es:ES, A:Type, Ias:(AbsInterface(A) List), i:{0..||Ias||}. E(Ias[i]) r E(p-first(Ias)) 

latex

Definitions

ES, Type, EqDecider(T), Unit, left + right, x:AB(x), IdLnk, x:A  B(x), Id, EOrderAxioms(E; pred?; info), f(a), EState(T), Knd, kindcase(k; a.f(a); l,t.g(l;t) ), Msg(M), type List, , , val-axiom(E;V;M;info;pred?;init;Trans;Choose;Send;val;time), e < e', r  s, P  Q, x:A. B(x), , b, constant_function(f;A;B), P & Q, Top, t  T, ||as||, False, A, A  B, i  j < k, , {x:A| B(x)} , {i..j}, let x,y = A in B(x;y), AbsInterface(A), l[i], e  X, t.1, E, if b then t else f fi , case b of inl(x) => s(x) | inr(y) => t(y), Void, x:A.B(x), <a, b>, s = t, True, T, S  T, p-first(L), a < b, #$n, E(X), (xL.P(x)), P  Q, P  Q, ff, tt, (x  l), A c B, , x:A. B(x)

Lemmas

select member, nat wf, false wf, btrue wf, bfalse wf, es-is-interface-p-first, int seg wf, length wf1, event system wf, es-E-interface functionality, top wf, es-E wf, squash wf, true wf, p-first wf, p-first wf-interface, subtype rel list, es-interface wf, subtype rel function, int seg properties, subtype rel sum, assert wf, es-is-interface wf, select wf