Global Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (4963 entries)
Notation Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (45 entries)
Library Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (81 entries)
Lemma Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (2533 entries)
Constructor Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (175 entries)
Inductive Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (77 entries)
Projection Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (200 entries)
Section Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (303 entries)
Instance Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (190 entries)
Abbreviation Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (12 entries)
Definition Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (1271 entries)
Record Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (76 entries)

Global Index

A

acceptor_surj [instance, in VLSM.Examples.Paxos.Paxos]
acceptor_inj [instance, in VLSM.Examples.Paxos.Paxos]
acceptor_ix [constructor, in VLSM.Examples.Paxos.Paxos]
acceptor_votes_safe_prop [definition, in VLSM.Examples.Paxos.Voting]
acceptor_no_conflict_prop [definition, in VLSM.Examples.Paxos.Voting]
acceptor_vlsm [definition, in VLSM.Examples.Paxos.Voting]
acceptor_machine [definition, in VLSM.Examples.Paxos.Voting]
acceptor_transition [definition, in VLSM.Examples.Paxos.Voting]
acceptor_valid [definition, in VLSM.Examples.Paxos.Voting]
acceptor_initial_state_prop [definition, in VLSM.Examples.Paxos.Voting]
acceptor_initial [definition, in VLSM.Examples.Paxos.Voting]
acceptor_type [definition, in VLSM.Examples.Paxos.Voting]
acceptor_label_dec [instance, in VLSM.Examples.Paxos.Voting]
acceptor_label_sind [definition, in VLSM.Examples.Paxos.Voting]
acceptor_label_rec [definition, in VLSM.Examples.Paxos.Voting]
acceptor_label_ind [definition, in VLSM.Examples.Paxos.Voting]
acceptor_label_rect [definition, in VLSM.Examples.Paxos.Voting]
acceptor_label [inductive, in VLSM.Examples.Paxos.Voting]
acceptor_state [record, in VLSM.Examples.Paxos.Voting]
addObservation [definition, in VLSM.Examples.ELMO.BaseELMO]
addObservations [definition, in VLSM.Examples.ELMO.BaseELMO]
addObservationsToMessage [definition, in VLSM.Examples.ELMO.BaseELMO]
addObservations_app [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservations_nil [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservationToMessage [definition, in VLSM.Examples.ELMO.BaseELMO]
addObservation_cons [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservation_acyclic [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservation_inj [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservation_size [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservation_both_ind [definition, in VLSM.Examples.ELMO.BaseELMO]
addObservation_rect [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservation_rec [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservation_ind [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservation' [definition, in VLSM.Examples.ELMO.BaseELMO]
addObservation'_rect [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservation'_rec [lemma, in VLSM.Examples.ELMO.BaseELMO]
addObservation'_ind [lemma, in VLSM.Examples.ELMO.BaseELMO]
add_remove_inverse [lemma, in VLSM.Lib.ListSetExtras]
add_fsfun_succ_r [lemma, in VLSM.Lib.FinSuppFn]
add_fsfun_succ_l [lemma, in VLSM.Lib.FinSuppFn]
add_fsfun_assoc [instance, in VLSM.Lib.FinSuppFn]
add_fsfun_right_id [instance, in VLSM.Lib.FinSuppFn]
add_fsfun_left_id [instance, in VLSM.Lib.FinSuppFn]
add_fsfun_comm [instance, in VLSM.Lib.FinSuppFn]
add_fsfun_proper [instance, in VLSM.Lib.FinSuppFn]
add_fsfun_rew [lemma, in VLSM.Lib.FinSuppFn]
add_fsfun [definition, in VLSM.Lib.FinSuppFn]
add_fsfun_supp_all [lemma, in VLSM.Lib.FinSuppFn]
add_fsfun_supp [definition, in VLSM.Lib.FinSuppFn]
add_in_sorted_list_existing [lemma, in VLSM.Lib.SortedLists]
add_in_sorted_list_sorted [lemma, in VLSM.Lib.SortedLists]
add_in_sorted_list_tail [lemma, in VLSM.Lib.SortedLists]
add_in_sorted_list_head [lemma, in VLSM.Lib.SortedLists]
add_in_sorted_list_iff [lemma, in VLSM.Lib.SortedLists]
add_in_sorted_list_in_rev [lemma, in VLSM.Lib.SortedLists]
add_in_sorted_list_in [lemma, in VLSM.Lib.SortedLists]
add_in_sorted_list_no_empty [lemma, in VLSM.Lib.SortedLists]
add_in_sorted_list_fn [definition, in VLSM.Lib.SortedLists]
adr [projection, in VLSM.Examples.ELMO.BaseELMO]
adrs_eq [projection, in VLSM.Examples.ELMO.UMO]
adr_neq_no_self_equiv [lemma, in VLSM.Examples.ELMO.ELMO]
adr_of_sentMessages [lemma, in VLSM.Examples.ELMO.UMO]
adr_of_valid_state [lemma, in VLSM.Examples.ELMO.UMO]
adr_of_constrained_state [lemma, in VLSM.Examples.ELMO.UMO]
adr_of_valid_trace [lemma, in VLSM.Examples.ELMO.UMO]
adr_of_constrained_trace [lemma, in VLSM.Examples.ELMO.UMO]
adr_of_states_within_valid_trace [lemma, in VLSM.Examples.ELMO.UMO]
adr_of_states_within_constrained_trace [lemma, in VLSM.Examples.ELMO.UMO]
adr2idx [definition, in VLSM.Examples.ELMO.BaseELMO]
adr2idx_idx [lemma, in VLSM.Examples.ELMO.BaseELMO]
AllELMO [library]
AllOrFin [inductive, in VLSM.Examples.Paxos.Paxos]
AllOrFin_eq_dec [instance, in VLSM.Examples.Paxos.Paxos]
allQuorum [definition, in VLSM.Examples.Paxos.Voting]
all_dependencies_emittable_from_dependencies_prop [definition, in VLSM.Core.MessageDependencies]
all_pre_traces_to_valid_state_are_valid_free [lemma, in VLSM.Core.Equivocation]
all_traces_have_message_prop [definition, in VLSM.Core.Equivocation]
all_intermediary_transitions_are_receive [lemma, in VLSM.Examples.ELMO.ELMO]
all_equivocating_replayed_trace_from [definition, in VLSM.Core.Equivocators.SimulatingFree]
all_latest_composite_observed_before_send [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
all_latest_composite_observed_before_send_one_step [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
alternate_byzantine_trace_prop [definition, in VLSM.Core.ByzantineTraces]
alt_proj_option_valid_message [lemma, in VLSM.Core.ByzantineTraces]
alt_option_valid_message [lemma, in VLSM.Core.ByzantineTraces]
alt_preloaded_with_all_messages_incl [lemma, in VLSM.Core.ByzantineTraces]
AMap_FinMapDom [instance, in VLSM.Examples.Paxos.Paxos]
andA [definition, in VLSM.Lib.TraceProperties]
andA_AppendT [lemma, in VLSM.Lib.TraceProperties]
AndT [definition, in VLSM.Lib.TraceProperties]
andT_setoidT [lemma, in VLSM.Lib.TraceProperties]
and_proper_l [lemma, in VLSM.Lib.Preamble]
AnnotatedVLSM [library]
annotated_projection_validator_prop_alt_iff [lemma, in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_is_projection [definition, in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_transition_consistency [lemma, in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_initial_lift [lemma, in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_state_lift [lemma, in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_label_lift [lemma, in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_transition_None [lemma, in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator [definition, in VLSM.Core.AnnotatedVLSM]
annotated_composite_preloaded_projection [lemma, in VLSM.Core.AnnotatedVLSM]
annotated_projection_validator_prop_alt [definition, in VLSM.Core.AnnotatedVLSM]
annotated_composite_state_lift [definition, in VLSM.Core.AnnotatedVLSM]
annotated_composite_label_lift [definition, in VLSM.Core.AnnotatedVLSM]
annotated_message_validator_prop [definition, in VLSM.Core.AnnotatedVLSM]
annotated_projection_validator_prop [definition, in VLSM.Core.AnnotatedVLSM]
annotated_composite_state_project [definition, in VLSM.Core.AnnotatedVLSM]
annotated_composite_label_project [definition, in VLSM.Core.AnnotatedVLSM]
annotated_vlsm [definition, in VLSM.Core.AnnotatedVLSM]
annotated_vlsm_machine [definition, in VLSM.Core.AnnotatedVLSM]
annotated_transition [definition, in VLSM.Core.AnnotatedVLSM]
annotated_valid [definition, in VLSM.Core.AnnotatedVLSM]
annotated_initial_state_prop_inhabited [instance, in VLSM.Core.AnnotatedVLSM]
annotated_initial_state_prop [definition, in VLSM.Core.AnnotatedVLSM]
annotated_type [definition, in VLSM.Core.AnnotatedVLSM]
annotated_state [record, in VLSM.Core.AnnotatedVLSM]
annotated_limited_incl_constrained_limited [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
annotated_free_input_valid_projection [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
annotate_trace_project [lemma, in VLSM.Core.AnnotatedVLSM]
annotate_trace_last_original_state [lemma, in VLSM.Core.AnnotatedVLSM]
annotate_trace [definition, in VLSM.Core.AnnotatedVLSM]
annotate_trace_from_last_original_state [lemma, in VLSM.Core.AnnotatedVLSM]
annotate_trace_from_app [lemma, in VLSM.Core.AnnotatedVLSM]
annotate_trace_from_unroll [lemma, in VLSM.Core.AnnotatedVLSM]
annotate_trace_from [definition, in VLSM.Core.AnnotatedVLSM]
annotate_trace_item_project [lemma, in VLSM.Core.AnnotatedVLSM]
annotate_trace_item [definition, in VLSM.Core.AnnotatedVLSM]
any_value [constructor, in VLSM.Examples.Paxos.Paxos]
any_message_is_valid_in_preloaded [lemma, in VLSM.Core.PreloadedVLSM]
AppendT [definition, in VLSM.Lib.TraceProperties]
appendT [definition, in VLSM.Lib.TraceProperties]
AppendT_implies_InfiniteT [lemma, in VLSM.Lib.TraceProperties]
AppendT_FiniteT_idem [lemma, in VLSM.Lib.TraceProperties]
AppendT_ttA_implies [lemma, in VLSM.Lib.TraceProperties]
AppendT_Singleton [lemma, in VLSM.Lib.TraceProperties]
appendT_singletonT [lemma, in VLSM.Lib.TraceProperties]
AppendT_andA [lemma, in VLSM.Lib.TraceProperties]
AppendT_ttA [lemma, in VLSM.Lib.TraceProperties]
AppendT_cont_R [lemma, in VLSM.Lib.TraceProperties]
AppendT_cont_L [lemma, in VLSM.Lib.TraceProperties]
AppendT_cont [lemma, in VLSM.Lib.TraceProperties]
AppendT_assoc_L [lemma, in VLSM.Lib.TraceProperties]
appendT_finalTA [lemma, in VLSM.Lib.TraceProperties]
appendT_assoc_L [lemma, in VLSM.Lib.TraceProperties]
appendT_setoidT [lemma, in VLSM.Lib.TraceProperties]
appendT_cont_R [lemma, in VLSM.Lib.TraceProperties]
appendT_cont_L [lemma, in VLSM.Lib.TraceProperties]
appendT_cont [lemma, in VLSM.Lib.TraceProperties]
AppendT_assoc_R [lemma, in VLSM.Lib.TraceClassicalProperties]
appendT_assoc_R [lemma, in VLSM.Lib.TraceClassicalProperties]
apply_plan_last_valid [lemma, in VLSM.Core.Plans]
apply_plan_last [definition, in VLSM.Core.Plans]
apply_plan_app [definition, in VLSM.Core.Plans]
apply_plan [definition, in VLSM.Core.Plans]
app_cons [lemma, in VLSM.Lib.ListExtras]
ASet [abbreviation, in VLSM.Examples.Paxos.Paxos]
ASet_Dom [instance, in VLSM.Examples.Paxos.Paxos]
asymmetric_minimal_among_iff [lemma, in VLSM.Lib.Preamble]
at_least_one_send_not_previously_observed [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
A_send_2b [constructor, in VLSM.Examples.Paxos.Paxos]
A_send_1b [constructor, in VLSM.Examples.Paxos.Paxos]


B

Ballot [definition, in VLSM.Examples.Paxos.Voting]
ballots_with_votes [definition, in VLSM.Examples.Paxos.Voting]
ballot_state_empty [instance, in VLSM.Examples.Paxos.Paxos]
ballot_state [record, in VLSM.Examples.Paxos.Paxos]
ballot_no_conflict_prop [definition, in VLSM.Examples.Paxos.Voting]
ballot_chose_in_proposals [lemma, in VLSM.Examples.Paxos.Voting]
ballot_proposals [definition, in VLSM.Examples.Paxos.Voting]
ballot_chose_dec [instance, in VLSM.Examples.Paxos.Voting]
ballot_chose_inrange [lemma, in VLSM.Examples.Paxos.Voting]
ballot_chose [definition, in VLSM.Examples.Paxos.Voting]
Ballot_peano_ind [definition, in VLSM.Examples.Paxos.Voting]
Ballot_lt_wf [lemma, in VLSM.Examples.Paxos.Voting]
Ballot_to_Z [definition, in VLSM.Examples.Paxos.Voting]
Ballot' [definition, in VLSM.Examples.Paxos.Voting]
Ballot'_Zeq_iff [lemma, in VLSM.Examples.Paxos.Voting]
Ballot'_to_Z [definition, in VLSM.Examples.Paxos.Voting]
BaseELMO [library]
BasicEquivocation [record, in VLSM.Core.Equivocation]
basic_VLSM_strong_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
basic_VLSM_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
basic_VLSM_weak_embedding_strengthen [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
basic_VLSM_weak_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
basic_equivocation_state_validators_comprehensive_prop [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
basic_limited_equivocation_composite_vlsm [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
basic_limited_equivocation_constraint [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
basic_VLSM_strong_projection [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_projection [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_weak_projection_strengthen [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_weak_projection [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_projection_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_projection_finite_valid_trace_init_to [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_projection_type [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_strong_incl [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
basic_VLSM_incl [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
basic_VLSM_stuttering_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_weak_stuttering_embedding_strengthen [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_weak_stuttering_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_stuttering_embedding_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_stuttering_embedding_finite_valid_trace_init_to [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_stuttering_embedding_type [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_incl_preloaded_with [lemma, in VLSM.Core.PreloadedVLSM]
basic_VLSM_incl_preloaded [lemma, in VLSM.Core.PreloadedVLSM]
basic_VLSM_embedding_preloaded_with [lemma, in VLSM.Core.PreloadedVLSM]
basic_VLSM_embedding_preloaded [lemma, in VLSM.Core.PreloadedVLSM]
basic_VLSM_projection_preloaded_with [lemma, in VLSM.Core.PreloadedVLSM]
basic_VLSM_projection_type_preloaded_with [lemma, in VLSM.Core.PreloadedVLSM]
basic_VLSM_projection_preloaded [lemma, in VLSM.Core.PreloadedVLSM]
basic_VLSM_projection_type_preloaded [lemma, in VLSM.Core.PreloadedVLSM]
basic_projection_induces_friendliness [lemma, in VLSM.Core.Validator]
basic_weak_projection_transition_consistency_Some [lemma, in VLSM.Core.Validator]
Bempty [instance, in VLSM.Examples.Paxos.Voting]
Bfmap [instance, in VLSM.Examples.Paxos.Voting]
binary_free_composition [definition, in VLSM.Core.Composition]
binary_IM [definition, in VLSM.Core.Composition]
binary_index_inhabited [instance, in VLSM.Core.Composition]
binary_index_dec [instance, in VLSM.Core.Composition]
binary_index [definition, in VLSM.Core.Composition]
binary_free_composition_snd [definition, in VLSM.Core.ProjectionTraces]
binary_free_composition_fst [definition, in VLSM.Core.ProjectionTraces]
BinOp [inductive, in VLSM.Examples.Tutorial.Formulas]
binop_state_proj [definition, in VLSM.Examples.Tutorial.Formulas]
BinOp_sind [definition, in VLSM.Examples.Tutorial.Formulas]
BinOp_ind [definition, in VLSM.Examples.Tutorial.Formulas]
binop_state_cast [definition, in VLSM.Examples.Tutorial.Formulas]
bin_op_iff [constructor, in VLSM.Examples.Tutorial.Formulas]
bin_op_impl [constructor, in VLSM.Examples.Tutorial.Formulas]
bin_op_disj [constructor, in VLSM.Examples.Tutorial.Formulas]
bin_op_conj [constructor, in VLSM.Examples.Tutorial.Formulas]
bisim [inductive, in VLSM.Lib.Traces]
bisim_hd [lemma, in VLSM.Lib.Traces]
bisim_trans [lemma, in VLSM.Lib.Traces]
bisim_sym [lemma, in VLSM.Lib.Traces]
bisim_refl [lemma, in VLSM.Lib.Traces]
bisim_cons [constructor, in VLSM.Lib.Traces]
bisim_nil [constructor, in VLSM.Lib.Traces]
Blookup [instance, in VLSM.Examples.Paxos.Voting]
Bmap [definition, in VLSM.Examples.Paxos.Voting]
Bmap_dom [instance, in VLSM.Examples.Paxos.Voting]
Bmap_eq_dec [instance, in VLSM.Examples.Paxos.Voting]
Bmerge [instance, in VLSM.Examples.Paxos.Voting]
Bomap [instance, in VLSM.Examples.Paxos.Voting]
bool_decision [instance, in VLSM.Lib.Preamble]
Bot [constructor, in VLSM.Examples.Tutorial.Formulas]
bounded_stream_concat_map [definition, in VLSM.Lib.StreamFilters]
bounded_stream_map_option [definition, in VLSM.Lib.StreamFilters]
bounded_state_copies [definition, in VLSM.Core.Equivocators.Equivocators]
bounding [definition, in VLSM.Lib.Preamble]
Bpartial_alter [instance, in VLSM.Examples.Paxos.Voting]
Bset [abbreviation, in VLSM.Examples.Paxos.Voting]
build_trace_prefix_valid [definition, in VLSM.Core.VLSM]
ByzantineTraces [library]
byzantine_alt_byzantine_iff [lemma, in VLSM.Core.ByzantineTraces]
byzantine_alt_byzantine [lemma, in VLSM.Core.ByzantineTraces]
byzantine_preloaded_with_all_messages [lemma, in VLSM.Core.ByzantineTraces]
byzantine_trace_prop [definition, in VLSM.Core.ByzantineTraces]
byzantine_message [definition, in VLSM.Core.PreloadedVLSM]
byzantine_message_prop [definition, in VLSM.Core.PreloadedVLSM]


C

calculate_safe_values_some_ok [lemma, in VLSM.Examples.Paxos.Paxos]
calculate_safe_values_any_ok [lemma, in VLSM.Examples.Paxos.Paxos]
calculate_safe_values [definition, in VLSM.Examples.Paxos.Paxos]
cancel_pi [instance, in VLSM.Examples.Paxos.Paxos]
cannot_resend_received_message_in_future [lemma, in VLSM.Core.Equivocation]
cannot_resend_message_stepwise_prop [definition, in VLSM.Core.Equivocation]
cannot_resend_message_stepwise_ELMO_component [lemma, in VLSM.Examples.ELMO.ELMO]
cannot_resend_message_stepwise_MO_component [lemma, in VLSM.Examples.ELMO.MO]
can_emit_with_more [lemma, in VLSM.Core.SubProjectionTraces]
can_emit_sub_projection [lemma, in VLSM.Core.SubProjectionTraces]
can_produce_has_been_sent [lemma, in VLSM.Core.Equivocation]
can_emit_has_trace [lemma, in VLSM.Core.VLSM]
can_emit_from_valid_trace [lemma, in VLSM.Core.VLSM]
can_produce_from_valid_trace [lemma, in VLSM.Core.VLSM]
can_emit_iff [lemma, in VLSM.Core.VLSM]
can_emit [definition, in VLSM.Core.VLSM]
can_produce_valid_iff [lemma, in VLSM.Core.VLSM]
can_produce_valid [lemma, in VLSM.Core.VLSM]
can_produce [definition, in VLSM.Core.VLSM]
can_emit_composite_project [lemma, in VLSM.Core.Composition]
can_emit_free_composite_project [lemma, in VLSM.Core.Composition]
can_emit_composite_free_lift [lemma, in VLSM.Core.Composition]
can_emit_projection [lemma, in VLSM.Core.EquivocationProjections]
can_emit_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
can_produce_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
cat_option_nth [lemma, in VLSM.Lib.ListExtras]
cat_option_app [lemma, in VLSM.Lib.ListExtras]
cat_option_length_le [lemma, in VLSM.Lib.ListExtras]
cat_option_length [lemma, in VLSM.Lib.ListExtras]
cat_option [definition, in VLSM.Lib.ListExtras]
cbq_blocks [lemma, in VLSM.Examples.Paxos.Voting]
cdobst_observed_m1 [projection, in VLSM.Core.MessageDependencies]
cdobst_output_m2 [projection, in VLSM.Core.MessageDependencies]
cdobst_transition [projection, in VLSM.Core.MessageDependencies]
channel_authentication_sender_safety [lemma, in VLSM.Core.Equivocation]
channel_authentication_prop [definition, in VLSM.Core.Equivocation]
channel_authenticated_message [definition, in VLSM.Core.Equivocation]
chbo_indirectly [constructor, in VLSM.Core.MessageDependencies]
chbo_directly [constructor, in VLSM.Core.MessageDependencies]
check_safe_at_okay [lemma, in VLSM.Examples.Paxos.Paxos]
check_quorum [lemma, in VLSM.Examples.Paxos.Voting]
ChildStatus [inductive, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ChildStatus_eq_dec [instance, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ChildStatus_sind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ChildStatus_rec [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ChildStatus_ind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ChildStatus_rect [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
choice_stable [lemma, in VLSM.Examples.Paxos.Voting]
choice_function [definition, in VLSM.Core.TraceableVLSM]
ChoosingWell [record, in VLSM.Core.TraceableVLSM]
choosing_well [definition, in VLSM.Core.TraceableVLSM]
choosing_well_position_exists [lemma, in VLSM.Core.TraceableVLSM]
chosen [definition, in VLSM.Examples.Paxos.Voting]
chosen_subsingleton [lemma, in VLSM.Examples.Paxos.Voting]
chosen_iff [lemma, in VLSM.Examples.Paxos.Voting]
chosen_by_ballot [definition, in VLSM.Examples.Paxos.Voting]
chosen_transition_preserves_P [definition, in VLSM.Core.TraceableVLSM]
clean [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
clsoi_observed [projection, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
clsoi_output [projection, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
clsoi_destructor [projection, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
coeqv_limited_equivocation_vlsm_has_been_sent [instance, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_projection_validator_prop_alt [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_message_validator_prop [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_projection_validator_prop [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_state_not_heavy [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_state_annotation_nodup [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_transition_state_annotation_incl [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_annotate_trace_with_equivocators [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_vlsm [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_constraint [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_composite_transition_message_equivocators [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_message_equivocators [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
combine_votesets [definition, in VLSM.Examples.Paxos.Paxos]
comparable [definition, in VLSM.Lib.Preamble]
comparable_dec [instance, in VLSM.Lib.Preamble]
comparable_reflexive [instance, in VLSM.Lib.Preamble]
comparable_symmetric [instance, in VLSM.Lib.Preamble]
compare [projection, in VLSM.Lib.Preamble]
CompareAsymmetric [record, in VLSM.Lib.Preamble]
CompareAsymmetric [inductive, in VLSM.Lib.Preamble]
CompareReflexive [record, in VLSM.Lib.Preamble]
CompareReflexive [inductive, in VLSM.Lib.Preamble]
CompareStrictOrder [record, in VLSM.Lib.Preamble]
CompareStrictOrder_list_compare [instance, in VLSM.Lib.Preamble]
CompareStrictOrder_pair_compare [lemma, in VLSM.Lib.Preamble]
CompareStrictOrder_option_compare [lemma, in VLSM.Lib.Preamble]
CompareStrictOrder_dsig_compare [lemma, in VLSM.Lib.Preamble]
CompareTransitive [record, in VLSM.Lib.Preamble]
CompareTransitive [inductive, in VLSM.Lib.Preamble]
compare_strictorder [projection, in VLSM.Lib.Preamble]
compare_lt_asymmetric [lemma, in VLSM.Lib.Preamble]
compare_lt_strict_order [lemma, in VLSM.Lib.Preamble]
compare_lt_transitive [lemma, in VLSM.Lib.Preamble]
compare_lt_irreflexive [lemma, in VLSM.Lib.Preamble]
compare_lt_dec [instance, in VLSM.Lib.Preamble]
compare_lt [definition, in VLSM.Lib.Preamble]
compare_asymmetric_intro [instance, in VLSM.Lib.Preamble]
compare_asymmetric' [lemma, in VLSM.Lib.Preamble]
compare_asymmetric [projection, in VLSM.Lib.Preamble]
compare_asymmetric [constructor, in VLSM.Lib.Preamble]
compare_eq_dec [instance, in VLSM.Lib.Preamble]
compare_transitive [projection, in VLSM.Lib.Preamble]
compare_transitive [constructor, in VLSM.Lib.Preamble]
compare_eq_refl [lemma, in VLSM.Lib.Preamble]
compare_eq [projection, in VLSM.Lib.Preamble]
compare_eq [constructor, in VLSM.Lib.Preamble]
complete_trace_prop [definition, in VLSM.Core.VLSM]
complete_suffix_empty [lemma, in VLSM.Lib.ListExtras]
complete_suffix_correct [lemma, in VLSM.Lib.ListExtras]
complete_suffix_some [definition, in VLSM.Lib.ListExtras]
complete_suffix [definition, in VLSM.Lib.ListExtras]
complete_prefix_correct [lemma, in VLSM.Lib.ListExtras]
complete_prefix_empty [lemma, in VLSM.Lib.ListExtras]
complete_prefix_none [definition, in VLSM.Lib.ListExtras]
complete_prefix_some [definition, in VLSM.Lib.ListExtras]
complete_prefix [definition, in VLSM.Lib.ListExtras]
components_23 [definition, in VLSM.Examples.Tutorial.Multiply]
component_projection_validator_prop_primes [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
component_signed_message [definition, in VLSM.Core.Equivocation]
component_reflects_composite_messages_step_update [lemma, in VLSM.Examples.ELMO.ELMO]
component_sees_equivocators [projection, in VLSM.Examples.ELMO.ELMO]
component_sees_messages [projection, in VLSM.Examples.ELMO.ELMO]
component_reflects_composite [record, in VLSM.Examples.ELMO.ELMO]
component_reflects_composite_equivocators [definition, in VLSM.Examples.ELMO.ELMO]
component_reflects_composite_messages [definition, in VLSM.Examples.ELMO.ELMO]
component_invariant_muddy [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
component_invariant_clean [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
component_invariant_undecided [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
component_projection_validator_constraint_subsumption [lemma, in VLSM.Core.ProjectionTraces]
component_projection_validator_is_message_validator [lemma, in VLSM.Core.ProjectionTraces]
component_message_validator_prop [definition, in VLSM.Core.ProjectionTraces]
component_projection_validator_prop_is_induced [lemma, in VLSM.Core.ProjectionTraces]
component_projection_validator_prop [definition, in VLSM.Core.ProjectionTraces]
component_projection_to_preloaded [lemma, in VLSM.Core.ProjectionTraces]
component_projection [lemma, in VLSM.Core.Validator]
component_transition_projection_Some [lemma, in VLSM.Core.Validator]
component_transition_projection_None [lemma, in VLSM.Core.Validator]
component_state_projection_lift [lemma, in VLSM.Core.Validator]
component_label_projection_lift [lemma, in VLSM.Core.Validator]
CompositeHasBeenObserved [inductive, in VLSM.Core.MessageDependencies]
CompositeHasBeenObserved_dec [instance, in VLSM.Core.MessageDependencies]
CompositeHasBeenObserved_step_update [lemma, in VLSM.Core.MessageDependencies]
CompositeHasBeenObserved_sind [definition, in VLSM.Core.MessageDependencies]
CompositeHasBeenObserved_ind [definition, in VLSM.Core.MessageDependencies]
CompositeLatestSentObservedIn [record, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthNotSend [inductive, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthNotSend_sind [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthNotSend_ind [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthSentNotObserved [inductive, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthSentNotObserved_sind [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthSentNotObserved_ind [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeObservedBeforeSendTransition [record, in VLSM.Core.MessageDependencies]
composite_observed_before_send_subsumes_msg_dep_rel [lemma, in VLSM.Core.MessageDependencies]
composite_observed_before_send_iff [lemma, in VLSM.Core.MessageDependencies]
composite_ObservedBeforeSendTransition_project [lemma, in VLSM.Core.MessageDependencies]
composite_observed_before_send_lift [lemma, in VLSM.Core.MessageDependencies]
composite_ObservedBeforeSendTransition_lift [lemma, in VLSM.Core.MessageDependencies]
composite_observed_before_send [definition, in VLSM.Core.MessageDependencies]
composite_HasBeenObserved_iff [lemma, in VLSM.Core.MessageDependencies]
composite_HasBeenObserved_lift [lemma, in VLSM.Core.MessageDependencies]
composite_message_dependencies [instance, in VLSM.Core.MessageDependencies]
composite_equivocators_initial_state_project [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
composite_constraint [definition, in VLSM.Core.Equivocators.LimitedStateEquivocation]
composite_trace_sub_projection_lift [lemma, in VLSM.Core.SubProjectionTraces]
composite_state_sub_projection_lift [lemma, in VLSM.Core.SubProjectionTraces]
composite_label_sub_projection_option_lift [lemma, in VLSM.Core.SubProjectionTraces]
composite_label_sub_projection_option [definition, in VLSM.Core.SubProjectionTraces]
composite_state_sub_projection_lift_to [lemma, in VLSM.Core.SubProjectionTraces]
composite_label_sub_projection [definition, in VLSM.Core.SubProjectionTraces]
composite_initial_state_sub_projection [lemma, in VLSM.Core.SubProjectionTraces]
composite_state_sub_projection [definition, in VLSM.Core.SubProjectionTraces]
composite_state_pos [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
composite_observed_messages_set [definition, in VLSM.Core.Equivocation]
composite_sent_messages_set [definition, in VLSM.Core.Equivocation]
composite_received_messages_set [definition, in VLSM.Core.Equivocation]
composite_computable_messages_oracle [lemma, in VLSM.Core.Equivocation]
composite_oracle_set [definition, in VLSM.Core.Equivocation]
composite_has_been_directly_observed_lift [lemma, in VLSM.Core.Equivocation]
composite_has_been_directly_observed_from_component [lemma, in VLSM.Core.Equivocation]
composite_has_been_directly_observed_free_iff [lemma, in VLSM.Core.Equivocation]
composite_has_been_directly_observed_sent_received_iff [lemma, in VLSM.Core.Equivocation]
composite_directly_observed_valid [lemma, in VLSM.Core.Equivocation]
composite_sent_valid [lemma, in VLSM.Core.Equivocation]
composite_emitted_by_validator_have_sender [lemma, in VLSM.Core.Equivocation]
composite_no_initial_valid_messages_have_sender [lemma, in VLSM.Core.Equivocation]
composite_no_initial_valid_messages_emitted_by_sender [lemma, in VLSM.Core.Equivocation]
composite_has_been_directly_observed_stepwise_props [lemma, in VLSM.Core.Equivocation]
composite_has_been_directly_observed_dec [lemma, in VLSM.Core.Equivocation]
composite_has_been_directly_observed [definition, in VLSM.Core.Equivocation]
composite_has_been_received_dec [lemma, in VLSM.Core.Equivocation]
composite_has_been_received [definition, in VLSM.Core.Equivocation]
composite_proper_sent [lemma, in VLSM.Core.Equivocation]
composite_has_been_sent_dec [lemma, in VLSM.Core.Equivocation]
composite_has_been_sent [definition, in VLSM.Core.Equivocation]
composite_stepwise_props [lemma, in VLSM.Core.Equivocation]
composite_oracle [definition, in VLSM.Core.Equivocation]
composite_message_selector [definition, in VLSM.Core.Equivocation]
composite_validator_byzantine_traces_are_not_byzantine [lemma, in VLSM.Core.ByzantineTraces]
composite_state_23_sum [definition, in VLSM.Examples.Tutorial.Multiply]
composite_state_to_trace_P_monotonic [lemma, in VLSM.Core.TraceableVLSM]
composite_state_to_trace [definition, in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_preserves_not_in_indices_initial [lemma, in VLSM.Core.TraceableVLSM]
composite_state_destructor_head_reachable [lemma, in VLSM.Core.TraceableVLSM]
composite_state_destructor_lookup_reachable [lemma, in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_size [lemma, in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_reflects_initiality [lemma, in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_initial [lemma, in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_state_update [lemma, in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_index [lemma, in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_transition [lemma, in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_destination [lemma, in VLSM.Core.TraceableVLSM]
composite_state_update_size_monotone [lemma, in VLSM.Core.TraceableVLSM]
composite_state_size [definition, in VLSM.Core.TraceableVLSM]
composite_state_destructor [definition, in VLSM.Core.TraceableVLSM]
composite_latest_sent_observed_in_chain [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_sent_observed_in [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_sent_observed_in_before_send [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_sent_not_observed_dec [instance, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_sent_not_observed_prop [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_nth_sent_not_observed [constructor, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_not_send_dec [instance, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_not_send_prop [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_nth_not_send [constructor, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_valid_transitions_from_to_trace [lemma, in VLSM.Core.Composition]
composite_valid_transitions_from_to_sind [definition, in VLSM.Core.Composition]
composite_valid_transitions_from_to_ind [definition, in VLSM.Core.Composition]
composite_valid_transitions_from_to [inductive, in VLSM.Core.Composition]
composite_valid_transition_projection_inv [lemma, in VLSM.Core.Composition]
composite_valid_transition_projection [lemma, in VLSM.Core.Composition]
composite_valid_transition_next_reachable_iff [lemma, in VLSM.Core.Composition]
composite_valid_transition_future [definition, in VLSM.Core.Composition]
composite_valid_transition_next [definition, in VLSM.Core.Composition]
composite_valid_transition_reachable_iff [lemma, in VLSM.Core.Composition]
composite_valid_transition_item [definition, in VLSM.Core.Composition]
composite_valid_transition [definition, in VLSM.Core.Composition]
composite_decidable_initial_message [lemma, in VLSM.Core.Composition]
composite_transition_project_active [lemma, in VLSM.Core.Composition]
composite_constrained_state_project [lemma, in VLSM.Core.Composition]
composite_constrained_state_prop [definition, in VLSM.Core.Composition]
composite_initial_state_prop_lift [lemma, in VLSM.Core.Composition]
composite_update_initial_state_with_initial [lemma, in VLSM.Core.Composition]
composite_transition_state_eq [lemma, in VLSM.Core.Composition]
composite_transition_state_neq [lemma, in VLSM.Core.Composition]
composite_vlsm [definition, in VLSM.Core.Composition]
composite_trace_to_plan [definition, in VLSM.Core.Composition]
composite_apply_plan_last [definition, in VLSM.Core.Composition]
composite_apply_plan_app [definition, in VLSM.Core.Composition]
composite_apply_plan [definition, in VLSM.Core.Composition]
composite_plan [definition, in VLSM.Core.Composition]
composite_plan_item [definition, in VLSM.Core.Composition]
composite_transition_item [definition, in VLSM.Core.Composition]
composite_valid [definition, in VLSM.Core.Composition]
composite_transition [definition, in VLSM.Core.Composition]
composite_initial_message_prop [definition, in VLSM.Core.Composition]
composite_initial_state_inh [instance, in VLSM.Core.Composition]
composite_s0 [definition, in VLSM.Core.Composition]
composite_initial_state [definition, in VLSM.Core.Composition]
composite_initial_state_prop [definition, in VLSM.Core.Composition]
composite_type [definition, in VLSM.Core.Composition]
composite_label [definition, in VLSM.Core.Composition]
composite_state [definition, in VLSM.Core.Composition]
composite_no_equivocation_vlsm_with_preloaded [definition, in VLSM.Core.Equivocation.NoEquivocation]
composite_directly_observed_were_sent_invariant [lemma, in VLSM.Core.Equivocation.NoEquivocation]
composite_directly_observed_were_sent [definition, in VLSM.Core.Equivocation.NoEquivocation]
composite_no_equivocations [definition, in VLSM.Core.Equivocation.NoEquivocation]
composite_no_equivocations_except_from [definition, in VLSM.Core.Equivocation.NoEquivocation]
composite_initial_state_prop_not_None [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
composite_transition_no_sender_equivocators_weight [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
composite_valid_transitions_from_to_reflects_reachability [lemma, in VLSM.Core.HistoryVLSM]
composite_valid_transition_future_reflects_rechability [lemma, in VLSM.Core.HistoryVLSM]
composite_valid_transition_next_reflects_rechability [lemma, in VLSM.Core.HistoryVLSM]
composite_valid_transition_reflects_rechability [lemma, in VLSM.Core.HistoryVLSM]
composite_quasi_unique_transition_to_state [lemma, in VLSM.Core.HistoryVLSM]
composite_transition_item_projection_neq [lemma, in VLSM.Core.ProjectionTraces]
composite_transition_item_projection_iff [lemma, in VLSM.Core.ProjectionTraces]
composite_transition_item_projection [definition, in VLSM.Core.ProjectionTraces]
composite_transition_item_projection_from_eq [definition, in VLSM.Core.ProjectionTraces]
composite_vlsm_induced_projection_composition_iff [lemma, in VLSM.Core.ProjectionTraces]
composite_vlsm_induced_projection_is_projection [lemma, in VLSM.Core.ProjectionTraces]
composite_vlsm_induced_projection [definition, in VLSM.Core.ProjectionTraces]
composite_vlsm_induced_projection_validator_iff [lemma, in VLSM.Core.Validator]
composite_vlsm_induced_projection_validator [definition, in VLSM.Core.Validator]
composite_vlsm_induced_projection_validator_machine [definition, in VLSM.Core.Validator]
composite_vlsm_induced_projection_valid [definition, in VLSM.Core.Validator]
composite_projection_induced_validator_is_projection [lemma, in VLSM.Core.Validator]
composite_project_label_eq [lemma, in VLSM.Core.Validator]
composite_vlsm_induced_validator [definition, in VLSM.Core.Validator]
composite_project_label [definition, in VLSM.Core.Validator]
composite_rec_observation [definition, in VLSM.Examples.ELMO.MO]
Composition [library]
composition_valid_message_ge_2 [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
composition_valid_messages_powers_of_mults [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
composition_valid_messages_powers_of_mults_left [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
composition_valid_messages_powers_of_mults_right [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
composition_constraint [abbreviation, in VLSM.Examples.Paxos.Voting]
composition_constraint [definition, in VLSM.Core.VLSM]
composition_23_3_initial [lemma, in VLSM.Examples.Tutorial.Multiply]
composition_23_2_initial [lemma, in VLSM.Examples.Tutorial.Multiply]
ComputableReceivedMessages [record, in VLSM.Core.Equivocation]
ComputableReceivedMessages_HasBeenReceivedCapability [instance, in VLSM.Core.Equivocation]
ComputableReceivedMessages_has_been_sent [definition, in VLSM.Core.Equivocation]
ComputableReceivedMessages_initial_state_empty [lemma, in VLSM.Core.Equivocation]
ComputableReceivedMessages_ELMO_component [instance, in VLSM.Examples.ELMO.ELMO]
ComputableSentMessages [record, in VLSM.Core.Equivocation]
ComputableSentMessages_HasBeenSentCapability [instance, in VLSM.Core.Equivocation]
ComputableSentMessages_has_been_sent [definition, in VLSM.Core.Equivocation]
ComputableSentMessages_initial_state_empty [lemma, in VLSM.Core.Equivocation]
ComputableSentMessages_ELMO_component [instance, in VLSM.Examples.ELMO.ELMO]
computable_received_message_has_been_sent_dec [instance, in VLSM.Core.Equivocation]
computable_sent_message_has_been_sent_dec [instance, in VLSM.Core.Equivocation]
computable_messages_oracle_rel_dec [definition, in VLSM.Core.Equivocation]
computable_messages_oracle_rel [definition, in VLSM.Core.Equivocation]
computable_messages_oracle_initial_state_empty [lemma, in VLSM.Core.Equivocation]
computable_messages_oracle [definition, in VLSM.Core.Equivocation]
com_computable_oracle [lemma, in VLSM.Core.Equivocation]
Conj [constructor, in VLSM.Examples.Tutorial.Formulas]
Consensus [library]
consensus_blocking_quorum [definition, in VLSM.Examples.Paxos.Voting]
consensus_invariant [lemma, in VLSM.Examples.Paxos.Consensus]
consensus_vlsm [definition, in VLSM.Examples.Paxos.Consensus]
consensus_vlsm_machine [definition, in VLSM.Examples.Paxos.Consensus]
consensus_transition [definition, in VLSM.Examples.Paxos.Consensus]
consensus_valid [definition, in VLSM.Examples.Paxos.Consensus]
consensus_initial_message_prop [definition, in VLSM.Examples.Paxos.Consensus]
consensus_initial_state_prop [definition, in VLSM.Examples.Paxos.Consensus]
consensus_type [definition, in VLSM.Examples.Paxos.Consensus]
consensus_label [definition, in VLSM.Examples.Paxos.Consensus]
consensus_action_sind [definition, in VLSM.Examples.Paxos.Consensus]
consensus_action_rec [definition, in VLSM.Examples.Paxos.Consensus]
consensus_action_ind [definition, in VLSM.Examples.Paxos.Consensus]
consensus_action_rect [definition, in VLSM.Examples.Paxos.Consensus]
consensus_action [inductive, in VLSM.Examples.Paxos.Consensus]
consensus_message [definition, in VLSM.Examples.Paxos.Consensus]
consensus_state [definition, in VLSM.Examples.Paxos.Consensus]
consistency_from_valid_state_proj2 [lemma, in VLSM.Core.Equivocation]
consistent [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
consistent_valid_state_prop [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
consistent_finite_valid_trace_from_to [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ConstrainedVLSM [library]
constrained_transition_preserves_message_dependencies_full_node_condition [lemma, in VLSM.Core.MessageDependencies]
constrained_vlsm_HasBeenDirectlyObservedCapability [instance, in VLSM.Core.Equivocation]
constrained_vlsm_HasBeenReceivedCapability [instance, in VLSM.Core.Equivocation]
constrained_has_been_received_stepwise_props [lemma, in VLSM.Core.Equivocation]
constrained_vlsm_HasBeenSentCapability [instance, in VLSM.Core.Equivocation]
constrained_has_been_sent_stepwise_props [lemma, in VLSM.Core.Equivocation]
constrained_limited_to_annotated_limited_valid_message [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
constrained_limited_to_annotated_limited_valid_state [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
constrained_preloaded_incl [lemma, in VLSM.Core.ConstrainedVLSM]
constrained_preloaded_vlsm_incl_preloaded_with_all_messages [lemma, in VLSM.Core.ConstrainedVLSM]
constrained_preloaded_comm [lemma, in VLSM.Core.ConstrainedVLSM]
constrained_vlsm [definition, in VLSM.Core.ConstrainedVLSM]
constrained_vlsm_machine [definition, in VLSM.Core.ConstrainedVLSM]
constrained_vlsm_type [definition, in VLSM.Core.ConstrainedVLSM]
constrained_message_prop_direct_equiv [lemma, in VLSM.Core.PreloadedVLSM]
constrained_message_prop_direct [definition, in VLSM.Core.PreloadedVLSM]
constrained_state_prop_direct_equiv [lemma, in VLSM.Core.PreloadedVLSM]
constrained_state_prop_direct [definition, in VLSM.Core.PreloadedVLSM]
constrained_transitions_from_to_sind [definition, in VLSM.Core.PreloadedVLSM]
constrained_transitions_from_to_ind [definition, in VLSM.Core.PreloadedVLSM]
constrained_transitions_from_to [inductive, in VLSM.Core.PreloadedVLSM]
constrained_state_message_prop [definition, in VLSM.Core.PreloadedVLSM]
constrained_message_prop [definition, in VLSM.Core.PreloadedVLSM]
constrained_state_prop [definition, in VLSM.Core.PreloadedVLSM]
constrained_trace_prop [definition, in VLSM.Core.PreloadedVLSM]
constrained_trace_from_prop [definition, in VLSM.Core.PreloadedVLSM]
constrained_state_prop_state_update_init [lemma, in VLSM.Examples.ELMO.UMO]
constrained_state_prop_addObservations_inv [lemma, in VLSM.Examples.ELMO.UMO]
constrained_state_prop_addObservation_inv [lemma, in VLSM.Examples.ELMO.UMO]
constrained_state_prop_Receive [lemma, in VLSM.Examples.ELMO.UMO]
constrained_state_prop_Send [lemma, in VLSM.Examples.ELMO.UMO]
constrained_state_contains_unique_constrained_trace [lemma, in VLSM.Examples.ELMO.UMO]
constrained_state_contains_unique_constrained_trace [lemma, in VLSM.Examples.ELMO.MO]
constrained_state_prop_MO_msg_valid [lemma, in VLSM.Examples.ELMO.MO]
constraint_subsumption_byzantine_message_prop [lemma, in VLSM.Core.ConstrainedVLSM]
constraint_subsumption_incl [lemma, in VLSM.Core.ConstrainedVLSM]
constraint_subsumption_valid_state_message_preservation [lemma, in VLSM.Core.ConstrainedVLSM]
constraint_subsumption_input_valid [lemma, in VLSM.Core.ConstrainedVLSM]
constraint_has_been_sent_prop [definition, in VLSM.Core.Equivocators.FixedEquivocation]
construct_equivocators_partial_trace_project [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
ContinueWith [constructor, in VLSM.Core.Equivocators.Equivocators]
corr_conflict_props [lemma, in VLSM.Examples.Paxos.Voting]
count_predecessors_zero [lemma, in VLSM.Lib.TopSort]
count_predecessors [definition, in VLSM.Lib.TopSort]
crm_computable_oracle [projection, in VLSM.Core.Equivocation]
csm_computable_oracle [projection, in VLSM.Core.Equivocation]
Ctauto [library]
ct_extend [constructor, in VLSM.Core.PreloadedVLSM]
ct_empty [constructor, in VLSM.Core.PreloadedVLSM]
cvtft_cons [constructor, in VLSM.Core.Composition]
cvtft_empty [constructor, in VLSM.Core.Composition]
cw_chosen_position_exists [projection, in VLSM.Core.TraceableVLSM]
cw_chosen_index_in_indices [projection, in VLSM.Core.TraceableVLSM]
cw_proof_independent [projection, in VLSM.Core.TraceableVLSM]


