A lemma (entry) may depend on lemmas (entries) below its position, but never on lemmas
above its position. This means the list is a topological order of the dependency graph.
An entry 'all subs proved' means that all used lemmas are (transitively) proved.
| Name: | Status: | Subs proved? | Used: |
|---|
| btree-inv-remove-refsize0 | proved | all subs proved
| btree-reset-root,
btree-crash,
btree-clean-fwd-strong,
btree,
btree-istore-reduce-refed,
btree-root-in-heap,
btree-null-or-clean-below,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-clean-alladrs,
btree-inv,
|
| btree-reset-root | proved | all subs proved
| btree-reset-root-frame,
|
| btree-ri-unique | proved | all subs proved
| btree-remove-context,
nat-le-eq,
ri-range-ext,
bnode,
maplet-null,
btree-root-in-heap,
btree-leaf-adr,
bleaf,
btree,
btree-clean-fwd,
btree-clean-alladrs,
btree-null-or-clean-below,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-restrict-union-proper | proved | all subs proved
| btree-istore-reduce-refed,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-istore-restrict,
btree-istore-restrict-to-as,
|
| btree-inv-root-null-or-clean | proved | all subs proved
| btree-crash,
btree-istore-reduce,
btree-clean-fwd,
btree-root-in-heap,
btree-null-or-clean-below,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-inv,
|
| btree-inv-root-null | invalid | all subs proved
| btree-istore-reduce,
btree-crash,
btree-clean-fwd,
btree-null-or-clean-below,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-inv,
|
| btree-inv-crash | invalid | all subs proved
| btree-clean-alladrs,
btree,
btree-clean-fwd,
btree-crash,
btree-istore-reduce,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-inv,
|
| btree-inv-clean-commit | proved | all subs proved
| btree-clean-fwd,
btree-crash,
btree-istore-reduce,
btree-root-in-heap,
btree-null-or-clean-below,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-inv,
|
| btree-as-empty | proved | all subs proved
| btree-as-empty-rev,
btree-istore-restrict,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-reset-root-frame | proved | all subs proved
| maplet-null,
btree,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-clean-alladrs,
|
| btree-clean-fwd-strong | proved | all subs proved
| nat-le-eq,
ri-range-ext,
btree-remove-context,
bnode,
bleaf,
btree,
btree-leaf-adr,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-clean-alladrs,
|
| btree-clean-fwd | proved | all subs proved
| btree-remove-context,
nat-le-eq,
ri-range-ext,
bnode,
bleaf,
btree,
btree-leaf-adr,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-clean-alladrs,
|
| btree-istore-restrict | proved | all subs proved
| btree-istore-reduce,
restrict-dom,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-write-node | proved | all subs proved
| btree-sub-clean,
btree-root-in-heap,
btree-null-or-clean-below,
btree-istore-reduce,
sep-forall-reduce,
bnode,
maplet-null,
bleaf,
btree,
btree-leaf-adr,
btree-dirty-adr-notin,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-mark-dirty | proved | all subs proved
| btree-imp-dirty,
sep-forall-reduce,
bnode,
maplet-null,
bleaf,
btree,
btree-leaf-adr,
btree-clean-adr-in,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-clean-alladrs,
|
| btree-inv-root-neq-null-fwd | proved | all subs proved
| btree-root-in-heap,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-clean-alladrs,
btree-inv,
|
| btree-inv-format | invalid | all subs proved
| infinite-memory,
bleaf,
btree,
btree-crash,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-inv,
|
| btree-inv-alloc | proved | all subs proved
| btree-crash,
btree-istore-reduce-refed,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-clean-alladrs,
btree-inv,
|
| btree-istore-restrict-to-as | proved | all subs proved
| btree-istore-reduce-refed,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-istore-reduce | proved | all subs proved
| subseteq-restrict,
btree-istore-reduce-refed,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-crash | proved | all subs proved
| btree-null,
|
| btree-clean-alladrs | proved | all subs proved
| btree-remove-context,
nat-le-eq,
bnode,
bleaf,
btree,
btree-adrs,
btree-refed-subseteq-alladrs,
btree-leaf-adr,
|
| btree-as-empty-rev | proved | all subs proved
| btree-istore-reduce-refed,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-repl-dirty-address | proved | all subs proved
| bleaf,
maplet-null,
btree,
btree-dirty-adr-notin,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-dirty-adr-notin | proved | all subs proved
| bleaf,
btree,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-clean-adr-in | proved | all subs proved
| bleaf,
btree,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-root-in-heap | proved | all subs proved
| maplet-null,
btree,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-null | proved | all subs proved
| btree,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-leaf-adr | proved | all subs proved
| bleaf,
btree,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-remove-context | proved | all subs proved
| congruent,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-istore-reduce-refed | proved | all subs proved
| maplet-null,
restrict-further,
sep-forall-reduce,
bnode,
restrict-add-at,
restrict-add-in,
restrict-add-subseteq-at,
restrict-add-subseteq-in,
bleaf,
btree,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-write-other | invalid | all subs proved
| btree-imp-dirty,
maplet-null,
btree-adrs,
btree-refed-subseteq-alladrs,
sep-forall-reduce,
bnode,
bleaf,
btree,
|
| btree-leaf-fwd | proved | all subs proved
| btree,
btree-adrs,
btree-refed-subseteq-alladrs,
|
| btree-adrs | proved | all subs proved
| nat-le-eq,
bnode,
btree-refed-subseteq-alladrs,
maplet-null,
bleaf,
btree,
|
| btree-refed-subseteq-alladrs | proved | all subs proved
| nat-le-eq,
btree-imp-dirty,
maplet-null,
bnode,
bleaf,
btree,
|
| inter-subseteq-weaken | proved | all subs proved
| inter-subseteq-simp,
|
| inter-subseteq-simp | proved | all subs proved
| subseteq-inter-same,
|
| btree-imp-dirty | proved | all subs proved
| btree,
|
| restrict-further | proved | all subs proved
| restrict-add-in,
|
| btree-null-or-clean-below | proved | all subs proved
| maplet-null,
btree,
|
| restrict-idem | proved | all subs proved
| restrict-2,
|
| btree-sub-clean-write-branches | proved | all subs proved
| btree-sub-clean,
|
| btree-sub-clean-next | proved | all subs proved
| btree-sub-clean,
|
| btree-sub-clean-leaf | proved | all subs proved
| btree-sub-clean,
|
| btree-sub-clean-0 | proved | all subs proved
| btree-sub-clean,
|
| btree-inv-adr-lnum-in | proved | all subs proved
| btree-inv,
|
| restrict-2 | proved | all subs proved
| |
| subseteq-inter-same | proved | all subs proved
| |
| btree-sub-clean | axiom | | |
| congruent | axiom | | |
| restrict-dom | proved | all subs proved
| |
| restrict-add-subseteq-in | proved | all subs proved
| |
| restrict-add-subseteq-at | proved | all subs proved
| |
| restrict-add-in | proved | all subs proved
| |
| restrict-add-at | proved | all subs proved
| |
| sep-forall-reduce | proved | all subs proved
| |
| subseteq-restrict | proved | all subs proved
| |
| infinite-memory | axiom | | |
| btree-inv | axiom | | |
| ri-range-ext | proved | all subs proved
| |
| btree | axiom | | |
| bleaf | axiom | | |
| maplet-null | proved | all subs proved
| |
| bnode | axiom | | |
| nat-le-eq | proved | all subs proved
| |