I was stuck on a problem for a while, for which I derived a smaller standalone example:
Axiom f : nat -> Set.
Goal forall (n : nat) (e : n = n) (x : f n),
match e in _ = _n return f _n -> Prop with
| Logic.eq_refl => fun v : f n => v = x
end x.
Now, if you try to destruct e, you get the following error message:
Error: Abstracting over the terms "n0" and "e" leads to a term
"fun (n0 : nat) (e : n0 = n0) =>
forall x : f n0,
match e in (_ = _n) return (f _n -> Prop) with
| Logic.eq_refl => fun v : f n0 => v = x
end x" which is ill-typed.
After scratching my head for a while, I couldn’t figure out what was ill-typed in that term… So I tried this:
Definition illt :=
fun (n : nat) (e : n = n) =>
forall x : f n,
match e in _ = _n return f _n -> Prop with
| Logic.eq_refl => fun v : f n => v = x
end x.
And Coq accepts it, at type forall n : nat, n = n -> Prop.
So, what is wrong with this error message, and how could I solve/tweak my initial goal?
BTW this is all coq8.3. If this is something fixed in 8.4, please tell me, and my apologies! 🙂
EDIT: To address Robin Green’s comment, here is the Set Printing All versions of the error message:
Error: Abstracting over the terms "n0" and "e" leads to a term
"fun (n0 : nat) (e : @eq nat n0 n0) =>
forall x : f n0,
match e in (@eq _ _ _n) return (f _n -> Prop) with
| eq_refl => fun v : f n0 => @eq (f n0) v x
end x" which is ill-typed.
It is a well-typed term, and nothing is implicit.
Here is a possible explanation of the problem. What happens when constructing a pattern-matching construct can also be described using a theorem. Here is my view of the theorem that is being used in your case.
So when pattern matching on an equality, you have to provide a formula P parametrized on any value
ythat happens to be provably equal tox. Intuitively, you should be able to replace your pattern-matching expression byapply eq_rect, but the property P that should come up there is beyond the reach of what Coq can guess, because every occurrence ofxin your formula is bound to be in typef nand cannot just be in typef mwherem = n. The error message does not say that, it is probably a mistake.To perform your proof, I suggest rather to use the fact that proofs of equality are unique in certain classes of types, and
natbelongs to such a class. This is treated in the file Eqdep_dec.Now your proof goes through quite easily.
Now, this solution may feel unsatisfactory. Where does this
UIP_deccome from? UIP stands for uniqueness of identity proofs and unfortunately, this property is not guaranteed for all arbitrary types. It is guaranteed for all types where equality is decidable (as expressed byUIP_dec), for instancenat.