D

decidable_initial_messages_prop [definition, in VLSM.Core.VLSM]
Decided [constructor, in VLSM.Examples.Paxos.Consensus]
decide_eq [abbreviation, in VLSM.Lib.Preamble]
Decision_iff [lemma, in VLSM.Lib.Preamble]
Decision_MC_initial_state_prop [instance, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
dec_sig_sigT_eq_rev [lemma, in VLSM.Lib.Preamble]
dec_sig_sigT_eq [lemma, in VLSM.Lib.Preamble]
dec_sig_to_exist [lemma, in VLSM.Lib.Preamble]
default_composite_label [definition, in VLSM.Examples.Tutorial.Formulas]
default_label [definition, in VLSM.Examples.Tutorial.Formulas]
delta_nat_fsfun_neq [lemma, in VLSM.Lib.FinSuppFn]
delta_nat_fsfun_eq [lemma, in VLSM.Lib.FinSuppFn]
delta_nat_fsfun [definition, in VLSM.Lib.FinSuppFn]
dependencies_are_valid [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
dependencies_with_non_equivocating_senders_were_sent [definition, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
destination [projection, in VLSM.Core.VLSM]
destruct_equivocators_partial_trace_project [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
did_not_vote_in [definition, in VLSM.Examples.Paxos.Voting]
difference_size_ge_disjoint_case [lemma, in VLSM.Lib.FinSetExtras]
difference_size [lemma, in VLSM.Lib.FinSetExtras]
difference_with_intersection [lemma, in VLSM.Lib.FinSetExtras]
difference_size_subset [lemma, in VLSM.Lib.FinSetExtras]
difference_size_le_self [lemma, in VLSM.Lib.FinSetExtras]
diff_app_nodup [lemma, in VLSM.Lib.ListSetExtras]
directly_observed_valid [lemma, in VLSM.Core.Equivocation]
directly_observed_messages_set_iff [lemma, in VLSM.Core.Equivocation]
directly_observed_messages_set [definition, in VLSM.Core.Equivocation]
directly_observed_were_sent_invariant [lemma, in VLSM.Core.Equivocation.NoEquivocation]
directly_observed_were_sent_preserved [lemma, in VLSM.Core.Equivocation.NoEquivocation]
directly_observed_were_sent_initial [lemma, in VLSM.Core.Equivocation.NoEquivocation]
directly_observed_were_sent [definition, in VLSM.Core.Equivocation.NoEquivocation]
directly_observable_totally_orders_sent_messages_valid_state_prop [lemma, in VLSM.Examples.ELMO.UMO]
directly_observable_totally_orders_sent_messages_UMO_reachable [lemma, in VLSM.Examples.ELMO.UMO]
directly_observable_addObservations [lemma, in VLSM.Examples.ELMO.UMO]
directly_observable_addObservation [lemma, in VLSM.Examples.ELMO.UMO]
directly_observable_spec_other [lemma, in VLSM.Examples.ELMO.UMO]
directly_observable [definition, in VLSM.Examples.ELMO.UMO]
Disj [constructor, in VLSM.Examples.Tutorial.Formulas]
dobst_observed_m1 [projection, in VLSM.Core.MessageDependencies]
dobst_output_m2 [projection, in VLSM.Core.MessageDependencies]
dobst_transition [projection, in VLSM.Core.MessageDependencies]
doubling_valid_states [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_states_left [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_states_right [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_example_constrained_transition_not_valid [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_messages_powers_of_2 [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_messages_powers_of_2_left [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_messages_powers_of_2_right [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_states [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_states_left [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_states_right [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_messages [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_messages_right [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_messages_left [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_is_constrained [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_example_constrained_transition [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_example_valid_transition [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_trace2 [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_trace2_init [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_trace2_init_alt [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_trace2_init [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_2' [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_1' [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_last_state [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_init_last_state [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_init_first_state [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace2 [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_last_item [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_init [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_trace1 [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_trace1_alt [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_trace1 [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_3 [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_2 [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_1 [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_message_prop_4 [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_can_emit_4 [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_valid_message_prop_2 [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace1_last_state [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace1_first_state [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace1 [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace1_last_item [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_trace1_init [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_example_transition_1 [lemma, in VLSM.Examples.Tutorial.Multiply]
doubling_vlsm [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_machine [definition, in VLSM.Examples.Tutorial.Multiply]
doubling_transition [definition, in VLSM.Examples.Tutorial.Multiply]
drop_last [lemma, in VLSM.Lib.ListExtras]
drop_nth [lemma, in VLSM.Lib.ListExtras]
drop_lookup [lemma, in VLSM.Lib.ListExtras]
drop_tail_comm [lemma, in VLSM.Lib.ListExtras]
drop_S_tail [lemma, in VLSM.Lib.ListExtras]
dsig_NoDup_map [lemma, in VLSM.Lib.StdppExtras]
dsig_compare_transitive [lemma, in VLSM.Lib.Preamble]
dsig_compare_reflexive [lemma, in VLSM.Lib.Preamble]
dsig_compare [definition, in VLSM.Lib.Preamble]
DupT [definition, in VLSM.Lib.TraceProperties]
dupT [definition, in VLSM.Lib.TraceProperties]
DupT_AppendT_SingletonT_andA_DupT [lemma, in VLSM.Lib.TraceProperties]
DupT_andA_AppendT_SingletonT [lemma, in VLSM.Lib.TraceProperties]
DupT_andA_AppendT_SingletonT_DupT [lemma, in VLSM.Lib.TraceProperties]
DupT_cont [lemma, in VLSM.Lib.TraceProperties]
dupT_setoidT [lemma, in VLSM.Lib.TraceProperties]
dupT_cont [lemma, in VLSM.Lib.TraceProperties]
dupT_Tcons [lemma, in VLSM.Lib.TraceProperties]


E

ecr_valid_send [constructor, in VLSM.Examples.ELMO.ELMO]
ecr_valid_receive [constructor, in VLSM.Examples.ELMO.ELMO]
efdp [constructor, in VLSM.Core.MessageDependencies]
elements_subseteq [lemma, in VLSM.Lib.FinSetExtras]
element_of_filter [definition, in VLSM.Lib.ListExtras]
element_of_subseteq [definition, in VLSM.Lib.ListExtras]
elem_of_paxos_votes [lemma, in VLSM.Examples.Paxos.Paxos]
elem_of_leaders_messages [lemma, in VLSM.Examples.Paxos.Paxos]
elem_of_all_or_fin [instance, in VLSM.Examples.Paxos.Paxos]
elem_of_rec_obs_fn_1 [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_receivedAddresses [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_messages_addObservation [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_messages [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_receivedMessages_addObservation [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_receivedMessages [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_sentMessages_addObservation [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_sentMessages [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_map_filter_addObservation [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_addObservation [lemma, in VLSM.Examples.ELMO.BaseELMO]
elem_of_union_fold [lemma, in VLSM.Lib.ListSetExtras]
elem_of_add_fsfun [lemma, in VLSM.Lib.FinSuppFn]
elem_of_delta_nat_fsfun [lemma, in VLSM.Lib.FinSuppFn]
elem_of_succ_fsfun [lemma, in VLSM.Lib.FinSuppFn]
elem_of_update_fsfun [lemma, in VLSM.Lib.FinSuppFn]
elem_of_fin_supp [lemma, in VLSM.Lib.FinSuppFn]
elem_of_composite_observed_messages_set [lemma, in VLSM.Core.Equivocation]
elem_of_composite_sent_messages_set [lemma, in VLSM.Core.Equivocation]
elem_of_composite_received_messages_set [lemma, in VLSM.Core.Equivocation]
elem_of_composite_oracle_set [lemma, in VLSM.Core.Equivocation]
elem_of_sent_messages_set [lemma, in VLSM.Core.Equivocation]
elem_of_trace_in_futures_right [lemma, in VLSM.Core.VLSM]
elem_of_trace_in_futures_left [lemma, in VLSM.Core.VLSM]
elem_of_list_split_2 [lemma, in VLSM.Lib.StdppExtras]
elem_of_cat_option [lemma, in VLSM.Lib.StdppExtras]
elem_of_take [lemma, in VLSM.Lib.StdppExtras]
elem_of_pre_VLSM_projection_finite_trace_project [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
elem_of_mmap_insert [lemma, in VLSM.Lib.FinSetExtras]
elem_of_set_map_inj [lemma, in VLSM.Lib.FinSetExtras]
elem_of_VLSM_stuttering_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
elem_of_VLSM_weak_stuttering_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
elem_of_pre_VLSM_stuttering_embedding_finite_trace_project [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
elem_of_equivocating_senders_in_trace [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
elem_of_ne_list_dec [instance, in VLSM.Lib.NeList]
elem_of_ne_list [instance, in VLSM.Lib.NeList]
elem_of_stream_prefix [lemma, in VLSM.Lib.StreamExtras]
elem_of_list_prod [lemma, in VLSM.Lib.ListExtras]
elem_of_two_element_decompositions [lemma, in VLSM.Lib.ListExtras]
elem_of_one_element_decompositions [lemma, in VLSM.Lib.ListExtras]
elem_of_list_annotate [lemma, in VLSM.Lib.ListExtras]
elem_of_UMO_sentMessages [lemma, in VLSM.Examples.ELMO.UMO]
elem_of_UMO_reachable_obs_Send_split_2 [lemma, in VLSM.Examples.ELMO.UMO]
elem_of_obs_split_2 [lemma, in VLSM.Examples.ELMO.UMO]
elem_of_UMO_reachable_obs_Send_UMO_reachable [lemma, in VLSM.Examples.ELMO.UMO]
elem_of_UMO_reachable_obs_Send_split [lemma, in VLSM.Examples.ELMO.UMO]
elem_of_obs_split [lemma, in VLSM.Examples.ELMO.UMO]
ELMO [library]
ELMOCV_Send [constructor, in VLSM.Examples.ELMO.ELMO]
ELMOCV_Receive [constructor, in VLSM.Examples.ELMO.ELMO]
ELMOProtocol [definition, in VLSM.Examples.ELMO.ELMO]
ELMOProtocol_valid_transition_sind [definition, in VLSM.Examples.ELMO.ELMO]
ELMOProtocol_valid_transition_ind [definition, in VLSM.Examples.ELMO.ELMO]
ELMOProtocol_valid_transition [inductive, in VLSM.Examples.ELMO.ELMO]
ELMOTransitionMonotoneVLSM [instance, in VLSM.Examples.ELMO.ELMO]
ELMO_component_type [definition, in VLSM.Examples.ELMO.BaseELMO]
ELMO_components_validating [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_valid_states_only_receive_valid_messages [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_update_state_with_initial [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators_step_update_Receive_already_Observed [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators_step_update_Receive [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators_step_update_Send [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_state_to_minimal_equivocation_trace_valid [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_state_to_minimal_equivocation_equivocating_validators [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators_iff_simple_by_generic [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators_iff_msg_dep_equivocation [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_CHBO_in_messages [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators_iff_simple [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_state_to_minimal_equivocation_trace_equivocation_monotonic [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_channel_authentication_prop [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_tc_composite_observed_before_send_irreflexive [instance, in VLSM.Examples.ELMO.ELMO]
ELMO_composite_observed_before_send_sizeState_Proper [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_has_been_directly_observed_sizeState [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_state_to_minimal_equivocation_trace_reachable [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_state_to_minimal_equivocation_trace [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_valid_state_not_heavy [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_not_heavy_receive_observed_message [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_not_heavy_send_message [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_initial_state_not_heavy [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_initial_state_equivocating_validators [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_global_constraint [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators_are_Message_validators [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_not_heavy [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocation [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators_dec [instance, in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_latest_observation_Send_state [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_state_destructor_input_constrained_transition_item [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_state_destructor_initial [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_state_destructor [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_component_messages_of_constrained_trace [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_sizeState_of_constrained_trace_output [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_sentMessages_of_constrained_trace [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_receivedMessages_of_constrained_trace [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_elem_of_constrained_trace [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_input_constrained_transition_iff [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_RAM_transition_sind [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_component_RAM_transition_ind [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_component_RAM_transition [inductive, in VLSM.Examples.ELMO.ELMO]
ELMO_recv_valid_prefix [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_Send_inv [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_prefix [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_reachable_msg_valid_full [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_unique_traces [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_unique_trace_segments [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_transition_size [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_input_constrained_transition_inj [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_constrained_transition_output_not_initial [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_reachable_adr [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_no_self_equiv_reachable [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_full_node_reachable [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component_message_dependencies_full_node_condition [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_reachable_view [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_component [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_component_machine [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_alt_iff [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_alt [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_sind [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_ind [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid [inductive, in VLSM.Examples.ELMO.ELMO]
ELMO_mv_local_equivocation_limit_ok [projection, in VLSM.Examples.ELMO.ELMO]
ELMO_mv_msg_valid_full [projection, in VLSM.Examples.ELMO.ELMO]
ELMO_mv_no_self_equiv [projection, in VLSM.Examples.ELMO.ELMO]
ELMO_mv_full_node [projection, in VLSM.Examples.ELMO.ELMO]
ELMO_recv_valid [record, in VLSM.Examples.ELMO.ELMO]
ELMO_local_equivocation [instance, in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_has_sender [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_to_reach [lemma, in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_sind [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_ind [definition, in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full [inductive, in VLSM.Examples.ELMO.ELMO]
emit [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
emittable [definition, in VLSM.Core.Validators.FreeCompositionValidator]
emittable_from_dependencies_prop_iff [lemma, in VLSM.Core.MessageDependencies]
emittable_from_dependencies_prop [definition, in VLSM.Core.MessageDependencies]
Emittable_from_dependencies_prop_sind [definition, in VLSM.Core.MessageDependencies]
Emittable_from_dependencies_prop_ind [definition, in VLSM.Core.MessageDependencies]
Emittable_from_dependencies_prop [inductive, in VLSM.Core.MessageDependencies]
emitted_messages_are_valid_iff [lemma, in VLSM.Core.VLSM]
emitted_messages_are_valid [lemma, in VLSM.Core.VLSM]
emit_any_message_vlsm [definition, in VLSM.Core.ByzantineTraces]
emit_any_message_vlsm_machine [definition, in VLSM.Core.ByzantineTraces]
emit_any_message_vlsm_state_inh [instance, in VLSM.Core.ByzantineTraces]
emit_any_message_vlsm_s0 [definition, in VLSM.Core.ByzantineTraces]
emit_any_message_vlsm_type [definition, in VLSM.Core.ByzantineTraces]
emit_any_signed_message_vlsm [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
emit_any_signed_message_vlsm_machine [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
emit_any_signed_message_vlsm_state_inh [instance, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
emit_any_signed_message_vlsm_s0 [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
empty_fsfun_supp_inv [lemma, in VLSM.Lib.FinSuppFn]
empty_fsfun_supp [lemma, in VLSM.Lib.FinSuppFn]
empty_fsfun [definition, in VLSM.Lib.FinSuppFn]
empty_initial_message_or_final_output [definition, in VLSM.Core.VLSM]
empty_set [definition, in VLSM.Lib.StdppListSet]
empty_composition_no_valid_message [lemma, in VLSM.Core.Composition]
empty_composition_no_emit [lemma, in VLSM.Core.Composition]
empty_composition_no_initial_message [lemma, in VLSM.Core.Composition]
empty_composition_no_label [lemma, in VLSM.Core.Composition]
empty_composition_single_state [lemma, in VLSM.Core.Composition]
empty_composition_no_index [lemma, in VLSM.Core.Composition]
empty_validators_inhabited [instance, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
empty_initial_message_or_final_output_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
ensures [definition, in VLSM.Core.Plans]
entry_of_combine_votesets [lemma, in VLSM.Examples.Paxos.Paxos]
entry_of_singleton_voteset [lemma, in VLSM.Examples.Paxos.Paxos]
ep_valid_send [constructor, in VLSM.Examples.ELMO.ELMO]
ep_valid_receive [constructor, in VLSM.Examples.ELMO.ELMO]
EqDecision_Message [instance, in VLSM.Examples.ELMO.BaseELMO]
EqDecision_Observation [instance, in VLSM.Examples.ELMO.BaseELMO]
EqDecision_State [instance, in VLSM.Examples.ELMO.BaseELMO]
EqDecision_Label [instance, in VLSM.Examples.ELMO.BaseELMO]
EqSt_stream_prefix [lemma, in VLSM.Lib.StreamExtras]
EquationsExtras [library]
Equivalence_set_eq [instance, in VLSM.Lib.ListSetExtras]
equivocating_indices_equivocating_validators [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocating_indices_BasicEquivocation [instance, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocating_indices_initially_empty [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocating_indices [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocating_wrt [definition, in VLSM.Core.Equivocation]
equivocating_validators [projection, in VLSM.Core.Equivocation]
equivocating_validators_fixed_equivocation_characterization [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_validators_fixed_equivocation_constraint [definition, in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_validators_witness_last_char [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_validators_step_update [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_validators_witness_monotonicity [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_senders_in_trace_witnessing_equivocation_prop [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_messages_dependencies_are_directly_observed_or_equivocator_emitted [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
equivocating_messages_are_equivocator_emitted [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
equivocating_validators_empty_in_initial_state [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
equivocating_validators_is_equivocating_tracewise_iff [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
equivocating_senders_in_trace_prefix [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
equivocating_senders_in_trace [definition, in VLSM.Core.Equivocation.TraceWiseEquivocation]
equivocating_transition_preserves_fixed_equivocation [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
Equivocation [library]
EquivocationProjections [library]
equivocation_fault_constraint [definition, in VLSM.Core.Equivocation]
equivocation_dec_statewise [definition, in VLSM.Core.Equivocation]
equivocation_in_trace_last_char [lemma, in VLSM.Core.Equivocation]
equivocation_in_trace_prefix [lemma, in VLSM.Core.Equivocation]
equivocation_in_trace_dec [instance, in VLSM.Core.Equivocation]
equivocation_in_trace [definition, in VLSM.Core.Equivocation]
equivocation_fault [projection, in VLSM.Core.Equivocation]
equivocation_limit_recv_msg_prefix_ok [lemma, in VLSM.Examples.ELMO.ELMO]
equivocation_limit_recv_ok_msg_ok [lemma, in VLSM.Examples.ELMO.ELMO]
equivocation_dec_tracewise [instance, in VLSM.Core.Equivocation.TraceWiseEquivocation]
EquivocatorLabel [inductive, in VLSM.Core.Equivocators.Equivocators]
EquivocatorLabel_sind [definition, in VLSM.Core.Equivocators.Equivocators]
EquivocatorLabel_rec [definition, in VLSM.Core.Equivocators.Equivocators]
EquivocatorLabel_ind [definition, in VLSM.Core.Equivocators.Equivocators]
EquivocatorLabel_rect [definition, in VLSM.Core.Equivocators.Equivocators]
EquivocatorReplay [library]
Equivocators [library]
EquivocatorsComposition [library]
EquivocatorsCompositionProjections [library]
EquivocatorsProjections [library]
equivocators_limited_valid_trace_projects_to_annotated_limited_equivocation [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_valid_trace_projects_to_fixed_limited_equivocation [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_valid_trace_is_fixed [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_equivocations_vlsm_incl_no_equivocations [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_equivocations_vlsm_incl_free [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_equivocations_vlsm [definition, in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_equivocations_constraint [definition, in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_initial_message [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_initial_state_project [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_state_project_state_update_eqv [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_state_project [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_initial_state_size [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_no_equivocations_vlsm_incl_equivocators_free [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_no_equivocations_vlsm [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_no_equivocations_constraint [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_pre_trace_preserves_equivocating_state [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_pre_trace_cannot_decrease_state_size [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_plan_cannot_decrease_state_size [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_transition_cannot_decrease_state_size [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_transition_preserves_equivocating_indices [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
Equivocators_Fixed_Strong_eq [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
Equivocators_Fixed_Strong_incl [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
equivocators_composition_for_directly_observed_index_incl_embedding [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
Equivocators_Strong_Fixed_incl [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
equivocators_composition_for_sent [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
equivocators_composition_for_directly_observed [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
equivocators_no_equivocations_vlsm_X_vlsm_projection [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_valid_trace_from_project [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_no_equivocations_vlsm_X_vlsm_partial_projection [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_finite_trace_sub_projection_commute [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_finite_trace_sub_projection_item_commute [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_trace_project_final_state [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_VLSM_projection_finite_trace_project [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_trace_project_app [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_trace_project_characterization [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_trace_project [definition, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_label_project [definition, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_state_project [definition, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_partial_trace_project_extends_left [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_partial_trace_project_characterization [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_partial_trace_project [definition, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_output_reflecting_iff [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_output_reflecting_inv [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_zero_descriptors [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_preserves_zero_descriptors [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_finite_trace_projection_list_commute [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_preserves_equivocating_indices_final [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_from_state_descriptors [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_preserves_equivocating_indices [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_app_inv [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_app_inv_item [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_app_iff [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project [definition, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_folder_additive [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_folder_additive_iff [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_fold_None [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_folder [definition, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_inv_characterization [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_proper_characterization [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_proper_descriptor_characterization [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_proper [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_proper_descriptor [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_preserves_zero_descriptors [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_preserves_equivocating_indices [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project [definition, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_of_msg_subset_of_recv [lemma, in VLSM.Examples.ELMO.ELMO]
equivocators_finite_valid_trace_init_to_rev [lemma, in VLSM.Core.Equivocators.SimulatingFree]
equivocators_can_emit_free [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocators_total_trace_project_replayed_trace_from [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
equivocators_trace_project_replayed_trace_from_left [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
equivocators_total_state_project_replayed_trace_from [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
equivocators_trace_project_replayed_initial_state_from [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
equivocators_vlsm_transition_item_project_zero_descriptor [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocators_composition_can_emit_sender [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
equivocators_fixed_equivocations_all_eq [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_trace_sub_item_input_is_seeded_or_sub_previously_sent [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_trace_project_preserves_proper_fixed_equivocator_descriptors [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_vlsm_subset_incl [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_vlsm_incl_no_equivocations [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_vlsm_incl_PreFree [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_vlsm_incl_free [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_vlsm [definition, in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_constraint [definition, in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_limited_valid_trace_projects_to_annotated_limited_equivocation_rev [lemma, in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
equivocators_Fixed_incl_Limited [lemma, in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
equivocator_initial_state_project [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocator_descriptors_update_twice [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors_update_id [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors_update_eq [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors_update_eq_rew [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors_update_neq [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors_update [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_IM [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_ComputableSentMessages [lemma, in VLSM.Core.Equivocators.MessageProperties]
equivocator_elem_of_sent_messages_set [lemma, in VLSM.Core.Equivocators.MessageProperties]
equivocator_sent_messages_set [definition, in VLSM.Core.Equivocators.MessageProperties]
equivocator_HasBeenSentCapability [instance, in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_sent_stepwise_props [lemma, in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_sent_dec [instance, in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_sent [definition, in VLSM.Core.Equivocators.MessageProperties]
equivocator_HasBeenReceivedCapability [instance, in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_received_stepwise_props [lemma, in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_received_dec [instance, in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_received [definition, in VLSM.Core.Equivocators.MessageProperties]
equivocator_oracle_stepwise_props [lemma, in VLSM.Core.Equivocators.MessageProperties]
equivocator_oracle_dec [lemma, in VLSM.Core.Equivocators.MessageProperties]
equivocator_oracle [definition, in VLSM.Core.Equivocators.MessageProperties]
equivocator_selector [definition, in VLSM.Core.Equivocators.MessageProperties]
equivocator_vlsm_trace_project_output_reflecting_inv [lemma, in VLSM.Core.Equivocators.MessageProperties]
equivocator_vlsm_trace_project_output_reflecting [lemma, in VLSM.Core.Equivocators.MessageProperties]
equivocator_state_append_sent_right [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_sent_left [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_in_futures [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_weak_projection [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_preloaded_weak_projection [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_preloaded_with_weak_projection [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_transition_initial_state [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_initial_state_in_futures [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_transition [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_valid [lemma, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_label [definition, in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_descriptor_project_replayed_trace_from_left [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
equivocator_state_project_replayed_trace_from_left [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
equivocator_state_descriptor_project_replayed_initial_state_from_left [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
equivocator_state_project_replayed_initial_state_from_left [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
equivocator_zero_projection [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_label_zero_project [definition, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_inv [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_valid [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv5 [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv5_new_machine [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv4 [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv3 [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv2 [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_app_inv [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_app [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_cons [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_on_new_machine [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project [definition, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_inv_characterization [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_preserves_equivocating_indices [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_proper_characterization [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_inv_messages [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_proper [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_inv_none [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_transition_item_project_some_inj [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_transition_item_project [definition, in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_can_emit [definition, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
equivocator_vlsm_trace_project_reflect_non_equivocating [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
equivocator_state_project_valid_message [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_valid_state [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_transition_preserves_equivocating_state [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_transition_cannot_decrease_state_size [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_transition_reflects_singleton_state [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_transition_no_equivocation_zero_descriptor [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_descriptor_project [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_label_descriptor [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm_initial_state_preservation_rev [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm_initial_message_preservation_rev [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm_initial_message_preservation [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm_machine [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_valid [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_transition [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_initial_state_inh [instance, in VLSM.Core.Equivocators.Equivocators]
equivocator_s0 [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_initial_state [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_initial_state_prop [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_update_commute [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_extend_commute [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_singleton_is_extend [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_project_3 [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_project_2 [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_project_1 [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_lst [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_size [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_project_3 [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_project_2 [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_project_1 [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_lst [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_size [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update_project_neq [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update_project_eq [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update_lst [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update_size [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_zero [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_zero [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_ext [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_None_rev [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_Some_rev [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_None [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_Some [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_eq [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_projection_irrel [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_last_n [lemma, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_s [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_last [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_state_n [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_label [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_state [definition, in VLSM.Core.Equivocators.Equivocators]
equivocator_type [definition, in VLSM.Core.Equivocators.Equivocators]
EquivPreloadedBase_Fixed_weak_embedding [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
eq_Observation [lemma, in VLSM.Examples.ELMO.BaseELMO]
eq_Message [lemma, in VLSM.Examples.ELMO.BaseELMO]
eq_State [lemma, in VLSM.Examples.ELMO.BaseELMO]
eq_equivocating_indices_equivocation_fault' [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
eq_equivocating_indices_equivocation_fault [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
eq_equivocating_validators_equivocation_fault [lemma, in VLSM.Core.Equivocation]
eq_equiv [instance, in VLSM.Core.VLSM]
eq_dec_index23 [instance, in VLSM.Examples.Tutorial.Multiply]
eq_dec_refl [lemma, in VLSM.Lib.Preamble]
EvenConstraint [inductive, in VLSM.Examples.Tutorial.PrimesComposition]
EvenConstraint_sind [definition, in VLSM.Examples.Tutorial.PrimesComposition]
EvenConstraint_ind [definition, in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_all_validators [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_incl_left [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
even_prime_vlsms [definition, in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_no_validator [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_valid_message_char [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_valid_messages_left [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_emits_multiplier [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition [definition, in VLSM.Examples.Tutorial.PrimesComposition]
even_constraint [constructor, in VLSM.Examples.Tutorial.PrimesComposition]
exA [definition, in VLSM.Lib.TraceProperties]
examine_leaders_output [lemma, in VLSM.Examples.Paxos.Paxos]
examine_paxos_acceptor_output [lemma, in VLSM.Examples.Paxos.Paxos]
examine_one_trace [lemma, in VLSM.Core.Equivocation]
Existing [constructor, in VLSM.Core.Equivocators.Equivocators]
existing_false_label_equivocator_state_project_same [lemma, in VLSM.Core.Equivocators.Equivocators]
existing_false_label_equivocator_state_project_not_same [lemma, in VLSM.Core.Equivocators.Equivocators]
existing_true_label_equivocator_state_project_last [lemma, in VLSM.Core.Equivocators.Equivocators]
existing_true_label_equivocator_state_project_not_last [lemma, in VLSM.Core.Equivocators.Equivocators]
existing_false_label_equivocator_transition_size [lemma, in VLSM.Core.Equivocators.Equivocators]
existing_true_label_equivocator_transition_size [lemma, in VLSM.Core.Equivocators.Equivocators]
existing_descriptor_proper [lemma, in VLSM.Core.Equivocators.Equivocators]
existing_equivocator_label_forget_proper [lemma, in VLSM.Core.Equivocators.Equivocators]
existing_equivocator_label_extract [definition, in VLSM.Core.Equivocators.Equivocators]
existing_equivocator_label [definition, in VLSM.Core.Equivocators.Equivocators]
existing_descriptor_dec [instance, in VLSM.Core.Equivocators.Equivocators]
existing_descriptor [definition, in VLSM.Core.Equivocators.Equivocators]
existsb_first [lemma, in VLSM.Lib.StdppExtras]
existsb_forall [lemma, in VLSM.Lib.StdppExtras]
existsb_last [lemma, in VLSM.Lib.StdppExtras]
existsb_Exists [lemma, in VLSM.Lib.StdppExtras]
ExistsSuffix [inductive, in VLSM.Lib.ListExtras]
ExistsSuffix_sind [definition, in VLSM.Lib.ListExtras]
ExistsSuffix_ind [definition, in VLSM.Lib.ListExtras]
exists_pivotal_validator [lemma, in VLSM.Core.ReachableThreshold]
exists_right_finite_trace_from [lemma, in VLSM.Core.VLSM]
exists_equivocators_transition_item_project [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
Exists_last [lemma, in VLSM.Lib.StdppExtras]
exists_proj1_sig [lemma, in VLSM.Lib.Preamble]
exists_equivocator_transition_item_project [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
Exists_Str_nth_tl [lemma, in VLSM.Lib.StreamExtras]
Exists_impl [lemma, in VLSM.Lib.StreamExtras]
Exists_map_conv [lemma, in VLSM.Lib.StreamExtras]
Exists_choose_first_good [lemma, in VLSM.Lib.ListExtras]
Exists_choose_first [definition, in VLSM.Lib.ListExtras]
Exists_first [lemma, in VLSM.Lib.ListExtras]
Exists1 [definition, in VLSM.Lib.StreamExtras]
Exists1_exists [lemma, in VLSM.Lib.StreamExtras]
expression [definition, in VLSM.Examples.Tutorial.Formulas]
expression_vlsm [definition, in VLSM.Examples.Tutorial.Formulas]
expression_components [definition, in VLSM.Examples.Tutorial.Formulas]
expression_binop_vlsm [definition, in VLSM.Examples.Tutorial.Formulas]
expression_binop_vlsm_machine [definition, in VLSM.Examples.Tutorial.Formulas]
expression_binop_vlsm_transition [definition, in VLSM.Examples.Tutorial.Formulas]
expression_binop_vlsm_type [definition, in VLSM.Examples.Tutorial.Formulas]
expression_neg_vlsm [definition, in VLSM.Examples.Tutorial.Formulas]
expression_neg_vlsm_machine [definition, in VLSM.Examples.Tutorial.Formulas]
expression_neg_vlsm_transition [definition, in VLSM.Examples.Tutorial.Formulas]
expression_neg_vlsm_type [definition, in VLSM.Examples.Tutorial.Formulas]
expression_var_vlsm [definition, in VLSM.Examples.Tutorial.Formulas]
expression_var_vlsm_machine [definition, in VLSM.Examples.Tutorial.Formulas]
expression_var_vlsm_type [definition, in VLSM.Examples.Tutorial.Formulas]
expression_const_vlsm [definition, in VLSM.Examples.Tutorial.Formulas]
expression_const_vlsm_machine [definition, in VLSM.Examples.Tutorial.Formulas]
expression_const_vlsm_type [definition, in VLSM.Examples.Tutorial.Formulas]
ExT [definition, in VLSM.Lib.TraceProperties]
extend_right_finite_trace_from_to [lemma, in VLSM.Core.VLSM]
extend_right_finite_trace_from [lemma, in VLSM.Core.VLSM]
ext_elem_of_filter [lemma, in VLSM.Lib.StdppExtras]


