[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem Security-simple-without-initialstate
⊦ obs(run(sys, cl), d) = obs(run(sys, ipurge(cl, d)), d)
Type: A proof obligation
Validity: The proof is valid.
Features: theorem,
Comment: This is the standard (simple) purge security property without a fixed initial state. Proved with RMA-1 and lemma1-gen.
Used by:
Security-simple
,
Security-strong
,
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 2
Proof steps: 3
Used lemmas:
eqds-refl
,
lemma5
,
Used spec theorems:
AccessControl4Vars
/
RMA-1
Used simplifier rules: