Lemmas | not-R-occurs-init-compat, R-state-var-compat, R-compat-Rplus-sq, Id wf, id-deq wf, bool wf, finite-prob-space wf, decl-type wf, decl-state wf, fpf wf, IdLnk wf, rationals wf, unit wf, R-Feasible wf, R-occurs wf, R-ds wf, Kind-deq wf, Knd wf, fpf-compatible wf, ma-valtype wf, lnk wf, lsrc wf, R-da wf, fpf-cap wf, isrcv wf, fpf-trivial-subtype-top, write-restricted wf, l member wf, read-restricted wf, not wf, fpf-single wf, top wf, fpf-join wf, fpf-dom wf, assert wf |