F

false_composite_no_equivocation_vlsm_with_preloaded [lemma, in VLSM.Core.Equivocation.NoEquivocation]
FBot [constructor, in VLSM.Examples.Tutorial.Formulas]
FConj [constructor, in VLSM.Examples.Tutorial.Formulas]
FDisj [constructor, in VLSM.Examples.Tutorial.Formulas]
ffA [definition, in VLSM.Lib.TraceProperties]
FfT [definition, in VLSM.Lib.TraceProperties]
ffT [definition, in VLSM.Lib.TraceProperties]
ffT_setoidT [lemma, in VLSM.Lib.TraceProperties]
fFurther [lemma, in VLSM.Lib.StreamExtras]
fHere [lemma, in VLSM.Lib.StreamExtras]
field_selector [definition, in VLSM.Core.VLSM]
FIff [constructor, in VLSM.Examples.Tutorial.Formulas]
FilteringSubsequence [record, in VLSM.Lib.StreamFilters]
FilteringSubsequence_iff [lemma, in VLSM.Lib.StreamFilters]
filtering_subsequence_stream_filter_map [definition, in VLSM.Lib.StreamFilters]
filtering_subsequence_prefix_is_filter_last [lemma, in VLSM.Lib.StreamFilters]
filtering_subsequence_prefix_length [lemma, in VLSM.Lib.StreamFilters]
filtering_subsequence_prefix_is_filter [lemma, in VLSM.Lib.StreamFilters]
filtering_subsequence_witness_rev [lemma, in VLSM.Lib.StreamFilters]
filtering_subsequence_witness [lemma, in VLSM.Lib.StreamFilters]
filtering_subsequence_iff [lemma, in VLSM.Lib.StreamFilters]
filtering_subsequence_prefix_sorted [lemma, in VLSM.Lib.StreamFilters]
filtering_subsequence_sorted [lemma, in VLSM.Lib.StreamFilters]
filtering_subsequence [definition, in VLSM.Lib.StreamFilters]
filter_set_eq [lemma, in VLSM.Lib.ListSetExtras]
filter_set_add [lemma, in VLSM.Lib.ListSetExtras]
filter_subseteq_fn [lemma, in VLSM.Lib.StdppExtras]
filter_subseteq [lemma, in VLSM.Lib.StdppExtras]
filter_length_fn [lemma, in VLSM.Lib.StdppExtras]
filter_complement [lemma, in VLSM.Lib.StdppExtras]
filter_ext_elem_of [lemma, in VLSM.Lib.StdppExtras]
filter_subprop [lemma, in VLSM.Lib.FinSetExtras]
filter_subset [lemma, in VLSM.Lib.FinSetExtras]
filter_annotate_app [lemma, in VLSM.Lib.ListExtras]
filter_annotate_unroll [lemma, in VLSM.Lib.ListExtras]
filter_annotate_length [lemma, in VLSM.Lib.ListExtras]
filter_annotate [definition, in VLSM.Lib.ListExtras]
FImpl [constructor, in VLSM.Examples.Tutorial.Formulas]
finalA [definition, in VLSM.Lib.TraceProperties]
finalTA [inductive, in VLSM.Lib.TraceProperties]
finalTA_lastdup [lemma, in VLSM.Lib.TraceProperties]
finalTA_hd_append_trace [lemma, in VLSM.Lib.TraceProperties]
finalTA_finiteT [lemma, in VLSM.Lib.TraceProperties]
finalTA_sind [definition, in VLSM.Lib.TraceProperties]
finalTA_ind [definition, in VLSM.Lib.TraceProperties]
finalTA_delay [constructor, in VLSM.Lib.TraceProperties]
finalTA_nil [constructor, in VLSM.Lib.TraceProperties]
finalTB [inductive, in VLSM.Lib.TraceProperties]
finalTB_finiteT [lemma, in VLSM.Lib.TraceProperties]
finalTB_sind [definition, in VLSM.Lib.TraceProperties]
finalTB_ind [definition, in VLSM.Lib.TraceProperties]
finalTB_delay [constructor, in VLSM.Lib.TraceProperties]
finalTB_nil [constructor, in VLSM.Lib.TraceProperties]
final_state_project [projection, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
final_state_component_initial_or_transition [lemma, in VLSM.Core.Composition]
find_sent_not_observed_decomposition [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
find_not_send_decomposition [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
find_decomposition [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
find_least_among_is_minimal [lemma, in VLSM.Lib.Preamble]
find_least_among_helper_is_minimal [lemma, in VLSM.Lib.Preamble]
find_least_among_helper_minimal [lemma, in VLSM.Lib.Preamble]
find_least_among_helper_has_property [lemma, in VLSM.Lib.Preamble]
find_least_among_helper_bounded [lemma, in VLSM.Lib.Preamble]
find_least_among [definition, in VLSM.Lib.Preamble]
find_least_among_helper [definition, in VLSM.Lib.Preamble]
find_first_indexed_largest_nat_with_propery_bounded_None [lemma, in VLSM.Lib.NatExtras]
find_first_indexed_largest_nat_with_propery_bounded_Some [lemma, in VLSM.Lib.NatExtras]
find_first_indexed_largest_nat_with_propery_bounded [definition, in VLSM.Lib.NatExtras]
find_largest_nat_with_property_bounded_None [lemma, in VLSM.Lib.NatExtras]
find_largest_nat_with_property_bounded_Some [lemma, in VLSM.Lib.NatExtras]
find_largest_nat_with_property_bounded [definition, in VLSM.Lib.NatExtras]
Finite [constructor, in VLSM.Core.VLSM]
FinitelyMany [definition, in VLSM.Lib.StreamExtras]
FinitelyManyBound [definition, in VLSM.Lib.StreamExtras]
FinitelyManyBound_impl_rev [lemma, in VLSM.Lib.StreamExtras]
FinitelyMany_from_bound [lemma, in VLSM.Lib.StreamExtras]
FiniteT [definition, in VLSM.Lib.TraceProperties]
finiteT [inductive, in VLSM.Lib.TraceProperties]
FiniteT_SingletonT [lemma, in VLSM.Lib.TraceProperties]
FiniteT_AppendT_idem [lemma, in VLSM.Lib.TraceProperties]
finiteT_finalTA [lemma, in VLSM.Lib.TraceProperties]
finiteT_infiniteT_not [lemma, in VLSM.Lib.TraceProperties]
finiteT_bisim_eq [lemma, in VLSM.Lib.TraceProperties]
finiteT_setoidT [lemma, in VLSM.Lib.TraceProperties]
finiteT_sind [definition, in VLSM.Lib.TraceProperties]
finiteT_ind [definition, in VLSM.Lib.TraceProperties]
finiteT_delay [constructor, in VLSM.Lib.TraceProperties]
finiteT_nil [constructor, in VLSM.Lib.TraceProperties]
finiteT_infiniteT_dec [definition, in VLSM.Lib.TraceClassicalProperties]
finiteT_infiniteT [lemma, in VLSM.Lib.TraceClassicalProperties]
finite_valid_trace_from_sub_projection [lemma, in VLSM.Core.SubProjectionTraces]
finite_valid_trace_sub_projection [lemma, in VLSM.Core.SubProjectionTraces]
finite_trace_sub_projection_last_state [lemma, in VLSM.Core.SubProjectionTraces]
finite_trace_sub_projection_app [definition, in VLSM.Core.SubProjectionTraces]
finite_trace_sub_projection [definition, in VLSM.Core.SubProjectionTraces]
finite_valid_trace_from_to_alt_equiv [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_alt_right_impl [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_alt_left_impl [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_alt [definition, in VLSM.Core.VLSM]
finite_valid_trace_init_to_alt_equiv [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_alt_right_impl [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_alt_left_impl [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_alt [definition, in VLSM.Core.VLSM]
finite_valid_trace_from_to_last_transition [lemma, in VLSM.Core.VLSM]
Finite_messages [constructor, in VLSM.Core.VLSM]
finite_valid_trace_from_to_complete_left [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_complete_left [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_rev_strong_ind [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_add_emit [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_forget_emit [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_valid_state_message_rev [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_valid_state_message [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_output [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_initial_state [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_sind [definition, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_ind [definition, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_extend [constructor, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_empty [constructor, in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit [inductive, in VLSM.Core.VLSM]
finite_valid_trace_init_to_rev_ind [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_rev_ind [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_prefix_1 [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_prefix [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_snoc_rev [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_snoc [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_last [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to_forget_last [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_add_last [lemma, in VLSM.Core.VLSM]
finite_valid_trace_init_to [definition, in VLSM.Core.VLSM]
finite_valid_trace_from_to_snoc [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_app_split [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_app [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_last_pstate [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_first_pstate [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_add_last [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_last [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_forget_last [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_singleton [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_to_sind [definition, in VLSM.Core.VLSM]
finite_valid_trace_from_to_ind [definition, in VLSM.Core.VLSM]
finite_valid_trace_from_to_extend [constructor, in VLSM.Core.VLSM]
finite_valid_trace_from_to_empty [constructor, in VLSM.Core.VLSM]
finite_valid_trace_from_to [inductive, in VLSM.Core.VLSM]
finite_valid_trace_from_segment [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_suffix [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_prefix [lemma, in VLSM.Core.VLSM]
finite_valid_trace_rev_ind [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_rev_ind [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_app_iff [lemma, in VLSM.Core.VLSM]
finite_valid_trace_consecutive_valid_transition [lemma, in VLSM.Core.VLSM]
finite_valid_trace_last_pstate [lemma, in VLSM.Core.VLSM]
finite_valid_trace_tail [lemma, in VLSM.Core.VLSM]
finite_valid_trace_first_pstate [lemma, in VLSM.Core.VLSM]
finite_valid_trace_first_valid_transition [lemma, in VLSM.Core.VLSM]
finite_valid_trace_empty [lemma, in VLSM.Core.VLSM]
finite_valid_trace [definition, in VLSM.Core.VLSM]
finite_valid_trace_singleton [lemma, in VLSM.Core.VLSM]
finite_valid_trace_from_sind [definition, in VLSM.Core.VLSM]
finite_valid_trace_from_ind [definition, in VLSM.Core.VLSM]
finite_valid_trace_from_extend [constructor, in VLSM.Core.VLSM]
finite_valid_trace_from_empty [constructor, in VLSM.Core.VLSM]
finite_valid_trace_from [inductive, in VLSM.Core.VLSM]
finite_trace_last_suffix [lemma, in VLSM.Core.VLSM]
finite_trace_last_prefix [lemma, in VLSM.Core.VLSM]
finite_trace_nth_length [lemma, in VLSM.Core.VLSM]
finite_trace_nth_app2 [lemma, in VLSM.Core.VLSM]
finite_trace_nth_app1 [lemma, in VLSM.Core.VLSM]
finite_trace_nth_last [lemma, in VLSM.Core.VLSM]
finite_trace_nth_first [lemma, in VLSM.Core.VLSM]
finite_trace_last_output_is_last [lemma, in VLSM.Core.VLSM]
finite_trace_last_is_last [lemma, in VLSM.Core.VLSM]
finite_trace_last_app [lemma, in VLSM.Core.VLSM]
finite_trace_last_nil [lemma, in VLSM.Core.VLSM]
finite_trace_last_cons [lemma, in VLSM.Core.VLSM]
finite_trace_nth [definition, in VLSM.Core.VLSM]
finite_trace_last_output [definition, in VLSM.Core.VLSM]
finite_trace_last [definition, in VLSM.Core.VLSM]
finite_valid_plan_from_one [lemma, in VLSM.Core.Plans]
finite_valid_plan_iff [lemma, in VLSM.Core.Plans]
finite_valid_trace_from_to_plan [lemma, in VLSM.Core.Plans]
finite_valid_plan_from_to_app_iff [lemma, in VLSM.Core.Plans]
finite_valid_plan_from_to [definition, in VLSM.Core.Plans]
finite_valid_plan_empty [lemma, in VLSM.Core.Plans]
finite_valid_plan_from_app_iff [lemma, in VLSM.Core.Plans]
finite_valid_plan_from [definition, in VLSM.Core.Plans]
finite_valid_trace_init_to_emit_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_init_to_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_from_to_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_from_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_init_to_from_constrained_equiv [lemma, in VLSM.Core.PreloadedVLSM]
finite_valid_trace_init_to_from_constrained_left_impl [lemma, in VLSM.Core.PreloadedVLSM]
finite_valid_trace_init_to_from_constrained_right_impl [lemma, in VLSM.Core.PreloadedVLSM]
finite_valid_trace_init_to_from_constrained_sind [definition, in VLSM.Core.PreloadedVLSM]
finite_valid_trace_init_to_from_constrained_ind [definition, in VLSM.Core.PreloadedVLSM]
finite_valid_trace_init_to_from_constrained [inductive, in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to_direct_equiv [lemma, in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to_direct_left_impl [lemma, in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to_direct_right_impl [lemma, in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to_direct [definition, in VLSM.Core.PreloadedVLSM]
finite_constrained_trace [definition, in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to [definition, in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_from [definition, in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_from_to [definition, in VLSM.Core.PreloadedVLSM]
finite_trace_projection_list_in_rev [lemma, in VLSM.Core.ProjectionTraces]
finite_trace_projection_list_in [lemma, in VLSM.Core.ProjectionTraces]
finite_trace_projection_list [definition, in VLSM.Core.ProjectionTraces]
finite_valid_trace_from_to_UMO_state2trace [lemma, in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_UMO_state2trace [lemma, in VLSM.Examples.ELMO.UMO]
finite_valid_trace_init_to_state2trace' [lemma, in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_state2trace' [lemma, in VLSM.Examples.ELMO.UMO]
finite_valid_trace_init_to_state2trace_inv [lemma, in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_state2trace_inv [lemma, in VLSM.Examples.ELMO.UMO]
finite_valid_trace_init_to_state2trace [lemma, in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_state2trace [lemma, in VLSM.Examples.ELMO.UMO]
finite_valid_trace_init_to_unique [lemma, in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_unique [lemma, in VLSM.Examples.ELMO.UMO]
finite_valid_trace_from_to_unique [lemma, in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_from_to_unique [lemma, in VLSM.Examples.ELMO.UMO]
finite_valid_trace_from_to_inv [lemma, in VLSM.Examples.ELMO.UMO]
finite_valid_trace_from_to_size [lemma, in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_from_to_inv [lemma, in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_from_to_size [lemma, in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_state2trace' [lemma, in VLSM.Examples.ELMO.MO]
finite_constrained_trace_init_to_state2trace_inv [lemma, in VLSM.Examples.ELMO.MO]
finite_constrained_trace_init_to_state2trace [lemma, in VLSM.Examples.ELMO.MO]
finite_valid_trace_init_to_unique [lemma, in VLSM.Examples.ELMO.MO]
finite_valid_trace_from_to_unique [lemma, in VLSM.Examples.ELMO.MO]
finite_valid_trace_from_to_size [lemma, in VLSM.Examples.ELMO.MO]
finite_constrained_trace_init_to_unique [lemma, in VLSM.Examples.ELMO.MO]
finite_constrained_trace_from_to_unique [lemma, in VLSM.Examples.ELMO.MO]
finite_constrained_trace_from_to_size [lemma, in VLSM.Examples.ELMO.MO]
FinMapDom_Bmap_Bset [instance, in VLSM.Examples.Paxos.Voting]
FinMap_Ballot_Bmap [instance, in VLSM.Examples.Paxos.Voting]
FinSetExtras [library]
finset_equiv_dec [instance, in VLSM.Lib.FinSetExtras]
FinSuppFn [library]
fin_supp_proper [instance, in VLSM.Lib.FinSuppFn]
fin_supp_NoDup [lemma, in VLSM.Lib.FinSuppFn]
fin_supp [definition, in VLSM.Lib.FinSuppFn]
fin_set_singleton_eq_dec [instance, in VLSM.Lib.FinSetExtras]
fin_set_empty_eq_dec [instance, in VLSM.Lib.FinSetExtras]
fin_set_subseteq_dec [instance, in VLSM.Lib.FinSetExtras]
first [definition, in VLSM.Core.Composition]
first_transition_valid [lemma, in VLSM.Core.VLSM]
fitering_subsequence_stream_filter_map_prefix_ex [definition, in VLSM.Lib.StreamFilters]
fitering_subsequence_stream_filter_map_prefix [lemma, in VLSM.Lib.StreamFilters]
FixedEquivocation [library]
FixedEquivocationSimulation [library]
FixedSetByzantineTraces [library]
FixedSetEquivocation [library]
fixed_limited_byzantine_trace_prop [definition, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
fixed_non_equivocating_traces_char [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_non_equivocating_projection_friendliness [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_vlsm_composition_no_equivocators [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocator_lifting_initial_state [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
Fixed_eq_StrongFixed [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
Fixed_incl_StrongFixed [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_strong_equivocation_subsumption [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_output_has_strong_fixed_equivocation [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_input_has_strong_fixed_equivocation [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_valid_state_sub_projection [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_directly_observed_has_strong_fixed_equivocation [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_finite_valid_trace_sub_projection [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_finite_valid_trace_sub_projection_helper [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_output_has_strong_fixed_equivocation_helper [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_input_valid_transition_sub_projection_helper [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_input_has_strong_fixed_equivocation_helper [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
Fixed_incl_Free [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_vlsm_composition_index_incl [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_constraint_index_incl_subsumption [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_index_incl_subsumption [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_vlsm_composition_incl_free [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_vlsm_composition [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_constraint [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_limited_equivocation_prop [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
Fixed_incl_Limited [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
fixed_transition_preserves_annotation_equivocators [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
fixed_full_node_equivocation_incl [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
fixed_non_byzantine_eq_fixed_non_equivocating_from_initial [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_incl_fixed_non_equivocating_from_initial [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_vlsm_lift_from_initial [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_vlsm_lift_valid [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_equivocating_traces_are_byzantine [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_equivocating_incl_fixed_non_byzantine [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_equivocating_incl_sub_non_equivocating [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_trace_alt_prop [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_preloaded_eq [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_preloaded_incl [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection_valid_no_equivocations [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_set_signed_message [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_trace_char1 [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection_friendliness [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection_incl_preloaded [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection_initial_state_preservation [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_trace_prop [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_IM_sender_safety [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_IM_preserves_channel_authentication [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_IM_no_initial_messages [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_IM [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_equivocators_vlsm_projection [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocators_vlsm_partial_projection [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocators_valid_trace_project [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocation_constraint_has_constraint_has_been_sent_prop [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocators_initial_state_project [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocation_constraint_subsumption [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocation_constraint_subsumption_alt [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocators_finite_valid_trace_init_to_rev [lemma, in VLSM.Core.Equivocators.FixedEquivocationSimulation]
fixed_equivocation_has_replayable_message_prop [lemma, in VLSM.Core.Equivocators.FixedEquivocationSimulation]
fixed_equivocation_replay_has_message [lemma, in VLSM.Core.Equivocators.FixedEquivocationSimulation]
fixed_equivocating_non_equivocating_constraint_lifting [lemma, in VLSM.Core.Equivocators.FixedEquivocationSimulation]
fixed_equivocating_messages_sent_by_non_equivocating_are_valid [lemma, in VLSM.Core.Equivocators.FixedEquivocationSimulation]
flatten_formulas_are_well_formed_expressions [lemma, in VLSM.Examples.Tutorial.Formulas]
flatten_formula_inj [instance, in VLSM.Examples.Tutorial.Formulas]
flatten_formula_common_prefix [lemma, in VLSM.Examples.Tutorial.Formulas]
flatten_formula_prefix [lemma, in VLSM.Examples.Tutorial.Formulas]
flatten_formula_prefix_helper [lemma, in VLSM.Examples.Tutorial.Formulas]
flatten_formula_formula_prefix_is_not_formula_prop_app_prefix [lemma, in VLSM.Examples.Tutorial.Formulas]
flatten_formula_formula_prefix_is_not_formula_prop_app [lemma, in VLSM.Examples.Tutorial.Formulas]
flatten_formula_nzlen [lemma, in VLSM.Examples.Tutorial.Formulas]
flatten_formula [definition, in VLSM.Examples.Tutorial.Formulas]
FNeg [constructor, in VLSM.Examples.Tutorial.Formulas]
fngee_not_sent [projection, in VLSM.Core.MessageDependencies]
fngee_received [projection, in VLSM.Core.MessageDependencies]
fngee_sender [projection, in VLSM.Core.MessageDependencies]
fnlee_incomparable [projection, in VLSM.Core.MessageDependencies]
fnlee_observed2 [projection, in VLSM.Core.MessageDependencies]
fnlee_observed1 [projection, in VLSM.Core.MessageDependencies]
fnlee_sender2 [projection, in VLSM.Core.MessageDependencies]
fnlee_sender1 [projection, in VLSM.Core.MessageDependencies]
fnslee_incomparable [projection, in VLSM.Core.MessageDependencies]
fnslee_observed2 [projection, in VLSM.Core.MessageDependencies]
fnslee_observed1 [projection, in VLSM.Core.MessageDependencies]
fnslee_sender2 [projection, in VLSM.Core.MessageDependencies]
fnslee_sender1 [projection, in VLSM.Core.MessageDependencies]
fold_left_ind_rev [lemma, in VLSM.Lib.ListExtras]
fold_left_ind [lemma, in VLSM.Lib.ListExtras]
fold_right_andb_false [lemma, in VLSM.Lib.ListExtras]
followsT [inductive, in VLSM.Lib.TraceProperties]
followsT_dupT [lemma, in VLSM.Lib.TraceProperties]
followsT_followsT [lemma, in VLSM.Lib.TraceProperties]
followsT_ttA [lemma, in VLSM.Lib.TraceProperties]
followsT_singleton_andA_R [lemma, in VLSM.Lib.TraceProperties]
followsT_singleton_andA_L [lemma, in VLSM.Lib.TraceProperties]
followsT_singletonT [lemma, in VLSM.Lib.TraceProperties]
followsT_cont [lemma, in VLSM.Lib.TraceProperties]
followsT_setoidT_R [lemma, in VLSM.Lib.TraceProperties]
followsT_setoidT_L [lemma, in VLSM.Lib.TraceProperties]
followsT_setoidT [lemma, in VLSM.Lib.TraceProperties]
followsT_dec [definition, in VLSM.Lib.TraceProperties]
followsT_hd [lemma, in VLSM.Lib.TraceProperties]
followsT_delay [constructor, in VLSM.Lib.TraceProperties]
followsT_nil [constructor, in VLSM.Lib.TraceProperties]
ForAllSuffix [inductive, in VLSM.Lib.ListExtras]
ForAllSuffix_subsumption [lemma, in VLSM.Lib.ListExtras]
ForAllSuffix_induction [lemma, in VLSM.Lib.ListExtras]
ForAllSuffix_sind [definition, in VLSM.Lib.ListExtras]
ForAllSuffix_ind [definition, in VLSM.Lib.ListExtras]
ForAllSuffix2 [definition, in VLSM.Lib.ListExtras]
ForAllSuffix2_transitive_lookup [lemma, in VLSM.Lib.StdppExtras]
ForAllSuffix2_lookup [lemma, in VLSM.Lib.StdppExtras]
ForAllSuffix2_filter [lemma, in VLSM.Lib.ListExtras]
Forall_True [lemma, in VLSM.Lib.TopSort]
Forall_filter_nil [lemma, in VLSM.Lib.StdppExtras]
ForAll_impl [lemma, in VLSM.Lib.StreamExtras]
forall_ForAll [lemma, in VLSM.Lib.StreamExtras]
ForAll_tauto [lemma, in VLSM.Lib.StreamExtras]
ForAll_subsumption [lemma, in VLSM.Lib.StreamExtras]
ForAll_drop [lemma, in VLSM.Lib.ListExtras]
Forall_filter [lemma, in VLSM.Lib.ListExtras]
ForAll1 [definition, in VLSM.Lib.StreamExtras]
ForAll1_forall [lemma, in VLSM.Lib.StreamExtras]
ForAll1_subsumption [lemma, in VLSM.Lib.StreamExtras]
ForAll2 [definition, in VLSM.Lib.StreamExtras]
ForAll2_strict_lookup_inj [lemma, in VLSM.Lib.StreamExtras]
ForAll2_strict_lookup [lemma, in VLSM.Lib.StreamExtras]
ForAll2_strict_lookup_rev [lemma, in VLSM.Lib.StreamExtras]
ForAll2_transitive_lookup [lemma, in VLSM.Lib.StreamExtras]
ForAll2_forall [lemma, in VLSM.Lib.StreamExtras]
ForAll2_subsumption [lemma, in VLSM.Lib.StreamExtras]
forget_annotations_projection [definition, in VLSM.Core.AnnotatedVLSM]
ForkWith [constructor, in VLSM.Core.Equivocators.Equivocators]
Formula [inductive, in VLSM.Examples.Tutorial.Formulas]
Formulas [library]
formula_holds_prop [definition, in VLSM.Examples.Tutorial.Formulas]
formula_interp [definition, in VLSM.Examples.Tutorial.Formulas]
formula_vars [definition, in VLSM.Examples.Tutorial.Formulas]
formula_prefix_is_not_formula_prop [definition, in VLSM.Examples.Tutorial.Formulas]
Formula_sind [definition, in VLSM.Examples.Tutorial.Formulas]
Formula_rec [definition, in VLSM.Examples.Tutorial.Formulas]
Formula_ind [definition, in VLSM.Examples.Tutorial.Formulas]
Formula_rect [definition, in VLSM.Examples.Tutorial.Formulas]
FreeCompositionValidator [library]
FreeELMO [definition, in VLSM.Examples.ELMO.ELMO]
free_valid_from_all_dependencies_emitable_from_dependencies [lemma, in VLSM.Core.MessageDependencies]
free_valid_from_valid_dependencies [lemma, in VLSM.Core.MessageDependencies]
free_valid_message_yields_projection_validator [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_yields_message_validator [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_is_valid [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_emittable_from_dependencies [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_condition [definition, in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_sind [definition, in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_rec [definition, in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_ind [definition, in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_rect [definition, in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message [record, in VLSM.Core.Validators.FreeCompositionValidator]
free_component_message_validator_yields_validator [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
free_component_message_validator_valid_trace [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
free_sub_free_constraint [definition, in VLSM.Core.SubProjectionTraces]
free_sub_free_state [definition, in VLSM.Core.SubProjectionTraces]
free_sub_free_label [definition, in VLSM.Core.SubProjectionTraces]
free_sub_free_index [definition, in VLSM.Core.SubProjectionTraces]
free_sub_vlsm_composition [definition, in VLSM.Core.SubProjectionTraces]
free_radix_composite_vlsm_emits_multiplier [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
free_radix_composite_vlsm [definition, in VLSM.Examples.Tutorial.PrimesComposition]
free_equivocating_vlsm_composition [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
free_composite_no_initial_valid_messages_have_sender [lemma, in VLSM.Core.Equivocation]
free_composite_no_initial_valid_messages_emitted_by_sender [lemma, in VLSM.Core.Equivocation]
free_composite_has_been_directly_observed_stepwise_props [lemma, in VLSM.Core.Equivocation]
free_composite_HasBeenDirectlyObservedCapability [instance, in VLSM.Core.Equivocation]
free_composite_HasBeenReceivedCapability [instance, in VLSM.Core.Equivocation]
free_composite_has_been_received_stepwise_props [lemma, in VLSM.Core.Equivocation]
free_composite_HasBeenSentCapability [instance, in VLSM.Core.Equivocation]
free_composite_has_been_sent_stepwise_props [lemma, in VLSM.Core.Equivocation]
free_composite_stepwise_props [lemma, in VLSM.Core.Equivocation]
free_sub_free_equivocator_descriptors [definition, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
free_composite_23_reachable_00 [lemma, in VLSM.Examples.Tutorial.Multiply]
free_composition_23_reachable_0 [lemma, in VLSM.Examples.Tutorial.Multiply]
free_composition_23_valid_messages_powers_of_23 [lemma, in VLSM.Examples.Tutorial.Multiply]
free_composition_23_valid_messages_powers_of_23_left [lemma, in VLSM.Examples.Tutorial.Multiply]
free_composition_23_valid_messages_powers_of_23_right [lemma, in VLSM.Examples.Tutorial.Multiply]
free_composition_23 [definition, in VLSM.Examples.Tutorial.Multiply]
free_has_strong_trace_witnessing_equivocation_prop [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
free_valid_preloaded_lifts_can_be_emitted [lemma, in VLSM.Core.Composition]
free_composite_vlsm_spec [lemma, in VLSM.Core.Composition]
free_constraint [definition, in VLSM.Core.Composition]
free_composite_vlsm [definition, in VLSM.Core.Composition]
free_composite_vlsm_machine [definition, in VLSM.Core.Composition]
free_composite_no_equivocation_vlsm_with_preloaded [definition, in VLSM.Core.Equivocation.NoEquivocation]
free_equivocators_valid_trace_project [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
free_valid_state_component_initial_or_transition [lemma, in VLSM.Core.ProjectionTraces]
from_sub_projection [definition, in VLSM.Core.SubProjectionTraces]
from_send_to_from_sent_argument [lemma, in VLSM.Core.Equivocation]
fsfun [definition, in VLSM.Lib.FinSuppFn]
fsfun_sum_succ [lemma, in VLSM.Lib.FinSuppFn]
fsfun_sum_zero_inv [lemma, in VLSM.Lib.FinSuppFn]
fsfun_sum_proper [lemma, in VLSM.Lib.FinSuppFn]
fsfun_sum [definition, in VLSM.Lib.FinSuppFn]
fsfun_eq_dec [instance, in VLSM.Lib.FinSuppFn]
fsfun_has_fin_supp [instance, in VLSM.Lib.FinSuppFn]
fsfun_equiv_unfold [lemma, in VLSM.Lib.FinSuppFn]
fsfun_project_proper [instance, in VLSM.Lib.FinSuppFn]
fsfun_equivalence [instance, in VLSM.Lib.FinSuppFn]
fsfun_equiv [instance, in VLSM.Lib.FinSuppFn]
fsfun_project [definition, in VLSM.Lib.FinSuppFn]
fsfun_prod_succ [lemma, in VLSM.Lib.NatExtras]
fsfun_prod_zero [lemma, in VLSM.Lib.NatExtras]
fsfun_prod_proper [instance, in VLSM.Lib.NatExtras]
fsfun_prod [definition, in VLSM.Lib.NatExtras]
fsFurther [lemma, in VLSM.Lib.ListExtras]
fsFurther2_transitive [lemma, in VLSM.Lib.ListExtras]
fsHere [lemma, in VLSM.Lib.ListExtras]
fs_is_filter [projection, in VLSM.Lib.StreamFilters]
fs_monotone [projection, in VLSM.Lib.StreamFilters]
FTop [constructor, in VLSM.Examples.Tutorial.Formulas]
FullMessageDependencies [record, in VLSM.Core.MessageDependencies]
FullMessageDependencies_ind [lemma, in VLSM.Core.MessageDependencies]
FullNode [library]
FullNodeGlobalEquivocationEvidence [record, in VLSM.Core.MessageDependencies]
FullNodeLocalEquivocationEvidence [record, in VLSM.Core.MessageDependencies]
FullNodeSentLocalEquivocationEvidence [record, in VLSM.Core.MessageDependencies]
FullReplayTraces [library]
full_message_dependencies_irreflexive [projection, in VLSM.Core.MessageDependencies]
full_message_dependencies_happens_before [projection, in VLSM.Core.MessageDependencies]
full_node_sent_locally_is_globally_equivocating [lemma, in VLSM.Core.MessageDependencies]
full_node_is_globally_equivocating_iff [lemma, in VLSM.Core.MessageDependencies]
full_node_is_globally_equivocating_stronger [lemma, in VLSM.Core.MessageDependencies]
full_node_is_globally_equivocating [definition, in VLSM.Core.MessageDependencies]
full_node_is_locally_equivocating_iff [lemma, in VLSM.Core.MessageDependencies]
full_node_HasBeenObserved_is_directly_observed [lemma, in VLSM.Core.MessageDependencies]
full_node_is_locally_equivocating_stronger [lemma, in VLSM.Core.MessageDependencies]
full_node_is_sent_locally_equivocating_weaker [lemma, in VLSM.Core.MessageDependencies]
full_node_is_sent_locally_equivocating [definition, in VLSM.Core.MessageDependencies]
full_node_is_locally_equivocating [definition, in VLSM.Core.MessageDependencies]
full_node_has_been_received [lemma, in VLSM.Core.MessageDependencies]
full_node_free_valid_message_yields_projection_validator [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
full_node_free_valid_message_yields_message_validator [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
full_node_free_valid_message_entails [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
full_node_free_valid_message_entails_helper [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
full_node_free_valid_message_condition [definition, in VLSM.Core.Validators.FreeCompositionValidator]
full_trace_project_preserves_valid_trace [projection, in VLSM.Core.VLSMProjections.VLSMEmbedding]
full_node_condition_for_admissible_equivocators_subsumption [lemma, in VLSM.Core.Equivocation.FullNode]
full_node_condition_for_admissible_equivocators_alt [definition, in VLSM.Core.Equivocation.FullNode]
full_node_condition_for_admissible_equivocators [definition, in VLSM.Core.Equivocation.FullNode]
full_node_prefix [lemma, in VLSM.Examples.ELMO.ELMO]
full_node_messages_iff_rec_obs [lemma, in VLSM.Examples.ELMO.ELMO]
full_node_rebase_rec_obs [lemma, in VLSM.Examples.ELMO.ELMO]
full_node_VLSM_reachable [lemma, in VLSM.Examples.ELMO.ELMO]
full_node_reachable_messages_ind [lemma, in VLSM.Examples.ELMO.ELMO]
full_node [definition, in VLSM.Examples.ELMO.ELMO]
full_node_limited_equivocation_valid_state_weight [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
full_node_msg_dep_limited_equivocation_vlsm_eq [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_msg_dep_limited_equivocation_vlsm_incl [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_msg_dep_composite_transition_message_equivocators [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_msg_dep_coequivocating_senders [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_limited_equivocation_vlsm [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_coequivocating_senders [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_fixed_equivocation_eq [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
full_node_fixed_equivocation_incl [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
full_node_fixed_equivocation_constraint_subsumption [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
full_node_fixed_set_equivocation_constraint [definition, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
full_node_fixed_set_equivocation [definition, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
FVar [constructor, in VLSM.Examples.Tutorial.Formulas]
fvm_dependencies [projection, in VLSM.Core.Validators.FreeCompositionValidator]
fvm_emittable [projection, in VLSM.Core.Validators.FreeCompositionValidator]
fvtit_def [constructor, in VLSM.Core.PreloadedVLSM]


