{ 
[t:
]. [s:simple-consensus-state()]. [v:simple-consensus-msg()].
(snd(s)) < (snd((nxt_inning() <s, v>))) supposing 
(inning_test(t) s v) }
{ Proof }
Definitions occuring in Statement :
nxt_inning: nxt_inning(),
inning_test: inning_test(t),
simple-consensus-msg: simple-consensus-msg(),
simple-consensus-state: simple-consensus-state(),
assert: b,
uimplies: b supposing a,
uall: [x:A]. B[x],
pi2: snd(t),
less_than: a < b,
apply: f a,
pair: <a, b>,
int:
Definitions :
uall: [x:A]. B[x],
uimplies: b supposing a,
pi2: snd(t),
nxt_inning: nxt_inning(),
member: t 
T,
ifthenelse: if b then t else f fi ,
implies: P 
Q,
prop: 
,
and: P 
Q,
or: P 
Q,
all: x:A. B[x],
btrue: tt,
bfalse: ff,
simple-consensus-state: simple-consensus-state(),
simple-consensus-msg: simple-consensus-msg(),
inning_test: inning_test(t),
nat: 
,
iff: P 
Q,
bool: 
,
le: A 
B,
unit: Unit,
not: 
A,
false: False,
it: 
Lemmas :
iff_weakening_uiff,
assert_wf,
eq_int_wf,
assert_of_eq_int,
inning_test_wf,
simple-consensus-msg_wf,
simple-consensus-state_wf,
bor_wf,
le_int_wf,
band_wf,
length_wf1,
le_wf,
decidable__assert,
decidable_wf,
bool_wf,
uiff_transitivity,
eqtt_to_assert,
assert_of_le_int,
lt_int_wf,
bnot_wf,
eqff_to_assert,
assert_functionality_wrt_uiff,
bnot_of_le_int,
assert_of_lt_int,
assert_of_bor,
or_functionality_wrt_uiff,
assert_of_band,
and_functionality_wrt_uiff
\mforall{}[t:\mBbbZ{}]. \mforall{}[s:simple-consensus-state()]. \mforall{}[v:simple-consensus-msg()].
(snd(s)) < (snd((nxt\_inning() <s, v>))) supposing \muparrow{}(inning\_test(t) s v)
Date html generated:
2011_08_17-PM-06_31_54
Last ObjectModification:
2011_06_18-AM-11_54_42
Home
Index