| Symbol | Specification | Kind | Type |
|---|---|---|---|
| # . | gen-secdomain-set | f | secdomainset → nat |
| . + . | nat-basic2 | f | nat × nat → nat |
| . ++ . | gen-secdomain-set | f | secdomainset × secdomain → secdomainset |
| . +1 | nat-basic1 | f | nat → nat |
| . - . | nat | f | nat × nat → nat |
| . -- . | gen-secdomain-set | f | secdomainset × secdomain → secdomainset |
| . -1 | nat-basic1 | f | nat → nat |
| . .1 | gen-sys-out | f | systemstateandoutput → systemstate |
| . .2 | gen-sys-out | f | systemstateandoutput → output |
| . < . | nat-basic1 | p | nat × nat |
| . > . | nat | p | nat × nat |
| . \ . | gen-secdomain-set | f | secdomainset × secdomainset → secdomainset |
| . ≤ . | nat | p | nat × nat |
| . ≥ . | nat | p | nat × nat |
| . ∈ . | gen-secdomain-set | p | secdomain × secdomainset |
| . ∪ . | gen-secdomain-set | f | secdomainset × secdomainset → secdomainset |
| . ∩ . | gen-secdomain-set | f | secdomainset × secdomainset → secdomainset |
| . ⇒ . | gen-CongTrans | p | secdomain × secdomain |
| . ⊆ . | gen-secdomain-set | p | secdomainset × secdomainset |
| . × . | gen-sys-out | f | systemstate × output → systemstateandoutput |
| { . } | gen-secdomain-set | f | secdomain → secdomainset |
| ∅ | gen-secdomain-set | c | secdomainset |
| cdom | gen-execute | f | command → secdomain |
| cdom | gen-execute | f | systemstate × command → secdomain |
| co | gen-commands | v | command |
| command | gen-commands | s | |
| d | gen-secdomain | v | secdomain |
| d0 | gen-secdomain | v | secdomain |
| d1 | gen-secdomain | v | secdomain |
| ds | gen-secdomain-set | v | secdomainset |
| ds0 | gen-secdomain-set | v | secdomainset |
| ds1 | gen-secdomain-set | v | secdomainset |
| ds2 | gen-secdomain-set | v | secdomainset |
| eqd | gen-CongTrans | p | systemstate × secdomain × systemstate |
| exec | gen-execute | f | systemstate × command → systemstateandoutput |
| initialstate | gen-systemstate | c | systemstate |
| inv | gen-CongTrans | p | systemstate |
| m | nat-basic2 | v | nat |
| n | nat-basic1 | v | nat |
| n0 | nat-basic1 | v | nat |
| n1 | nat-basic1 | v | nat |
| nat | nat-basic1 | s | |
| out | gen-output | v | output |
| out0 | gen-sys-out | v | output |
| out2 | gen-sys-out | v | output |
| out3 | gen-sys-out | v | output |
| output | gen-output | s | |
| secdomain | gen-secdomain | s | |
| secdomainset | gen-secdomain-set | s | |
| so | gen-sys-out | v | systemstateandoutput |
| so0 | gen-sys-out | v | systemstateandoutput |
| so1 | gen-sys-out | v | systemstateandoutput |
| so2 | gen-sys-out | v | systemstateandoutput |
| sys | gen-systemstate | v | systemstate |
| sys0 | gen-systemstate | v | systemstate |
| sys1 | gen-systemstate | v | systemstate |
| sys2 | gen-sys-out | v | systemstate |
| systemstate | gen-systemstate | s | |
| systemstateandoutput | gen-sys-out | s |