{ 
s:SES. es:EO+(Info). thr:Thread. i,j:
||thr||.
(thr[i] <loc thr[j]) supposing i < j }
{ Proof }
Definitions occuring in Statement :
ses-thread: Thread,
ses-info: Info,
security-event-structure: SES,
event-ordering+: EO+(Info),
es-locl: (e <loc e'),
select: l[i],
length: ||as||,
int_seg: {i..j
},
uimplies: b supposing a,
all: x:A. B[x],
less_than: a < b,
natural_number: $n
Definitions :
all: x:A. B[x],
member: t 
T,
nat: ,
implies: P 
Q,
le: A 
B,
ge: i 
j ,
not: 
A,
false: False,
prop: 
,
int_seg: {i..j},
subtype: S 
T,
lelt: i j < k,
and: P 
Q,
squash: 
T,
true: True,
uimplies: b supposing a,
uall: [x:A]. B[x],
ses-thread: Thread,
ses-act: Act,
sq_stable: SqStable(P),
decidable: Dec(P),
or: P 
Q,
sq_type: SQType(T),
guard: {T}
Lemmas :
ses-thread_wf,
event-ordering+_wf,
ses-info_wf,
security-event-structure_wf,
nat_properties,
ge_wf,
nat_wf,
le_wf,
int_seg_wf,
length_wf1,
ses-act_wf,
sq_stable_from_decidable,
es-locl_wf,
event-ordering+_inc,
select_wf,
es-E_wf,
decidable__es-locl,
decidable__lt,
es-locl_transitivity2,
es-le_weakening,
int_seg_properties,
subtype_base_sq,
int_subtype_base
\mforall{}s:SES. \mforall{}es:EO+(Info). \mforall{}thr:Thread. \mforall{}i,j:\mBbbN{}||thr||. (thr[i] <loc thr[j]) supposing i < j
Date html generated:
2011_08_17-PM-07_32_16
Last ObjectModification:
2011_06_18-PM-01_25_21
Home
Index