Lemmas | Knd sq, fpf-single-dom, and functionality wrt iff, dom-R-ds-occurs, fpf-compatible-single2, fpf-compatible-join2, fpf-cap-single1, assert of bnot, eqff to assert, bnot wf, iff transitivity, eqtt to assert, fpf-join-cap-sq, fpf-cap-join-subtype, subtype rel self, subtype rel dep function, Id wf, id-deq wf, bool wf, finite-prob-space wf, fpf wf, IdLnk wf, unit wf, R-Feasible wf, R-occurs wf, R-ds wf, Kind-deq wf, Knd wf, fpf-compatible wf, lnk wf, lsrc wf, R-da wf, fpf-cap wf, fpf-trivial-subtype-top, write-restricted wf, read-restricted wf, not wf, fpf-single wf, top wf, fpf-dom wf, not-R-occurs-frame-compat, l member wf, isrcv wf, assert wf, not-R-occurs-effect-compat, decl-type wf, rationals wf, decl-state wf, ma-valtype wf, fpf-single wf3, fpf-join wf, Reffect wf, R-compat-Rall2, R-compat-Rplus-sq |