(24steps) PrintForm Definitions Lemmas mb hybrid Sections GenAutomata Doc

At: switch normal exists 2 2 1
1. E: TaggedEventStruct
2. tr: |E| List
3. switch_inv(E)(tr)
4. No-dup-send(E)(tr)
5. L': |E| List
6. tr (swap adjacent[R_ad_normal(tr)(x,y)]^*) L'
7. i:(||L'||-1). R_ad_normal(tr)(L'[i],L'[(i+1)])
8. i: (||L'||-1)
9. is-send(E)(L'[i]) is-send(E)(L'[(i+1)]) (x,y:||tr||. x < y & is-send(E)(tr[x]) & is-send(E)(tr[y]) & (tr[x] =msg=(E) L'[(i+1)]) & (tr[y] =msg=(E) L'[i])) loc(E)(L'[i]) = loc(E)(L'[(i+1)])
10. x: ||L'||
11. y: ||L'||
12. x < y
13. is-send(E)(L'[x])
14. is-send(E)(L'[y])
15. L'[x] =msg=(E) L'[(i+1)]
16. is-send(E)(L'[(i+1)])
17. L'[y] =msg=(E) L'[i]
18. is-send(E)(L'[i])

x,y:||tr||. x < y & is-send(E)(tr[x]) & is-send(E)(tr[y]) & (tr[x] =msg=(E) L'[(i+1)]) & (tr[y] =msg=(E) L'[i])
By: Assert sublist(|E|;[L'[x]; L'[y]];tr)
Generated subgoals:

1 sublist(|E|;[L'[x]; L'[y]];tr)
219. sublist(|E|;[L'[x]; L'[y]];tr)
x,y:||tr||. x < y & is-send(E)(tr[x]) & is-send(E)(tr[y]) & (tr[x] =msg=(E) L'[(i+1)]) & (tr[y] =msg=(E) L'[i])

About:
listconsnilassertnatural_numberaddsubtractless_than
applyequalimpliesandallexists

(24steps) PrintForm Definitions Lemmas mb hybrid Sections GenAutomata Doc