Enhanced variant of stobjs-out.
(stobjs-out+ fn wrld) → result
This returns the same result as stobjs-out,
but it includes a run-time check (which should always succeed)
on the result
that allows us to prove the return type theorem
without strengthening the guard on
The function must not be in
Function:
(defun stobjs-out+ (fn wrld) (declare (xargs :guard (and (symbolp fn) (plist-worldp wrld)))) (declare (xargs :guard (not (member-eq fn *stobjs-out-invalid*)))) (let ((__function__ 'stobjs-out+)) (declare (ignorable __function__)) (if (not (function-symbolp fn wrld)) (raise "The symbol ~x0 does not name a function." fn) (b* ((result (stobjs-out fn wrld))) (if (symbol-listp result) result (raise "Internal error: ~ the STOBJS-OUT property ~x0 of ~x1 ~ is not a true list of symbols." result fn))))))
Theorem:
(defthm symbol-listp-of-stobjs-out+ (b* ((result (stobjs-out+ fn wrld))) (symbol-listp result)) :rule-classes :rewrite)