es:ES, X:AbsInterface(Top), f:(E(X)E(X)). (x:E(X). f(x) c x)  (e:E(X). f**(e) c e) 

latex

Definitions

e c e', x:AB(x), x:A. B(x), s = t, t  T, strong-subtype(A;B), P  Q, ES, AbsInterface(A), E(X), y is f*(x), x:A  B(x), P & Q, EState(T), a:A fp B(a), f(a), Id, , Type, EqDecider(T), Unit, left + right, IdLnk, EOrderAxioms(E; pred?; info), kindcase(k; a.f(a); l,t.g(l;t) ), Knd, loc(e), kind(e), Msg(M), type List, , val-axiom(E;V;M;info;pred?;init;Trans;Choose;Send;val;time), r  s, e < e', , b, constant_function(f;A;B), SWellFounded(R(x;y)), , pred!(e;e'), x,y. t(x;y), <a, b>, A, pred(e), first(e), x. t(x), Top, {x:A| B(x)} , E, (e < e'), P  Q

Lemmas

fun-connected-causle, event system wf, es-interface wf, es-causl wf, es-E wf, es-E-interface wf, es-E-interface-subtype rel, deq wf, EOrderAxioms wf, IdLnk wf, Msg wf, unit wf, nat wf, val-axiom wf, qle wf, cless wf, bool wf, top wf, Knd wf, kindcase wf, constant function wf, assert wf, not wf, loc wf, pred! wf, strongwellfounded wf, member wf, rationals wf, Id wf, EState wf, subtype rel wf, es-fix property, es-causle wf