G

gathered_1b_ok [lemma, in VLSM.Examples.Paxos.Paxos]
gathered_1b [projection, in VLSM.Examples.Paxos.Paxos]
generalized_equivocators_finite_valid_trace_init_to_rev [lemma, in VLSM.Core.Equivocators.SimulatingFree]
ges_not_sent [projection, in VLSM.Examples.ELMO.ELMO]
ges_recv [projection, in VLSM.Examples.ELMO.ELMO]
ges_adr [projection, in VLSM.Examples.ELMO.ELMO]
ges_m [projection, in VLSM.Examples.ELMO.ELMO]
get_maximal_element_some [lemma, in VLSM.Lib.TopSort]
get_maximal_element_correct [lemma, in VLSM.Lib.TopSort]
get_maximal_element [definition, in VLSM.Lib.TopSort]
global_equivocators_simple_step_update_receive_already_observed [lemma, in VLSM.Examples.ELMO.ELMO]
global_equivocators_simple_step_update_receive [lemma, in VLSM.Examples.ELMO.ELMO]
global_equivocators_simple_step_update_send_iff [lemma, in VLSM.Examples.ELMO.ELMO]
global_equivocators_simple_step_update_send [lemma, in VLSM.Examples.ELMO.ELMO]
global_equivocators_simple_iff_full_node_equivocation [lemma, in VLSM.Examples.ELMO.ELMO]
global_equivocators_simple [record, in VLSM.Examples.ELMO.ELMO]
global_equivocators [record, in VLSM.Examples.ELMO.MO]
globeqv_neq [projection, in VLSM.Examples.ELMO.MO]
globeqv_nss [projection, in VLSM.Examples.ELMO.MO]
globeqv_cro [projection, in VLSM.Examples.ELMO.MO]
globeqv_adr [projection, in VLSM.Examples.ELMO.MO]
globeqv_ob [projection, in VLSM.Examples.ELMO.MO]


H

happensBefore [abbreviation, in VLSM.Examples.ELMO.ELMO]
happensBefore_msg_dep [lemma, in VLSM.Examples.ELMO.ELMO]
HasBeenDirectlyObservedCapability [record, in VLSM.Core.Equivocation]
HasBeenDirectlyObservedCapability_from_sent_received [instance, in VLSM.Core.Equivocation]
HasBeenDirectlyObservedCapability_ELMO_component [instance, in VLSM.Examples.ELMO.ELMO]
HasBeenDirectlyObservedCapability_UMO_component [instance, in VLSM.Examples.ELMO.UMO]
HasBeenDirectlyObservedCapability_MOComponent [instance, in VLSM.Examples.ELMO.MO]
HasBeenObserved [inductive, in VLSM.Core.MessageDependencies]
HasBeenObserved_step_update [lemma, in VLSM.Core.MessageDependencies]
HasBeenObserved_sind [definition, in VLSM.Core.MessageDependencies]
HasBeenObserved_ind [definition, in VLSM.Core.MessageDependencies]
HasBeenReceivedCapability [record, in VLSM.Core.Equivocation]
HasBeenReceivedCapability_UMO_component [instance, in VLSM.Examples.ELMO.UMO]
HasBeenReceivedCapability_MOComponent [instance, in VLSM.Examples.ELMO.MO]
HasBeenSentCapability [record, in VLSM.Core.Equivocation]
HasBeenSentCapability_UMO_component [instance, in VLSM.Examples.ELMO.UMO]
HasBeenSentCapability_MOComponent [instance, in VLSM.Examples.ELMO.MO]
has_been_sent_msg_dep_comparable_prop [definition, in VLSM.Core.MessageDependencies]
has_been_received_in_state_preloaded [lemma, in VLSM.Core.Equivocation]
has_been_received_in_state [lemma, in VLSM.Core.Equivocation]
has_been_sent_irrelevance [lemma, in VLSM.Core.Equivocation]
has_been_sent_iff_by_sender [lemma, in VLSM.Core.Equivocation]
has_been_received_messages_set_iff [lemma, in VLSM.Core.Equivocation]
has_been_directly_observed_consistency [lemma, in VLSM.Core.Equivocation]
has_been_directly_observed_from_sent_received_stepwise_props [lemma, in VLSM.Core.Equivocation]
has_been_directly_observed_from_sent_received_dec [lemma, in VLSM.Core.Equivocation]
has_been_directly_observed_from_sent_received [definition, in VLSM.Core.Equivocation]
has_been_directly_observed_sent_received_iff [lemma, in VLSM.Core.Equivocation]
has_been_directly_observed_examine_one_trace [lemma, in VLSM.Core.Equivocation]
has_been_directly_observed_step_update [lemma, in VLSM.Core.Equivocation]
has_been_directly_observed_no_inits [lemma, in VLSM.Core.Equivocation]
has_been_directly_observed_stepwise_props [projection, in VLSM.Core.Equivocation]
has_been_directly_observed_dec [projection, in VLSM.Core.Equivocation]
has_been_directly_observed [projection, in VLSM.Core.Equivocation]
has_been_received_examine_one_trace [lemma, in VLSM.Core.Equivocation]
has_been_sent_examine_one_trace [lemma, in VLSM.Core.Equivocation]
has_been_received_consistency_proper_not_received [lemma, in VLSM.Core.Equivocation]
has_been_received_consistency [lemma, in VLSM.Core.Equivocation]
has_been_received_tracewise_props [lemma, in VLSM.Core.Equivocation]
has_been_received_tracewise_prop [definition, in VLSM.Core.Equivocation]
has_been_received_step_update [lemma, in VLSM.Core.Equivocation]
has_been_received_no_inits [lemma, in VLSM.Core.Equivocation]
has_not_been_received [definition, in VLSM.Core.Equivocation]
has_been_received_stepwise_props [projection, in VLSM.Core.Equivocation]
has_been_received_dec [projection, in VLSM.Core.Equivocation]
has_been_received [projection, in VLSM.Core.Equivocation]
has_been_received_stepwise_prop [definition, in VLSM.Core.Equivocation]
has_been_sent_consistency_proper_not_sent [lemma, in VLSM.Core.Equivocation]
has_been_sent_consistency [lemma, in VLSM.Core.Equivocation]
has_been_sent_tracewise_props [lemma, in VLSM.Core.Equivocation]
has_been_sent_tracewise_prop [definition, in VLSM.Core.Equivocation]
has_been_sent_step_update [lemma, in VLSM.Core.Equivocation]
has_been_sent_no_inits [lemma, in VLSM.Core.Equivocation]
has_not_been_sent [definition, in VLSM.Core.Equivocation]
has_been_sent_stepwise_props [projection, in VLSM.Core.Equivocation]
has_been_sent_dec [projection, in VLSM.Core.Equivocation]
has_been_sent [projection, in VLSM.Core.Equivocation]
has_been_sent_stepwise_prop [definition, in VLSM.Core.Equivocation]
has_not_been_received_prop [definition, in VLSM.Core.Equivocation]
has_been_received_prop [definition, in VLSM.Core.Equivocation]
has_not_been_sent_prop [definition, in VLSM.Core.Equivocation]
has_been_sent_prop [definition, in VLSM.Core.Equivocation]
has_equivocating_sender [definition, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
has_last_or_null [lemma, in VLSM.Lib.ListExtras]
hbo_indirectly [constructor, in VLSM.Core.MessageDependencies]
hbo_directly [constructor, in VLSM.Core.MessageDependencies]
hd [definition, in VLSM.Lib.Traces]
HistoryVLSM [record, in VLSM.Core.HistoryVLSM]
HistoryVLSM [library]
history_unique_trace_to_reachable [lemma, in VLSM.Core.HistoryVLSM]
Hzero [lemma, in VLSM.Core.Equivocators.Equivocators]


I

IBot [constructor, in VLSM.Examples.Tutorial.Formulas]
IConj [constructor, in VLSM.Examples.Tutorial.Formulas]
IDisj [constructor, in VLSM.Examples.Tutorial.Formulas]
idx_adr2idx [lemma, in VLSM.Examples.ELMO.BaseELMO]
Iff [constructor, in VLSM.Examples.Tutorial.Formulas]
IIff [constructor, in VLSM.Examples.Tutorial.Formulas]
IImpl [constructor, in VLSM.Examples.Tutorial.Formulas]
IM [definition, in VLSM.Examples.Paxos.Paxos]
immediate_substate_wf [lemma, in VLSM.Examples.ELMO.BaseELMO]
immediate_substate_sind [definition, in VLSM.Examples.ELMO.BaseELMO]
immediate_substate_ind [definition, in VLSM.Examples.ELMO.BaseELMO]
immediate_substate [inductive, in VLSM.Examples.ELMO.BaseELMO]
immediate_dependency_msg_dep_rel [lemma, in VLSM.Examples.ELMO.ELMO]
immediate_dependency [definition, in VLSM.Examples.ELMO.ELMO]
Impl [constructor, in VLSM.Examples.Tutorial.Formulas]
implies_AppendT_ttA [lemma, in VLSM.Lib.TraceProperties]
implies_ttA_AppendT [lemma, in VLSM.Lib.TraceProperties]
impl_proper [lemma, in VLSM.Lib.Preamble]
IM_HasBeenSentCapability [instance, in VLSM.Examples.Paxos.Paxos]
incl_equivocating_validators_equivocation_fault [lemma, in VLSM.Core.Equivocation]
incl_singleton [lemma, in VLSM.Lib.ListExtras]
incomparable [definition, in VLSM.Examples.ELMO.UMO]
incomparable_iff [lemma, in VLSM.Examples.ELMO.ELMO]
incomparable_sym [instance, in VLSM.Examples.ELMO.UMO]
incomparable_state [record, in VLSM.Examples.ELMO.MO]
incs_not_equal [projection, in VLSM.Examples.ELMO.MO]
incs_not_state_suffix21 [projection, in VLSM.Examples.ELMO.MO]
incs_not_state_suffix12 [projection, in VLSM.Examples.ELMO.MO]
index [inductive, in VLSM.Examples.Tutorial.Formulas]
indexed_radix_vlsms [definition, in VLSM.Examples.Tutorial.PrimesComposition]
indexed_reachable_composite_state_to_trace [lemma, in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_last [lemma, in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_reflects_initiality_2 [lemma, in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_result_state_is_initial [lemma, in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_result_state [lemma, in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_reflects_initiality_1 [lemma, in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace [definition, in VLSM.Core.TraceableVLSM]
index_dec [instance, in VLSM.Examples.Tutorial.Formulas]
index_sind [definition, in VLSM.Examples.Tutorial.Formulas]
index_rec [definition, in VLSM.Examples.Tutorial.Formulas]
index_ind [definition, in VLSM.Examples.Tutorial.Formulas]
index_rect [definition, in VLSM.Examples.Tutorial.Formulas]
index23 [inductive, in VLSM.Examples.Tutorial.Multiply]
index23_sind [definition, in VLSM.Examples.Tutorial.Multiply]
index23_rec [definition, in VLSM.Examples.Tutorial.Multiply]
index23_ind [definition, in VLSM.Examples.Tutorial.Multiply]
index23_rect [definition, in VLSM.Examples.Tutorial.Multiply]
induced_sub_element_projection_is_projection [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_element_projection [definition, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_transition_preservation [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_valid_preservation [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_friendliness [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_lift [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_constraint_subsumption_incl [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_transition_is_composite [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_valid_projection [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_is_projection [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_transition_consistency_Some [lemma, in VLSM.Core.SubProjectionTraces]
induced_sub_projection_transition_consistency_None [lemma, in VLSM.Core.SubProjectionTraces]
induced_validator_incl_preloaded_with_all_messages [lemma, in VLSM.Core.Validator]
induced_validator_trace_lift [lemma, in VLSM.Core.Validator]
induced_validator_transition_item_lift [lemma, in VLSM.Core.Validator]
induced_validator_transition_consistency_Some [definition, in VLSM.Core.Validator]
induced_validator_valid_is_input_valid [lemma, in VLSM.Core.Validator]
induced_validator_state_lift_prop [definition, in VLSM.Core.Validator]
induced_validator_label_lift_prop [definition, in VLSM.Core.Validator]
INeg [constructor, in VLSM.Examples.Tutorial.Formulas]
Infinite [constructor, in VLSM.Core.VLSM]
InfinitelyOften [definition, in VLSM.Lib.StreamExtras]
InfinitelyOften_impl [lemma, in VLSM.Lib.StreamExtras]
InfinitelyOften_nth_tl [definition, in VLSM.Lib.StreamExtras]
InfinitelyOften_tl [lemma, in VLSM.Lib.StreamExtras]
InfiniteT [definition, in VLSM.Lib.TraceProperties]
infiniteT [inductive, in VLSM.Lib.TraceProperties]
InfiniteT_implies_AppendT [lemma, in VLSM.Lib.TraceProperties]
infiniteT_trace_append [lemma, in VLSM.Lib.TraceProperties]
infiniteT_cons [lemma, in VLSM.Lib.TraceProperties]
infiniteT_setoidT [lemma, in VLSM.Lib.TraceProperties]
infiniteT_delay [constructor, in VLSM.Lib.TraceProperties]
Infinite_messages [constructor, in VLSM.Core.VLSM]
infinite_valid_trace_from_segment [lemma, in VLSM.Core.VLSM]
infinite_valid_trace_from_EqSt [lemma, in VLSM.Core.VLSM]
infinite_valid_trace_from_prefix_rev [lemma, in VLSM.Core.VLSM]
infinite_valid_trace_from_prefix [lemma, in VLSM.Core.VLSM]
infinite_valid_trace_from_app_iff [lemma, in VLSM.Core.VLSM]
infinite_valid_trace_consecutive_valid_transition [lemma, in VLSM.Core.VLSM]
infinite_valid_trace [definition, in VLSM.Core.VLSM]
infinite_valid_trace_from_extend [constructor, in VLSM.Core.VLSM]
infinite_valid_trace_from [inductive, in VLSM.Core.VLSM]
infinite_valid_trace_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
infinite_valid_trace_from_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
Inhabited_MC_initial_state_type [instance, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Inhabited_UMO_component_initial_state_type [instance, in VLSM.Examples.ELMO.UMO]
init [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
initial_ballot_state [definition, in VLSM.Examples.Paxos.Paxos]
initial_state_is_not_equivocating_statewise [lemma, in VLSM.Core.Equivocation]
initial_message_is_valid [lemma, in VLSM.Core.VLSM]
initial_state_is_valid [lemma, in VLSM.Core.VLSM]
initial_message [projection, in VLSM.Core.VLSM]
initial_message_prop [projection, in VLSM.Core.VLSM]
initial_state [projection, in VLSM.Core.VLSM]
initial_state_prop [projection, in VLSM.Core.VLSM]
initial_indices [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
initial_state_witnessing_equivocation_prop [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
initial_new_machine_transition_item [definition, in VLSM.Core.Equivocators.FullReplayTraces]
initial_state_equivocators_weight [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
initial_state_not_is_equivocating_tracewise [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
input [projection, in VLSM.Core.VLSM]
InputValidation [record, in VLSM.Core.Validator]
input_valid_transition_preserves_msg_dep_is_globally_equivocating [lemma, in VLSM.Core.MessageDependencies]
input_valid_transition_received_not_resent [lemma, in VLSM.Core.Equivocation]
input_valid_transition_forget_input [lemma, in VLSM.Core.VLSM]
input_valid_transition_in_futures [lemma, in VLSM.Core.VLSM]
input_valid_transition_to [lemma, in VLSM.Core.VLSM]
input_valid_transition_deterministic [lemma, in VLSM.Core.VLSM]
input_valid_state_message_outputs [lemma, in VLSM.Core.VLSM]
input_valid_transition_transition [lemma, in VLSM.Core.VLSM]
input_valid_transition_is_valid [lemma, in VLSM.Core.VLSM]
input_valid_transition_out [lemma, in VLSM.Core.VLSM]
input_valid_transition_outputs_valid_state_message [lemma, in VLSM.Core.VLSM]
input_valid_transition_in [lemma, in VLSM.Core.VLSM]
input_valid_transition_destination [lemma, in VLSM.Core.VLSM]
input_valid_transition_origin [lemma, in VLSM.Core.VLSM]
input_valid_transition_iff [lemma, in VLSM.Core.VLSM]
input_valid_can_transition [lemma, in VLSM.Core.VLSM]
input_valid_transition_valid [lemma, in VLSM.Core.VLSM]
input_valid_transition_preserving [definition, in VLSM.Core.VLSM]
input_valid_transition_item [definition, in VLSM.Core.VLSM]
input_valid_transition [definition, in VLSM.Core.VLSM]
input_valid [definition, in VLSM.Core.VLSM]
input_a [projection, in VLSM.Core.Plans]
input_valid_transition_reflects_trace_witnessing_equivocation_prop [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
input_valid_transition_project_any [lemma, in VLSM.Core.Composition]
input_valid_transition_preloaded_project_any [lemma, in VLSM.Core.Composition]
input_valid_transition_preloaded_project_any_free [lemma, in VLSM.Core.Composition]
input_valid_transition_project_active [lemma, in VLSM.Core.Composition]
input_valid_transition_preloaded_project_active [lemma, in VLSM.Core.Composition]
input_valid_transition_preloaded_project_active_free [lemma, in VLSM.Core.Composition]
input_valid_constraint_subsumption [definition, in VLSM.Core.ConstrainedVLSM]
input_valid_transition_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
input_valid_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
input_valid_transition_receiving_no_sender_reflects_equivocating_validators [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
input_constrained_transition_item [definition, in VLSM.Core.PreloadedVLSM]
input_constrained_transition_to [definition, in VLSM.Core.PreloadedVLSM]
input_constrained_transition [definition, in VLSM.Core.PreloadedVLSM]
input_constrained [definition, in VLSM.Core.PreloadedVLSM]
input_valid_transition_deterministic_conv [lemma, in VLSM.Examples.ELMO.UMO]
input_constrained_transition_deterministic_conv [lemma, in VLSM.Examples.ELMO.UMO]
input_valid_transition_size [lemma, in VLSM.Examples.ELMO.UMO]
input_constrained_transition_size [lemma, in VLSM.Examples.ELMO.UMO]
input_constrained_transition_Receive [lemma, in VLSM.Examples.ELMO.UMO]
input_constrained_transition_Send [lemma, in VLSM.Examples.ELMO.UMO]
input_valid_transition_deterministic_conv [lemma, in VLSM.Examples.ELMO.MO]
input_valid_transition_size [lemma, in VLSM.Examples.ELMO.MO]
input_valid_transition_Send [lemma, in VLSM.Examples.ELMO.MO]
input_constrained_transition_deterministic_conv [lemma, in VLSM.Examples.ELMO.MO]
input_constrained_transition_size [lemma, in VLSM.Examples.ELMO.MO]
input_constrained_transition_Receive [lemma, in VLSM.Examples.ELMO.MO]
input_constrained_transition_Send [lemma, in VLSM.Examples.ELMO.MO]
insert_gathered_1b [definition, in VLSM.Examples.Paxos.Paxos]
intersection_size2 [lemma, in VLSM.Lib.FinSetExtras]
intersection_size1 [lemma, in VLSM.Lib.FinSetExtras]
invert_finiteT_delay [lemma, in VLSM.Lib.TraceProperties]
Inv_past_vote_info_prop [definition, in VLSM.Examples.Paxos.Paxos]
inv_acceptor_votes_safe [lemma, in VLSM.Examples.Paxos.Voting]
inv_max_bal_limits_votes [lemma, in VLSM.Examples.Paxos.Voting]
inv_acceptor_no_conflict [lemma, in VLSM.Examples.Paxos.Voting]
in_futures_preserves_strong_fixed_equivocation [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
in_futures_preserves_can_emit_by_equivocators_composition_for_sent [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
in_futures_preserves_sent_by_non_equivocating [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
in_futures_preserving_oracle_from_stepwise [lemma, in VLSM.Core.Equivocation]
in_futures_witness_reverse [lemma, in VLSM.Core.VLSM]
in_futures_valid_snd [lemma, in VLSM.Core.VLSM]
in_futures_witness [lemma, in VLSM.Core.VLSM]
in_futures_trans [instance, in VLSM.Core.VLSM]
in_futures_refl [lemma, in VLSM.Core.VLSM]
in_futures_valid_fst [lemma, in VLSM.Core.VLSM]
in_futures_strict_preserving [lemma, in VLSM.Core.VLSM]
in_futures_preserving [lemma, in VLSM.Core.VLSM]
in_futures [definition, in VLSM.Core.VLSM]
in_futures_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
in_futures_reflects_fixed_equivocation [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
Irreflexive_state_suffix [instance, in VLSM.Examples.ELMO.UMO]
irrelevant_components [lemma, in VLSM.Core.Composition]
irrelevant_components_one [lemma, in VLSM.Core.Composition]
isReceive [definition, in VLSM.Examples.ELMO.BaseELMO]
isReceive_dec [instance, in VLSM.Examples.ELMO.BaseELMO]
isSend [definition, in VLSM.Examples.ELMO.BaseELMO]
isSend_dec [instance, in VLSM.Examples.ELMO.BaseELMO]
is_chosen [definition, in VLSM.Examples.Paxos.Paxos]
is_equivocating_statewise [definition, in VLSM.Core.Equivocation]
is_equivocating_dec [projection, in VLSM.Core.Equivocation]
is_equivocating [projection, in VLSM.Core.Equivocation]
is_Some_proj_elim [lemma, in VLSM.Lib.StdppExtras]
Is_true_iff_eq_true [lemma, in VLSM.Lib.Preamble]
is_equivocating_tracewise_witness [projection, in VLSM.Core.Equivocation.WitnessedEquivocation]
is_equivocating_statewise_implies_is_equivocating_tracewise [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_equivocating_tracewise_no_has_been_sent_iff [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_equivocating_tracewise_no_has_been_sent_equivocating_senders_in_trace [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_equivocating_tracewise_no_has_been_sent [definition, in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_equivocating_tracewise [definition, in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_newmachine_descriptor [definition, in VLSM.Core.Equivocators.Equivocators]
is_equivocating_state_dec [instance, in VLSM.Core.Equivocators.Equivocators]
is_equivocating_state [definition, in VLSM.Core.Equivocators.Equivocators]
is_singleton_state_dec [lemma, in VLSM.Core.Equivocators.Equivocators]
is_singleton_state [definition, in VLSM.Core.Equivocators.Equivocators]
Itauto [library]
item_sends_or_receives [definition, in VLSM.Core.VLSM]
item_equivocating_in_trace_dec [instance, in VLSM.Core.Equivocation.TraceWiseEquivocation]
item_equivocating_in_trace [definition, in VLSM.Core.Equivocation.TraceWiseEquivocation]
IterT [definition, in VLSM.Lib.TraceProperties]
iterT [inductive, in VLSM.Lib.TraceProperties]
IterT_LastA_DupT [lemma, in VLSM.Lib.TraceProperties]
IterT_DupT [lemma, in VLSM.Lib.TraceProperties]
IterT_IterT [lemma, in VLSM.Lib.TraceProperties]
iterT_iterT [lemma, in VLSM.Lib.TraceProperties]
IterT_IterT_2 [lemma, in VLSM.Lib.TraceProperties]
iterT_iterT_2 [lemma, in VLSM.Lib.TraceProperties]
IterT_fold_L [lemma, in VLSM.Lib.TraceProperties]
IterT_unfold_2 [lemma, in VLSM.Lib.TraceProperties]
IterT_unfold_1 [lemma, in VLSM.Lib.TraceProperties]
iterT_unfold_1 [lemma, in VLSM.Lib.TraceProperties]
IterT_fold_0 [lemma, in VLSM.Lib.TraceProperties]
iterT_split_2 [lemma, in VLSM.Lib.TraceProperties]
IterT_unfold_0 [lemma, in VLSM.Lib.TraceProperties]
iterT_split_1 [lemma, in VLSM.Lib.TraceProperties]
IterT_cont [lemma, in VLSM.Lib.TraceProperties]
iterT_appendT_dupT [lemma, in VLSM.Lib.TraceProperties]
iterT_cont [lemma, in VLSM.Lib.TraceProperties]
iterT_setoidT [lemma, in VLSM.Lib.TraceProperties]
iterT_loop [constructor, in VLSM.Lib.TraceProperties]
iterT_stop [constructor, in VLSM.Lib.TraceProperties]
ITop [constructor, in VLSM.Examples.Tutorial.Formulas]
IVar [constructor, in VLSM.Examples.Tutorial.Formulas]
iYC2 [definition, in VLSM.Lib.SsrExport]
iYC2 [definition, in VLSM.Lib.EquationsExtras]
iYC2 [definition, in VLSM.Lib.Itauto]
iYC2 [definition, in VLSM.Examples.ELMO.AllELMO]
iYC2 [definition, in VLSM.Lib.Ctauto]


