Conversation

I think it's a statement about things like changing which argument + pattern matches on, which can break proofs downstream, even though it would be innocuous in other languages.
2
2
I guess a plausible fix would be the ability to export a binding from a module without exporting its inductive/recursive definition. That way, people wouldn't accidentally write proofs using the inductive structure of +, and instead compose theorems proven in the Nat module.
1
2