Prover9

Prover9 is an automated theorem prover for first-order and equational logic developed by William McCune.

Description

Prover9 is the successor of the Otter theorem prover also developed by William McCune. Prover9 is noted for producing relatively readable proofs and having a powerful hints strategy.

Prover9 is intentionally paired with Mace4, which searches for finite models and counterexamples. Both can be run simultaneously from the same input, with Prover9 attempting to find a proof, while Mace4 attempts to find a (disproving) counter-example. Prover9, Mace4, and many other tools are built on an underlying library named LADR ("Library for Automated Deduction Research") to simplify implementation. Resulting proofs can be double-checked by Ivy, a proof-checking tool that has been separately verified using ACL2.

In July 2006 the LADR/Prover9/Mace4 input language made a major change (which also differentiates it from Otter). The key distinction between "clauses" and "formulas" completely disappeared; "formulas" can now have free variables; and "clauses" are now a subset of "formulas". Prover9/Mace4 also supports a "goal" type of formula, which is automatically negated for proof. Prover9 attempts to automatically generate a proof by default; in contrast, Otter's automatic mode must be explicitly set.

Prover9 was under active development, with new releases every month or every other month, until 2009. Prover9 is free software, and therefore, open source software; it is released under GPL version 2 or later.

Examples

Socrates

The traditional "all men are mortal", "Socrates is a man", prove "Socrates is mortal" can be expressed this way in Prover9:
formulas(assumptions).
man(x) -> mortal(x). % open formula with free variable x
man(socrates).
end_of_list.

formulas(goals).
mortal(socrates).
end_of_list.

This will be automatically converted into clausal form (which Prover9 also accepts):
formulas(sos).
-man(x) , mortal(x).
man(socrates).
-mortal(socrates).
end_of_list.

Square root of 2 is irrational

A proof that the square root of 2 is irrational can be expressed this way:
formulas(assumptions).
1*x = x. % identity
x*y = y*x. % commutativity
x*(y*z) = (x*y)*z. % associativity
( x*y = x*z ) -> y = z. % cancellation (0 is not allowed, so x!=0).
%
% Now let's define divides(x,y): x divides y.
% Example: divides(2,6) is true because 2*3=6.
%
divides(x,y) <-> (exists z x*z = y).
divides(2,x*x) -> divides(2,x). % If 2 divides x*x, it divides x.
a*a = 2*(b*b). % a/b = sqrt(2), so a^2 = 2 * b^2.
(x != 1) -> -(divides(x,a) &
divides(x,b)). % a/b is in lowest terms
2 != 1. % Original author almost forgot this.
end_of_list.

References

{{Reflist, 2, refs=

{{cite web, title=Automated Theorem Proving in Loop Theory, first1=J. D., last1=Phillips, first2=David, last2=Stanovsky
, url=http://www.karlin.mff.cuni.cz/~stanovsk/math/esarm.pdf, access-date=15 November 2018, website=Charles University
, url-status=live, archive-url=https://web.archive.org/web/20180328220241/http://www.karlin.mff.cuni.cz/~stanovsk/math/esarm.pdf, archive-date=28 March 2018, df=dmy-all

{{cite conference, conference=10th International Conference, MPC 2010, title=On Automated Program Construction and Verification, first1=Rudolf, last1=Berghammer, first2=Georg, last2=Struth, book-title=Mathematics of Program Construction, Proceedings, location=Quebec City
, date=21 June 2010, editor1=Bolduc, Claude , editor2=Desharnais, Jules , editor3=Ktari, Bechir, doi=10.1007/978-3-642-13321-3, isbn=978-3-642-13320-6
, url=https://pdfs.semanticscholar.org/c5a0/c676eaa782ba22f96854dc7c3757c17f4990.pdf, access-date=19 November 2018, url-status=dead
, archive-url=https://web.archive.org/web/20181119064308/https://pdfs.semanticscholar.org/c5a0/c676eaa782ba22f96854dc7c3757c17f4990.pdf, archive-date=19 November 2018, df=dmy-all

External links

Prover9 home pageProver9 - Mace4 - LADR forumsFormal methods (square root of 2 example)

Free theorem provers
Public-domain software