L

l [projection, in VLSM.Core.VLSM]
label [projection, in VLSM.Examples.ELMO.BaseELMO]
Label [inductive, in VLSM.Examples.ELMO.BaseELMO]
label [projection, in VLSM.Core.VLSM]
Label [inductive, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Label_sind [definition, in VLSM.Examples.ELMO.BaseELMO]
Label_rec [definition, in VLSM.Examples.ELMO.BaseELMO]
Label_ind [definition, in VLSM.Examples.ELMO.BaseELMO]
Label_rect [definition, in VLSM.Examples.ELMO.BaseELMO]
label_state_project [definition, in VLSM.Examples.Paxos.Voting]
label_23 [definition, in VLSM.Examples.Tutorial.Multiply]
label_a [projection, in VLSM.Core.Plans]
Label_sind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Label_rec [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Label_ind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Label_rect [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
LastA [definition, in VLSM.Lib.TraceProperties]
lastA [definition, in VLSM.Lib.TraceProperties]
LastA_DupT [lemma, in VLSM.Lib.TraceProperties]
LastA_LastA [lemma, in VLSM.Lib.TraceProperties]
LastA_IterA [lemma, in VLSM.Lib.TraceProperties]
LastA_andA [lemma, in VLSM.Lib.TraceProperties]
LastA_AppendA [lemma, in VLSM.Lib.TraceProperties]
lastA_appendA [lemma, in VLSM.Lib.TraceProperties]
LastA_SingletonT_unfold [lemma, in VLSM.Lib.TraceProperties]
LastA_SingletonT_fold [lemma, in VLSM.Lib.TraceProperties]
LastA_cont [lemma, in VLSM.Lib.TraceProperties]
lastA_cont [lemma, in VLSM.Lib.TraceProperties]
lastdup [definition, in VLSM.Lib.TraceProperties]
lastdup_hd [lemma, in VLSM.Lib.TraceProperties]
lastn [definition, in VLSM.Lib.ListExtras]
lastn_length_cons [lemma, in VLSM.Lib.StdppExtras]
lastn_cons [lemma, in VLSM.Lib.ListExtras]
lastn_app_le [lemma, in VLSM.Lib.ListExtras]
lastn_ge [lemma, in VLSM.Lib.ListExtras]
lastn_0 [lemma, in VLSM.Lib.ListExtras]
lastn_nil [lemma, in VLSM.Lib.ListExtras]
lastVote [projection, in VLSM.Examples.Paxos.Paxos]
last_vote_was_sent_paxos [lemma, in VLSM.Examples.Paxos.Paxos]
last_vote_was_sent [lemma, in VLSM.Examples.Paxos.Paxos]
last_error_destination_last [lemma, in VLSM.Core.VLSM]
last_in_trace_except_from [definition, in VLSM.Core.Equivocators.SimulatingFree]
last_last_error [lemma, in VLSM.Lib.StdppExtras]
last_error_is_last [lemma, in VLSM.Lib.ListExtras]
last_error_some [lemma, in VLSM.Lib.ListExtras]
last_map [lemma, in VLSM.Lib.ListExtras]
last_app [lemma, in VLSM.Lib.ListExtras]
last_error [definition, in VLSM.Lib.ListExtras]
last_not_null [lemma, in VLSM.Lib.ListExtras]
LatestCompositeObservedBeforeSend [record, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
latest_observation_Send [definition, in VLSM.Examples.ELMO.ELMO]
latest_composite_observed_before_send_irreflexive [instance, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
latest_composite_observed_before_send_trans [instance, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
latest_composite_observed_before_send [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
lceqv_incomparable [projection, in VLSM.Examples.ELMO.MO]
lceqv_rec_obs2 [projection, in VLSM.Examples.ELMO.MO]
lceqv_rec_obs1 [projection, in VLSM.Examples.ELMO.MO]
lceqv_adr2 [projection, in VLSM.Examples.ELMO.MO]
lceqv_adr1 [projection, in VLSM.Examples.ELMO.MO]
lceqv_ob2 [projection, in VLSM.Examples.ELMO.MO]
lceqv_ob1 [projection, in VLSM.Examples.ELMO.MO]
lcobs_rel [projection, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
lcobs_output_j [projection, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
lcobs_destruct_j [projection, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
lcobs_output_i [projection, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
lcobs_destruct_i [projection, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
leaders_ix [constructor, in VLSM.Examples.Paxos.Paxos]
leaders_has_been_sent_cap [instance, in VLSM.Examples.Paxos.Paxos]
leaders_has_been_sent_props [lemma, in VLSM.Examples.Paxos.Paxos]
leaders_has_been_sent_dec [instance, in VLSM.Examples.Paxos.Paxos]
leaders_messages_iff [lemma, in VLSM.Examples.Paxos.Paxos]
leaders_has_been_sent [definition, in VLSM.Examples.Paxos.Paxos]
leaders_messages_correct [lemma, in VLSM.Examples.Paxos.Paxos]
leaders_messages [definition, in VLSM.Examples.Paxos.Paxos]
leaders_vlsm [definition, in VLSM.Examples.Paxos.Paxos]
leaders_machine [definition, in VLSM.Examples.Paxos.Paxos]
leaders_transition [definition, in VLSM.Examples.Paxos.Paxos]
leaders_valid [definition, in VLSM.Examples.Paxos.Paxos]
leaders_type [definition, in VLSM.Examples.Paxos.Paxos]
leaders_label [definition, in VLSM.Examples.Paxos.Paxos]
leaders_state [definition, in VLSM.Examples.Paxos.Paxos]
leader_has_been_sent [definition, in VLSM.Examples.Paxos.Paxos]
leader_gathered_1b_step [lemma, in VLSM.Examples.Paxos.Paxos]
leader_messages_correct [lemma, in VLSM.Examples.Paxos.Paxos]
leader_messages [definition, in VLSM.Examples.Paxos.Paxos]
leader_result_not_initial [lemma, in VLSM.Examples.Paxos.Paxos]
leader_transition [definition, in VLSM.Examples.Paxos.Paxos]
leader_valid [definition, in VLSM.Examples.Paxos.Paxos]
leader_label_sind [definition, in VLSM.Examples.Paxos.Paxos]
leader_label_rec [definition, in VLSM.Examples.Paxos.Paxos]
leader_label_ind [definition, in VLSM.Examples.Paxos.Paxos]
leader_label_rect [definition, in VLSM.Examples.Paxos.Paxos]
leader_label [inductive, in VLSM.Examples.Paxos.Paxos]
lefo_alt [lemma, in VLSM.Examples.ELMO.ELMO]
lefo_prev [constructor, in VLSM.Examples.ELMO.ELMO]
lefo_last [constructor, in VLSM.Examples.ELMO.ELMO]
length_lastn [lemma, in VLSM.Lib.ListExtras]
len_set_diff_map_set_add [lemma, in VLSM.Lib.ListSetExtras]
len_set_diff_decrease [lemma, in VLSM.Lib.ListSetExtras]
len_set_diff_incl_le [lemma, in VLSM.Lib.ListSetExtras]
les_incomparable [projection, in VLSM.Examples.ELMO.ELMO]
les_obs_m2 [projection, in VLSM.Examples.ELMO.ELMO]
les_obs_m1 [projection, in VLSM.Examples.ELMO.ELMO]
les_adr2 [projection, in VLSM.Examples.ELMO.ELMO]
les_adr1 [projection, in VLSM.Examples.ELMO.ELMO]
les_m2 [projection, in VLSM.Examples.ELMO.ELMO]
les_m1 [projection, in VLSM.Examples.ELMO.ELMO]
lifted_alt_state [definition, in VLSM.Core.ByzantineTraces]
lifted_transition_input_valid [projection, in VLSM.Core.Validator]
lift_leaders_stable_prop [lemma, in VLSM.Examples.Paxos.Paxos]
lift_acceptor_stable_prop [lemma, in VLSM.Examples.Paxos.Paxos]
lift_component_stable_prop [lemma, in VLSM.Examples.Paxos.Paxos]
lift_initial_to_equivocators_state [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
lift_to_equivocators_state [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
lift_sub_preloaded_free_embedding [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_free_embedding [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_free_preloaded_with_embedding [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_incl_preloaded_embedding [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_incl_embedding [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_incl_transition [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_incl_valid [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_incl_label [definition, in VLSM.Core.SubProjectionTraces]
lift_sub_incl_message_initial [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_incl_state_initial [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_incl_state [definition, in VLSM.Core.SubProjectionTraces]
lift_sub_to_transition [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_to_valid [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_transition [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_valid [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_message_initial [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_state_to_initial [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_state_initial [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_state_to_neq_state_update [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_state_to_neq [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_state_to_eq [lemma, in VLSM.Core.SubProjectionTraces]
lift_sub_state [definition, in VLSM.Core.SubProjectionTraces]
lift_sub_state_to [definition, in VLSM.Core.SubProjectionTraces]
lift_sub_label [definition, in VLSM.Core.SubProjectionTraces]
lift_fixed_byzantine_traces_to_limited [lemma, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
lift_preloaded_fixed_non_byzantine_valid_transition_to_limited [lemma, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
lift_fixed_non_equivocating [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_strong_fixed_non_equivocating [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_sub_state_to_sent_are_directly_observed [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_sub_state_to_strong_fixed_equivocation [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_sub_state_to_sent_by_non_equivocating_iff [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_generated_to_seeded [lemma, in VLSM.Core.Equivocation]
lift_preloaded_state_to_seeded [lemma, in VLSM.Core.Equivocation]
lift_preloaded_trace_to_seeded [lemma, in VLSM.Core.Equivocation]
lift_to_composite_transition_item_state [definition, in VLSM.Core.TraceableVLSM]
lift_receive_trace [lemma, in VLSM.Examples.ELMO.ELMO]
lift_equivocators_sub_weak_projection [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
lift_initial_message [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_transition [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_valid [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_state_to_size [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_state_to_sub [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_state_to [definition, in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_label_to [definition, in VLSM.Core.Equivocators.FullReplayTraces]
lift_to_composite_plan [definition, in VLSM.Core.Composition]
lift_to_preloaded_free_weak_embedding [lemma, in VLSM.Core.Composition]
lift_to_free_weak_embedding [lemma, in VLSM.Core.Composition]
lift_to_composite_initial_message_preservation [lemma, in VLSM.Core.Composition]
lift_to_composite_transition_preservation [lemma, in VLSM.Core.Composition]
lift_to_composite_valid_preservation [lemma, in VLSM.Core.Composition]
lift_to_composite_preloaded_VLSM_embedding [lemma, in VLSM.Core.Composition]
lift_to_composite_generalized_preloaded_VLSM_embedding [lemma, in VLSM.Core.Composition]
lift_to_composite_finite_trace_last [definition, in VLSM.Core.Composition]
lift_to_composite_finite_trace [definition, in VLSM.Core.Composition]
lift_to_composite_VLSM_embedding [lemma, in VLSM.Core.Composition]
lift_to_composite_plan_item [definition, in VLSM.Core.Composition]
lift_to_composite_transition_item' [definition, in VLSM.Core.Composition]
lift_to_composite_state' [definition, in VLSM.Core.Composition]
lift_to_composite_transition_item [definition, in VLSM.Core.Composition]
lift_to_composite_label [definition, in VLSM.Core.Composition]
lift_to_composite_state [definition, in VLSM.Core.Composition]
lift_to_UMO_constrained_state_prop [lemma, in VLSM.Examples.ELMO.UMO]
lift_to_UMO_finite_constrained_trace_from_to [lemma, in VLSM.Examples.ELMO.UMO]
lift_to_UMO_finite_valid_trace_from_to [lemma, in VLSM.Examples.ELMO.UMO]
lift_to_UMO_input_valid_transition [lemma, in VLSM.Examples.ELMO.UMO]
lift_to_UMO_valid_message_prop [lemma, in VLSM.Examples.ELMO.UMO]
lift_to_UMO_valid_state_prop [lemma, in VLSM.Examples.ELMO.UMO]
lift_to_UMO [lemma, in VLSM.Examples.ELMO.UMO]
lift_to_UMO_trace [definition, in VLSM.Examples.ELMO.UMO]
lift_to_UMO_state [definition, in VLSM.Examples.ELMO.UMO]
lift_to_UMO_label [definition, in VLSM.Examples.ELMO.UMO]
LimitedByzantineTraces [library]
LimitedELMO [definition, in VLSM.Examples.ELMO.ELMO]
LimitedEquivocationProp [inductive, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
LimitedEquivocationProp_impl_not_heavy [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
LimitedEquivocationProp_sind [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
LimitedEquivocationProp_ind [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
LimitedEquivocationSimulation [library]
LimitedMessageEquivocation [library]
LimitedStateEquivocation [library]
limited_equivocators_vlsm_projection [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
limited_equivocators_vlsm_partial_projection [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
limited_equivocators_valid_trace_project [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
limited_PreNonByzantine_vlsm_lift [lemma, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
limited_PreNonByzantine_lift_valid [lemma, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
limited_PreNonByzantine_valid_state_lift_not_heavy [lemma, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
limited_byzantine_trace_prop [definition, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
limited_valid_state_has_trace_exhibiting_limited_equivocation [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_traces_exhibiting_limited_equivocation_are_valid_rev [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_equivocation_valid_state [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_equivocation_composite_vlsm [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_equivocation_constraint [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_equivocation [constructor, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_equivocators_valid_state_rev [lemma, in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
limited_equivocators_finite_valid_trace_init_to_rev [lemma, in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
ListExtras [library]
ListSetExtras [library]
list_subseteq_inv_app [lemma, in VLSM.Lib.StdppExtras]
list_max_elem_of_exists2 [lemma, in VLSM.Lib.StdppExtras]
list_max_elem_of_exists [lemma, in VLSM.Lib.StdppExtras]
list_subseteq_filter [lemma, in VLSM.Lib.StdppExtras]
list_difference_singleton_length_in [lemma, in VLSM.Lib.StdppExtras]
list_difference_singleton_not_in [lemma, in VLSM.Lib.StdppExtras]
list_lookup_lt [lemma, in VLSM.Lib.StdppExtras]
list_compare_transitive [lemma, in VLSM.Lib.Preamble]
list_compare_reflexive [lemma, in VLSM.Lib.Preamble]
list_compare [definition, in VLSM.Lib.Preamble]
list_to_set_size [lemma, in VLSM.Lib.FinSetExtras]
list_filter_map_mbind [lemma, in VLSM.Lib.NeList]
list_function_restriction [definition, in VLSM.Lib.NeList]
list_to_option_ne_list_unroll [lemma, in VLSM.Lib.NeList]
list_to_option_ne_list [definition, in VLSM.Lib.NeList]
list_subseteq_dec [instance, in VLSM.Lib.ListExtras]
list_subseteq_tran [lemma, in VLSM.Lib.ListExtras]
list_sum_decrease [lemma, in VLSM.Lib.ListExtras]
list_sum_map [lemma, in VLSM.Lib.ListExtras]
list_sum_project_right [definition, in VLSM.Lib.ListExtras]
list_sum_project_left [definition, in VLSM.Lib.ListExtras]
list_max_exists [lemma, in VLSM.Lib.ListExtras]
list_segment_singleton [lemma, in VLSM.Lib.ListExtras]
list_segment_app [lemma, in VLSM.Lib.ListExtras]
list_segment_nth [lemma, in VLSM.Lib.ListExtras]
list_filter_map_app [lemma, in VLSM.Lib.ListExtras]
list_filter_map [definition, in VLSM.Lib.ListExtras]
list_annotate_forget [lemma, in VLSM.Lib.ListExtras]
list_annotate_NoDup [lemma, in VLSM.Lib.ListExtras]
list_annotate_app [lemma, in VLSM.Lib.ListExtras]
list_annotate_eq [lemma, in VLSM.Lib.ListExtras]
list_annotate_pi [lemma, in VLSM.Lib.ListExtras]
list_annotate_length [lemma, in VLSM.Lib.ListExtras]
list_annotate [definition, in VLSM.Lib.ListExtras]
list_segment [definition, in VLSM.Lib.ListExtras]
liveness [definition, in VLSM.Lib.Preamble]
liveness_dec [definition, in VLSM.Lib.Preamble]
LocalEvenConstraint [inductive, in VLSM.Examples.Tutorial.PrimesComposition]
LocalEvenConstraint_sind [definition, in VLSM.Examples.Tutorial.PrimesComposition]
LocalEvenConstraint_ind [definition, in VLSM.Examples.Tutorial.PrimesComposition]
localize_sent_messages [lemma, in VLSM.Examples.Paxos.Paxos]
localize_send [lemma, in VLSM.Examples.Paxos.Paxos]
LocallySorted_elem_of_lt [lemma, in VLSM.Lib.SortedLists]
LocallySorted_tl [lemma, in VLSM.Lib.SortedLists]
LocallySorted_filter [lemma, in VLSM.Lib.SortedLists]
LocallySorted_ForAll2 [lemma, in VLSM.Lib.SortedLists]
local_even_constraint [constructor, in VLSM.Examples.Tutorial.PrimesComposition]
local_equivocators_full_step_update [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_iff_full [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_iff_simple [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_iff_full [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_prev [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_add_Receive [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_increase_only_received_adr [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_nondecreasing [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_no_self [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_add_Send [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_addObservation [lemma, in VLSM.Examples.ELMO.ELMO]
local_equivocation_limit_ok [definition, in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_dec [instance, in VLSM.Examples.ELMO.ELMO]
local_equivocators_full [definition, in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_obs_dec [instance, in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_obs_sind [definition, in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_obs_ind [definition, in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_obs [inductive, in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple [record, in VLSM.Examples.ELMO.ELMO]
local_equivocators [record, in VLSM.Examples.ELMO.MO]
longer_subseteq_has_dups [lemma, in VLSM.Lib.StdppExtras]
lsorted_pair_wise_unordered [lemma, in VLSM.Lib.SortedLists]
lsorted_pairwise_ordered [lemma, in VLSM.Lib.SortedLists]
lsorted_app [lemma, in VLSM.Lib.SortedLists]
L_send_2a [constructor, in VLSM.Examples.Paxos.Paxos]
L_send_1c [constructor, in VLSM.Examples.Paxos.Paxos]
L_recv_1b [constructor, in VLSM.Examples.Paxos.Paxos]
L_send_1a [constructor, in VLSM.Examples.Paxos.Paxos]


M

MachineDescriptor [inductive, in VLSM.Core.Equivocators.Equivocators]
MachineDescriptor_sind [definition, in VLSM.Core.Equivocators.Equivocators]
MachineDescriptor_rec [definition, in VLSM.Core.Equivocators.Equivocators]
MachineDescriptor_ind [definition, in VLSM.Core.Equivocators.Equivocators]
MachineDescriptor_rect [definition, in VLSM.Core.Equivocators.Equivocators]
map_set_eq [lemma, in VLSM.Lib.ListSetExtras]
map_list_subseteq [lemma, in VLSM.Lib.ListSetExtras]
map_tail [lemma, in VLSM.Lib.StdppExtras]
map_list_subseteq [lemma, in VLSM.Lib.ListExtras]
maxBal [projection, in VLSM.Examples.Paxos.Voting]
maxBal_limits_votes_prop [definition, in VLSM.Examples.Paxos.Voting]
maximal_element_in [lemma, in VLSM.Lib.TopSort]
maximal_elements_set [definition, in VLSM.Lib.StdppExtras]
maximal_elements_list2 [definition, in VLSM.Lib.StdppExtras]
maximal_elements_list1 [definition, in VLSM.Lib.StdppExtras]
maximal_elements_list [definition, in VLSM.Lib.StdppExtras]
maximal_among [definition, in VLSM.Lib.Preamble]
maxVBal [definition, in VLSM.Examples.Paxos.Paxos]
maxVBal_mono [lemma, in VLSM.Examples.Paxos.Paxos]
maxVBal_le_paxos_maxBal [lemma, in VLSM.Examples.Paxos.Paxos]
maxVVal [definition, in VLSM.Examples.Paxos.Paxos]
max_suffix_residual_prefix [lemma, in VLSM.Lib.ListExtras]
max_suffix_is_longest [lemma, in VLSM.Lib.ListExtras]
max_suffix_is_suffix [lemma, in VLSM.Lib.ListExtras]
max_suffix_comm_let [lemma, in VLSM.Lib.ListExtras]
max_suffix_spec [lemma, in VLSM.Lib.ListExtras]
max_suffix_last_inv [lemma, in VLSM.Lib.ListExtras]
max_suffix_last [lemma, in VLSM.Lib.ListExtras]
max_suffix_app_let [lemma, in VLSM.Lib.ListExtras]
max_suffix_diag [lemma, in VLSM.Lib.ListExtras]
max_prefix_residual_suffix [lemma, in VLSM.Lib.ListExtras]
max_prefix_is_longest [lemma, in VLSM.Lib.ListExtras]
max_prefix_idem [lemma, in VLSM.Lib.ListExtras]
max_prefix_comm_let [lemma, in VLSM.Lib.ListExtras]
max_prefix_comm [lemma, in VLSM.Lib.ListExtras]
max_prefix_spec [lemma, in VLSM.Lib.ListExtras]
max_prefix_head_inv [lemma, in VLSM.Lib.ListExtras]
max_prefix_app_let [lemma, in VLSM.Lib.ListExtras]
max_prefix_app [lemma, in VLSM.Lib.ListExtras]
max_prefix_head [lemma, in VLSM.Lib.ListExtras]
max_prefix_diag [lemma, in VLSM.Lib.ListExtras]
max_prefix_nil_r [lemma, in VLSM.Lib.ListExtras]
max_prefix_nil_l [lemma, in VLSM.Lib.ListExtras]
mbind_nils [lemma, in VLSM.Lib.StdppExtras]
mbind_app [lemma, in VLSM.Lib.StdppExtras]
MCMachine [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MCType [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MCVLSM [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_safety_initial [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_safety [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_round_bound [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_progress [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_item_update [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_undecided_to_muddy_increase_round [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_undecided_increase_round [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_muddy_increase_round [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_muddy_to_clean_increase_round [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_muddy_to_muddy_increase_round [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_noequiv_valid [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_valid_message [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_clean_muddy_trace_valid [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_clean_muddy_trace_last_helper [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_clean_muddy_trace_last_target [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_clean_muddy_trace [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_muddy_muddy_trace_valid [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_message_from_valid_state [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_muddy_muddy_trace_last_helper [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_muddy_muddy_trace_last_target [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_muddy_muddy_trace [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_noninitial_state_undecided_round_less_obs [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_noequiv_muddy [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_preservation_inductive [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_preservation [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_helper_from_constraint [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_preservation_muddy_from_clean [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_preservation_muddy_from_undecided [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_inductive [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_equiv_MC_component_invariant_inductive [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_inductive_sind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_inductive_ind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_inductive [inductive, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_helper [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_undecided_round_lt_obs_minus_one [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_undecided_round_obs [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_undecided_round_obs_minus_one [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_muddy_round_obs_minus_one [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_muddy_round_obs [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_clean_round_obs_plus_one [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_clean_round_obs [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_number_of_muddy_seen [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_clean_number_of_muddy_seen_iff [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_clean_number_of_muddy_seen [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_muddy_number_of_muddy_seen_iff [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_muddy_number_of_muddy_seen [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_non_initial_valid_consistent [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_in_futures_preserves_consistency [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_in_futures_preserves_muddy [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_in_futures_preserves_obs_equiv [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_trans_preserves_obs_equiv [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_preserves_consistency [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_preserves_muddy [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_state_update_preserves_obs_equiv [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_equiv [instance, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_trans [instance, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_symm [instance, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_refl [instance, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equivalence [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_non_initial_valid_state [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_initial_consistent_state [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_final_state [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_vlsm [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_constraint [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive_equiv [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive_sind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive_ind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive_undecided [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive_msg_eq [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive [inductive, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_initial_state_dec [instance, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_initial_state [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_initial_state_type [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_sind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_ind [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_receive [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_emit [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_init [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid [inductive, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_initial_state_prop [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
mdgee_not_sent [projection, in VLSM.Core.MessageDependencies]
mdgee_rec_observed [projection, in VLSM.Core.MessageDependencies]
mdgee_sender [projection, in VLSM.Core.MessageDependencies]
mdlee_incomparable [projection, in VLSM.Core.MessageDependencies]
mdlee_observed2 [projection, in VLSM.Core.MessageDependencies]
mdlee_observed1 [projection, in VLSM.Core.MessageDependencies]
mdlee_sender2 [projection, in VLSM.Core.MessageDependencies]
mdlee_sender1 [projection, in VLSM.Core.MessageDependencies]
Measurable [record, in VLSM.Lib.Measurable]
Measurable [inductive, in VLSM.Lib.Measurable]
Measurable [library]
Message [record, in VLSM.Examples.ELMO.BaseELMO]
message [projection, in VLSM.Examples.ELMO.BaseELMO]
Message [record, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MessageDependencies [record, in VLSM.Core.MessageDependencies]
MessageDependencies [library]
MessageDependencies_ELMO_component [instance, in VLSM.Examples.ELMO.ELMO]
MessageDependencies_MO_component [instance, in VLSM.Examples.ELMO.MO]
MessageHasSender [inductive, in VLSM.Examples.ELMO.ELMO]
MessageHasSender_sind [definition, in VLSM.Examples.ELMO.ELMO]
MessageHasSender_ind [definition, in VLSM.Examples.ELMO.ELMO]
MessageProperties [library]
messages [definition, in VLSM.Examples.ELMO.BaseELMO]
messages_sizeState [lemma, in VLSM.Examples.ELMO.BaseELMO]
messages_addObservation [lemma, in VLSM.Examples.ELMO.BaseELMO]
messages_received_from_component_of_valid_state_are_valid [lemma, in VLSM.Core.Equivocation]
messages_sent_from_component_of_valid_state_are_valid [lemma, in VLSM.Core.Equivocation]
messages_sent_from_component_produced_previously [lemma, in VLSM.Core.Equivocation]
messages_hb_transitive [lemma, in VLSM.Examples.ELMO.ELMO]
messages_with_valid_dependences_can_be_emitted [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
messages_rec_obs [lemma, in VLSM.Examples.ELMO.MO]
messages' [definition, in VLSM.Examples.ELMO.BaseELMO]
message_dependencies_full_node_condition_prop [definition, in VLSM.Core.MessageDependencies]
message_dependencies_are_sufficient [projection, in VLSM.Core.MessageDependencies]
message_dependencies_are_necessary [projection, in VLSM.Core.MessageDependencies]
message_dependencies_full_node_condition [definition, in VLSM.Core.MessageDependencies]
message_sender [definition, in VLSM.Examples.Paxos.Paxos]
Message_validator_measurable [instance, in VLSM.Examples.ELMO.BaseELMO]
Message_sender_index_inj [instance, in VLSM.Examples.ELMO.BaseELMO]
Message_sender_index_address [lemma, in VLSM.Examples.ELMO.BaseELMO]
Message_sender_index_inv [lemma, in VLSM.Examples.ELMO.BaseELMO]
Message_sender_index_inv_fn [definition, in VLSM.Examples.ELMO.BaseELMO]
Message_sender_index [definition, in VLSM.Examples.ELMO.BaseELMO]
Message_sender_Some_adr_iff [lemma, in VLSM.Examples.ELMO.BaseELMO]
Message_sender_Some_adr [lemma, in VLSM.Examples.ELMO.BaseELMO]
Message_sender [definition, in VLSM.Examples.ELMO.BaseELMO]
Message_validator [definition, in VLSM.Examples.ELMO.BaseELMO]
Message_FullMessageDependencies [instance, in VLSM.Examples.ELMO.BaseELMO]
Message_full_dependencies_sizeState [lemma, in VLSM.Examples.ELMO.BaseELMO]
Message_full_dependencies [definition, in VLSM.Examples.ELMO.BaseELMO]
Message_dependencies [definition, in VLSM.Examples.ELMO.BaseELMO]
Message_eq_dec [lemma, in VLSM.Examples.ELMO.BaseELMO]
Message_sind [definition, in VLSM.Examples.ELMO.BaseELMO]
Message_rec [definition, in VLSM.Examples.ELMO.BaseELMO]
Message_ind [definition, in VLSM.Examples.ELMO.BaseELMO]
Message_rect [definition, in VLSM.Examples.ELMO.BaseELMO]
message_valid_transitions_from_to_sind [definition, in VLSM.Core.VLSM]
message_valid_transitions_from_to_ind [definition, in VLSM.Core.VLSM]
message_valid_transitions_from_to [inductive, in VLSM.Core.VLSM]
message_has_sender [constructor, in VLSM.Examples.ELMO.ELMO]
message_equivocators_can_emit [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
message_index [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
message_round [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
message_status [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
message_as_byzantine_label [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
message_validator_prop [definition, in VLSM.Core.Validator]
message_suffix_directly_observable [lemma, in VLSM.Examples.ELMO.UMO]
message_suffix [definition, in VLSM.Examples.ELMO.UMO]
midp [definition, in VLSM.Lib.TraceClassicalProperties]
midpointT [inductive, in VLSM.Lib.TraceProperties]
midpointT_after [lemma, in VLSM.Lib.TraceProperties]
midpointT_before [lemma, in VLSM.Lib.TraceProperties]
midpointT_delay [constructor, in VLSM.Lib.TraceProperties]
midpointT_nil [constructor, in VLSM.Lib.TraceProperties]
midpointT_midp [lemma, in VLSM.Lib.TraceClassicalProperties]
MinimalEquivocationTrace [library]
minimal_equivocation_choice_monotone [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
minimal_equivocation_choice_is_choosing_well [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
minimal_equivocation_choice [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
minimal_among_le_0 [lemma, in VLSM.Lib.Preamble]
minimal_among [definition, in VLSM.Lib.Preamble]
min_predecessors_zero [lemma, in VLSM.Lib.TopSort]
min_predecessors_correct [lemma, in VLSM.Lib.TopSort]
min_predecessors_in [lemma, in VLSM.Lib.TopSort]
min_predecessors [definition, in VLSM.Lib.TopSort]
min_liveness [definition, in VLSM.Lib.Preamble]
mjoin_app [lemma, in VLSM.Lib.StdppExtras]
mk_vlsm_machine [lemma, in VLSM.Core.VLSM]
mk_singleton_initial_state [lemma, in VLSM.Core.Equivocators.Equivocators]
mk_singleton_state [definition, in VLSM.Core.Equivocators.Equivocators]
mmap_insert [definition, in VLSM.Lib.FinSetExtras]
MO [definition, in VLSM.Examples.ELMO.MO]
MO [library]
MOCV_Send [constructor, in VLSM.Examples.ELMO.MO]
MOCV_Receive [constructor, in VLSM.Examples.ELMO.MO]
mode [definition, in VLSM.Lib.ListExtras]
mode_not_empty [lemma, in VLSM.Lib.StdppExtras]
mode1 [definition, in VLSM.Lib.ListExtras]
monotone_nat_stream_tl [lemma, in VLSM.Lib.StreamExtras]
monotone_nat_stream [definition, in VLSM.Lib.StreamExtras]
monotone_nat_stream_find [lemma, in VLSM.Lib.StreamExtras]
monotone_nat_stream_rev [lemma, in VLSM.Lib.StreamExtras]
monotone_nat_stream_prop_from_successor [lemma, in VLSM.Lib.StreamExtras]
monotone_nat_stream_prop [definition, in VLSM.Lib.StreamExtras]
MO_component_validating [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_free [lemma, in VLSM.Examples.ELMO.MO]
MO_channel_authentication_prop [lemma, in VLSM.Examples.ELMO.MO]
MO_reachable_adr [lemma, in VLSM.Examples.ELMO.MO]
MO_reachable_view [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_suffix [definition, in VLSM.Examples.ELMO.MO]
MO_component_valid_transition_size [lemma, in VLSM.Examples.ELMO.MO]
MO_component [definition, in VLSM.Examples.ELMO.MO]
MO_component_machine [definition, in VLSM.Examples.ELMO.MO]
MO_component_valid_sind [definition, in VLSM.Examples.ELMO.MO]
MO_component_valid_ind [definition, in VLSM.Examples.ELMO.MO]
MO_component_valid [inductive, in VLSM.Examples.ELMO.MO]
MO_msg_valid__MO_msg_valid_alt [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Send_inv [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Receive_conv [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_Receive_conv [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_Receive_conv [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Receive [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_Receive [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_Receive [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Send_conv [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_Send_conv [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_Send_conv [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Send [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_Send [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_Send [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_shorten [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_shorten [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_bounded [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_bounded [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sind [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_rec [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_ind [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_rect [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs'' [projection, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends' [projection, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt [record, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs' [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_dep [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_P_adr [lemma, in VLSM.Examples.ELMO.MO]
MO_msg_valid_sind [definition, in VLSM.Examples.ELMO.MO]
MO_msg_valid_ind [definition, in VLSM.Examples.ELMO.MO]
MO_mv_recv [constructor, in VLSM.Examples.ELMO.MO]
MO_mv_send [constructor, in VLSM.Examples.ELMO.MO]
MO_mv_nil [constructor, in VLSM.Examples.ELMO.MO]
MO_msg_valid [inductive, in VLSM.Examples.ELMO.MO]
MsgDepFixedSetEquivocation [library]
MsgDepGlobalEquivocationEvidence [record, in VLSM.Core.MessageDependencies]
MsgDepLimitedEquivocation [library]
MsgDepLocalEquivocationEvidence [record, in VLSM.Core.MessageDependencies]
msg_dep_happens_before_wf [lemma, in VLSM.Core.MessageDependencies]
msg_dep_rel_full_message_dependecies_subset [lemma, in VLSM.Core.MessageDependencies]
msg_dep_happens_before_strict [instance, in VLSM.Core.MessageDependencies]
msg_dep_happens_before_irrefl [instance, in VLSM.Core.MessageDependencies]
msg_dep_happens_before_dec [instance, in VLSM.Core.MessageDependencies]
msg_dep_reflects_sub_free_validity [lemma, in VLSM.Core.MessageDependencies]
msg_dep_locally_is_globally_equivocating [lemma, in VLSM.Core.MessageDependencies]
msg_dep_is_globally_equivocating [definition, in VLSM.Core.MessageDependencies]
msg_dep_happens_before_composite_no_initial_valid_messages_emitted_by_sender [lemma, in VLSM.Core.MessageDependencies]
msg_dep_reflects_happens_before_free_validity [lemma, in VLSM.Core.MessageDependencies]
msg_dep_reflects_free_validity [lemma, in VLSM.Core.MessageDependencies]
msg_dep_is_locally_equivocating [definition, in VLSM.Core.MessageDependencies]
msg_dep_full_node_input_valid_happens_before_has_been_directly_observed [lemma, in VLSM.Core.MessageDependencies]
msg_dep_full_node_happens_before_reflects_has_been_directly_observed [lemma, in VLSM.Core.MessageDependencies]
msg_dep_full_node_reflects_has_been_directly_observed [lemma, in VLSM.Core.MessageDependencies]
msg_dep_has_been_sent [lemma, in VLSM.Core.MessageDependencies]
msg_dep_reflects_validity [lemma, in VLSM.Core.MessageDependencies]
msg_dep_happens_before_reflect [lemma, in VLSM.Core.MessageDependencies]
msg_dep_happens_before_iff_one [lemma, in VLSM.Core.MessageDependencies]
msg_dep_happens_before [definition, in VLSM.Core.MessageDependencies]
msg_dep_rel [definition, in VLSM.Core.MessageDependencies]
msg_dep_reflects_free_valid_message [lemma, in VLSM.Core.Validators.FreeCompositionValidator]
msg_dep_validator_limited_non_equivocating_byzantine_traces_are_limited_non_equivocating [lemma, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
msg_dep_limited_fixed_equivocation [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_fixed_limited_equivocation [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_fixed_limited_equivocation_witnessed [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_full_node_limited_equivocation_vlsm_incl [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_full_node_transition_iff [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_full_node_valid_iff [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_annotate_trace_with_equivocators_project [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_limited_equivocation_projection_validator_prop_alt [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_limited_equivocation_message_validator_prop [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_limited_equivocation_projection_validator_prop [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_composite_transition_message_equivocators [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_annotate_trace_with_equivocators_last_original_state [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_annotate_trace_with_equivocators_app [lemma, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_annotate_trace_with_equivocators [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_message_equivocators [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_limited_equivocation_vlsm [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_coequivocating_senders [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_status [projection, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
msg_round [projection, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
msg_index [projection, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
msg_dep_full_node_fixed_set_equivocation_constraint_subsumption [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_strong_fixed_equivocation_eq [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_strong_fixed_equivocation_incl [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_rel_reflects_strong_fixed_equivocation [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_strong_fixed_equivocation_constraint_subsumption [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_strong_fixed_equivocation_subsumption [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_rel_reflects_dependencies_with_non_equivocating_senders_were_sent [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_fixed_set_equivocation_vlsm [definition, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_fixed_set_equivocation_constraint [definition, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_fixed_set_equivocation [definition, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
muddy [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MuddyChildrenRounds [library]
MuddyUnion [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MuddyUnion_elem [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
multiplier_23 [definition, in VLSM.Examples.Tutorial.Multiply]
Multiply [library]
multiplying_valid [definition, in VLSM.Examples.Tutorial.Multiply]
multiplying_initial_state_type_inhabited [instance, in VLSM.Examples.Tutorial.Multiply]
multiplying_initial_state [definition, in VLSM.Examples.Tutorial.Multiply]
multiplying_initial_state_type [definition, in VLSM.Examples.Tutorial.Multiply]
multiplying_initial_state_prop [definition, in VLSM.Examples.Tutorial.Multiply]
multiplying_type [definition, in VLSM.Examples.Tutorial.Multiply]
multiplying_message [definition, in VLSM.Examples.Tutorial.Multiply]
multiplying_state [definition, in VLSM.Examples.Tutorial.Multiply]
multiplying_label [definition, in VLSM.Examples.Tutorial.Multiply]
multiply_label [definition, in VLSM.Examples.Tutorial.Multiply]
MVF_recv [constructor, in VLSM.Examples.ELMO.ELMO]
MVF_send [constructor, in VLSM.Examples.ELMO.ELMO]
MVF_nil [constructor, in VLSM.Examples.ELMO.ELMO]
mvt_extend [constructor, in VLSM.Core.VLSM]
mvt_empty [constructor, in VLSM.Core.VLSM]
m_2b [constructor, in VLSM.Examples.Paxos.Paxos]
m_2a [constructor, in VLSM.Examples.Paxos.Paxos]
m_1c [constructor, in VLSM.Examples.Paxos.Paxos]
m_1b [constructor, in VLSM.Examples.Paxos.Paxos]
m_1a [constructor, in VLSM.Examples.Paxos.Paxos]


