Lemmas | msg-item wf, pi2 wf, pi1 wf, nat wf, update-spec-decl wf, msg-spec-loc-decl wf, fpf-trivial-subtype-top, id-deq wf, fpf-dom wf, finite-prob-space wf, decl-type wf, decl-state wf, fpf wf, IdLnk wf, Knd wf, rationals wf, unit wf, R-Feasible wf, top wf, Kind-deq wf, ldst wf, R-da wf, fpf-cap wf, ma-valtype wf, lnk wf, lsrc wf, isrcv wf, fpf-domain wf, append wf, l member wf, ecl-machine-icompat, Id wf, false wf, not functionality wrt iff, assert of bnot, eqff to assert, not wf, bnot wf, R-has-loc wf, true wf, Id sq, assert-eq-id, eqtt to assert, assert wf, iff transitivity, bool wf, eq id wf, msg-spec-loc-decl-implies, ecl-machine-loc, ecl-machine wf, R-compat-disjoint |