
 Prop
Prop
 Prop
Prop x,y,z:|E| List. P(x)
x,y,z:|E| List. P(x) 
 P(y)
 P(y) 
 (
 ( x
x x.(
x.( y
y y.
y. (x =msg=(E) y)))  &  z = (x @ y)
(x =msg=(E) y)))  &  z = (x @ y) 
 P(z)
 P(z) tr:|E| List. 
I(tr)
tr:|E| List. 
I(tr) 
 
 
 tr = nil
tr = nil 
 (
 
( L_1,L_2:|E| List.
 tr = (L_1 @ L_2)
  &
L_1,L_2:|E| List.
 tr = (L_1 @ L_2)
  &   L_2 = nil
  &  (
L_2 = nil
  &  ( x
x L_1.(
L_1.( y
y L_2.
L_2. (x =msg=(E) y)))
  &  (
(x =msg=(E) y)))
  &  ( m:Label. (
m:Label. ( x
x L_2.tag(E)(x) = m)))
L_2.tag(E)(x) = m)))
 tr:|E| List. ||tr||
tr:|E| List. ||tr|| n-1
n-1 
 (
 ( m:Label. P( < tr > _m))
m:Label. P( < tr > _m)) 
 I(tr)
 I(tr) 
 P(tr)
 P(tr) n
n tr = nil
tr = nil m:Label. P( < tr > _m)
m:Label. P( < tr > _m) L_2 = nil
L_2 = nil x
x L_1.(
L_1.( y
y L_2.
L_2. (x =msg=(E) y)))
(x =msg=(E) y))) x
x L_2.tag(E)(x) = m)
L_2.tag(E)(x) = m) n-1
n-1 tr
 tr n-1
n-1 tr
 tr m:Label. P( < L_1 > _m))
m:Label. P( < L_1 > _m)) 
 I(L_1)
 I(L_1) 
 P(L_1)
 P(L_1) 
  m:Label. P( < L_1 > _m)
m:Label. P( < L_1 > _m) h.
 (Unfold `R_safety` h) THEN (Unfold `preserved_by` h) THEN (Reduce h)
 THEN
 (Using [`x', < tr > _m1] (BackThru h)))
h.
 (Unfold `R_safety` h) THEN (Unfold `preserved_by` h) THEN (Reduce h)
 THEN
 (Using [`x', < tr > _m1] (BackThru h)))| 1 | 6.  x,y:|E| List. P(x)   y  x   P(y) 7. safetyR(E) preserves I 8.  tr:|E| List. 
I(tr)     tr = nil   (  L_1,L_2:|E| List.
 tr = (L_1 @ L_2)
  &  L_2 = nil
  &  (  x  L_1.(  y  L_2.  (x =msg=(E) y)))
  &  (  m:Label. (  x  L_2.tag(E)(x) = m))) 9. n:  10. 0 < n 11.  tr:|E| List. ||tr||  n-1   (  m:Label. P( < tr > _m))   I(tr)   P(tr) 12. tr: |E| List 13. ||tr||  n 14.  tr = nil 15.  m:Label. P( < tr > _m) 16. I(tr) 17. L_1: |E| List 18. L_2: |E| List 19. tr = (L_1 @ L_2) 20.  L_2 = nil 21. (  x  L_1.(  y  L_2.  (x =msg=(E) y))) 22. m: Label 23. (  x  L_2.tag(E)(x) = m) 24. ||L_1||  n-1 25. L_1  tr 26. I(L_1) 27. ||L_1||  n-1 28. L_1  tr 29. I(L_1) 30. (  m:Label. P( < L_1 > _m))   I(L_1)   P(L_1) 31. m1: Label 32. P( < tr > _m1)  < L_1 > _m1  < tr > _m1 | 
About:
|  |  |  |  |  |  |  |  |  | 
|  |  |  |  |  |  |