[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem valid-sqns-extract2-sqn-h
⊦ n0 < m0 ∧ n1 < m0 ∧ m0 ≤ # apebs ∧ n0 ≠ n1 ∧ valid-peb(v, m, apebs[n0]) ∧ valid-peb(v, m, apebs[n1]) → (∃ bag. valid-sqns(v, m, apebs, m0) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn)
Type: A user defined theorem
Validity: The proof is valid.
Features:
Comment:
Used by:
valid-sqns-extract2-sqn
,
Used by units in proved state:
ubi-crash-recovery-base
,
ubi-base
,
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 8
Proof steps: 27
Used lemmas:
valid-sqns-extract-sqn-h
,
valid-sqns-rec
,
Used spec theorems:
Used simplifier rules:
nat
/
fle
nat
/
lez
nat-basic
/
zero-01
nat-basic
/
s-04
nat-basic
/
c
nat-basic
/
a
nat
/
succ-01
apeb
/
elim
nat
/
lels-03
bag-union
/nat-bag/
union-empty
bag-basic
/nat-bag/
bag-add2-eq-elim
bag-basic
/nat-bag/
insert-inj
bag-union
/nat-bag/
union-com
bag-union
/nat-bag/
union-ass
bag-max
/
bag-union-one
apeb
/
sel-05
valid-peb
/
valid-peb-unique
nat-basic
/
succ
nat-basic
/
lf
nat-basic
/
f
nat-basic
/
ref
nat
/
lels-02
nat
/
ler
nat-basic
/
lf-02
nat
/
anti
nat
/
lels