{ 
[s:simple-consensus-state()]. [v:simple-consensus-msg()].
(snd((inning_step() s v)) ~ snd(s)) }
{ Proof }
Definitions occuring in Statement :
inning_step: inning_step(),
simple-consensus-msg: simple-consensus-msg(),
simple-consensus-state: simple-consensus-state(),
uall: [x:A]. B[x],
pi2: snd(t),
apply: f a,
sqequal: s ~ t
Definitions :
uall: [x:A]. B[x],
pi2: snd(t),
inning_step: inning_step(),
member: t 
T,
nat: 
,
ifthenelse: if b then t else f fi ,
prop: 
,
so_lambda: 
x.t[x],
all: x:A. B[x],
implies: P 
Q,
btrue: tt,
bfalse: ff,
simple-consensus-state: simple-consensus-state(),
simple-consensus-msg: simple-consensus-msg(),
sq_type: SQType(T),
uimplies: b supposing a,
so_apply: x[s],
bool: 
,
unit: Unit,
iff: P 
Q,
and: P 
Q,
guard: {T},
it: 
Lemmas :
subtype_base_sq,
nat_wf,
set_subtype_base,
le_wf,
int_subtype_base,
eq_int_wf,
bool_wf,
iff_weakening_uiff,
uiff_transitivity,
assert_wf,
eqtt_to_assert,
assert_of_eq_int,
not_wf,
bnot_wf,
eqff_to_assert,
assert_of_bnot,
not_functionality_wrt_uiff,
simple-consensus-msg_wf,
simple-consensus-state_wf
\mforall{}[s:simple-consensus-state()]. \mforall{}[v:simple-consensus-msg()]. (snd((inning\_step() s v)) \msim{} snd(s))
Date html generated:
2011_08_17-PM-06_32_04
Last ObjectModification:
2011_06_18-AM-11_54_57
Home
Index