proposition: Lemma newSensorOk : forall sensor trueLevel, refine (p <- (if Z.abs (sensor - trueLevel) <? sensorAccuracy then ret (trueLevel, ()) else trueLevel' <- {_ | True}; ret (trueLevel', ())); sensor' <- {i | Min i <= fst p <= Max i}; ret (sensor', snd p)) (ret (Interval (sensor - sensorAccuracy) (sensor + sensorAccuracy), ())).
proof: Proof. implement; generalize sensorAccuracy_positive; implement. Qed.
imports: Fiat.Common.Coq__8_4__8_5__Compat Ics