[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem step-eqd
⊦ cdom(co) ⇒ d ∧ eqd(sys, d, sys0) → eqd(step(sys, co), d, step(sys0, co))
Type: A user defined theorem
Validity: The proof is valid.
Features: simp, localsimp,
Comment:
Used by:
lemma1-gen
,
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 11
Proof steps: 23
Used lemmas:
Used spec theorems:
AccessControl
/
RMA-2
AccessControl
/
RMA-3
AccessControl
/
eqd-def
AccessControlTrans
/
policy-respects-observe
Used simplifier rules: