PropaFP: Auto-active verification of floating-point programs

[ formal-methods, library, math, mathematics, maths, mpl, program, theorem-provers ] [ Propose Tags ]
Versions [RSS],,
Change log
Dependencies aern2-mfun (>=0.2.9 && <0.3), aern2-mp (>= && <0.3), base (>=4.7 && <5), binary (>= && <0.9), bytestring (>= && <0.11), collect-errors (>=0.1.5 && <0.2), containers (>= && <0.7), directory (>= && <1.4), extra (>=1.7.10 && <1.8), ghc (>=9.0.2 && <9.1), mixed-types-num (>=0.5.10 && <0.6), optparse-applicative (>= && <0.17), process (>= && <1.7), PropaFP, QuickCheck (>=2.14.2 && <2.15), regex-tdfa (>= && <1.4), scientific (>= && <0.4), temporary (>=1.3 && <1.4) [details]
License MPL-2.0
Copyright MPL-2.0
Author Junaid Rasheed
Category Math, Maths, Mathematics, Formal methods, Theorem Provers
Home page
Bug tracker
Source repo head: git clone
Uploaded by JunaidRasheed at 2023-03-12T23:28:48Z
Reverse Dependencies 1 direct, 0 indirect [details]
Executables propafp-translate-metitarski, propafp-translate-dreal, propafp-run-metitarski, propafp-run-lppaver, propafp-run-dreal, propafp-prettify
Downloads 154 total (5 in the last 30 days)
Rating (no votes yet) [estimated by Bayesian average]
Your Rating
  • λ
  • λ
  • λ
Status Docs uploaded by user [build log]
All reported builds failed as of 2023-03-12 [all 2 reports]

Readme for PropaFP-

[back to package description]


PropaFP is a tool used for auto-active verification of Floating-Point programs. PropaFP can be used for the verification of SPARK/Ada floating-point programs and is integrated with GNAT Studio 2022.

PropaFP can take some Verification Condition (VC), and if PropaFP understands the VC, simplify it, derive bounds for variables, and safely eliminate floating-point operations using over-approximations on rounding errors. A more detailed description of PropaFP can be found in this paper (arXiv version).

Below is a diagram summarising the integration with PropaFP and SPARK.



All PropaFP executables require the FPTaylor v0.9.4 executable in $PATH.

The 'propafp-run-$prover' executables require the $prover to be installed (but not necessarily in $PATH).

To build PropaFP, we recommend Stack. We have built PropaFP with Stack version 2.7.5.


  • Download/Clone this repository
  • cd into the repo
  • Run stack build

Stack will then build the project and state where the PropaFP executables have been placed.

Supported Provers

Currently, PropaFP supports:


PropaFP can work as a standalone program or with GNAT Studio 2022.

PropaFP as a Standalone Program

To produce some input for PropaFP, see the Reference.

Translator Executables

PropaFP contains 'translator' executables, which takes some input file, transforms the VC as described above, and produces another input file for the target prover. The current 'translator' executables are:

  • propafp-translate-dreal -f [smtFileContainingVC.smt2] -t [fileToWrite.smt2]
  • propafp-translate-metitarski -f [smtFileContainingVC.smt2] -t [fileToWrite.smt2]

The propafp-translate-dreal executable can also be used for LPPaver. If PropaFP does not understand the VC, it writes an empty file.

Runner Executables

'Runner' executables take some input file, transform the VC as described above, and calls the prover on the transformed VC. 'Runner' executables require the prover for each executable to be in $PATH. The current 'runner' executables are:

  • propafp-run-dreal -f [smtFileContainingVC.smt2] -p [pathToDReal]
  • propafp-run-lppaver -f [smtFileContainingVC.smt2] -p [pathToLPPaver]
  • propafp-run-metitarski -f [smtFileContainingVC.smt2] -p [pathToMetiTarski]

To run LPPaver in a mode specialised to find counter-examples, pass the -c option.

PropaFP with GNAT Studio

For instructions to use with GNAT Studio 2022, see sparkFiles/

Guided Example

A guided example of using PropaFP with GNAT Studio.