| Symbol | Specification | Kind | Type |
|---|---|---|---|
| # . | gen-secdomain-set | f | secdomainset → nat |
| # . | gen-command-list | f | commandlist → nat |
| . ' | gen-command-list | f | command → commandlist |
| . + . | nat-basic2 | f | nat × nat → nat |
| . + . | gen-command-list | f | command × command → commandlist |
| . + . | gen-command-list | f | command × commandlist → commandlist |
| . + . | gen-command-list | f | commandlist × command → commandlist |
| . + . | gen-command-list | f | commandlist × commandlist → commandlist |
| . ++ . | gen-command-list | f | commandlist × command → commandlist |
| . ++ . | gen-secdomain-set | f | secdomainset × secdomain → secdomainset |
| . +1 | nat-basic1 | f | nat → nat |
| . - . | nat | f | nat × nat → nat |
| . -- . | gen-secdomain-set | f | secdomainset × secdomain → secdomainset |
| . -1 | nat-basic1 | f | nat → nat |
| . .1 | gen-sys-out | f | systemstateandoutput → systemstate |
| . .2 | gen-sys-out | f | systemstateandoutput → output |
| . .butlast | gen-command-list | f | commandlist → commandlist |
| . .first | gen-command-list | f | commandlist → command |
| . .last | gen-command-list | f | commandlist → command |
| . .rest | gen-command-list | f | commandlist → commandlist |
| . < . | gen-command-list | p | commandlist × commandlist |
| . < . | nat-basic1 | p | nat × nat |
| . > . | nat | p | nat × nat |
| . \ . | gen-secdomain-set | f | secdomainset × secdomainset → secdomainset |
| . ≤ . | nat | p | nat × nat |
| . ≥ . | nat | p | nat × nat |
| . ∈ . | gen-command-list | p | command × commandlist |
| . ∈ . | gen-secdomain-set | p | secdomain × secdomainset |
| . ∪ . | gen-secdomain-set | f | secdomainset × secdomainset → secdomainset |
| . ∩ . | gen-secdomain-set | f | secdomainset × secdomainset → secdomainset |
| . ⇒ . | gen-CongTrans | p | secdomain × secdomain |
| . ⊆ . | gen-secdomain-set | p | secdomainset × secdomainset |
| . × . | gen-sys-out | f | systemstate × output → systemstateandoutput |
| . ⊑ . | gen-command-list | p | commandlist × commandlist |
| . ⊒ . | gen-command-list | p | commandlist × commandlist |
| [] | gen-command-list | c | commandlist |
| { . } | gen-secdomain-set | f | secdomain → secdomainset |
| ∅ | gen-secdomain-set | c | secdomainset |
| butlastn | gen-command-list | f | nat × commandlist → commandlist |
| cdom | gen-execute | f | systemstate × command → secdomain |
| cdom | gen-execute | f | command → secdomain |
| cl | gen-command-list | v | commandlist |
| cl0 | gen-command-list | v | commandlist |
| cl1 | gen-command-list | v | commandlist |
| cl10 | gen-command-list | v | commandlist |
| cl2 | gen-command-list | v | commandlist |
| cl3 | gen-command-list | v | commandlist |
| cl4 | gen-command-list | v | commandlist |
| cl5 | gen-command-list | v | commandlist |
| cl6 | gen-command-list | v | commandlist |
| cl7 | gen-command-list | v | commandlist |
| cl8 | gen-command-list | v | commandlist |
| cl9 | gen-command-list | v | commandlist |
| co | gen-commands | v | command |
| co0 | gen-command-list | v | command |
| co1 | gen-command-list | v | command |
| co2 | gen-command-list | v | command |
| command | gen-commands | s | |
| commandlist | gen-command-list | s | |
| d | gen-secdomain | v | secdomain |
| d0 | gen-secdomain | v | secdomain |
| d1 | gen-secdomain | v | secdomain |
| disj | gen-command-list | p | commandlist × commandlist |
| ds | gen-secdomain-set | v | secdomainset |
| ds0 | gen-secdomain-set | v | secdomainset |
| ds1 | gen-secdomain-set | v | secdomainset |
| ds2 | gen-secdomain-set | v | secdomainset |
| dups | gen-command-list | p | commandlist |
| eqd | gen-CongTrans | p | systemstate × secdomain × systemstate |
| eqds | PurgeTrans | p | systemstate × secdomainset × systemstate |
| exec | gen-execute | f | systemstate × command → systemstateandoutput |
| execl | PurgeTrans | f | commandlist → systemstate |
| fillfirst | gen-command-list | f | nat × command × commandlist → commandlist |
| initialstate | gen-systemstate | c | systemstate |
| inv | gen-CongTrans | p | systemstate |
| m | nat-basic2 | v | nat |
| mklist | gen-command-list | f | command × nat → commandlist |
| n | nat-basic1 | v | nat |
| n0 | nat-basic1 | v | nat |
| n1 | nat-basic1 | v | nat |
| nat | nat-basic1 | s | |
| out | gen-output | v | output |
| out0 | gen-sys-out | v | output |
| out2 | gen-sys-out | v | output |
| out3 | gen-sys-out | v | output |
| output | gen-output | s | |
| outputt | PurgeTrans | f | systemstate × command → output |
| purge | PurgeTrans | f | commandlist × secdomain → commandlist |
| rev | gen-command-list | f | commandlist → commandlist |
| rmdup | gen-command-list | f | commandlist → commandlist |
| run | PurgeTrans | f | systemstate × commandlist → systemstate |
| secdomain | gen-secdomain | s | |
| secdomainset | gen-secdomain-set | s | |
| so | gen-sys-out | v | systemstateandoutput |
| so0 | gen-sys-out | v | systemstateandoutput |
| so1 | gen-sys-out | v | systemstateandoutput |
| so2 | gen-sys-out | v | systemstateandoutput |
| step | PurgeTrans | f | systemstate × command → systemstate |
| sys | gen-systemstate | v | systemstate |
| sys0 | gen-systemstate | v | systemstate |
| sys1 | gen-systemstate | v | systemstate |
| sys2 | gen-sys-out | v | systemstate |
| systemstate | gen-systemstate | s | |
| systemstateandoutput | gen-sys-out | s | |
| test | PurgeTrans | f | commandlist × command → output |