In this second lab, you will use stainless to verify a simple communication protocol. As we will see, Stainless also allows us to prove properties on traits and classes, which are at the core of every Scala program.
By now you should already have some familiarities with Stainless. You can nonetheless find useful ressources in the handout of Lab 1 or on Stainless repository.
Getting the source
To start working on this lab, you can either clone this entire repository, or download the present directory alone from Gitlab (there should be a button for this on the top right of the web interface).
The protocol
The communication protocol we will prove properties about involves two Endpoints that both hold a sending and a receiving buffer. They contain respetively the messages that still need to be sent, and the ones already received. The messages go through a Network that can be queried to know whether they have been transmitted. The protocol is then defined as follow:
1. The sender sends a message over the network.
2. It then queries the network to know whether the message has been transmitted.
3. If this is the case, drop the last message sent from the buffer of the sender and add it to the buffer of the receiver. Otherwise skip to step 4.
4. Repeat step 1 with the updated sender and receiver.
In practice this means a message will be sent over and over until it has been transmitted. Since we want to reason about finite programs, we will run the protocol for a finite number of iterations. The method simulating the protocol is Network.messageExchange.
Goal of the lab
The protocol, in addition to the classes representing the Network and the Endpoints of the communication, are already implemented. The goal of the lab is proving some properties of the protocol such as its correctness, optimality conditions etc...
On Linux and WSL
stainless SimpleProtocol.scala
On Mac
stainless --solvers=smt-z3 SimpleProtocol.scala ```
The provided configuration file (stainless.conf) will automatically set the SMT solver's timeout to 2 seconds. You can also pass other options by default such as --compact (only displaying VCs Stainless was not able to prove) or --watch by adding respectively compact=true and watch=true as new lines in the configuration file.
Submission
Once you've completed all proofs, you can submit your SimpleProtocol.scala file on Moodle. Only one member of each group should submit a solution.
