(51steps)
PrintForm
Definitions
Lemmas
mb
automata
4
Sections
GenAutomata
Doc
At:
vc
trace
correctness
1
3
2
1
2
2
2
1.
A:
ioa{i:l}()
2.
I:
Fmla
3.
rho:
Decl
4.
de:
sig()
5.
e:
{[[de]] rho}
6.
te:
Label
Label
7.
tc_ioa(A;de)
8.
ioa_mentions_trace(A)
9.
trace_consistent_pred(rho;A.da;te;I)
10.
guarded_trace(A.da;te;I)
11.
tc_pred(I;A.ds; < > ;de)
12.
covers_pred(A;I)
13.
closed_pred(I)
14.
single_valued_decls(A.ds)
15.
s0:
[[A]] rho de e.state
16.
x:
[[A]] rho de e.state
17.
act:
[[A]] rho de e.action
18.
x':
[[A]] rho de e.state
19.
l:
[[A]] rho de e.action List
20.
[[A]] rho de e.init(s0)
21.
trace_reachable([[A]] rho de e;s0;l;x)
22.
mk_trace_env(l, te)
trace_env([[A.da]] rho)
23.
[[I]] rho A.ds < > de e x
mk_trace_env(l, te)
24.
[[A]] rho de e.trans(x,act,x')
25.
l
(
[[A.da]] rho) List
26.
[[VCs(A;I)]] rho A.ds A.da de e x mk_trace_env(l, te)
27.
act
(
[[A.da]] rho)
[[I]] rho A.ds < > de e x'
mk_trace_env(l @ [act], te)
By:
Assert ((
t:dec(). t
A.da & t.lbl = kind(act))
[[I]] rho A.ds < > de e x'
mk_trace_env(l @ [act], te))
Generated subgoals:
1
(
t:dec(). t
A.da & t.lbl = kind(act))
[[I]] rho A.ds < > de e x'
mk_trace_env(l @ [act], te)
2
28.
(
t:dec(). t
A.da & t.lbl = kind(act))
[[I]] rho A.ds < > de e x'
mk_trace_env(l @ [act], te)
[[I]] rho A.ds < > de e x'
mk_trace_env(l @ [act], te)
About:
(51steps)
PrintForm
Definitions
Lemmas
mb
automata
4
Sections
GenAutomata
Doc