Lemmas | event system wf, finite-prob-space wf, Id wf, fpf wf, bool wf, decl-state wf, es-init-state wf, es-le-loc, Id sq, es-loc wf, es-state-after wf, not wf, es-locl wf, fpf-ap wf, es-dtype wf, fpf-trivial-subtype-top, fpf-dom wf, subtype rel self, top wf, id-deq wf, fpf-cap wf, es-vartype wf, subtype rel dep function, es-state-when wf, assert wf |