 L = nil
L = nil  |E| List
 |E| List 
 (
 
 ( L_1,L_2:Trace(E).
 L = (L_1 @ L_2)
L_1,L_2:Trace(E).
 L = (L_1 @ L_2)  |E| List
  &
 |E| List
  &   L_2 = nil
L_2 = nil  |E| List
  &  (
 |E| List
  &  ( x
x L_1.(
L_1.( y
y L_2.
L_2.
 (x =msg=(E) y)))
  &  (
(x =msg=(E) y)))
  &  ( m:Label. (
m:Label. ( x
x L_2.tag(E)(x) = m)))
L_2.tag(E)(x) = m)))
is mentioned by
| Thm*  E:TaggedEventStruct, P,I:TraceProperty(E).
MCS(E)(P)   safetyR(E) preserves I   (I refines single-tag-decomposable(E))   (I fuses P) | [M_DASH_C_DASH_S_SPACE_induction] | 
| Thm*  E:TaggedEventStruct. 
(switch-decomposable(E)  Tag-by-msg(E)  Causal(E)  No-dup-send(E))
refines single-tag-decomposable(E) | [switch_decomp_implies_single_tag_decomp] | 
Try larger context: GenAutomata