Simplifying Safety Proofs with Forward-Backward Reasoning and Prophecy

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Frenkel, Eden, McMillan, Kenneth L., Padon, Oded, Shoham, Sharon
Format: Preprint
Published: 2026
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915940711530496
author Frenkel, Eden
McMillan, Kenneth L.
Padon, Oded
Shoham, Sharon
author_facet Frenkel, Eden
McMillan, Kenneth L.
Padon, Oded
Shoham, Sharon
contents We propose an incremental approach for safety proofs that decomposes a proof with a complex inductive invariant into a sequence of simpler proof steps. Our proof system combines rules for (i) forward reasoning using inductive invariants, (ii) backward reasoning using inductive invariants of a time-reversed system, and (iii) prophecy steps that add witnesses for existentially quantified properties. We prove each rule sound and give a construction that recovers a single safe inductive invariant from an incremental proof. The construction of the invariant demonstrates the increased complexity of a single inductive invariant compared to the invariant formulas used in an incremental proof, which may have simpler Boolean structures and fewer quantifiers and quantifier alternations. Under natural restrictions on the available invariant formulas, each proof rule strictly increases proof power. That is, each rule allows to prove more safety problems with the same set of formulas. Thus, the incremental approach is able to reduce the search space of invariant formulas needed to prove safety of a given system. A case study on Paxos, several of its variants, and Raft demonstrates that forward-backward steps can remove complex Boolean structure while prophecy eliminates quantifiers and quantifier alternations.
format Preprint
id arxiv_https___arxiv_org_abs_2604_15266
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Simplifying Safety Proofs with Forward-Backward Reasoning and Prophecy
Frenkel, Eden
McMillan, Kenneth L.
Padon, Oded
Shoham, Sharon
Logic in Computer Science
Programming Languages
F.3.1; D.2.4
We propose an incremental approach for safety proofs that decomposes a proof with a complex inductive invariant into a sequence of simpler proof steps. Our proof system combines rules for (i) forward reasoning using inductive invariants, (ii) backward reasoning using inductive invariants of a time-reversed system, and (iii) prophecy steps that add witnesses for existentially quantified properties. We prove each rule sound and give a construction that recovers a single safe inductive invariant from an incremental proof. The construction of the invariant demonstrates the increased complexity of a single inductive invariant compared to the invariant formulas used in an incremental proof, which may have simpler Boolean structures and fewer quantifiers and quantifier alternations. Under natural restrictions on the available invariant formulas, each proof rule strictly increases proof power. That is, each rule allows to prove more safety problems with the same set of formulas. Thus, the incremental approach is able to reduce the search space of invariant formulas needed to prove safety of a given system. A case study on Paxos, several of its variants, and Raft demonstrates that forward-backward steps can remove complex Boolean structure while prophecy eliminates quantifiers and quantifier alternations.
title Simplifying Safety Proofs with Forward-Backward Reasoning and Prophecy
topic Logic in Computer Science
Programming Languages
F.3.1; D.2.4
url https://arxiv.org/abs/2604.15266