Lemmas | read-restricted wf, read-restricted-has-loc, write-restricted wf, write-restricted-has-loc, not-R-has-loc-R-da, fpf-empty-compatible-right, not-R-has-loc-R-ds, deq wf, true wf, squash wf, fpf-compatible wf, R-occurs wf, R-occurs-has-loc, Id wf, id-deq wf, bool wf, finite-prob-space wf, decl-type wf, decl-state wf, fpf wf, rationals wf, unit wf, R-Feasible wf, R-has-loc wf, not wf, ma-valtype wf, lnk wf, lsrc wf, R-da wf, fpf-cap wf, isrcv wf, Knd wf, fpf-trivial-subtype-top, Kind-deq wf, fpf-single wf, top wf, fpf-join wf, fpf-dom wf, assert wf, IdLnk wf, l member wf, R-state-var-compat |