A lemma (entry) may depend on lemmas (entries) below its position, but never on lemmas
above its position. This means the list is a topological order of the dependency graph.
An entry 'all subs proved' means that all used lemmas are (transitively) proved.
| Name: | Status: | Subs proved? | Used: |
|---|
| to-adrs-eq-app | proved | all subs proved
| adrs-rec,
to-adrs-eq-empty,
adrs-empty,
to-adrs-in,
to-adrs-one,
to-adrs-append,
|
| prefixn-to-adrs | proved | all subs proved
| to-adrs-eq,
to-adrs-append,
addresslist-length,
|
| to-adrs-append | proved | all subs proved
| adrs-rec,
to-adrs-eq,
adrs-empty,
|
| store-inv-rem | proved | all subs proved
| in-store-inv,
inv-store,
|
| at-write-same | proved | all subs proved
| in-in-adr,
in-write-same,
in,
at,
|
| at-write-app | proved | all subs proved
| in-in-adr,
in-write-app,
in,
at,
|
| at-diff | proved | all subs proved
| in-in-adr,
in-diff-explicit,
in,
at,
|
| at-dealloc | proved | all subs proved
| in-dealloc,
in,
at,
|
| in-store-inv | proved | all subs proved
| inv-store,
inv-flashsize-size,
inv-block,
|
| to-adrs-eq | proved | all subs proved
| to-adrs-in,
adrs-rec,
to-adrs-eq-empty,
adrs-empty,
|
| in-write-same | proved | all subs proved
| notin-notin,
in-adr-in,
in-in-adr,
in,
|
| in-write-app | proved | all subs proved
| to-adrs-in,
in,
|
| in-diff-explicit | proved | all subs proved
| in-diff,
|
| in-dealloc | proved | all subs proved
| notin-notin,
in-adr-in,
in-in-adr,
in,
|
| to-ards-no-dups | proved | all subs proved
| to-adrs-in,
adrs-rec,
adrs-empty,
|
| to-adrs-sublist | proved | all subs proved
| addresslist-length,
adrs-rec,
adrs-empty,
|
| to-adrs-eq-one | proved | all subs proved
| to-adrs-eq-empty,
adrs-rec,
adrs-empty,
to-adrs-one,
|
| prefix-remove-refsize0 | proved | all subs proved
| at-remove-refsize0,
in-remove-refsize0,
dom-remove-refsize0,
inv-block,
inv-store,
blockstore-prefix,
|
| inv-set-sizes | proved | all subs proved
| inv-flashsize-size,
inv-block,
|
| inv-set-refsize | proved | all subs proved
| inv-flashsize-size,
inv-block,
|
| inv-remove-refsize0-diff | proved | all subs proved
| at-remove-refsize0,
in-remove-refsize0,
inv-flashsize-size,
inv-block,
inv-store,
|
| inv-remove-refsize0 | proved | all subs proved
| at-remove-refsize0,
in-remove-refsize0,
inv-flashsize-size,
inv-block,
inv-store,
|
| inv-reduce-rem | proved | all subs proved
| inv-flashsize-size,
inv-block,
inv-store,
|
| inv-reduce | proved | all subs proved
| inv-flashsize-size,
inv-block,
inv-store,
|
| inv-prefixn-lax | proved | all subs proved
| inv-listlen-ls1,
|
| inv-diff-n | proved | all subs proved
| inv-flashsize-size,
inv-block,
inv-store,
|
| inv-block-empty | proved | all subs proved
| inv-flashsize-empty,
inv-block,
|
| inv-append | proved | all subs proved
| inv-flashsize-append,
inv-block,
|
| inv-alloc | proved | all subs proved
| inv-flashsize-size,
inv-block,
inv-store,
|
| inv-add-node | proved | all subs proved
| inv-flashsize-append,
inv-block,
|
| at-write-refsize | proved | all subs proved
| in-in-adr,
in-write-refsize,
in,
at,
|
| at-store-inv | proved | all subs proved
| inv-flashsize-size,
inv-block,
inv-store,
|
| addresslist-in-lnum-simp | proved | all subs proved
| to-adrs-in,
|
| addresslist-in | proved | all subs proved
| to-adrs-in,
|
| to-adrs-one | proved | all subs proved
| adrs-empty,
adrs-rec,
|
| to-adrs-eq-empty | proved | all subs proved
| adrs-rec,
adrs-empty,
|
| addresslist-length | proved | all subs proved
| adrs-rec,
adrs-empty,
|
| dom-remove-refsize0 | proved | all subs proved
| in-remove-refsize0,
|
| inv-listlen-ls1 | proved | all subs proved
| inv-block,
|
| inv-flashsize-empty | proved | all subs proved
| inv-flashsize,
|
| inv-flashsize-append | proved | all subs proved
| inv-flashsize,
|
