Implementation and Sub-specifications
Note that the original specification is unknown. Therefore, we have to rely on the sub-specifications to answer the following questions. Please hover over different parts of the implementation to see the corresponding sub-specifications.
g(a,b)= if
ab
a,b. (abh(a,b)=true)(abh(a,b)=false)
then
a-b
a,b. ab h(a,b)0
else
b-a
a,b. ab h(a,b)0