es:event_system{i:l}, i,a:Id, p:finite-prob-space, ds:fpf(Id; x.Type), P:(decl-state(ds)).
pre-p(es; i; ds; a; p; P)  prop{i:l} 

latex

Definitions	guard(T), sq_type(T), x. t(x), es-state(es; i), es-le(es; e; e'), x:A. B(x), P  Q, existse-ge(es; e; e'.P(e')), P  Q, alle-at(es; i; e.P(e)), P  Q, A c B, pre-p(es; i; ds; a; p; P), prop{i:l}, t  T, decl-state(ds), x:A. B(x), x(s), Id
Lemmas	event system wf, finite-prob-space wf, Id wf, fpf wf, bool wf, decl-state wf, es-init-elapsed wf, es-le-loc, Id sq, es-loc wf, es-state-after-elapsed wf, not wf, es-locl wf, random wf, es-val wf, top wf, id-deq wf, fpf-cap wf, es-vartype wf, subtype rel dep function, es-state-when wf, assert wf, subtype rel self