(27steps) PrintForm Definitions Lemmas mb hybrid Sections GenAutomata Doc

At: local deliver switchable 5 1

1. E: EventStruct
2. P: (Label(|E| List))Prop
3. f,g:(Label(|E| List)). (p:Label. g(p) f(p)) P(f) P(g)
4. f,g:(Label(|E| List)). (a:|E|. p:Label. g(p) = filter(b.(b =msg=(E) a);f(p))) P(f) P(g)
5. f,g,h:(Label(|E| List)). (p,q:Label. (xf(p).(yg(q).(x =msg=(E) y)))) (p:Label. h(p) = ((f(p)) @ (g(p)))) P(f) P(g) P(h)
6. x: |E| List
7. y: |E| List
8. P(p.x delivered at p)
9. x swap adjacent[loc(E)(x) = loc(E)(y) & is-send(E)(x) & is-send(E)(y) is-send(E)(x) & is-send(E)(y)] y
10. x1: Label

filter(e.is-send(E)(e)loc(E)(e) = x1;y) = filter(e.is-send(E)(e)loc(E)(e) = x1;x)

By:
Using [`f',(e.is-send(E)(e)loc(E)(e) = x1)] (FwdThru Thm* P:(AAProp), f:(A), L1,L2:A List. (L1 swap adjacent[P(x,y)] L2) (filter(f;L1) swap adjacent[P(x,y)] filter(f;L2)) filter(f;L1) = filter(f;L2) [-2])
THEN
Analyze -1


Generated subgoal:

111. filter(e.is-send(E)(e)loc(E)(e) = x1;x) swap adjacent[loc(E)(x) = loc(E)(y) & is-send(E)(x) & is-send(E)(y) is-send(E)(x) & is-send(E)(y)] filter(e.is-send(E)(e)loc(E)(e) = x1;y)
filter(e.is-send(E)(e)loc(E)(e) = x1;y) = filter(e.is-send(E)(e)loc(E)(e) = x1;x)


About:
listassertlambdaapplyfunctionequalprop
impliesandorallexists

(27steps) PrintForm Definitions Lemmas mb hybrid Sections GenAutomata Doc