[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem add-preserves-reachable
⊦ h[r1].nxt = h[r2].nxt ∧ ce.nxt = r2 ∧ reachable(r, r0, h) ∧ ¬ reachable(r, r2, h) ∧ r2 ≠ null ∧ r2 ∈ h ∧ reachable(r, r1, h) → reachable(r, r0, h[r1 := ce])
Type: A user defined theorem
Validity: The proof is valid.
Features: s, ls,
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 26
Proof steps: 51
Used lemmas:
fromnext-reachable
,
fromnext-reachable-rev
,
reachable-notnullinH
,
reach-alloc
,
modnotreachable-reachable
,
path-cons
,
self-reachable
,
path-one
,
reachable-def
,
Used spec theorems:
store
/
At-other
Used simplifier rules:
list
/
app
list
/
a
list-last
/
last-one
store
/
In-insert
list-last
/
last-rec
list
/
c
list-last
/
lapp-03
store
/
At-same
store
/
insin
store
/
in-neq
store
/
At-other