[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem seq-sat-rg-total-lem
GInv(S), Pr(m)(S), [:S, Outf | SEQ#(m, Inpf(m); S, Outf(m))] ⊦ (□ (Ry(m)(S', S'') ∧ GInv(S) ∧ GInv(S')) → ◇ last) ∧ (Ry(m)(S', S'') ∧ (GInv(S') → GInv(S''))) -+-> (last ⊃ Po(m)(S) ∧ GInv(S);Gr(m)(S, S') ∧ ¬ blocked ∧ (GInv(S) → GInv(S')))
Type: A user defined theorem
Validity: The proof is valid.
Features: tl,
Comment:
Used by:
spawn-sat-rg+df+term
,
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 11
Proof steps: 17
Used lemmas:
Used spec theorems:
RGn-Total
/
seq-sat-rg-total
Used simplifier rules:
nat-basic2
/
succ
nat-basic2
/
s
nat-basic1
/
ref-1
nat-basic2
/
a
nat-basic2
/
c