(10steps)
PrintForm
Definitions
Lemmas
mb
hybrid
Sections
GenAutomata
Doc
At:
no
DASH
dup
DASH
fusion
2
2
2
1.
E:
TaggedEventStruct
2.
P:
(|E| List)
Prop
3.
I:
(|E| List)
Prop
4.
P refines (Causal(E)
No-dup-deliver(E))
5.
(I
No-dup-send(E)
Tag-by-msg(E)
Causal(E)
No-dup-deliver(E)) fuses P
(I
No-dup-send(E)
Tag-by-msg(E)) fuses No-dup-deliver(E)
By:
Inst
Thm*
E:TaggedEventStruct. Tag-by-msg(E) fuses No-dup-deliver(E) [E]
THEN
BackThruLemma'
Thm*
E:TaggedEventStruct, I,J,P:TraceProperty(E). (J refines I)
(I fuses P)
(J fuses P)
THEN
Try (Unfold `trace_property` 0)
THEN
Try (Fold `trace_property` 0)
Generated subgoal:
1
(I
No-dup-send(E)
Tag-by-msg(E)) refines Tag-by-msg(E)
About:
(10steps)
PrintForm
Definitions
Lemmas
mb
hybrid
Sections
GenAutomata
Doc