es:ES, T:Type. strong-subtype(T;E)  (f:(TT). (x:T. f(x) c x)  (e:T. f**(e)  T)) 

latex

Definitions

retraction(T;f), es-eq(es), f**(x), x:A  B(x), A c B, s = t, x:AB(x), P  Q, x:A. B(x), strong-subtype(A;B), ES, Type, E, t  T, f(a), b, <a, b>, f**(e), EState(T), a:A fp B(a), Id, , EqDecider(T), Unit, left + right, IdLnk, EOrderAxioms(E; pred?; info), kindcase(k; a.f(a); l,t.g(l;t) ), Knd, loc(e), kind(e), Msg(M), type List, , val-axiom(E;V;M;info;pred?;init;Trans;Choose;Send;val;time), r  s, e < e', , constant_function(f;A;B), SWellFounded(R(x;y)), , pred!(e;e'), x,y. t(x;y), A, pred(e), first(e), x. t(x), P & Q, Top, let x,y = A in B(x;y), t.1, P  Q, P  Q, f(x)?z, e c e', (e < e'), P  Q, (x  l)

Lemmas

event system wf, strong-subtype wf, es-causl wf, es-causle wf, es-E wf, deq wf, EOrderAxioms wf, IdLnk wf, Msg wf, unit wf, nat wf, val-axiom wf, qle wf, cless wf, bool wf, top wf, Knd wf, kindcase wf, constant function wf, assert wf, not wf, loc wf, pred! wf, strongwellfounded wf, member wf, rationals wf, Id wf, EState wf, subtype rel wf, fix wf, es-eq wf, strong-subtype-deq-subtype, retraction wf, es-causle-retraction