Definitions | s = t, t T, x:A B(x), x:A. B(x), EState(T), a:A fp B(a), f(a), Id, , strong-subtype(A;B), P  Q, Type, EqDecider(T), Unit, left + right, IdLnk, x:A B(x), EOrderAxioms(E; pred?; info), kindcase(k; a.f(a); l,t.g(l;t) ), Knd, loc(e), kind(e), Msg(M), type List, , val-axiom(E;V;M;info;pred?;init;Trans;Choose;Send;val;time), r s, e < e', , b, constant_function(f;A;B), SWellFounded(R(x;y)), , pred!(e;e'),  x,y. t(x;y), <a, b>, A, pred(e), first(e),  x. t(x), P & Q, Top, ES, AbsInterface(A), chain_config(), let x,y = A in B(x;y), chain_sys(Cmd), P   Q, E, {x:A| B(x)} , E(X), t.1, case b of inl(x) => s(x) | inr(y) => t(y), if b then t else f fi , e  X, valid-sys(es;Config;Sys;e), (e <loc e'), inr x , "$token", X(e), ccpred?(x), inl x , Atom, x.A(x), e<e'. P(e), ccpred-id(x), e<e'.P(e), ccsucc?(x), cctail?(x), P Q, cchead?(x), ff, tt, True, A c B, chain_sys_ind(x;cmd.input(cmd);from,cmds.update(from;cmds)), P  Q, (x l), x dom(f), loc(e), valid-sys-dcdr{i:l}(es;Config;Cmd;Sys), (I|p), Sys(valid) |