[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem lemma5
inv(sys) ∧ inv(sys0) ∧ eqds(sys, sources(sys, cl, d), sys0) ⊦ eqd(run(sys, cl), d, run(sys0, purge(sys0, cl, d)))
Type: A user defined theorem
Validity: The proof is valid.
Features:
Comment:
Used by:
lemma2
,
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 14
Proof steps: 33
Used lemmas:
sources-rec-lem
,
sources-equal
,
eqds-trans
,
lemma3
,
purge-rec-lem
,
run-rec-lem
,
eqds-def
,
purge-base
,
run-base
,
sources-base
,
Used spec theorems:
gen-CongIntrans
/
locally-respects
Used simplifier rules:
set-basic
/gen-secdomain-set/
In-insert
gen-CongIntrans
/
eqd-symm-lem
set-basic
/gen-secdomain-set/
size-zero-01
set-basic
/gen-secdomain-set/
ne-01
gen-CongIntrans
/
inv-exec-lem
pair
/gen-sys-out/
sel-02
pair
/gen-sys-out/
elim
list
/gen-command-list/
a
list
/gen-command-list/
c
set-basic
/gen-secdomain-set/
in-04