[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem fragstar
⊦ frag*(ioa)(sl, al) ↔ # sl = # al + 1 ∧ (∀ n. n < # al → ioa.step(sl[n], al[n], sl[n +1]))
Type: A user defined theorem
Validity: The proof is valid.
Features:
Comment:
Used by:
finfrag-one-action
,
finfrag-onlyone
,
frag-notsizeleq
,
frag-split
,
frag-to
,
fragfin-size-ls1
,
fragstar-onestate
,
infappend-moves-gen
,
move-split
,
move-trans
,
not-finfrag-empty
,
Used by units in proved state:
product-refine
,
IOtrace-lift
,
IOrefine-conds
,
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 3
Proof steps: 7
Used lemmas:
frag
,
fragstar-def
,
Used spec theorems:
Used simplifier rules:
nat-basic
/
succ
IO-Aut-data
/
sel-IOAut-dotstep
list-data
/
l
nat-basic
/
f
stream
/
sel-fin
nat-inf
/
less-fin
stream
/
size-fin
nat-inf
/
add-comm
nat-inf
/
add-assoc
nat-inf
/
eq-natinf-to-nat-2-1