = 0&amp;quot;&lt;br /&gt;
| &amp;quot;sum (x#xs) = x + sum xs&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;sum [3,2,5] = 10&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 23. Definir la función&lt;br /&gt;
     map :: (&amp;#039;a ⇒ &amp;#039;b) ⇒ &amp;#039;a list ⇒ &amp;#039;b list&lt;br /&gt;
  tal que (map f xs) es la lista obtenida aplicando la función f a los&lt;br /&gt;
  elementos de xs. Por ejemplo,&lt;br /&gt;
     map (λx. 2*x) [3,2,5] = [6,4,10]&lt;br /&gt;
  ------------------------------------------------------------------ *}&lt;br /&gt;
&lt;br /&gt;
fun map :: &amp;quot;(&amp;#039;a ⇒ &amp;#039;b) ⇒ &amp;#039;a list ⇒ &amp;#039;b list&amp;quot; where&lt;br /&gt;
  &amp;quot;map f []     = []&amp;quot;&lt;br /&gt;
| &amp;quot;map f (x#xs) = (f x) # map f xs&amp;quot;&lt;br /&gt;
&lt;br /&gt;
value &amp;quot;map (λx. 2*x) [3::nat,2,5] = [6,4,10]&amp;quot;&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 24. (p. 45) Demostrar que &lt;br /&gt;
     sum (map (λx. 2*x) xs) = 2 * (sum xs)&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada es *)&lt;br /&gt;
lemma &amp;quot;sum (map (λx. 2*x) xs) = 2 * (sum xs)&amp;quot;&lt;br /&gt;
proof (induct xs)&lt;br /&gt;
  show &amp;quot;sum (map (λx. 2*x) []) = 2 * (sum [])&amp;quot; by simp&lt;br /&gt;
next&lt;br /&gt;
  fix a xs&lt;br /&gt;
  assume HI: &amp;quot;sum (map (λx. 2*x) xs) = 2 * (sum xs)&amp;quot;&lt;br /&gt;
  have &amp;quot;sum (map (λx. 2*x) (a#xs)) = sum ((2*a)#(map (λx. 2*x) xs))&amp;quot; &lt;br /&gt;
    by simp&lt;br /&gt;
  also have &amp;quot;... = 2*a + sum (map (λx. 2*x) xs)&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = 2*a + 2*(sum xs)&amp;quot; using HI by simp&lt;br /&gt;
  also have &amp;quot;... = 2*(a + sum xs)&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = 2*(sum (a#xs))&amp;quot; by simp&lt;br /&gt;
  finally show &amp;quot;sum (map (λx. 2*x) (a#xs)) = 2*(sum (a#xs))&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;sum (map (λx. 2*x) xs) = 2 * (sum xs)&amp;quot;&lt;br /&gt;
  by (induct xs) auto&lt;br /&gt;
&lt;br /&gt;
text {* --------------------------------------------------------------- &lt;br /&gt;
  Ejemplo 25. (p. 48) Demostrar que &lt;br /&gt;
     longitud (map f xs) = longitud xs&lt;br /&gt;
  ------------------------------------------------------------------- *}&lt;br /&gt;
&lt;br /&gt;
(* La demostración estructurada es *)&lt;br /&gt;
lemma &amp;quot;longitud (map f xs) = longitud xs&amp;quot;&lt;br /&gt;
proof (induct xs)&lt;br /&gt;
  show &amp;quot;longitud (map f []) = longitud []&amp;quot; by simp&lt;br /&gt;
next&lt;br /&gt;
  fix a xs&lt;br /&gt;
  assume HI: &amp;quot;longitud (map f xs) = longitud xs&amp;quot;&lt;br /&gt;
  have &amp;quot;longitud (map f (a#xs)) = longitud (f a # (map f xs))&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = 1 + longitud (map f xs)&amp;quot; by simp&lt;br /&gt;
  also have &amp;quot;... = 1 + longitud xs&amp;quot; using HI by simp&lt;br /&gt;
  also have &amp;quot;... = longitud (a#xs)&amp;quot; by simp&lt;br /&gt;
  finally show &amp;quot;longitud (map f (a#xs)) = longitud (a#xs)&amp;quot; by simp&lt;br /&gt;
qed&lt;br /&gt;
&lt;br /&gt;
(* La demostración automática es *)&lt;br /&gt;
lemma &amp;quot;longitud (map f xs) = longitud xs&amp;quot;&lt;br /&gt;
  by (induct xs) auto&lt;br /&gt;
&lt;br /&gt;
section {* Referencias *}&lt;br /&gt;
&lt;br /&gt;
text {*&lt;br /&gt;
  · J.A. Alonso. &amp;quot;Razonamiento sobre programas&amp;quot; http://goo.gl/R06O3&lt;br /&gt;
  · G. Hutton. &amp;quot;Programming in Haskell&amp;quot;. Cap. 13 &amp;quot;Reasoning about&lt;br /&gt;
    programms&amp;quot;. &lt;br /&gt;
  · S. Thompson. &amp;quot;Haskell: the Craft of Functional Programming, 3rd&lt;br /&gt;
    Edition. Cap. 8 &amp;quot;Reasoning about programms&amp;quot;. &lt;br /&gt;
  · L. Paulson. &amp;quot;ML for the Working Programmer, 2nd Edition&amp;quot;. Cap. 6. &lt;br /&gt;
    &amp;quot;Reasoning about functional programs&amp;quot;. &lt;br /&gt;
*}&lt;br /&gt;
&lt;br /&gt;
end&lt;br /&gt;
&amp;lt;/source&amp;gt;&lt;/div&gt;</summary>
		<author><name>Jalonso</name></author>
		
	</entry>
</feed>