N

NatExtras [library]
NatFSFun [inductive, in VLSM.Lib.FinSuppFn]
NatFSFun_complete [lemma, in VLSM.Lib.FinSuppFn]
NatFSFun_sind [definition, in VLSM.Lib.FinSuppFn]
NatFSFun_ind [definition, in VLSM.Lib.FinSuppFn]
nat_fsfun_ind [lemma, in VLSM.Lib.FinSuppFn]
nat_fsfun_inv [lemma, in VLSM.Lib.FinSuppFn]
nat_sequence_prefix_sorted [definition, in VLSM.Lib.StreamExtras]
nat_sequence_from_prefix_sorted [lemma, in VLSM.Lib.StreamExtras]
nat_sequence_sorted [definition, in VLSM.Lib.StreamExtras]
nat_sequence_from_sorted [lemma, in VLSM.Lib.StreamExtras]
nat_sequence_nth [lemma, in VLSM.Lib.StreamExtras]
nat_sequence_from_nth [lemma, in VLSM.Lib.StreamExtras]
nat_sequence [definition, in VLSM.Lib.StreamExtras]
nat_sequence_from [definition, in VLSM.Lib.StreamExtras]
Neg [constructor, in VLSM.Examples.Tutorial.Formulas]
negate_oracle [definition, in VLSM.Core.Equivocation]
NeList [record, in VLSM.Lib.NeList]
NeList [library]
NeList_to_ne_list_to_NeList [lemma, in VLSM.Lib.NeList]
NeList_to_ne_list_to_list [lemma, in VLSM.Lib.NeList]
NeList_to_ne_list_unroll [lemma, in VLSM.Lib.NeList]
NeList_to_ne_list [definition, in VLSM.Lib.NeList]
NEL_singl [definition, in VLSM.Lib.NeList]
nel_tl [projection, in VLSM.Lib.NeList]
nel_hd [projection, in VLSM.Lib.NeList]
nel_cons [constructor, in VLSM.Lib.NeList]
nel_singl [constructor, in VLSM.Lib.NeList]
NewMachine [constructor, in VLSM.Core.Equivocators.Equivocators]
newmachine_descriptors_list [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
newmachine_descriptor_dec [lemma, in VLSM.Core.Equivocators.Equivocators]
new_machine_label_equivocator_state_project_not_last [lemma, in VLSM.Core.Equivocators.Equivocators]
new_machine_label_equivocator_state_project_last [lemma, in VLSM.Core.Equivocators.Equivocators]
new_machine_label_equivocator_transition_size [lemma, in VLSM.Core.Equivocators.Equivocators]
ne_list_to_NonEmptyList_to_ne_list [lemma, in VLSM.Lib.NeList]
ne_list_to_NonEmptyList [definition, in VLSM.Lib.NeList]
ne_list_concat_min_length [lemma, in VLSM.Lib.NeList]
ne_list_from_non_empty_list [definition, in VLSM.Lib.NeList]
ne_list_subseteq [instance, in VLSM.Lib.NeList]
ne_list_to_NeList_to_ne_list [lemma, in VLSM.Lib.NeList]
ne_list_to_list_to_nelist [lemma, in VLSM.Lib.NeList]
ne_list_to_NeList [definition, in VLSM.Lib.NeList]
ne_list_option_cons [definition, in VLSM.Lib.NeList]
ne_list_to_list_tl [definition, in VLSM.Lib.NeList]
ne_list_to_list_unroll [lemma, in VLSM.Lib.NeList]
ne_list_min_length [lemma, in VLSM.Lib.NeList]
ne_list_length [definition, in VLSM.Lib.NeList]
ne_list_to_list [definition, in VLSM.Lib.NeList]
ne_list_equiv_sind [definition, in VLSM.Lib.NeList]
ne_list_equiv_ind [definition, in VLSM.Lib.NeList]
ne_cons_equiv [constructor, in VLSM.Lib.NeList]
ne_one_equiv [constructor, in VLSM.Lib.NeList]
ne_list_equiv [inductive, in VLSM.Lib.NeList]
ne_list_join [instance, in VLSM.Lib.NeList]
ne_list_fmap [instance, in VLSM.Lib.NeList]
ne_list_bind [instance, in VLSM.Lib.NeList]
ne_list_ret [instance, in VLSM.Lib.NeList]
ne_list_app [definition, in VLSM.Lib.NeList]
ne_list_foldr [definition, in VLSM.Lib.NeList]
ne_list_tl [definition, in VLSM.Lib.NeList]
ne_list_hd [definition, in VLSM.Lib.NeList]
ne_list_sind [definition, in VLSM.Lib.NeList]
ne_list_rec [definition, in VLSM.Lib.NeList]
ne_list_ind [definition, in VLSM.Lib.NeList]
ne_list_rect [definition, in VLSM.Lib.NeList]
ne_list [inductive, in VLSM.Lib.NeList]
nil_singletonT [lemma, in VLSM.Lib.TraceProperties]
nl_tl [projection, in VLSM.Lib.NeList]
nl_hd [projection, in VLSM.Lib.NeList]
node_generated_without_further_equivocation_weaken [lemma, in VLSM.Core.Equivocation.FullNode]
node_generated_without_further_equivocation_alt [definition, in VLSM.Core.Equivocation.FullNode]
node_generated_without_further_equivocation [definition, in VLSM.Core.Equivocation.FullNode]
NoDup_elem_of_remove [lemma, in VLSM.Lib.StdppExtras]
NoDup_subseteq_length [lemma, in VLSM.Lib.ListExtras]
nodup_append_left [lemma, in VLSM.Lib.ListExtras]
NoDup_omap [lemma, in VLSM.Lib.ListExtras]
NoEquivocation [library]
NonEmptyList [record, in VLSM.Lib.NeList]
NonEmptyList_to_ne_list_to_NonEmptyList [lemma, in VLSM.Lib.NeList]
NonEmptyList_to_ne_list [definition, in VLSM.Lib.NeList]
NonEmptyList_ind' [definition, in VLSM.Lib.NeList]
NonEmptyList_inhabited [instance, in VLSM.Lib.NeList]
NonEmptyList_sind [definition, in VLSM.Lib.NeList]
NonEmptyList_rec [definition, in VLSM.Lib.NeList]
NonEmptyList_ind [definition, in VLSM.Lib.NeList]
NonEmptyList_rect [definition, in VLSM.Lib.NeList]
non_sub_index_authenticated_message [definition, in VLSM.Core.SubProjectionTraces]
non_empty_valid_trace_from_can_produce [lemma, in VLSM.Core.VLSM]
non_equivocating_received_message_continues_trace [lemma, in VLSM.Examples.ELMO.ELMO]
non_initial_state_has_init_tr [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
non_byzantine_components_same_sym [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
non_byzantine_components_same [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
non_byzantine_not_equivocating_constraint [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
NoPrevVotes [definition, in VLSM.Examples.Paxos.Paxos]
NotT [definition, in VLSM.Lib.TraceProperties]
notT [definition, in VLSM.Lib.TraceProperties]
notT_setoidT [lemma, in VLSM.Lib.TraceProperties]
not_equivocating_equivocator_descriptors_proper [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
not_equivocating_equivocator_descriptors_dec [instance, in VLSM.Core.Equivocators.EquivocatorsComposition]
not_equivocating_equivocator_descriptors [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
not_elem_of_fin_supp [lemma, in VLSM.Lib.FinSuppFn]
not_finiteT_infiniteT [lemma, in VLSM.Lib.TraceProperties]
not_heavy [projection, in VLSM.Core.Equivocation]
not_in_indices_initial_prop [definition, in VLSM.Core.TraceableVLSM]
not_adr_received [lemma, in VLSM.Examples.ELMO.ELMO]
not_CompositeNthSentNotObserved_is_observed [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
not_CompositeNthNotSend_is_sent [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
not_heavy_impl_LimitedEquivocationProp [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
not_lt_plus_dec [definition, in VLSM.Lib.Preamble]
not_bounding_impl_liveness [lemma, in VLSM.Lib.Preamble]
not_infiniteT_finiteT [lemma, in VLSM.Lib.TraceClassicalProperties]
not_directly_observed_happens_before_dependencies [definition, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
not_composite_valid_transition_next_initial [lemma, in VLSM.Core.HistoryVLSM]
not_valid_transition_next_initial [projection, in VLSM.Core.HistoryVLSM]
not_equivocating_sent_message_has_been_directly_observed_in_projection [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
not_equivocating_equivocator_descriptors_proper_fixed [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
not_equivocating_index_has_singleton_state [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
not_prime_divide_prime [lemma, in VLSM.Lib.NatExtras]
not_Exists_ForAll [lemma, in VLSM.Lib.StreamExtras]
not_ForAll [lemma, in VLSM.Lib.StreamExtras]
not_Exists [lemma, in VLSM.Lib.StreamExtras]
not_null_element [definition, in VLSM.Lib.ListExtras]
no_additional_equivocations_constraint_dec [lemma, in VLSM.Core.Equivocation]
no_initial_messages_in_IM_prop [definition, in VLSM.Core.Equivocation]
no_additional_equivocations_constraint [definition, in VLSM.Core.Equivocation]
no_additional_equivocations_dec [lemma, in VLSM.Core.Equivocation]
no_additional_equivocations [definition, in VLSM.Core.Equivocation]
no_traces_have_message_prop [definition, in VLSM.Core.Equivocation]
no_equivocation_in_empty_trace [lemma, in VLSM.Core.Equivocation]
no_equivocating_equivocators_transition_item_project [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
no_self_equiv [definition, in VLSM.Examples.ELMO.ELMO]
no_equivocations_additional_constraint [definition, in VLSM.Core.Equivocation.NoEquivocation]
no_equivocations_additional_constraint_with_preloaded [definition, in VLSM.Core.Equivocation.NoEquivocation]
no_equivocations_preloaded_traces [lemma, in VLSM.Core.Equivocation.NoEquivocation]
no_equivocations [definition, in VLSM.Core.Equivocation.NoEquivocation]
no_equivocations_except_from [definition, in VLSM.Core.Equivocation.NoEquivocation]
no_equivocating_equivocator_transition_item_project [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
no_input_no_equivocating_senders_in_trace [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
no_equivocating_equivocators_finite_valid_trace_init_to_rev [lemma, in VLSM.Core.Equivocators.FixedEquivocationSimulation]
no_initial_messages_in_sub_IM [lemma, in VLSM.Core.Equivocators.FixedEquivocationSimulation]
nth_error_filter [lemma, in VLSM.Lib.StdppExtras]
nth_error_stdpp_last [lemma, in VLSM.Lib.StdppExtras]
nth_error_eq [lemma, in VLSM.Lib.ListExtras]
nth_error_map [lemma, in VLSM.Lib.ListExtras]
nth_error_length [lemma, in VLSM.Lib.ListExtras]
nth_error_filter_index_le [lemma, in VLSM.Lib.ListExtras]
nth_error_filter_index [definition, in VLSM.Lib.ListExtras]
nth_error_list_annotate [lemma, in VLSM.Lib.ListExtras]
nth_error_last [lemma, in VLSM.Lib.ListExtras]


O

obs [projection, in VLSM.Examples.ELMO.BaseELMO]
observable [definition, in VLSM.Examples.ELMO.UMO]
Observation [record, in VLSM.Examples.ELMO.BaseELMO]
observations2trace [definition, in VLSM.Examples.ELMO.BaseELMO]
Observation_eq_dec [lemma, in VLSM.Examples.ELMO.BaseELMO]
Observation_sind [definition, in VLSM.Examples.ELMO.BaseELMO]
Observation_rec [definition, in VLSM.Examples.ELMO.BaseELMO]
Observation_ind [definition, in VLSM.Examples.ELMO.BaseELMO]
Observation_rect [definition, in VLSM.Examples.ELMO.BaseELMO]
ObservedBeforeSendTransition [record, in VLSM.Core.MessageDependencies]
ObservedBeforeStateOrMessage [inductive, in VLSM.Core.MessageDependencies]
ObservedBeforeStateOrMessage_sind [definition, in VLSM.Core.MessageDependencies]
ObservedBeforeStateOrMessage_ind [definition, in VLSM.Core.MessageDependencies]
observed_before_send_subsumes_msg_dep_rel [lemma, in VLSM.Core.MessageDependencies]
observed_before_send [definition, in VLSM.Core.MessageDependencies]
observed_before_message [constructor, in VLSM.Core.MessageDependencies]
observed_is_message [constructor, in VLSM.Core.MessageDependencies]
observed_before_state [constructor, in VLSM.Core.MessageDependencies]
obs_sizeState [lemma, in VLSM.Examples.ELMO.BaseELMO]
obs_prefix [projection, in VLSM.Examples.ELMO.UMO]
obs_rec_obs [lemma, in VLSM.Examples.ELMO.MO]
occurrences_ordering [lemma, in VLSM.Lib.StdppExtras]
OCV_Receive [constructor, in VLSM.Examples.ELMO.UMO]
OCV_Send [constructor, in VLSM.Examples.ELMO.UMO]
omap_subseteq [lemma, in VLSM.Lib.StdppExtras]
omap_Forall [lemma, in VLSM.Lib.ListExtras]
omap_as_filter [lemma, in VLSM.Lib.ListExtras]
omap_nth [lemma, in VLSM.Lib.ListExtras]
omap_length [lemma, in VLSM.Lib.ListExtras]
omap_app_rev [lemma, in VLSM.Lib.ListExtras]
one_element_decompositions [definition, in VLSM.Lib.ListExtras]
option_can_produce_valid_iff [lemma, in VLSM.Core.VLSM]
option_can_produce_valid [lemma, in VLSM.Core.VLSM]
option_can_produce [definition, in VLSM.Core.VLSM]
option_initial_message_is_valid [lemma, in VLSM.Core.VLSM]
option_valid_message_Some [lemma, in VLSM.Core.VLSM]
option_valid_message_None [lemma, in VLSM.Core.VLSM]
option_valid_message_prop [definition, in VLSM.Core.VLSM]
option_initial_message_prop [definition, in VLSM.Core.VLSM]
option_compare_transitive [lemma, in VLSM.Lib.Preamble]
option_compare_reflexive [lemma, in VLSM.Lib.Preamble]
option_compare [definition, in VLSM.Lib.Preamble]
option_composite_initial_message_prop [definition, in VLSM.Core.Composition]
option_can_produce_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
option_valid_message_prop_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
option_initial_message_prop_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
option_valid_message_prop_from_constrained_equiv [lemma, in VLSM.Core.PreloadedVLSM]
option_valid_message_prop_from_constrained_right_impl [lemma, in VLSM.Core.PreloadedVLSM]
option_valid_message_prop_from_constrained_left_impl [lemma, in VLSM.Core.PreloadedVLSM]
option_valid_message_prop_from_constrained_sind [definition, in VLSM.Core.PreloadedVLSM]
option_valid_message_prop_from_constrained_ind [definition, in VLSM.Core.PreloadedVLSM]
option_valid_message_prop_from_constrained [inductive, in VLSM.Core.PreloadedVLSM]
oracle_component_selected_previously [lemma, in VLSM.Core.Equivocation]
oracle_step_property_from_trace [lemma, in VLSM.Core.Equivocation]
oracle_no_inits_from_trace [lemma, in VLSM.Core.Equivocation]
oracle_trace_props_from_stepwise [lemma, in VLSM.Core.Equivocation]
oracle_stepwise_props_change_selector [lemma, in VLSM.Core.Equivocation]
oracle_initial_trace_update [lemma, in VLSM.Core.Equivocation]
oracle_partial_trace_update [lemma, in VLSM.Core.Equivocation]
oracle_step_update [projection, in VLSM.Core.Equivocation]
oracle_no_inits [projection, in VLSM.Core.Equivocation]
oracle_stepwise_props [record, in VLSM.Core.Equivocation]
oracle_tracewise_props [record, in VLSM.Core.Equivocation]
order_decompositions [lemma, in VLSM.Lib.ListExtras]
original_state [projection, in VLSM.Core.AnnotatedVLSM]
OrT [definition, in VLSM.Lib.TraceProperties]
OrT_right [lemma, in VLSM.Lib.TraceProperties]
OrT_left [lemma, in VLSM.Lib.TraceProperties]
orT_setoidT [lemma, in VLSM.Lib.TraceProperties]
other_components_after_send [definition, in VLSM.Examples.ELMO.ELMO]
output [projection, in VLSM.Core.VLSM]
ovmp_def_emit [constructor, in VLSM.Core.PreloadedVLSM]
ovmp_def_initial [constructor, in VLSM.Core.PreloadedVLSM]


P

pair_compare_transitive [lemma, in VLSM.Lib.Preamble]
pair_compare_lt [lemma, in VLSM.Lib.Preamble]
pair_compare_reflexive [lemma, in VLSM.Lib.Preamble]
pair_compare [definition, in VLSM.Lib.Preamble]
parity_composite_23_reachable_00 [lemma, in VLSM.Examples.Tutorial.Multiply]
parity_composition_23_reachable_0 [lemma, in VLSM.Examples.Tutorial.Multiply]
parity_23_final_state_prop23_equiv [lemma, in VLSM.Examples.Tutorial.Multiply]
parity_23_final_state_prop23_right [lemma, in VLSM.Examples.Tutorial.Multiply]
parity_23_final_state_prop23_left [lemma, in VLSM.Examples.Tutorial.Multiply]
parity_23_final_state [definition, in VLSM.Examples.Tutorial.Multiply]
parity_composition_23_valid_messages_powers_of_23 [lemma, in VLSM.Examples.Tutorial.Multiply]
parity_composition_23_valid_messages_powers_of_23_left [lemma, in VLSM.Examples.Tutorial.Multiply]
parity_composition_23_valid_messages_powers_of_23_right [lemma, in VLSM.Examples.Tutorial.Multiply]
parity_constraint_23_even [lemma, in VLSM.Examples.Tutorial.Multiply]
parity_composition_23 [definition, in VLSM.Examples.Tutorial.Multiply]
parity_constraint_23 [definition, in VLSM.Examples.Tutorial.Multiply]
partial_trace_project_preserves_valid_trace [projection, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
partial_projection_type [projection, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
partial_trace_project_extends_left [projection, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
past_vote_info_is_invariant [lemma, in VLSM.Examples.Paxos.Paxos]
Paxos [library]
paxos_invariants [lemma, in VLSM.Examples.Paxos.Paxos]
paxos_votes_good [lemma, in VLSM.Examples.Paxos.Paxos]
paxos_votes [definition, in VLSM.Examples.Paxos.Paxos]
paxos_vlsm [definition, in VLSM.Examples.Paxos.Paxos]
paxos_index_finite [instance, in VLSM.Examples.Paxos.Paxos]
paxos_index_eq_dec [instance, in VLSM.Examples.Paxos.Paxos]
paxos_index_sind [definition, in VLSM.Examples.Paxos.Paxos]
paxos_index_rec [definition, in VLSM.Examples.Paxos.Paxos]
paxos_index_ind [definition, in VLSM.Examples.Paxos.Paxos]
paxos_index_rect [definition, in VLSM.Examples.Paxos.Paxos]
paxos_index [inductive, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_sent_bounds_maxBal [lemma, in VLSM.Examples.Paxos.Paxos]
paxos_maxBal_mono [lemma, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_has_been_sent_inst [instance, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_has_been_sent_stepwise_props [lemma, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_has_been_sent_dec [instance, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_has_been_sent [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_vlsm [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_machine [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_transition [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_valid [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_type [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label_sind [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label_rec [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label_ind [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label_rect [definition, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label [inductive, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_initial [definition, in VLSM.Examples.Paxos.Paxos]
paxos_maxBal [projection, in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_state [record, in VLSM.Examples.Paxos.Paxos]
paxos_message_eq_dec [instance, in VLSM.Examples.Paxos.Paxos]
paxos_message [definition, in VLSM.Examples.Paxos.Paxos]
paxos_message_body_sind [definition, in VLSM.Examples.Paxos.Paxos]
paxos_message_body_rec [definition, in VLSM.Examples.Paxos.Paxos]
paxos_message_body_ind [definition, in VLSM.Examples.Paxos.Paxos]
paxos_message_body_rect [definition, in VLSM.Examples.Paxos.Paxos]
paxos_message_body [inductive, in VLSM.Examples.Paxos.Paxos]
PInv [definition, in VLSM.Examples.Paxos.Paxos]
pivotal_validator_extension [lemma, in VLSM.Core.ReachableThreshold]
pivotal_validator_extension_list [lemma, in VLSM.Core.ReachableThreshold]
pi_cancel [instance, in VLSM.Examples.Paxos.Paxos]
plan [definition, in VLSM.Core.Plans]
Plans [library]
plan_independence [lemma, in VLSM.Core.Plans]
plan_item [record, in VLSM.Core.Plans]
pos_R [definition, in VLSM.Lib.Measurable]
potentially_pivotal [definition, in VLSM.Core.ReachableThreshold]
Preamble [library]
precedes_closed_set_eq [lemma, in VLSM.Lib.TopSort]
precedes_closed [definition, in VLSM.Lib.TopSort]
precedes_P_strict [instance, in VLSM.Lib.TopSort]
precedes_P_irreflexive [instance, in VLSM.Lib.TopSort]
precedes_P_transitive [instance, in VLSM.Lib.TopSort]
precedes_transitive [lemma, in VLSM.Lib.TopSort]
precedes_asymmetric [lemma, in VLSM.Lib.TopSort]
precedes_irreflexive [lemma, in VLSM.Lib.TopSort]
precedes_P [definition, in VLSM.Lib.TopSort]
Pred_Stable_In [abbreviation, in VLSM.Examples.Paxos.Paxos]
prefix_of_take [lemma, in VLSM.Lib.ListExtras]
PreFreeE_Free_vlsm_projection_type [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
PreFreeE_PreFree_vlsm_partial_projection [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
PreFreeSubE_PreFreeE_weak_embedding [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
PreloadedVLSM [library]
preloaded_equivocators_limited_equivocations_vlsm_incl_free [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
preloaded_equivocators_no_equivocations_vlsm_incl_PreFree [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
preloaded_sub_composite_input_valid_projection [lemma, in VLSM.Core.SubProjectionTraces]
preloaded_sub_element_embedding [lemma, in VLSM.Core.SubProjectionTraces]
preloaded_sub_composition_all_embedding [lemma, in VLSM.Core.SubProjectionTraces]
preloaded_lift_sub_state_to_initial_state [lemma, in VLSM.Core.SubProjectionTraces]
preloaded_equivocator_vlsm_trace_project_valid_item [lemma, in VLSM.Core.Equivocators.MessageProperties]
preloaded_equivocator_vlsm_trace_project_valid_item_new_machine [lemma, in VLSM.Core.Equivocators.MessageProperties]
preloaded_Fixed_incl_Preloaded [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
preloaded_free_equivocating_vlsm_composition [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
preloaded_free_composite_directly_observed_valid [lemma, in VLSM.Core.Equivocation]
preloaded_composite_received_valid [lemma, in VLSM.Core.Equivocation]
preloaded_composite_sent_valid [lemma, in VLSM.Core.Equivocation]
preloaded_messages_received_from_component_of_valid_state_are_valid_free [lemma, in VLSM.Core.Equivocation]
preloaded_messages_sent_from_component_of_valid_state_are_valid_free [lemma, in VLSM.Core.Equivocation]
preloaded_sent_can_emit [lemma, in VLSM.Core.Equivocation]
preloaded_HasBeenReceivedCapability [instance, in VLSM.Core.Equivocation]
preloaded_has_been_received_stepwise_props [lemma, in VLSM.Core.Equivocation]
preloaded_HasBeenSentCapability [instance, in VLSM.Core.Equivocation]
preloaded_has_been_sent_stepwise_props [lemma, in VLSM.Core.Equivocation]
preloaded_equivocators_no_equivocations_vlsm_X_vlsm_projection [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
preloaded_equivocators_valid_trace_project_proper_initial [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
preloaded_equivocators_valid_trace_project_inv [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
preloaded_equivocators_valid_trace_from_project [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
preloaded_with_all_messages_alt_eq [lemma, in VLSM.Core.ByzantineTraces]
preloaded_with_all_messages_alt_incl [lemma, in VLSM.Core.ByzantineTraces]
preloaded_alt_valid_state [lemma, in VLSM.Core.ByzantineTraces]
preloaded_TransitionMonotoneVLSM [instance, in VLSM.Core.TraceableVLSM]
preloaded_has_strong_trace_witnessing_equivocation_prop [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
preloaded_annotated_composite_preloaded_projection [lemma, in VLSM.Core.AnnotatedVLSM]
preloaded_with_all_empty_composition_no_emit [lemma, in VLSM.Core.Composition]
preloaded_empty_free_composition_no_emit [lemma, in VLSM.Core.Composition]
preloaded_empty_composition_no_emit [lemma, in VLSM.Core.Composition]
preloaded_with_all_messages_free_composite_vlsm_spec [lemma, in VLSM.Core.Composition]
preloaded_free_composite_vlsm_spec [lemma, in VLSM.Core.Composition]
preloaded_eq_no_equivocations [lemma, in VLSM.Core.Equivocation.NoEquivocation]
preloaded_incl_no_equivocations [lemma, in VLSM.Core.Equivocation.NoEquivocation]
preloaded_equivocator_zero_projection [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_equivocator_vlsm_valid_trace_project_inv2 [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_equivocator_vlsm_trace_project_valid_inv [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_equivocator_vlsm_trace_project_valid [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_with_equivocator_vlsm_trace_project_valid [lemma, in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_constraint_subsumption_stronger [lemma, in VLSM.Core.ConstrainedVLSM]
preloaded_constraint_subsumption_incl_free [lemma, in VLSM.Core.ConstrainedVLSM]
preloaded_constraint_subsumption_incl [lemma, in VLSM.Core.ConstrainedVLSM]
preloaded_constraint_subsumption_input_valid [lemma, in VLSM.Core.ConstrainedVLSM]
preloaded_constraint_subsumption [definition, in VLSM.Core.ConstrainedVLSM]
preloaded_non_byzantine_vlsm_lift [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_incl [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_vlsm_lift [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_vlsm_lift_initial_message [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_vlsm_lift_valid [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_VLSM_embedding' [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_VLSM_embedding [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_vlsm [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_vlsm' [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_history_vlsm [instance, in VLSM.Core.HistoryVLSM]
preloaded_equivocators_composition_sub_projection_commute_inv [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
preloaded_equivocators_composition_sub_projection_commute [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
preloaded_equivocators_fixed_equivocations_vlsm_incl_free [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
preloaded_with_all_messages_eq_validating_preloaded_vlsm [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_idem [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_with_valid_eq [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_weaken_finite_valid_trace_from_to [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_weaken_finite_valid_trace_from [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_can_emit [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_incl_preloaded_with_all_messages [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_idem_r [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_idem_l [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_incl [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_incl_relaxed [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_weaken_valid_trace_from [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_weaken_input_valid_transition [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_weaken_valid_state_message_prop [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_valid_state_prop [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_valid_state_message_preservation [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_message_valid_initial_state_message [lemma, in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_vlsm [definition, in VLSM.Core.PreloadedVLSM]
preloaded_vlsm [definition, in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_machine [definition, in VLSM.Core.PreloadedVLSM]
preloaded_equivocator_state_project_valid_state [lemma, in VLSM.Core.Equivocators.Equivocators]
preloaded_with_equivocator_state_project_valid_message [lemma, in VLSM.Core.Equivocators.Equivocators]
preloaded_with_equivocator_state_project_valid_state [lemma, in VLSM.Core.Equivocators.Equivocators]
preloaded_equivocator_state_projection_preserves_validity [lemma, in VLSM.Core.Equivocators.Equivocators]
preloaded_with_all_messages_validator_component_proj_incl [definition, in VLSM.Core.ProjectionTraces]
preloaded_with_all_messages_validator_component_proj_eq [lemma, in VLSM.Core.ProjectionTraces]
preloaded_with_all_messages_projection_input_valid_transition_neq [lemma, in VLSM.Core.ProjectionTraces]
preloaded_with_all_messages_projection_input_valid_transition_eq [lemma, in VLSM.Core.ProjectionTraces]
preloaded_finite_valid_trace_init_to_projection [lemma, in VLSM.Core.ProjectionTraces]
preloaded_finite_valid_trace_from_to_projection [lemma, in VLSM.Core.ProjectionTraces]
preloaded_finite_valid_trace_projection [lemma, in VLSM.Core.ProjectionTraces]
preloaded_valid_state_projection [lemma, in VLSM.Core.ProjectionTraces]
preloaded_component_projection [lemma, in VLSM.Core.ProjectionTraces]
preloaded_with_all_messages_self_validator_vlsm_eq [lemma, in VLSM.Core.Validator]
preloaded_with_all_messages_self_validator_vlsm_incl [lemma, in VLSM.Core.Validator]
preloaded_composite_vlsm_induced_projection_validator_iff [lemma, in VLSM.Core.Validator]
preloaded_with_all_messages_validator_proj_eq [lemma, in VLSM.Core.Validator]
preloaded_with_all_messages_validator_proj_incl [lemma, in VLSM.Core.Validator]
PreSeededXE_incl_PreFreeE [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
preserves [definition, in VLSM.Core.Plans]
PreSubFree_PreFree_weak_embedding [lemma, in VLSM.Core.SubProjectionTraces]
previous_state_descriptor_prop [definition, in VLSM.Core.Equivocators.EquivocatorsProjections]
prev_vote_committed [lemma, in VLSM.Examples.Paxos.Voting]
prev_votes [lemma, in VLSM.Examples.Paxos.Voting]
pre_induced_sub_element_projection [definition, in VLSM.Core.SubProjectionTraces]
pre_induced_sub_projection [definition, in VLSM.Core.SubProjectionTraces]
pre_VLSM_embedding_finite_trace_project_trans [lemma, in VLSM.Core.VLSMProjections]
pre_VLSM_projection_finite_trace_project_trans [lemma, in VLSM.Core.VLSMProjections]
pre_equivocators_valid_trace_project [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
pre_VLSM_embedding_finite_trace_last_output [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_finite_trace_last [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_infinite_trace_project_EqSt [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_infinite_trace_project_infinitely_often [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_infinite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_transition_item_project [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_projection_finite_trace_project_elem_of [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_finite_trace_project_elem_of_iff [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_finite_trace_project_app_rev [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_finite_trace_project_app [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_infinite_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_infinite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project_finitely_many [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project_infinitely_often [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project_is_Some_rev [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project_is_Some [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_in_projection [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_free_lift_to_free_weak_embedding [lemma, in VLSM.Core.Composition]
pre_lift_to_free_weak_embedding [lemma, in VLSM.Core.Composition]
pre_composite_free_update_state_with_initial [lemma, in VLSM.Core.Composition]
pre_VLSM_stuttering_embedding_finite_trace_last [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_VLSM_stuttering_embedding_finite_trace_project_app [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_VLSM_stuttering_embedding_infinite_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_VLSM_stuttering_embedding_infinite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_VLSM_stuttering_embedding_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_traces_with_valid_inputs_are_valid [lemma, in VLSM.Core.PreloadedVLSM]
pre_trace_segments_with_valid_inputs_are_valid [lemma, in VLSM.Core.PreloadedVLSM]
pre_composite_vlsm_induced_projection_validator_iff [lemma, in VLSM.Core.Validator]
pre_composite_vlsm_induced_projection_validator [definition, in VLSM.Core.Validator]
pre_composite_vlsm_induced_validator [definition, in VLSM.Core.Validator]
pre_projection_induced_validator [definition, in VLSM.Core.Validator]
primes [definition, in VLSM.Lib.NatExtras]
PrimesComposition [library]
primes_vlsm_composition_valid_message_char [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
primes_vlsm_composition [definition, in VLSM.Examples.Tutorial.PrimesComposition]
primes_factorization [lemma, in VLSM.Lib.NatExtras]
primes_inhabited [instance, in VLSM.Lib.NatExtras]
prime_decision [instance, in VLSM.Lib.NatExtras]
prod_primes_powers [definition, in VLSM.Lib.NatExtras]
prod_powers_add [lemma, in VLSM.Lib.NatExtras]
prod_powers_elem_of_dom [lemma, in VLSM.Lib.NatExtras]
prod_powers_gt [lemma, in VLSM.Lib.NatExtras]
prod_powers_delta [lemma, in VLSM.Lib.NatExtras]
prod_powers_aux_gt [lemma, in VLSM.Lib.NatExtras]
prod_powers_aux_ge_1 [lemma, in VLSM.Lib.NatExtras]
prod_powers_aux_ext_forall [lemma, in VLSM.Lib.NatExtras]
prod_powers_aux_proper [instance, in VLSM.Lib.NatExtras]
prod_powers_aux [definition, in VLSM.Lib.NatExtras]
progress [definition, in VLSM.Lib.StreamExtras]
progress_Exists_neq [lemma, in VLSM.Lib.StreamExtras]
ProjectionTraces [library]
projection_friendly_trace_char [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
projection_friendly_in_futures [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
projection_friendly_prop [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
projection_type [projection, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
projection_has_not_been_directly_observed_is_equivocating [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
projection_friendliness_lift_to_composite_VLSM_embedding [lemma, in VLSM.Core.ProjectionTraces]
projection_friendliness_sufficient_condition_valid_state [lemma, in VLSM.Core.ProjectionTraces]
projection_friendliness_sufficient_condition [definition, in VLSM.Core.ProjectionTraces]
projection_validation_constraint_subsumption [section, in VLSM.Core.ProjectionTraces]
projection_valid_implies_destination_projection_valid_message [lemma, in VLSM.Core.ProjectionTraces]
projection_valid_implies_destination_projection_valid_state [lemma, in VLSM.Core.ProjectionTraces]
projection_valid_implies_projection_valid_state_message_outputs [lemma, in VLSM.Core.ProjectionTraces]
projection_valid_implies_projection_valid_state [lemma, in VLSM.Core.ProjectionTraces]
projection_valid_implies_composition_valid_message [lemma, in VLSM.Core.ProjectionTraces]
projection_valid_input_valid [lemma, in VLSM.Core.ProjectionTraces]
projection_valid_implies_valid [lemma, in VLSM.Core.Validator]
projection_validator_prop_alt_iff [lemma, in VLSM.Core.Validator]
projection_validator_prop_alt [definition, in VLSM.Core.Validator]
projection_induced_valid_transition_eq [lemma, in VLSM.Core.Validator]
projection_induced_validator_eq [lemma, in VLSM.Core.Validator]
projection_induced_validator_incl [lemma, in VLSM.Core.Validator]
projection_induced_validator_is_projection [lemma, in VLSM.Core.Validator]
projection_induced_valid_message_char [lemma, in VLSM.Core.Validator]
projection_induced_validator_is_validating [lemma, in VLSM.Core.Validator]
projection_induced_validator [definition, in VLSM.Core.Validator]
projection_induced_validator_machine [definition, in VLSM.Core.Validator]
projection_induced_valid [definition, in VLSM.Core.Validator]
projection_induced_transition [definition, in VLSM.Core.Validator]
projection_induced_initial_message_prop [definition, in VLSM.Core.Validator]
projection_induced_initial_state_inh [instance, in VLSM.Core.Validator]
projection_induced_initial_state_prop [definition, in VLSM.Core.Validator]
projection_validator_messages_transitions [lemma, in VLSM.Core.Validator]
projection_validator_is_message_validator [lemma, in VLSM.Core.Validator]
projection_validator_prop [definition, in VLSM.Core.Validator]
projT1_proper [instance, in VLSM.Lib.FinSuppFn]
proj_preloaded_with_all_messages_incl [lemma, in VLSM.Core.ProjectionTraces]
proj_preloaded_with_all_messages_valid_state_message_preservation [lemma, in VLSM.Core.ProjectionTraces]
propA [definition, in VLSM.Lib.TraceProperties]
propA_imp [definition, in VLSM.Lib.TraceProperties]
proper_equivocator_descriptors_state_update_eqv [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
proper_equivocator_descriptors [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
proper_not_directly_observed [lemma, in VLSM.Core.Equivocation]
proper_directly_observed [lemma, in VLSM.Core.Equivocation]
proper_not_received [lemma, in VLSM.Core.Equivocation]
proper_received [lemma, in VLSM.Core.Equivocation]
proper_not_sent [lemma, in VLSM.Core.Equivocation]
proper_sent [lemma, in VLSM.Core.Equivocation]
proper_not_oracle_holds [projection, in VLSM.Core.Equivocation]
proper_oracle_holds [projection, in VLSM.Core.Equivocation]
Proper_tc [lemma, in VLSM.Lib.Preamble]
Proper_reflects_Irreflexive [lemma, in VLSM.Lib.Preamble]
proper_fixed_equivocator_descriptors [definition, in VLSM.Core.Equivocators.FixedEquivocation]
proper_existing_equivocator_label [definition, in VLSM.Core.Equivocators.Equivocators]
proper_equivocator_label [definition, in VLSM.Core.Equivocators.Equivocators]
proper_descriptor [definition, in VLSM.Core.Equivocators.Equivocators]
propT [definition, in VLSM.Lib.TraceProperties]
propT [abbreviation, in VLSM.Lib.TraceClassicalProperties]
propT_imp_trans [lemma, in VLSM.Lib.TraceProperties]
propT_imp_refl [lemma, in VLSM.Lib.TraceProperties]
propT_imp_andT [lemma, in VLSM.Lib.TraceProperties]
propT_imp_conseq_R [lemma, in VLSM.Lib.TraceProperties]
propT_imp_conseq_L [lemma, in VLSM.Lib.TraceProperties]
propT_imp [definition, in VLSM.Lib.TraceProperties]
protocol_input_messages_trace [definition, in VLSM.Core.VLSM]
protocol_output_messages_trace [definition, in VLSM.Core.VLSM]
prove_none_have_message_from_stepwise [lemma, in VLSM.Core.Equivocation]
prove_all_have_message_from_stepwise [lemma, in VLSM.Core.Equivocation]
PT1 [lemma, in VLSM.Examples.Paxos.Paxos]
PVar [constructor, in VLSM.Examples.Tutorial.Formulas]
P_succ [constructor, in VLSM.Lib.FinSuppFn]
P_zero [constructor, in VLSM.Lib.FinSuppFn]
P_adr_state [projection, in VLSM.Examples.ELMO.MO]
P1bInv_is_invariant [lemma, in VLSM.Examples.Paxos.Paxos]
P1bInv_prop [definition, in VLSM.Examples.Paxos.Paxos]
P1cInv_is_invariant [lemma, in VLSM.Examples.Paxos.Paxos]
P1cInv_prop [definition, in VLSM.Examples.Paxos.Paxos]
P2aInv_is_invariant [lemma, in VLSM.Examples.Paxos.Paxos]
P2aInv_prop [definition, in VLSM.Examples.Paxos.Paxos]


Q

Q_nonempty [lemma, in VLSM.Examples.Paxos.Voting]


