[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem rely-invInsert-retInsert
⊦ ls.tid ≠ tid0 ∧ ls.le ≠ ⊥ ∧ pre(gs, ls, invInsert, a) ∧ pcstepf(gs, ls, invInsert, a) = retInsert → gs.set ⊆ gstepf(gs, ls, invInsert, a).set
Type: A proof obligation
Validity: The proof is valid.
Features:
Comment:
Used by:
SetInv-thm
,
other-SetLInv
,
rely-SetLInv
,
stable-SetLInv
,
step-SetLInv
,
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 0
Proof steps: 3
Used lemmas:
Used spec theorems:
Used simplifier rules:
Set
/
gstepf-invInsert-DOINSERT
Set
/
pcstepf-invInsert-DOINSERT
Set
/
pre-invInsert
set-basic
/
subsize-eq-01
Set
/
updsel--dotset-dotset
set-basic
/
sub-add-01