| in-diff | proved | all subs proved
| in,
|
| in-adr-in | proved | all subs proved
| in,
|
| notin-notin | proved | all subs proved
| in,
|
| in-write-refsize | proved | all subs proved
| in,
|
| inv-flashsize-size | proved | all subs proved
| inv-flashsize,
|
| in-in-adr | proved | all subs proved
| in,
|
| to-adrs-in | proved | all subs proved
| adrs-rec,
adrs-empty,
|
| to-adrs-drop | proved | all subs proved
| adrs-rec,
adrs-empty,
|
| size-one | proved | all subs proved
| size-base,
size-rec,
|
| size-append | proved | all subs proved
| size-rec,
size-base,
|
| remove-refsize0-one | proved | all subs proved
| at-remove-refsize0,
in-remove-refsize0,
|
| remove-refsize0-idem | proved | all subs proved
| at-remove-refsize0,
in-remove-refsize0,
|
| remove-refsize0-eq-nonzero | proved | all subs proved
| at-remove-refsize0,
in-remove-refsize0,
|
| remove-refsize0-empty | proved | all subs proved
| in-remove-refsize0,
|
| prefix-trans | proved | all subs proved
| blockstore-prefix,
|
| prefix-set-flags | proved | all subs proved
| blockstore-prefix,
|
| prefix-rem-left | proved | all subs proved
| blockstore-prefix,
|
| prefix-rem-alloc | proved | all subs proved
| blockstore-prefix,
|
| prefix-rem | proved | all subs proved
| blockstore-prefix,
|
| prefix-refl | proved | all subs proved
| inv-block,
inv-store,
blockstore-prefix,
|
| prefix-notin-fwd | proved | all subs proved
| in,
blockstore-prefix,
|
| prefix-just-alloc | proved | all subs proved
| blockstore-prefix,
|
| prefix-in | proved | all subs proved
| in,
blockstore-prefix,
|
| prefix-fwd-in | proved | all subs proved
| blockstore-prefix,
|
| prefix-empty-right | proved | all subs proved
| blockstore-prefix,
|
| prefix-empty-left | proved | all subs proved
| blockstore-prefix,
|
| prefix-domsubset | proved | all subs proved
| blockstore-prefix,
|
| prefix-del-right | proved | all subs proved
| blockstore-prefix,
|
| prefix-at | proved | all subs proved
| in,
blockstore-prefix,
at,
|
| prefix-append-notin | proved | all subs proved
| blockstore-prefix,
|
| prefix-append-in | proved | all subs proved
| blockstore-prefix,
|
| prefix-alloc | proved | all subs proved
| blockstore-prefix,
inv-block,
inv-store,
|
| inv-store-empty | proved | all subs proved
| inv-store,
|
| inv-nodups-app-left | proved | all subs proved
| inv-block,
|
| inv-nodups | proved | all subs proved
| inv-block,
|
| inv-listlen-ls2 | proved | all subs proved
| inv-block,
|
| inv-flashsize-prepend | proved | all subs proved
| inv-flashsize,
|
| inv-flashsize-prefix | proved | all subs proved
| inv-flashsize,
|
| inv-flashsize-app | proved | all subs proved
| inv-flashsize,
|
| inv-eq-list-size | proved | all subs proved
| inv-block,
|
| in-write-explicit | proved | all subs proved
| in,
|
| in-empty | proved | all subs proved
| in,
|
| in-alloc | proved | all subs proved
| in,
|
| except-refsizeeq-write-left | proved | all subs proved
| except-refsize-eq,
|
| except-refsizeeq-trans | proved | all subs proved
| except-refsize-eq,
|
| except-refsizeeq-refl | proved | all subs proved
| except-refsize-eq,
|
| except-refsizeeq-comm | proved | all subs proved
| except-refsize-eq,
|
| at-explicit-other | proved | all subs proved
| in,
at,
|
| at-explicit-diff | proved | all subs proved
| in,
at,
inv-block,
inv-store,
|
| at-explicit | proved | all subs proved
| in,
at,
inv-block,
inv-store,
|
| at-alloc | proved | all subs proved
| in,
at,
|
| size-base | axiom | | |
| size-rec | axiom | | |
| blockstore-prefix | axiom | | |
| at-remove-refsize0 | axiom | | |
| inv-flashsize | axiom | | |
| except-refsize-eq | axiom | | |
| in-remove-refsize0 | axiom | | |
| inv-store | axiom | | |
| inv-block | axiom | | |
| at | axiom | | |
| in | axiom | | |
| adrs-empty | axiom | | |
| adrs-rec | axiom | | |