Treat instanceof as an unknown boolean

Fixes #335. instanceof had no operator in the refinement language, so any
`if (x instanceof T)` crashed with a NullPointerException. It is now a fresh
boolean, as null comparisons already are: both branches stay reachable and
verification continues.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: CatarinaGamboa

liquidjava-example/src/main/java/testSuite/CorrectInstanceof.java

@@ -0,0 +1,28 @@
+package testSuite;
+
+import liquidjava.specification.Refinement;
+
+public class CorrectInstanceof {
+
+    static int positive(@Refinement("_ > 0") int x) {
+        return x;
+    }
+
+    static String describe(Object o) {
+        if (o instanceof String) {
+            return "text";
+        }
+        return "other";
+    }
+
+    static int size(Object o, @Refinement("_ > 0") int n) {
+        boolean isText = o instanceof String;
+        if (isText && n > 1) {
+            return positive(n - 1);
+        }
+        if (!(o instanceof Integer) || n > 3) {
+            return positive(n);
+        }
+        return positive(n + 1);
+    }
+}

liquidjava-example/src/main/java/testSuite/ErrorInstanceof.java

@@ -0,0 +1,17 @@
+package testSuite;
+
+import liquidjava.specification.Refinement;
+
+public class ErrorInstanceof {
+
+    static int positive(@Refinement("_ > 0") int x) {
+        return x;
+    }
+
+    static int size(Object o, @Refinement("_ >= 0") int n) {
+        if (o instanceof String) {
+            return positive(n); // Expect: Refinement Error
+        }
+        return 1;
+    }
+}

liquidjava-verifier/src/main/java/liquidjava/processor/refinement_checker/general_checkers/OperationsChecker.java

@@ -81,8 +81,8 @@ public <T> void getBinaryOpRefinements(CtBinaryOperator<T> operator) throws LJEr
                 && ((CtAssignment<?, ?>) parent).getAssigned()instanceof CtVariableWrite<?> parentVar) {
             oper = getOperationRefinements(operator, parentVar, operator);
 
-        } else if (hasNullOperand(operator)) {
-            oper = createFreshValue(operator, new Predicate()); // null comparisons are not supported yet: unknown value
+        } else if (isUntranslatable(operator)) {
+            oper = createFreshValue(operator, new Predicate()); // null comparisons and instanceof: unknown value
         } else {
             Predicate varLeft = getOperationRefinements(operator, left);
             Predicate varRight = getOperationRefinements(operator, right);
@@ -239,7 +239,7 @@ private Predicate getOperationRefinements(CtBinaryOperator<?> operator, CtVariab
             rtc.getContext().addVarToContext(elemName, elemVar.getType(), e, elemVar);
             return Predicate.createVar(returnName);
         } else if (element instanceof CtBinaryOperator<?> binop) {
-            if (hasNullOperand(binop)) // null comparisons are not supported yet: unknown boolean value
+            if (isUntranslatable(binop)) // null comparisons and instanceof: unknown boolean value
                 return createFreshValue(binop, new Predicate());
             Predicate right = getOperationRefinements(operator, parentVar, binop.getRightHandOperand());
             Predicate left = getOperationRefinements(operator, parentVar, binop.getLeftHandOperand());
@@ -328,6 +328,11 @@ private Predicate getOperationRefinementFromExternalLib(CtInvocation<?> inv) thr
         return getUnconstrainedInvocationVariable(inv);
     }
 
+    /** Null comparisons are not supported yet, and the logic has no types to test {@code instanceof} against. */
+    private static boolean isUntranslatable(CtBinaryOperator<?> binop) {
+        return binop.getKind() == BinaryOperatorKind.INSTANCEOF || hasNullOperand(binop);
+    }
+
     private static boolean hasNullOperand(CtBinaryOperator<?> binop) {
         return isNullLiteral(binop.getLeftHandOperand()) || isNullLiteral(binop.getRightHandOperand());
     }