R

radix_composite_vlsm [definition, in VLSM.Examples.Tutorial.PrimesComposition]
radix_valid_messages_powers_of_mult [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
radix_valid_messages_powers_of_mult_left [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
radix_valid_messages_powers_of_mult_right [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_states [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_states_left [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_states_right [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_messages [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_messages_right [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_messages_left [lemma, in VLSM.Examples.Tutorial.PrimesComposition]
radix_label [definition, in VLSM.Examples.Tutorial.PrimesComposition]
radix_vlsm [definition, in VLSM.Examples.Tutorial.PrimesComposition]
radix_machine [definition, in VLSM.Examples.Tutorial.PrimesComposition]
radix_transition [definition, in VLSM.Examples.Tutorial.PrimesComposition]
ReachableThreshold [record, in VLSM.Core.ReachableThreshold]
ReachableThreshold [library]
ReachableThreshold_Address [instance, in VLSM.Examples.ELMO.ELMO]
reachable_composite_state_to_trace [lemma, in VLSM.Core.TraceableVLSM]
reachable_state_to_trace [lemma, in VLSM.Core.TraceableVLSM]
reachable_received_messages_reachable [lemma, in VLSM.Examples.ELMO.ELMO]
reachable_messages_are_msg_valid [lemma, in VLSM.Examples.ELMO.ELMO]
reachable_sent_messages_adr [lemma, in VLSM.Examples.ELMO.ELMO]
reachable_sent_messages_reachable [lemma, in VLSM.Examples.ELMO.ELMO]
reachable_full_node_for_all_messages [lemma, in VLSM.Examples.ELMO.ELMO]
reachable_obs_msg [lemma, in VLSM.Examples.ELMO.ELMO]
reachable_msg_obs [lemma, in VLSM.Examples.ELMO.ELMO]
ReachELMO [definition, in VLSM.Examples.ELMO.ELMO]
reach_recv [constructor, in VLSM.Examples.ELMO.UMO]
reach_send [constructor, in VLSM.Examples.ELMO.UMO]
reach_init [constructor, in VLSM.Examples.ELMO.UMO]
RealsExtras [library]
receivable_messages_reachable [lemma, in VLSM.Examples.ELMO.ELMO]
Receive [constructor, in VLSM.Examples.ELMO.BaseELMO]
receive [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
receivedAddresses [definition, in VLSM.Examples.ELMO.BaseELMO]
receivedAddresses_addObservation [lemma, in VLSM.Examples.ELMO.BaseELMO]
receivedMessages [definition, in VLSM.Examples.ELMO.BaseELMO]
receivedMessages_addObservation [lemma, in VLSM.Examples.ELMO.BaseELMO]
receivedMessages' [definition, in VLSM.Examples.ELMO.BaseELMO]
received_component_received_previously [lemma, in VLSM.Core.Equivocation]
received_valid [lemma, in VLSM.Core.Equivocation]
received_messages_set [projection, in VLSM.Core.Equivocation]
received_messages_proper [lemma, in VLSM.Core.Equivocation]
received_messages [definition, in VLSM.Core.Equivocation]
received_in_messages [lemma, in VLSM.Examples.ELMO.ELMO]
receiving_not_already_equivocating_global_local_equivocators [lemma, in VLSM.Examples.ELMO.ELMO]
receiving_already_equivocating_global_local_equivocators [lemma, in VLSM.Examples.ELMO.ELMO]
receiving_already_sent_global_local_equivocators [lemma, in VLSM.Examples.ELMO.ELMO]
recons [lemma, in VLSM.Lib.StreamExtras]
rec_obs_fn_sizeState [lemma, in VLSM.Examples.ELMO.BaseELMO]
rec_obs_fn [definition, in VLSM.Examples.ELMO.BaseELMO]
rec_obs_sind [definition, in VLSM.Examples.ELMO.BaseELMO]
rec_obs_ind [definition, in VLSM.Examples.ELMO.BaseELMO]
rec_recv [constructor, in VLSM.Examples.ELMO.BaseELMO]
rec_prev [constructor, in VLSM.Examples.ELMO.BaseELMO]
rec_new [constructor, in VLSM.Examples.ELMO.BaseELMO]
rec_obs [inductive, in VLSM.Examples.ELMO.BaseELMO]
rec_obs_exists_dec [definition, in VLSM.Examples.ELMO.ELMO]
rec_obs_acyclic [lemma, in VLSM.Examples.ELMO.MO]
rec_obs_size_desc [lemma, in VLSM.Examples.ELMO.MO]
rec_obs_addObservation_iff [lemma, in VLSM.Examples.ELMO.MO]
rec_obs_recv_inv [lemma, in VLSM.Examples.ELMO.MO]
rec_obs_send_inv [lemma, in VLSM.Examples.ELMO.MO]
rec_obs_input_constrained_transition [lemma, in VLSM.Examples.ELMO.MO]
reflecting_composite_for_reachable_component [lemma, in VLSM.Examples.ELMO.ELMO]
refutation [lemma, in VLSM.Lib.StreamExtras]
relevant_components_free [lemma, in VLSM.Core.Composition]
relevant_components_one_free [lemma, in VLSM.Core.Composition]
relevant_component_transition2_free [lemma, in VLSM.Core.Composition]
relevant_component_transition_free [lemma, in VLSM.Core.Composition]
remove_equivocating_transitions_preloaded_projection [lemma, in VLSM.Core.SubProjectionTraces]
remove_equivocating_strong_embedding_initial_state_preservation [lemma, in VLSM.Core.SubProjectionTraces]
remove_equivocating_strong_projection_transition_consistency_None [lemma, in VLSM.Core.SubProjectionTraces]
remove_equivocating_strong_projection_transition_preservation_Some [lemma, in VLSM.Core.SubProjectionTraces]
remove_equivocating_strong_projection_valid_preservation [lemma, in VLSM.Core.SubProjectionTraces]
remove_equivocating_state_project [definition, in VLSM.Core.SubProjectionTraces]
remove_equivocating_label_project [definition, in VLSM.Core.SubProjectionTraces]
remove_equivocating_transitions_fixed_projection [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
remove_hd_last [lemma, in VLSM.Lib.ListExtras]
replayable_message_prop [definition, in VLSM.Core.Equivocators.SimulatingFree]
replayed_trace_from_valid_equivocating [lemma, in VLSM.Core.Equivocators.SimulatingFree]
replayed_initial_state_from_valid [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
replayed_trace_from_finite_trace_last [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
replayed_trace_from [definition, in VLSM.Core.Equivocators.FullReplayTraces]
replayed_initial_state_from_lift [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
replayed_initial_state_from [definition, in VLSM.Core.Equivocators.FullReplayTraces]
restrict_observed_to_non_equivocating_incl_rev [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
restrict_observed_to_non_equivocating_incl [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
Rle_transitive [instance, in VLSM.Lib.RealsExtras]
RoundStatus [record, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
rs_status [projection, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
rs_round [projection, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
rt_reachable [projection, in VLSM.Core.ReachableThreshold]
rt_positive [projection, in VLSM.Core.ReachableThreshold]


S

s [projection, in VLSM.Examples.ELMO.MO]
SafeAt [definition, in VLSM.Examples.Paxos.Voting]
SafeAt_alt_iff [lemma, in VLSM.Examples.Paxos.Voting]
safeAt_alt_rev [lemma, in VLSM.Examples.Paxos.Voting]
safeAt_alt_fwd [lemma, in VLSM.Examples.Paxos.Voting]
SafeAt_alt_sind [definition, in VLSM.Examples.Paxos.Voting]
SafeAt_alt_ind [definition, in VLSM.Examples.Paxos.Voting]
SafeAt_alt [inductive, in VLSM.Examples.Paxos.Voting]
SafeQuorum [constructor, in VLSM.Examples.Paxos.Voting]
SafeStart [constructor, in VLSM.Examples.Paxos.Voting]
safe_at_preserved [lemma, in VLSM.Examples.Paxos.Voting]
same_VLSM_embedding [lemma, in VLSM.Core.VLSMProjections]
same_VLSM_initial_message_preservation [lemma, in VLSM.Core.VLSM]
same_VLSM_initial_state_preservation [lemma, in VLSM.Core.VLSM]
same_VLSM_transition_preservation [lemma, in VLSM.Core.VLSM]
same_VLSM_valid_preservation [lemma, in VLSM.Core.VLSM]
same_VLSM_state_rew [definition, in VLSM.Core.VLSM]
same_VLSM_label_rew [definition, in VLSM.Core.VLSM]
same_IM_preloaded_free_embedding [lemma, in VLSM.Core.Composition]
same_IM_embedding [lemma, in VLSM.Core.Composition]
same_IM_state_rew [definition, in VLSM.Core.Composition]
same_IM_label_rew [definition, in VLSM.Core.Composition]
same_IM_composite_has_been_sent_preservation [lemma, in VLSM.Core.EquivocationProjections]
satisfyT [definition, in VLSM.Lib.TraceProperties]
satisfyT_cont [lemma, in VLSM.Lib.TraceProperties]
sc_wsb_r [constructor, in VLSM.Examples.ELMO.UMO]
sc_wsb_l [constructor, in VLSM.Examples.ELMO.UMO]
sc_refl [constructor, in VLSM.Examples.ELMO.UMO]
second [definition, in VLSM.Core.Composition]
sec_msg_dep_is_globally_equivocating_props [section, in VLSM.Core.MessageDependencies]
sec_CompositeHasBeenObserved_dec [section, in VLSM.Core.MessageDependencies]
sec_free_composition_validators [section, in VLSM.Core.MessageDependencies]
sec_FullMessageDependencies_happens_before [section, in VLSM.Core.MessageDependencies]
sec_FullMessageDependencies [section, in VLSM.Core.MessageDependencies]
sec_sub_composite_message_dependencies [section, in VLSM.Core.MessageDependencies]
sec_composite_message_dependencies_equivocation [section, in VLSM.Core.MessageDependencies]
sec_composite_message_dependencies [section, in VLSM.Core.MessageDependencies]
sec_message_dependencies_equivocation [section, in VLSM.Core.MessageDependencies]
sec_message_dependencies [section, in VLSM.Core.MessageDependencies]
sec_paxos_spec.sec_paxos_refinement_map [section, in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_paxos_vlsm [section, in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_leaders_vlsm.sec_one_leader [section, in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_leaders_vlsm [section, in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_paxos_acceptor_vlsm_lem [section, in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_paxos_acceptor_vlsm [section, in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec [section, in VLSM.Examples.Paxos.Paxos]
sec_limited_state_equivocation.sec_equivocators_projection_constrained_limited [section, in VLSM.Core.Equivocators.LimitedStateEquivocation]
sec_limited_state_equivocation.sec_equivocators_projection_annotated_limited [section, in VLSM.Core.Equivocators.LimitedStateEquivocation]
sec_limited_state_equivocation [section, in VLSM.Core.Equivocators.LimitedStateEquivocation]
sec_simple_top_sort [section, in VLSM.Lib.TopSort]
sec_top_sort [section, in VLSM.Lib.TopSort]
sec_topologically_sorted.sec_topologically_sorted_fixed_list [section, in VLSM.Lib.TopSort]
sec_topologically_sorted [section, in VLSM.Lib.TopSort]
sec_min_predecessors [section, in VLSM.Lib.TopSort]
sec_BaseELMO_Observations [section, in VLSM.Examples.ELMO.BaseELMO]
_ <**> _ [notation, in VLSM.Examples.ELMO.BaseELMO]
_ <*> _ [notation, in VLSM.Examples.ELMO.BaseELMO]
_ <++> _ [notation, in VLSM.Examples.ELMO.BaseELMO]
_ <+> _ [notation, in VLSM.Examples.ELMO.BaseELMO]
sec_base_ELMO [section, in VLSM.Examples.ELMO.BaseELMO]
sec_formula.sec_formula_interpretation [section, in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_valid_message_char [section, in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_vlsm [section, in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_binop_vlsm [section, in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_neg_vlsm [section, in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_var_vlsm [section, in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_const_vlsm [section, in VLSM.Examples.Tutorial.Formulas]
¬ _ [notation, in VLSM.Examples.Tutorial.Formulas]
_ ↔ _ [notation, in VLSM.Examples.Tutorial.Formulas]
_ → _ [notation, in VLSM.Examples.Tutorial.Formulas]
_ ∧ _ [notation, in VLSM.Examples.Tutorial.Formulas]
_ ∨ _ [notation, in VLSM.Examples.Tutorial.Formulas]
⊥ [notation, in VLSM.Examples.Tutorial.Formulas]
⊤ [notation, in VLSM.Examples.Tutorial.Formulas]
sec_formula [section, in VLSM.Examples.Tutorial.Formulas]
sec_equivocators_sub_projections [section, in VLSM.Core.Equivocators.EquivocatorsComposition]
sec_fully_equivocating_composition.sec_equivocating_indices_BasicEquivocation [section, in VLSM.Core.Equivocators.EquivocatorsComposition]
sec_fully_equivocating_composition [section, in VLSM.Core.Equivocators.EquivocatorsComposition]
sec_fsfun_fixed_domain.sec_fsfun_fixed_supp_value [section, in VLSM.Lib.FinSuppFn]
sec_fsfun_fixed_domain [section, in VLSM.Lib.FinSuppFn]
sec_free_composition_message_validator.sec_full_node_free_valid_message_validators [section, in VLSM.Core.Validators.FreeCompositionValidator]
sec_free_composition_message_validator.sec_free_valid_message_validators [section, in VLSM.Core.Validators.FreeCompositionValidator]
sec_free_composition_message_validator [section, in VLSM.Core.Validators.FreeCompositionValidator]
sec_free_composition_validator [section, in VLSM.Core.Validators.FreeCompositionValidator]
_ +++ _ [notation, in VLSM.Lib.Traces]
sec_traces [section, in VLSM.Lib.Traces]
sec_update_IM [section, in VLSM.Core.SubProjectionTraces]
sec_empty_sub_composition [section, in VLSM.Core.SubProjectionTraces]
sec_sub_composition_preloaded_lift [section, in VLSM.Core.SubProjectionTraces]
sec_sub_composition_element [section, in VLSM.Core.SubProjectionTraces]
sec_sub_composition_all [section, in VLSM.Core.SubProjectionTraces]
sec_sub_composition_sender [section, in VLSM.Core.SubProjectionTraces]
sec_sub_composition_incl [section, in VLSM.Core.SubProjectionTraces]
sec_lift_sub_state_to_preloaded [section, in VLSM.Core.SubProjectionTraces]
sec_sub_composition.sec_sub_projection_with_no_equivocation_constraints [section, in VLSM.Core.SubProjectionTraces]
sec_sub_composition.sec_induced_sub_projection_subsumption [section, in VLSM.Core.SubProjectionTraces]
sec_sub_composition.sec_induced_sub_projection [section, in VLSM.Core.SubProjectionTraces]
sec_sub_composition [section, in VLSM.Core.SubProjectionTraces]
sec_primes_vlsm_composition [section, in VLSM.Examples.Tutorial.PrimesComposition]
sec_free_composition [section, in VLSM.Examples.Tutorial.PrimesComposition]
sec_composition [section, in VLSM.Examples.Tutorial.PrimesComposition]
sec_radix_vlsm [section, in VLSM.Examples.Tutorial.PrimesComposition]
sec_msg_dep_limited_byzantine_traces [section, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
sec_limited_byzantine_traces.sec_fixed_limited_selection [section, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
sec_limited_byzantine_traces [section, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
sec_equivocator_vlsm_message_properties.sec_ComputableSentMessages_lifting [section, in VLSM.Core.Equivocators.MessageProperties]
sec_equivocator_vlsm_message_properties.sec_has_been_sent_lifting [section, in VLSM.Core.Equivocators.MessageProperties]
sec_equivocator_vlsm_message_properties.sec_has_been_received_lifting [section, in VLSM.Core.Equivocators.MessageProperties]
sec_equivocator_vlsm_message_properties.sec_oracle_lifting [section, in VLSM.Core.Equivocators.MessageProperties]
sec_equivocator_vlsm_message_properties [section, in VLSM.Core.Equivocators.MessageProperties]
sec_reachable_threshold_props [section, in VLSM.Core.ReachableThreshold]
sec_equivocator_state_append_projection [section, in VLSM.Core.Equivocators.EquivocatorReplay]
_ *** _ [notation, in VLSM.Lib.TraceProperties]
_ *+* _ [notation, in VLSM.Lib.TraceProperties]
<< _ ; _ >> [notation, in VLSM.Lib.TraceProperties]
[| _ |] [notation, in VLSM.Lib.TraceProperties]
_ andA _ [notation, in VLSM.Lib.TraceProperties]
_ ->> _ [notation, in VLSM.Lib.TraceProperties]
_ =>> _ [notation, in VLSM.Lib.TraceProperties]
_ orT _ [notation, in VLSM.Lib.TraceProperties]
_ andT _ [notation, in VLSM.Lib.TraceProperties]
sec_trace_properties [section, in VLSM.Lib.TraceProperties]
sec_VLSM_eq_properties [section, in VLSM.Core.VLSMProjections.VLSMEquality]
sec_VLSM_equality [section, in VLSM.Core.VLSMProjections.VLSMEquality]
sec_transitivity_props [section, in VLSM.Core.VLSMProjections]
sec_same_VLSM_embedding [section, in VLSM.Core.VLSMProjections]
sec_voting_simulates_consensus [section, in VLSM.Examples.Paxos.Voting]
sec_voting_spec.sec_voting_vlsm [section, in VLSM.Examples.Paxos.Voting]
sec_voting_spec.sec_acceptor_vlsm.sec_acceptor_state_predicates [section, in VLSM.Examples.Paxos.Voting]
sec_voting_spec.sec_acceptor_vlsm [section, in VLSM.Examples.Paxos.Voting]
sec_voting_spec [section, in VLSM.Examples.Paxos.Voting]
sec_fixed_non_equivocator_lifting [section, in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocation_no_equivocators [section, in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocator_lifting [section, in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_Fixed_eq_StrongFixed [section, in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocator_sub_projection.sec_fixed_finite_valid_trace_sub_projection_helper_lemmas [section, in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocator_sub_projection [section, in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocation_index_incl [section, in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocation_without_fullnode.sec_strong_fixed_equivocation [section, in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocation_without_fullnode [section, in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_has_been_received_in_state [section, in VLSM.Core.Equivocation]
sec_all_traces_to_valid_state_are_valid [section, in VLSM.Core.Equivocation]
sec_has_been_sent_irrelevance [section, in VLSM.Core.Equivocation]
sec_cannot_resend_message [section, in VLSM.Core.Equivocation]
sec_composite_computable_sent_received_observed [section, in VLSM.Core.Equivocation]
sec_CompositeComputableMessages [section, in VLSM.Core.Equivocation]
sec_composite.sec_composite_has_been_received [section, in VLSM.Core.Equivocation]
sec_composite.sec_stepwise_props [section, in VLSM.Core.Equivocation]
sec_composite [section, in VLSM.Core.Equivocation]
sec_computable_sent_received_observed.sec_computable_observed [section, in VLSM.Core.Equivocation]
sec_computable_sent_received_observed [section, in VLSM.Core.Equivocation]
sec_sent_received_observed_capabilities [section, in VLSM.Core.Equivocation]
sec_stepwise_from_trace [section, in VLSM.Core.Equivocation]
sec_trace_from_stepwise [section, in VLSM.Core.Equivocation]
sec_simple [section, in VLSM.Core.Equivocation]
sec_finite_valid_trace_init_to_alt [section, in VLSM.Core.VLSM]
sec_valid_transition_props [section, in VLSM.Core.VLSM]
sec_same_VLSM.sec_definitions [section, in VLSM.Core.VLSM]
sec_same_VLSM [section, in VLSM.Core.VLSM]
sec_VLSM [section, in VLSM.Core.VLSM]
sec_trace_lemmas [section, in VLSM.Core.VLSM]
sec_traces [section, in VLSM.Core.VLSM]
sec_equivocators_composition_vlsm_projection [section, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
sec_equivocators_composition_sub_projections.sec_seeded_equivocators_valid_trace_project [section, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
sec_equivocators_composition_sub_projections [section, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
sec_equivocators_composition_projections [section, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
sec_basic_VLSM_embedding.sec_weak_embedding [section, in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_basic_VLSM_embedding [section, in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding.sec_embedding_properties [section, in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding.sec_weak_projection_properties [section, in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding.sec_basic_definitions [section, in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding.sec_pre_definitions [section, in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding [section, in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_composite_validator_byzantine_traces [section, in VLSM.Core.ByzantineTraces]
sec_single_validator_byzantine_traces [section, in VLSM.Core.ByzantineTraces]
sec_byzantine_traces.sec_preloaded_with_all_messages_byzantine_alt [section, in VLSM.Core.ByzantineTraces]
sec_byzantine_traces [section, in VLSM.Core.ByzantineTraces]
sec_23_composition.sec_state_update_23_def [section, in VLSM.Examples.Tutorial.Multiply]
sec_23_composition [section, in VLSM.Examples.Tutorial.Multiply]
sec_full_node_constraint [section, in VLSM.Core.Equivocation.FullNode]
sec_traceable_vlsm_composition [section, in VLSM.Core.TraceableVLSM]
sec_traceable_vlsm_props [section, in VLSM.Core.TraceableVLSM]
sec_valid_plans [section, in VLSM.Core.Plans]
sec_apply_plans [section, in VLSM.Core.Plans]
sec_plans [section, in VLSM.Core.Plans]
sec_ELMO.sec_ELMOProtocol [section, in VLSM.Examples.ELMO.ELMO]
sec_ELMO.sec_MessageDependencies_ELMO_component [section, in VLSM.Examples.ELMO.ELMO]
sec_ELMO.sec_TraceableVLSM_ELMO_component [section, in VLSM.Examples.ELMO.ELMO]
sec_ELMO.sec_ELMO_component_lemmas [section, in VLSM.Examples.ELMO.ELMO]
_ <hb _ [notation, in VLSM.Examples.ELMO.ELMO]
sec_ELMO [section, in VLSM.Examples.ELMO.ELMO]
sec_all_equivocating [section, in VLSM.Core.Equivocators.SimulatingFree]
sec_seeded_all_equivocating [section, in VLSM.Core.Equivocators.SimulatingFree]
sec_generalized_constraints [section, in VLSM.Core.Equivocators.SimulatingFree]
sec_minimal_equivocation_trace [section, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
sec_minimal_equivocation_choice [section, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
sec_other_defs [section, in VLSM.Lib.StdppListSet]
sec_fst_defs [section, in VLSM.Lib.StdppListSet]
sec_Forall2_Exists2_props [section, in VLSM.Lib.StdppExtras]
sec_stream_concat_map [section, in VLSM.Lib.StreamFilters]
sec_stream_map_option [section, in VLSM.Lib.StreamFilters]
sec_stream_filter_positions [section, in VLSM.Lib.StreamFilters]
sec_has_limited_equivocation [section, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_fixed_limited_message_equivocation [section, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_tracewise_limited_message_equivocation [section, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_basic_limited_message_equivocation [section, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_limited_message_equivocation [section, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_basic_VLSM_projection.sec_weak_projection [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_basic_VLSM_projection.sec_basic_VLSM_projection_type [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_basic_VLSM_projection [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_projection_properties.sec_projection_friendliness [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_projection_properties [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_weak_projection_properties [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_VLSM_projection_definitions [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_projection_transition_consistency_None [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_projection_type_properties [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_pre_definitions [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection [section, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_find_least_among [section, in VLSM.Lib.Preamble]
sec_witnessed_equivocation_fixed_set [section, in VLSM.Core.Equivocation.WitnessedEquivocation]
sec_witnessed_equivocation.sec_witnessed_equivocation_properties [section, in VLSM.Core.Equivocation.WitnessedEquivocation]
sec_witnessed_equivocation [section, in VLSM.Core.Equivocation.WitnessedEquivocation]
sec_composite_annotated_vlsm_projections [section, in VLSM.Core.AnnotatedVLSM]
sec_annotated_vlsm_projections [section, in VLSM.Core.AnnotatedVLSM]
sec_annotated_vlsm [section, in VLSM.Core.AnnotatedVLSM]
sec_map [section, in VLSM.Lib.FinSetExtras]
sec_fin_set.sec_filter [section, in VLSM.Lib.FinSetExtras]
sec_fin_set.sec_general [section, in VLSM.Lib.FinSetExtras]
sec_fin_set [section, in VLSM.Lib.FinSetExtras]
sec_all_equivocating.sec_seeded_no_equiv [section, in VLSM.Core.Equivocators.FullReplayTraces]
sec_all_equivocating.sec_preloaded_constrained_projection [section, in VLSM.Core.Equivocators.FullReplayTraces]
sec_all_equivocating [section, in VLSM.Core.Equivocators.FullReplayTraces]
sec_basic_VLSM_incl [section, in VLSM.Core.VLSMProjections.VLSMInclusion]
sec_VLSM_incl_properties [section, in VLSM.Core.VLSMProjections.VLSMInclusion]
sec_VLSM_incl_preservation [section, in VLSM.Core.VLSMProjections.VLSMInclusion]
sec_VLSM_inclusion [section, in VLSM.Core.VLSMProjections.VLSMInclusion]
sec_composite_state [section, in VLSM.Core.Composition]
sec_composite_valid_transition [section, in VLSM.Core.Composition]
sec_same_IM_embedding.sec_preloaded_constrained [section, in VLSM.Core.Composition]
sec_same_IM_embedding [section, in VLSM.Core.Composition]
sec_empty_composition_properties [section, in VLSM.Core.Composition]
sec_composite_plan_properties [section, in VLSM.Core.Composition]
sec_composite_decidable_initial_message [section, in VLSM.Core.Composition]
sec_binary_free_composition [section, in VLSM.Core.Composition]
sec_VLSM_composition [section, in VLSM.Core.Composition]
sec_basic_VLSM_stuttering_embedding.sec_weak_stuttering_embedding [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_basic_VLSM_stuttering_embedding.sec_strong_VLSM_stuttering_embedding_type [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_basic_VLSM_stuttering_embedding [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_properties.sec_stuttering_embedding_friendliness [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_properties.sec_stuttering_embedding_trace_projection_redefinitions [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_properties [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_weak_stuttering_embedding_properties.sec_weak_stuttering_embedding_trace_projection_redefinitions [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_weak_stuttering_embedding_properties [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_VLSM_stuttering_embedding_definitions [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_type_properties.sec_pre_properties [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_type_properties [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_pre_definitions [section, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_consensus_spec [section, in VLSM.Examples.Paxos.Consensus]
sec_composite_no_equivocation.sec_seeded_composite_vlsm_no_equivocation.sec_seeded_composite_vlsm_no_equivocation_definition [section, in VLSM.Core.Equivocation.NoEquivocation]
sec_composite_no_equivocation.sec_seeded_composite_vlsm_no_equivocation [section, in VLSM.Core.Equivocation.NoEquivocation]
sec_composite_no_equivocation.sec_composite_no_equivocation_invariants [section, in VLSM.Core.Equivocation.NoEquivocation]
sec_composite_no_equivocation [section, in VLSM.Core.Equivocation.NoEquivocation]
sec_no_equivocation_invariants [section, in VLSM.Core.Equivocation.NoEquivocation]
sec_no_equivocations [section, in VLSM.Core.Equivocation.NoEquivocation]
sec_sender_safety_can_emit_projection [section, in VLSM.Core.EquivocationProjections]
sec_same_IM_oracle_properties [section, in VLSM.Core.EquivocationProjections]
sec_incl_oracle [section, in VLSM.Core.EquivocationProjections]
sec_embedding_oracle [section, in VLSM.Core.EquivocationProjections]
sec_weak_embedding_oracle.sec_selectors [section, in VLSM.Core.EquivocationProjections]
sec_weak_embedding_oracle [section, in VLSM.Core.EquivocationProjections]
sec_projection_oracle.sec_selectors [section, in VLSM.Core.EquivocationProjections]
sec_projection_oracle [section, in VLSM.Core.EquivocationProjections]
sec_trace_classical_properties [section, in VLSM.Lib.TraceClassicalProperties]
sec_msg_dep_fixed_limited_equivocation [section, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_full_node_msg_dep_limited_equivocation_equivalence [section, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_full_node_limited_equivocation [section, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_msg_dep_limited_equivocation [section, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_coequivocating_senders_limited_equivocation [section, in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_equivocator_vlsm_projections [section, in VLSM.Core.Equivocators.EquivocatorsProjections]
sec_muddy [section, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
sec_full_node_fixed_set_equivocation [section, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
sec_msg_dep_fixed_set_equivocation [section, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
sec_measurable_props [section, in VLSM.Lib.Measurable]
sec_constraint_subsumption [section, in VLSM.Core.ConstrainedVLSM]
sec_constrained_vlsm_commutation_lemmas [section, in VLSM.Core.ConstrainedVLSM]
sec_constrained_vlsm_lemmas [section, in VLSM.Core.ConstrainedVLSM]
sec_constrained_vlsm [section, in VLSM.Core.ConstrainedVLSM]
sec_tracewise_equivocation [section, in VLSM.Core.Equivocation.TraceWiseEquivocation]
sec_fixed_non_equivocating_vs_byzantine.sec_validator_fixed_set_byzantine.sec_assuming_initial_messages_lift [section, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_non_equivocating_vs_byzantine.sec_validator_fixed_set_byzantine [section, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_non_equivocating_vs_byzantine [section, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_byzantine_traces.sec_fixed_byzantine_traces_as_preloaded [section, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_byzantine_traces.sec_fixed_byzantine_traces_as_projections [section, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_byzantine_traces [section, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_emit_any_signed_message_vlsm [section, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_history_vlsm_composite [section, in VLSM.Core.HistoryVLSM]
sec_history_vlsm_preloaded [section, in VLSM.Core.HistoryVLSM]
sec_all_equivocating [section, in VLSM.Core.Equivocators.FixedEquivocation]
sec_from_equivocators_to_components [section, in VLSM.Core.Equivocators.FixedEquivocation]
sec_fixed_equivocation_with_fullnode [section, in VLSM.Core.Equivocators.FixedEquivocation]
sec_equivocators_fixed_equivocations_vlsm [section, in VLSM.Core.Equivocators.FixedEquivocation]
sec_VLSM_partial_projection.sec_partial_projection_properties [section, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
sec_VLSM_partial_projection.sec_weak_partial_projection_properties [section, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
sec_VLSM_partial_projection [section, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
sec_constrained_direct_defs [section, in VLSM.Core.PreloadedVLSM]
sec_VLSM_eq_preloaded_properties [section, in VLSM.Core.PreloadedVLSM]
sec_VLSM_incl_preloaded_properties [section, in VLSM.Core.PreloadedVLSM]
sec_preloaded_vlsm_inclusion [section, in VLSM.Core.PreloadedVLSM]
sec_preloaded_vlsm_embedding [section, in VLSM.Core.PreloadedVLSM]
sec_preloaded_vlsm_total_projection [section, in VLSM.Core.PreloadedVLSM]
sec_preloaded_valid_transition [section, in VLSM.Core.PreloadedVLSM]
sec_preloaded_with_all_messages_vlsm [section, in VLSM.Core.PreloadedVLSM]
sec_constrained_defs [section, in VLSM.Core.PreloadedVLSM]
sec_prod_powers [section, in VLSM.Lib.NatExtras]
sec_no_equivocation [section, in VLSM.Core.Equivocators.FixedEquivocationSimulation]
sec_fixed_equivocating [section, in VLSM.Core.Equivocators.FixedEquivocationSimulation]
sec_equivocator_vlsm_valid_state_projections [section, in VLSM.Core.Equivocators.Equivocators]
sec_equivocator_vlsm [section, in VLSM.Core.Equivocators.Equivocators]
sec_composition [section, in VLSM.Core.ProjectionTraces]
sec_projection_friendliness_sufficient_condition [section, in VLSM.Core.ProjectionTraces]
sec_fixed_projection [section, in VLSM.Core.ProjectionTraces]
sec_binary_free_composition_projections [section, in VLSM.Core.ProjectionTraces]
sec_projection_traces_membership [section, in VLSM.Core.ProjectionTraces]
sec_preloaded_projection_traces [section, in VLSM.Core.ProjectionTraces]
sec_projections [section, in VLSM.Core.ProjectionTraces]
sec_self_validator_vlsm [section, in VLSM.Core.Validator]
sec_component_projection_validator_alt [section, in VLSM.Core.Validator]
sec_component_projection_validator [section, in VLSM.Core.Validator]
sec_induced_validator_validators.sec_preloaded_with_all_messages_validator_proj [section, in VLSM.Core.Validator]
sec_induced_validator_validators [section, in VLSM.Core.Validator]
sec_projection_induced_validator_incl [section, in VLSM.Core.Validator]
sec_projection_induced_validator.sec_projection_induced_validator_as_projection.sec_projection_induced_friendliness [section, in VLSM.Core.Validator]
sec_projection_induced_validator.sec_projection_induced_validator_as_projection [section, in VLSM.Core.Validator]
sec_projection_induced_validator.sec_projection_induced_validator_pre_definitions [section, in VLSM.Core.Validator]
sec_projection_induced_validator [section, in VLSM.Core.Validator]
sec_projection_validator [section, in VLSM.Core.Validator]
sec_input_validation_definitions [section, in VLSM.Core.Validator]
sec_limited_equivocation_simulation.sec_equivocators_simulating_annotated_limited [section, in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
sec_limited_equivocation_simulation [section, in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
sec_fixed_limited_state_equivocation [section, in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
sec_temporal [section, in VLSM.Lib.StreamExtras]
sec_infinitely_often [section, in VLSM.Lib.StreamExtras]
sec_max_suffix [section, in VLSM.Lib.ListExtras]
sec_max_prefix [section, in VLSM.Lib.ListExtras]
sec_suffix_quantifiers [section, in VLSM.Lib.ListExtras]
sec_list_annotate_props [section, in VLSM.Lib.ListExtras]
sec_UMO.sec_UMOProtocol [section, in VLSM.Examples.ELMO.UMO]
sec_UMO.sec_UMO_component_lemmas [section, in VLSM.Examples.ELMO.UMO]
sec_UMO [section, in VLSM.Examples.ELMO.UMO]
sec_MO.sec_MOProtocol [section, in VLSM.Examples.ELMO.MO]
sec_MO.sec_MO_component_lemmas [section, in VLSM.Examples.ELMO.MO]
sec_MO.sec_alternative_definition_of_validity [section, in VLSM.Examples.ELMO.MO]
sec_MO [section, in VLSM.Examples.ELMO.MO]
SeededNoEquiv_subsumption [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
SeededXE_SeededX_vlsm_partial_projection [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
SeededXE_incl_PreFreeE [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
SeededXE_SeededNoEquiv_weak_embedding [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
SeededXE_PreFreeE_weak_embedding [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
SeededXE_Free_embedding [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
seeded_equivocators_no_equivocation_vlsm [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
seeded_free_sub_composition [definition, in VLSM.Core.SubProjectionTraces]
seeded_equivocators_valid_trace_project [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
seeded_no_equivocation_incl_preloaded [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
seeded_equivocators_initial_message [lemma, in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
seeded_equivocators_finite_valid_trace_init_to_rev [lemma, in VLSM.Core.Equivocators.SimulatingFree]
seeded_no_equivocation_incl_preloaded [lemma, in VLSM.Core.Equivocation.NoEquivocation]
selected_messages_consistency_prop_from_stepwise [lemma, in VLSM.Core.Equivocation]
selected_message_exists_in_all_traces_initial_state [lemma, in VLSM.Core.Equivocation]
selected_messages_consistency_prop [definition, in VLSM.Core.Equivocation]
selected_message_exists_preloaded_not_some_iff_no [lemma, in VLSM.Core.Equivocation]
selected_message_exists_not_some_iff_no [lemma, in VLSM.Core.Equivocation]
selected_message_exists_in_no_preloaded_trace [definition, in VLSM.Core.Equivocation]
selected_message_exists_in_some_preloaded_traces [definition, in VLSM.Core.Equivocation]
selected_message_exists_in_all_preloaded_traces [definition, in VLSM.Core.Equivocation]
self_messages_sent [lemma, in VLSM.Examples.ELMO.ELMO]
self_validator_vlsm_prop [definition, in VLSM.Core.Validator]
Send [constructor, in VLSM.Examples.ELMO.BaseELMO]
sender_id_m_2b [lemma, in VLSM.Examples.Paxos.Paxos]
sender_nontriviality_prop [definition, in VLSM.Core.Equivocation]
sender_safety_alt_iff [lemma, in VLSM.Core.Equivocation]
sender_safety_alt_prop [definition, in VLSM.Core.Equivocation]
sender_safety_prop [definition, in VLSM.Core.Equivocation]
sending_1b_updates_maxBal [lemma, in VLSM.Examples.Paxos.Paxos]
sends_unique_argument [lemma, in VLSM.Examples.Paxos.Paxos]
send_implies_sent_argument [lemma, in VLSM.Examples.Paxos.Paxos]
sentMessages [definition, in VLSM.Examples.ELMO.BaseELMO]
sentMessages_addObservation [lemma, in VLSM.Examples.ELMO.BaseELMO]
sentMessages_characterization [lemma, in VLSM.Examples.ELMO.UMO]
sentMessages' [definition, in VLSM.Examples.ELMO.BaseELMO]
sent_1c_implies_ShowsSafeAt [lemma, in VLSM.Examples.Paxos.Paxos]
sent_2a_after_1c [lemma, in VLSM.Examples.Paxos.Paxos]
sent_2b_unique [lemma, in VLSM.Examples.Paxos.Paxos]
sent_2a_unique [lemma, in VLSM.Examples.Paxos.Paxos]
sent_2b_after_2a [lemma, in VLSM.Examples.Paxos.Paxos]
sent_1b_impl_sent_lastvote_as_2b [lemma, in VLSM.Examples.Paxos.Paxos]
sent_1b_once [lemma, in VLSM.Examples.Paxos.Paxos]
sent_2a [projection, in VLSM.Examples.Paxos.Paxos]
sent_1c [projection, in VLSM.Examples.Paxos.Paxos]
sent_1a [projection, in VLSM.Examples.Paxos.Paxos]
sent_vote_le_maxVBal [lemma, in VLSM.Examples.Paxos.Paxos]
sent_messages [projection, in VLSM.Examples.Paxos.Paxos]
sent_by_non_equivocating_are_directly_observed [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
sent_by_non_equivocating_are_sent [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
sent_by_non_equivocating_dec [instance, in VLSM.Core.Equivocation.FixedSetEquivocation]
sent_by_non_equivocating [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
sent_component_sent_previously [lemma, in VLSM.Core.Equivocation]
sent_valid [lemma, in VLSM.Core.Equivocation]
sent_can_emit [lemma, in VLSM.Core.Equivocation]
sent_messages_set [projection, in VLSM.Core.Equivocation]
sent_messages_proper [lemma, in VLSM.Core.Equivocation]
sent_messages [definition, in VLSM.Core.Equivocation]
sent_are_valid [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
sent_except_from [definition, in VLSM.Core.Equivocation.NoEquivocation]
sent_by_non_equivocating_msg_dep_rel_strong_fixed_equivocation [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
sent_comparable_dec [instance, in VLSM.Examples.ELMO.UMO]
sent_comparable_sym [instance, in VLSM.Examples.ELMO.UMO]
sent_comparable_sind [definition, in VLSM.Examples.ELMO.UMO]
sent_comparable_ind [definition, in VLSM.Examples.ELMO.UMO]
sent_comparable [inductive, in VLSM.Examples.ELMO.UMO]
set [definition, in VLSM.Lib.StdppListSet]
setoidT [definition, in VLSM.Lib.TraceProperties]
set_sent_2a [definition, in VLSM.Examples.Paxos.Paxos]
set_sent_1c [definition, in VLSM.Examples.Paxos.Paxos]
set_sent_1a [definition, in VLSM.Examples.Paxos.Paxos]
set_union_iterated_preserves_prop [lemma, in VLSM.Lib.ListSetExtras]
set_elem_of_subseteq [instance, in VLSM.Lib.ListSetExtras]
set_eq_elem_of [instance, in VLSM.Lib.ListSetExtras]
set_diff_filter_nodup [lemma, in VLSM.Lib.ListSetExtras]
set_diff_filter_iff [lemma, in VLSM.Lib.ListSetExtras]
set_diff_filter [definition, in VLSM.Lib.ListSetExtras]
set_prod_nodup [lemma, in VLSM.Lib.ListSetExtras]
set_remove_list_1 [lemma, in VLSM.Lib.ListSetExtras]
set_remove_list2 [definition, in VLSM.Lib.ListSetExtras]
set_remove_list1 [definition, in VLSM.Lib.ListSetExtras]
set_remove_list [definition, in VLSM.Lib.ListSetExtras]
set_union_iterated_empty [lemma, in VLSM.Lib.ListSetExtras]
set_eq_remove_union_not_elem_of [lemma, in VLSM.Lib.ListSetExtras]
set_eq_remove_union_elem_of [lemma, in VLSM.Lib.ListSetExtras]
set_eq_remove [lemma, in VLSM.Lib.ListSetExtras]
set_remove_length [lemma, in VLSM.Lib.ListSetExtras]
set_add_length [lemma, in VLSM.Lib.ListSetExtras]
set_remove_elem_of_iff [lemma, in VLSM.Lib.ListSetExtras]
set_remove_nodup_1 [lemma, in VLSM.Lib.ListSetExtras]
set_remove_first [lemma, in VLSM.Lib.ListSetExtras]
set_remove_elim [lemma, in VLSM.Lib.ListSetExtras]
set_remove_not_elem_of [lemma, in VLSM.Lib.ListSetExtras]
set_add_new [lemma, in VLSM.Lib.ListSetExtras]
set_add_ignore [lemma, in VLSM.Lib.ListSetExtras]
set_map_singleton [lemma, in VLSM.Lib.ListSetExtras]
set_map_eq [lemma, in VLSM.Lib.ListSetExtras]
set_map_subseteq [lemma, in VLSM.Lib.ListSetExtras]
set_map_exists [lemma, in VLSM.Lib.ListSetExtras]
set_map_elem_of [lemma, in VLSM.Lib.ListSetExtras]
set_map_nodup [lemma, in VLSM.Lib.ListSetExtras]
set_union_empty_left [lemma, in VLSM.Lib.ListSetExtras]
set_union_iterated_subseteq [lemma, in VLSM.Lib.ListSetExtras]
set_union_in_iterated [lemma, in VLSM.Lib.ListSetExtras]
set_union_iterated_nodup [lemma, in VLSM.Lib.ListSetExtras]
set_union_subseteq_iff [lemma, in VLSM.Lib.ListSetExtras]
set_union_subseteq_right [lemma, in VLSM.Lib.ListSetExtras]
set_union_subseteq_left [lemma, in VLSM.Lib.ListSetExtras]
set_union_nodup_left [lemma, in VLSM.Lib.ListSetExtras]
set_union_empty [lemma, in VLSM.Lib.ListSetExtras]
set_union_comm [lemma, in VLSM.Lib.ListSetExtras]
set_eq_Forall [lemma, in VLSM.Lib.ListSetExtras]
set_eq_cons [lemma, in VLSM.Lib.ListSetExtras]
set_eq_empty_iff [lemma, in VLSM.Lib.ListSetExtras]
set_eq_proj2 [lemma, in VLSM.Lib.ListSetExtras]
set_eq_proj1 [lemma, in VLSM.Lib.ListSetExtras]
set_eq_fin_set [lemma, in VLSM.Lib.ListSetExtras]
set_eq_extract_forall [lemma, in VLSM.Lib.ListSetExtras]
set_eq_dec [instance, in VLSM.Lib.ListSetExtras]
set_eq [definition, in VLSM.Lib.ListSetExtras]
set_remove_preserves_not_in_indices_initial [lemma, in VLSM.Core.TraceableVLSM]
set_map [definition, in VLSM.Lib.StdppListSet]
set_fold_right [definition, in VLSM.Lib.StdppListSet]
set_prod [definition, in VLSM.Lib.StdppListSet]
set_diff_nodup [lemma, in VLSM.Lib.StdppListSet]
set_diff_iff [lemma, in VLSM.Lib.StdppListSet]
set_diff_elim2 [lemma, in VLSM.Lib.StdppListSet]
set_diff_elim1 [lemma, in VLSM.Lib.StdppListSet]
set_diff_intro [lemma, in VLSM.Lib.StdppListSet]
set_union_nodup [lemma, in VLSM.Lib.StdppListSet]
set_union_iff [lemma, in VLSM.Lib.StdppListSet]
set_union_elim [lemma, in VLSM.Lib.StdppListSet]
set_union_intro [lemma, in VLSM.Lib.StdppListSet]
set_remove_nodup [lemma, in VLSM.Lib.StdppListSet]
set_remove_iff [lemma, in VLSM.Lib.StdppListSet]
set_remove_3 [lemma, in VLSM.Lib.StdppListSet]
set_remove_2 [lemma, in VLSM.Lib.StdppListSet]
set_remove_1 [lemma, in VLSM.Lib.StdppListSet]
set_add_nodup [lemma, in VLSM.Lib.StdppListSet]
set_add_iff [lemma, in VLSM.Lib.StdppListSet]
set_add_not_empty [lemma, in VLSM.Lib.StdppListSet]
set_add_elim [lemma, in VLSM.Lib.StdppListSet]
set_add_intro [lemma, in VLSM.Lib.StdppListSet]
set_add_intro2 [lemma, in VLSM.Lib.StdppListSet]
set_add_intro1 [lemma, in VLSM.Lib.StdppListSet]
set_diff [definition, in VLSM.Lib.StdppListSet]
set_union [definition, in VLSM.Lib.StdppListSet]
set_remove [definition, in VLSM.Lib.StdppListSet]
set_add [definition, in VLSM.Lib.StdppListSet]
set_Exists2_union_inv [lemma, in VLSM.Lib.StdppExtras]
set_Exists2_union_4 [lemma, in VLSM.Lib.StdppExtras]
set_Exists2_union_3 [lemma, in VLSM.Lib.StdppExtras]
set_Exists2_union_2 [lemma, in VLSM.Lib.StdppExtras]
set_Exists2_union_1 [lemma, in VLSM.Lib.StdppExtras]
set_Exists2_pair [lemma, in VLSM.Lib.StdppExtras]
set_Exists2_singleton [lemma, in VLSM.Lib.StdppExtras]
set_Exists2_empty [lemma, in VLSM.Lib.StdppExtras]
set_Forall2_union_inv_2 [lemma, in VLSM.Lib.StdppExtras]
set_Forall2_union_inv_1 [lemma, in VLSM.Lib.StdppExtras]
set_Forall2_union [lemma, in VLSM.Lib.StdppExtras]
set_Forall2_pair [lemma, in VLSM.Lib.StdppExtras]
set_Forall2_singleton [lemma, in VLSM.Lib.StdppExtras]
set_Forall2_empty [lemma, in VLSM.Lib.StdppExtras]
set_Exists2 [definition, in VLSM.Lib.StdppExtras]
set_Forall2 [definition, in VLSM.Lib.StdppExtras]
set_map_id [lemma, in VLSM.Lib.FinSetExtras]
set_map_size_upper_bound [lemma, in VLSM.Lib.FinSetExtras]
set_map_subset [lemma, in VLSM.Lib.FinSetExtras]
set_equality_predicate [lemma, in VLSM.Lib.SortedLists]
set_eq_first_equal [lemma, in VLSM.Lib.SortedLists]
SFurther [constructor, in VLSM.Lib.ListExtras]
SHere [constructor, in VLSM.Lib.ListExtras]
SHereAndFurther [constructor, in VLSM.Lib.ListExtras]
ShowsSafeAt [definition, in VLSM.Examples.Paxos.Paxos]
ShowsSafeAt_impl_V_SafeAt [lemma, in VLSM.Examples.Paxos.Paxos]
ShowsSafeAt_stable [lemma, in VLSM.Examples.Paxos.Paxos]
signed_messages_valid [definition, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
simple_get_maximal_element_some [lemma, in VLSM.Lib.TopSort]
simple_get_maximal_element_correct [lemma, in VLSM.Lib.TopSort]
simple_maximal_element_in [lemma, in VLSM.Lib.TopSort]
simple_top_sort_correct [lemma, in VLSM.Lib.TopSort]
simple_topologically_sorted_precedes_closed_remove_last [lemma, in VLSM.Lib.TopSort]
SimulatingFree [library]
SingletonT [definition, in VLSM.Lib.TraceProperties]
singletonT [definition, in VLSM.Lib.TraceProperties]
SingletonT_andA_AppendT [lemma, in VLSM.Lib.TraceProperties]
SingletonT_AppendT [lemma, in VLSM.Lib.TraceProperties]
SingletonT_DupT_AppendT_andA_DupT [lemma, in VLSM.Lib.TraceProperties]
singletonT_andA_followsT [lemma, in VLSM.Lib.TraceProperties]
SingletonT_cont [lemma, in VLSM.Lib.TraceProperties]
singletonT_nil [lemma, in VLSM.Lib.TraceProperties]
singletonT_cont [lemma, in VLSM.Lib.TraceProperties]
singletonT_setoidT [lemma, in VLSM.Lib.TraceProperties]
singleton_voteset [definition, in VLSM.Examples.Paxos.Paxos]
single_equivocator_projection [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
sizeMessage [definition, in VLSM.Examples.ELMO.BaseELMO]
sizeObservation [definition, in VLSM.Examples.ELMO.BaseELMO]
sizeObservation_unfold [lemma, in VLSM.Examples.ELMO.BaseELMO]
sizeState [definition, in VLSM.Examples.ELMO.BaseELMO]
size_MuddyUnion_input_valid_transition [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
SkipToRound [constructor, in VLSM.Examples.Paxos.Voting]
SNil [constructor, in VLSM.Lib.ListExtras]
some_values [constructor, in VLSM.Examples.Paxos.Paxos]
SortedLists [library]
Spawn [constructor, in VLSM.Core.Equivocators.Equivocators]
spawn_initial_state [definition, in VLSM.Core.Equivocators.FullReplayTraces]
specialized_proper_sent_rev [lemma, in VLSM.Core.Equivocation]
specialized_proper_sent [lemma, in VLSM.Core.Equivocation]
specialized_selected_message_exists_in_some_traces_from [lemma, in VLSM.Core.Equivocation]
specialized_selected_message_exists_in_no_trace [definition, in VLSM.Core.Equivocation]
specialized_selected_message_exists_in_some_traces [definition, in VLSM.Core.Equivocation]
specialized_selected_message_exists_in_all_traces [definition, in VLSM.Core.Equivocation]
special_receivable_messages_emittable_in_future [lemma, in VLSM.Examples.ELMO.ELMO]
SsrExport [library]
stabilization [lemma, in VLSM.Lib.StreamExtras]
state [projection, in VLSM.Examples.ELMO.BaseELMO]
State [record, in VLSM.Examples.ELMO.BaseELMO]
state [projection, in VLSM.Core.VLSM]
State [record, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
State_eq_dec [lemma, in VLSM.Examples.ELMO.BaseELMO]
State_sind [definition, in VLSM.Examples.ELMO.BaseELMO]
State_rec [definition, in VLSM.Examples.ELMO.BaseELMO]
State_ind [definition, in VLSM.Examples.ELMO.BaseELMO]
State_rect [definition, in VLSM.Examples.ELMO.BaseELMO]
state_sub_item_input_is_seeded_or_sub_previously_sent [definition, in VLSM.Core.SubProjectionTraces]
state_project [definition, in VLSM.Examples.Paxos.Voting]
state_received_not_sent_invariant_trace_iff [lemma, in VLSM.Core.Equivocation]
state_received_not_sent_invariant [definition, in VLSM.Core.Equivocation]
state_received_not_sent_trace_iff [lemma, in VLSM.Core.Equivocation]
state_received_not_sent [definition, in VLSM.Core.Equivocation]
state_message_oracle [definition, in VLSM.Core.Equivocation]
state_validators [projection, in VLSM.Core.Equivocation]
state_update_23_three [lemma, in VLSM.Examples.Tutorial.Multiply]
state_update_23_two [lemma, in VLSM.Examples.Tutorial.Multiply]
state_update_23_twice [lemma, in VLSM.Examples.Tutorial.Multiply]
state_update_23_neq [lemma, in VLSM.Examples.Tutorial.Multiply]
state_update_23_eq [lemma, in VLSM.Examples.Tutorial.Multiply]
state_update_23 [definition, in VLSM.Examples.Tutorial.Multiply]
state_23 [definition, in VLSM.Examples.Tutorial.Multiply]
state_to_trace [definition, in VLSM.Core.TraceableVLSM]
state_suffix_addObservation_inv [lemma, in VLSM.Examples.ELMO.ELMO]
state_to_minimal_equivocation_trace_equivocation_monotonic [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
state_to_minimal_equivocation_trace [definition, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
state_annotation [projection, in VLSM.Core.AnnotatedVLSM]
state_update_twice_neq [lemma, in VLSM.Core.Composition]
state_update_twice [lemma, in VLSM.Core.Composition]
state_update_id [lemma, in VLSM.Core.Composition]
state_update_eq [lemma, in VLSM.Core.Composition]
state_update_neq [lemma, in VLSM.Core.Composition]
state_update [definition, in VLSM.Core.Composition]
state_round_inc [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
state_round [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
state_status [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
state_has_fixed_equivocation [definition, in VLSM.Core.Equivocators.FixedEquivocation]
state_suffix_totally_orders_sent_messages_valid_state_prop [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_totally_orders_sent_messages_UMO_reachable [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_totally_orders_sent_messages_valid_state_prop_aux [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_totally_orders_sent_messages_UMO_reachable_aux [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_of_finite_constrained_trace_init_to [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_of_finite_constrained_trace_from_to [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_of_input_constrained_transition [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_of_UMO_component_valid_transition [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_addObservations [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_addObservation [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_empty_minimum [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_empty_minimal [lemma, in VLSM.Examples.ELMO.UMO]
state_suffix_dec [instance, in VLSM.Examples.ELMO.UMO]
state_suffix [record, in VLSM.Examples.ELMO.UMO]
state_after_sending [definition, in VLSM.Examples.ELMO.MO]
state_suffix_totally_orders_valid_sent_messages' [lemma, in VLSM.Examples.ELMO.MO]
state_suffix_totally_orders_valid_sent_messages [lemma, in VLSM.Examples.ELMO.MO]
state00 [definition, in VLSM.Examples.Tutorial.Multiply]
state01 [definition, in VLSM.Examples.Tutorial.Multiply]
state02 [definition, in VLSM.Examples.Tutorial.Multiply]
state10 [definition, in VLSM.Examples.Tutorial.Multiply]
state11 [definition, in VLSM.Examples.Tutorial.Multiply]
state12 [definition, in VLSM.Examples.Tutorial.Multiply]
state2trace [definition, in VLSM.Examples.ELMO.BaseELMO]
state21 [definition, in VLSM.Examples.Tutorial.Multiply]
state22 [definition, in VLSM.Examples.Tutorial.Multiply]
StdppExtras [library]
StdppListSet [library]
stdpp_finite_sub_index [instance, in VLSM.Core.SubProjectionTraces]
stdpp_nat_le_sum [lemma, in VLSM.Lib.StdppExtras]
steps_until_final_composite [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
steps_until_final_component [definition, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
stepwise_props_from_trace [lemma, in VLSM.Core.Equivocation]
step_cases'' [lemma, in VLSM.Examples.Paxos.Voting]
step_cases' [lemma, in VLSM.Examples.Paxos.Voting]
step_cases [lemma, in VLSM.Examples.Paxos.Voting]
stop_IterT [lemma, in VLSM.Lib.TraceProperties]
StreamExtras [library]
StreamFilters [library]
stream_map_option_EqSt [lemma, in VLSM.Lib.StreamFilters]
stream_concat_map_ex_min_prefix [definition, in VLSM.Lib.StreamFilters]
stream_concat_map_ex_prefix [definition, in VLSM.Lib.StreamFilters]
stream_concat_map_prefix [lemma, in VLSM.Lib.StreamFilters]
stream_concat_map [definition, in VLSM.Lib.StreamFilters]
stream_map_option_prefix_ex [definition, in VLSM.Lib.StreamFilters]
stream_map_option_prefix [lemma, in VLSM.Lib.StreamFilters]
stream_map_option [definition, in VLSM.Lib.StreamFilters]
stream_filter [definition, in VLSM.Lib.StreamFilters]
stream_filter_map [definition, in VLSM.Lib.StreamFilters]
stream_filter_positions_filtering_subsequence [lemma, in VLSM.Lib.StreamFilters]
stream_filter_positions_monotone [lemma, in VLSM.Lib.StreamFilters]
stream_filter_positions_Str_nth_tl [lemma, in VLSM.Lib.StreamFilters]
stream_filter_positions_unroll [lemma, in VLSM.Lib.StreamFilters]
stream_filter_positions [definition, in VLSM.Lib.StreamFilters]
stream_filter_fst_pos_nth_tl_has_property [lemma, in VLSM.Lib.StreamFilters]
stream_filter_fst_pos_le [lemma, in VLSM.Lib.StreamFilters]
stream_filter_fst_pos_infinitely_often [lemma, in VLSM.Lib.StreamFilters]
stream_filter_fst_pos_characterization [lemma, in VLSM.Lib.StreamFilters]
stream_filter_fst_pos [definition, in VLSM.Lib.StreamFilters]
stream_filter_Forall [lemma, in VLSM.Lib.StreamFilters]
stream_concat_prefix [lemma, in VLSM.Lib.StreamExtras]
stream_concat_unroll [lemma, in VLSM.Lib.StreamExtras]
stream_prepend_prefix_r [lemma, in VLSM.Lib.StreamExtras]
stream_prepend_prefix_l [lemma, in VLSM.Lib.StreamExtras]
stream_prepend_prefix [lemma, in VLSM.Lib.StreamExtras]
stream_concat [definition, in VLSM.Lib.StreamExtras]
stream_prepend [definition, in VLSM.Lib.StreamExtras]
stream_prefix_nth_last [lemma, in VLSM.Lib.StreamExtras]
stream_subsequence [definition, in VLSM.Lib.StreamExtras]
stream_segment_app [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_segment_suffix [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_segment [lemma, in VLSM.Lib.StreamExtras]
stream_segment_alt_iff [lemma, in VLSM.Lib.StreamExtras]
stream_segment_alt [definition, in VLSM.Lib.StreamExtras]
stream_segment_nth [lemma, in VLSM.Lib.StreamExtras]
stream_segment [definition, in VLSM.Lib.StreamExtras]
stream_prefix_of [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_prefix [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_suffix [lemma, in VLSM.Lib.StreamExtras]
stream_suffix_nth [lemma, in VLSM.Lib.StreamExtras]
stream_suffix_S [lemma, in VLSM.Lib.StreamExtras]
stream_suffix [definition, in VLSM.Lib.StreamExtras]
stream_prefix_ForAll2 [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_ForAll [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_length [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_map [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_app_r [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_app_l [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_EqSt [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_S [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_lookup [lemma, in VLSM.Lib.StreamExtras]
stream_prefix_nth [lemma, in VLSM.Lib.StreamExtras]
stream_prefix [definition, in VLSM.Lib.StreamExtras]
stream_app_inj_l [lemma, in VLSM.Lib.StreamExtras]
stream_app_f_equal [lemma, in VLSM.Lib.StreamExtras]
stream_app_assoc [lemma, in VLSM.Lib.StreamExtras]
stream_app_cons [definition, in VLSM.Lib.StreamExtras]
stream_app [definition, in VLSM.Lib.StreamExtras]
stream_eq_hd_tl [lemma, in VLSM.Lib.StreamExtras]
StrictlyComparable [record, in VLSM.Lib.Preamble]
StrictlyComparable_list [instance, in VLSM.Lib.Preamble]
StrictlyComparable_pair [instance, in VLSM.Lib.Preamble]
StrictlyComparable_option [instance, in VLSM.Lib.Preamble]
StrictlyComparable_dsig [instance, in VLSM.Lib.Preamble]
StrictOrder_Transitive [projection, in VLSM.Lib.Preamble]
StrictOrder_Reflexive [projection, in VLSM.Lib.Preamble]
StrictOrder_state_suffix [instance, in VLSM.Examples.ELMO.UMO]
strict_maximal_among [definition, in VLSM.Lib.Preamble]
strict_minimal_among_iff [lemma, in VLSM.Lib.Preamble]
strict_minimal_among_lt_0 [lemma, in VLSM.Lib.Preamble]
strict_minimal_among [definition, in VLSM.Lib.Preamble]
StrongFixed_incl_Free [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
StrongFixed_incl_Fixed [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
StrongFixed_incl_Limited [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
StrongFixed_valid_state_not_heavy [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
strong_fixed_equivocation_vlsm_composition_no_equivocators [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_constraint_no_equivocators [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_no_equivocators [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_lift_sub_state_to [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_eqv_valid_message_in_futures [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_eqv_valid_message [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_constraint_subsumption [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_subsumption [lemma, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_vlsm_composition [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_constraint [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation [definition, in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_embedding_initial_message_preservation_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_embedding_initial_message_preservation [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_embedding_transition_preservation_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_projection_transition_consistency_None_from_full [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_projection_transition_preservation_Some_from_full [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_embedding_transition_preservation [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_embedding_valid_preservation_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_projection_valid_preservation_from_full [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_embedding_valid_preservation [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_projection_valid_message_preservation_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_valid_message_preservation [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_transition_preservation_Some_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_transition_preservation_Some [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_valid_preservation_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_valid_preservation [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_initial_state_preservation_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_initial_state_preservation [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_transition_consistency_None_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_transition_consistency_None [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_witness_has_fixed_equivocation [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_trace_witnessing_equivocation_prop_extend_neq [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_trace_witnessing_equivocation_prop_extend_eq [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_witness_equivocating_validators_prefix_monotonicity [lemma, in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_trace_witnessing_equivocation_prop [definition, in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_incl_initial_message_preservation [definition, in VLSM.Core.VLSMProjections.VLSMInclusion]
strong_incl_initial_state_preservation [definition, in VLSM.Core.VLSMProjections.VLSMInclusion]
strong_incl_transition_preservation [definition, in VLSM.Core.VLSMProjections.VLSMInclusion]
strong_incl_valid_preservation [definition, in VLSM.Core.VLSMProjections.VLSMInclusion]
strong_VLSM_stuttering_embedding_type [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
strong_stuttering_embedding_initial_state_preservation_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
strong_stuttering_embedding_initial_state_preservation [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
strong_transition_item_project_consistency [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
strong_msg_dep_fixed_equivocation_incl [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
strong_fixed_equivocation_msg_dep_constraint_subsumption [lemma, in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
strong_constraint_subsumption_strongest [lemma, in VLSM.Core.ConstrainedVLSM]
strong_constraint_subsumption [definition, in VLSM.Core.ConstrainedVLSM]
strong_constraint_subsumption_all_fixed [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
strong_constraint_subsumption_fixed_all [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
stuttering_embedding_friendly_trace_char [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
stuttering_embedding_friendly_finite_valid_trace_from_to [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
stuttering_embedding_friendly_prop [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
stuttering_embedding_preserves_valid_trace [projection, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
stuttering_embedding_type [projection, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
stuttering_embedding_input_valid_transition_item_validity [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
st_obs_finite_valid_trace_from_to [lemma, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
st_rs [projection, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
st_obs [projection, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
submseteq_list_subseteq [lemma, in VLSM.Lib.ListExtras]
submseteq_tail_l [lemma, in VLSM.Lib.ListExtras]
SubProjectionTraces [library]
subseteq_Forall [lemma, in VLSM.Lib.ListSetExtras]
subseteq_appr [lemma, in VLSM.Lib.ListSetExtras]
subseteq_remove_union [lemma, in VLSM.Lib.ListSetExtras]
substate_new [constructor, in VLSM.Examples.ELMO.BaseELMO]
substate_prev [constructor, in VLSM.Examples.ELMO.BaseELMO]
sub_equivocator_IM_initial_state_commute [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
sub_no_indices_no_can_emit [lemma, in VLSM.Core.SubProjectionTraces]
sub_transition_element_project_Some [lemma, in VLSM.Core.SubProjectionTraces]
sub_element_state_project [lemma, in VLSM.Core.SubProjectionTraces]
sub_element_label_project [lemma, in VLSM.Core.SubProjectionTraces]
sub_transition_element_project_None [lemma, in VLSM.Core.SubProjectionTraces]
sub_state_element_project [definition, in VLSM.Core.SubProjectionTraces]
sub_label_element_project [definition, in VLSM.Core.SubProjectionTraces]
sub_valid_preloaded_lifts_can_be_emitted [lemma, in VLSM.Core.SubProjectionTraces]
sub_element_state_neq [lemma, in VLSM.Core.SubProjectionTraces]
sub_element_state_eq [lemma, in VLSM.Core.SubProjectionTraces]
sub_element_state [definition, in VLSM.Core.SubProjectionTraces]
sub_element_label [definition, in VLSM.Core.SubProjectionTraces]
sub_composition_all_embedding_rev [lemma, in VLSM.Core.SubProjectionTraces]
sub_composition_all_embedding [lemma, in VLSM.Core.SubProjectionTraces]
sub_IM_no_equivocation_preservation [lemma, in VLSM.Core.SubProjectionTraces]
sub_IM_not_equivocating_constraint [definition, in VLSM.Core.SubProjectionTraces]
sub_IM_has_been_sent_iff_by_sender [lemma, in VLSM.Core.SubProjectionTraces]
sub_IM_sender_safety [lemma, in VLSM.Core.SubProjectionTraces]
sub_IM_preserves_no_initial_messages [lemma, in VLSM.Core.SubProjectionTraces]
sub_IM_preserves_channel_authentication [lemma, in VLSM.Core.SubProjectionTraces]
sub_IM_A [definition, in VLSM.Core.SubProjectionTraces]
sub_IM_sender [definition, in VLSM.Core.SubProjectionTraces]
sub_can_emit_sender [lemma, in VLSM.Core.SubProjectionTraces]
sub_index_list_annotate [definition, in VLSM.Core.SubProjectionTraces]
sub_IM_state_update_neq [lemma, in VLSM.Core.SubProjectionTraces]
sub_IM_state_update_eq [lemma, in VLSM.Core.SubProjectionTraces]
sub_IM_state_pi [lemma, in VLSM.Core.SubProjectionTraces]
sub_IM [definition, in VLSM.Core.SubProjectionTraces]
sub_index [definition, in VLSM.Core.SubProjectionTraces]
sub_index_prop_dec [instance, in VLSM.Core.SubProjectionTraces]
sub_index_prop [definition, in VLSM.Core.SubProjectionTraces]
sub_replayed_trace_from_valid_equivocating [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
sub_preloaded_replayed_trace_from_valid_equivocating [lemma, in VLSM.Core.Equivocators.FullReplayTraces]
succ_fsfun_supp_not_in [lemma, in VLSM.Lib.FinSuppFn]
succ_fsfun_supp_in [lemma, in VLSM.Lib.FinSuppFn]
succ_fsfun_proper [instance, in VLSM.Lib.FinSuppFn]
succ_fsfun_neq [lemma, in VLSM.Lib.FinSuppFn]
succ_fsfun_eq [lemma, in VLSM.Lib.FinSuppFn]
succ_fsfun [definition, in VLSM.Lib.FinSuppFn]
sufficient_validators_pivotal [lemma, in VLSM.Core.ReachableThreshold]
suffix_max_suffix [lemma, in VLSM.Lib.ListExtras]
suffix_lastn [lemma, in VLSM.Lib.ListExtras]
suffix_rev [lemma, in VLSM.Lib.ListExtras]
sumbool_forall [lemma, in VLSM.Lib.ListExtras]
sum_list_with_zero [lemma, in VLSM.Lib.StdppExtras]
sum_list_with_ext_forall [lemma, in VLSM.Lib.StdppExtras]
sum_list_with_proper [instance, in VLSM.Lib.StdppExtras]
sum_project_right [definition, in VLSM.Lib.Preamble]
sum_project_left [definition, in VLSM.Lib.Preamble]
sum_weights_union_empty [lemma, in VLSM.Lib.Measurable]
sum_weights_disj_union [lemma, in VLSM.Lib.Measurable]
sum_weights_list_permutation_proper [instance, in VLSM.Lib.Measurable]
sum_weights_app_list [lemma, in VLSM.Lib.Measurable]
sum_weights_in [lemma, in VLSM.Lib.Measurable]
sum_weights_proper [lemma, in VLSM.Lib.Measurable]
sum_weights_subseteq [lemma, in VLSM.Lib.Measurable]
sum_weights_subseteq_list [lemma, in VLSM.Lib.Measurable]
sum_weights_in_list [lemma, in VLSM.Lib.Measurable]
sum_weights_positive [lemma, in VLSM.Lib.Measurable]
sum_weights_positive_list [lemma, in VLSM.Lib.Measurable]
sum_weights_singleton [lemma, in VLSM.Lib.Measurable]
sum_weights_empty [lemma, in VLSM.Lib.Measurable]
sum_weights_list_rew [lemma, in VLSM.Lib.Measurable]
sum_weights_list [definition, in VLSM.Lib.Measurable]
sum_weights [definition, in VLSM.Lib.Measurable]
support [definition, in VLSM.Lib.FinSuppFn]
swap_head_last [lemma, in VLSM.Lib.ListExtras]
symbol [inductive, in VLSM.Examples.Tutorial.Formulas]
symbol_to_index [definition, in VLSM.Examples.Tutorial.Formulas]
symbol_dec [instance, in VLSM.Examples.Tutorial.Formulas]
symbol_sind [definition, in VLSM.Examples.Tutorial.Formulas]
symbol_rec [definition, in VLSM.Examples.Tutorial.Formulas]
symbol_ind [definition, in VLSM.Examples.Tutorial.Formulas]
symbol_rect [definition, in VLSM.Examples.Tutorial.Formulas]
s0 [projection, in VLSM.Core.VLSM]


