Lemmas | ecl-induction, nat wf, event-info wf, ecl-act wf, iseg wf, ecl-halt wf, ecl wf, fpf wf, Knd wf, Id wf, false wf, decl-state wf, ma-valtype wf, bool wf, append wf, le wf, ecl-halt-unique, common iseg compat, length wf1, non neg length, iseg append0, member wf, append assoc, iseg length, length append, squash wf, true wf, append nil sq, top wf, iseg transitivity, append iseg, decidable lt, iseg antisymmetry, nat plus wf, nat plus inc, star-append wf, concat wf, l all wf, nat properties, ge wf, l all cons, compat wf, compat-append, length-append, ecl-halt-nil, bool cases, bool sq, iff transitivity, assert wf, eqtt to assert, assert of eq int, bnot wf, not wf, eqff to assert, assert of bnot, not functionality wrt iff, ifthenelse wf, eq int wf, l member wf, l exists wf |