es:ES, X:AbsInterface(Top), f:(E(X)E(X)). (x:E(X). f(x) c x)  retraction(E(X);f) 

latex

Definitions

t  T, f(a), e c e', E(X), x:AB(x), x:A. B(x), AbsInterface(A), ES, strong-subtype(A;B), x:A  B(x), b, left + right, P  Q, s = t, (e < e'), Top, retraction(T;f), P  Q, EState(T), a:A fp B(a), Id, , Type, EqDecider(T), Unit, IdLnk, EOrderAxioms(E; pred?; info), kindcase(k; a.f(a); l,t.g(l;t) ), Knd, loc(e), kind(e), Msg(M), type List, , val-axiom(E;V;M;info;pred?;init;Trans;Choose;Send;val;time), r  s, e < e', , constant_function(f;A;B), SWellFounded(R(x;y)), , pred!(e;e'), x,y. t(x;y), <a, b>, A, pred(e), first(e), x. t(x), P & Q, E, {x:A| B(x)} , let x,y = A in B(x;y), t.1, (x  l)

Lemmas

event system wf, es-interface wf, retraction wf, es-causl wf, es-causle wf, es-E-interface-subtype rel, es-E wf, deq wf, EOrderAxioms wf, IdLnk wf, Msg wf, unit wf, nat wf, val-axiom wf, qle wf, cless wf, bool wf, top wf, Knd wf, kindcase wf, constant function wf, assert wf, not wf, loc wf, pred! wf, strongwellfounded wf, member wf, rationals wf, Id wf, EState wf, subtype rel wf, es-E-interface wf, es-causle-retraction, es-E-interface-strong-subtype