Sémantique Axiomatique ou Logique de Hoare - Ensiie

The rule for the loop
I is called the loop invariant.
{I ∧ cond}i{I}
{I}while cond do i{I ∧ ¬cond}
I remains true each time around the loop (but not necessarily
during execution of the loop body)
If the loop terminates the control condition must be false, so
¬cond appears in the post-condition.
In the premise of the rule, the body of the loop i is only executed if
cond is true, so it appears in the pre-condition.
(ENSIIE) Hoare 25 / 52