T

take_app_inv [lemma, in VLSM.Lib.ListExtras]
take_nth_last [lemma, in VLSM.Lib.ListExtras]
take_nth [lemma, in VLSM.Lib.ListExtras]
take_segment_suffix [lemma, in VLSM.Lib.ListExtras]
take_prefix [lemma, in VLSM.Lib.ListExtras]
Tcons [constructor, in VLSM.Lib.Traces]
tc_composite_observed_before_send_subsumes_happens_before [lemma, in VLSM.Core.MessageDependencies]
tc_composite_observed_before_send_subsumes_msg_dep_rel [lemma, in VLSM.Core.MessageDependencies]
tc_composite_observed_before_send [definition, in VLSM.Core.MessageDependencies]
tc_comparable [lemma, in VLSM.Lib.Preamble]
tc_CompSpec [lemma, in VLSM.Lib.Preamble]
tc_reflect_irreflexive [lemma, in VLSM.Lib.Preamble]
tc_wf_projected [lemma, in VLSM.Lib.Preamble]
tc_r_iff [lemma, in VLSM.Lib.Preamble]
tc_reflect [lemma, in VLSM.Lib.Preamble]
terminating_trace_prop [definition, in VLSM.Core.VLSM]
three [constructor, in VLSM.Examples.Tutorial.Multiply]
tiv_state_project [projection, in VLSM.Core.Validator]
tiv_label_project [projection, in VLSM.Core.Validator]
Tnil [constructor, in VLSM.Lib.Traces]
Top [constructor, in VLSM.Examples.Tutorial.Formulas]
toplogically_sorted_remove_last [lemma, in VLSM.Lib.TopSort]
topologically_sorted_precedes_closed_remove_last [lemma, in VLSM.Lib.TopSort]
topologically_sorted_occurrences_ordering [lemma, in VLSM.Lib.TopSort]
topologically_sorted [definition, in VLSM.Lib.TopSort]
topological_sorting [definition, in VLSM.Lib.TopSort]
TopSort [library]
top_sort_correct [lemma, in VLSM.Lib.TopSort]
top_sort_sorted [lemma, in VLSM.Lib.TopSort]
top_sort_nodup [lemma, in VLSM.Lib.TopSort]
top_sort_set_eq [lemma, in VLSM.Lib.TopSort]
top_sort [definition, in VLSM.Lib.TopSort]
top_sort_n [definition, in VLSM.Lib.TopSort]
top_sort_precedes [lemma, in VLSM.Lib.TopSort]
top_sort_before [lemma, in VLSM.Lib.TopSort]
to_voting_state [definition, in VLSM.Examples.Paxos.Paxos]
tpge_step [constructor, in VLSM.Core.MessageDependencies]
tpge_initial [constructor, in VLSM.Core.MessageDependencies]
trace [inductive, in VLSM.Lib.Traces]
trace [abbreviation, in VLSM.Lib.TraceProperties]
Trace [inductive, in VLSM.Core.VLSM]
trace [abbreviation, in VLSM.Lib.TraceClassicalProperties]
TraceableVLSM [record, in VLSM.Core.TraceableVLSM]
TraceableVLSM [library]
TraceableVLSM_ELMO_component [instance, in VLSM.Examples.ELMO.ELMO]
traceable_vlsm_initial_state_dec [lemma, in VLSM.Core.Equivocation.MinimalEquivocationTrace]
TraceClassicalProperties [library]
TraceMonotoneGlobalEquivocation [inductive, in VLSM.Core.MessageDependencies]
TraceMonotoneGlobalEquivocation_sind [definition, in VLSM.Core.MessageDependencies]
TraceMonotoneGlobalEquivocation_ind [definition, in VLSM.Core.MessageDependencies]
TraceProperties [library]
Traces [library]
traces_exhibiting_limited_equivocation_are_valid_rev [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
traces_exhibiting_limited_equivocation_are_valid [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
TraceWiseEquivocation [library]
tracewise_not_heavy_LimitedEquivocationProp_iff [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
tracewise_limited_equivocation_vlsm_composition [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
tracewise_limited_equivocation_constraint [definition, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
tracewise_basic_equivocation_state_validators_comprehensive_prop [lemma, in VLSM.Core.Equivocation.LimitedMessageEquivocation]
TraceWithLast [record, in VLSM.Core.VLSM]
TraceWithStart [record, in VLSM.Core.VLSM]
trace_monotone_global_equivocation_def_equiv [lemma, in VLSM.Core.MessageDependencies]
trace_monotone_global_equivocation [definition, in VLSM.Core.MessageDependencies]
trace_append_bism [lemma, in VLSM.Lib.Traces]
trace_append_cons [lemma, in VLSM.Lib.Traces]
trace_append_nil [lemma, in VLSM.Lib.Traces]
trace_append [definition, in VLSM.Lib.Traces]
trace_destr [lemma, in VLSM.Lib.Traces]
trace_decompose [definition, in VLSM.Lib.Traces]
trace_sub_item_input_is_seeded_or_sub_previously_sent [definition, in VLSM.Core.SubProjectionTraces]
trace_append_infiniteT [lemma, in VLSM.Lib.TraceProperties]
trace_to_initial_state_has_no_inputs [lemma, in VLSM.Core.Equivocation]
trace_with_start_valid_trace_init_to [instance, in VLSM.Core.VLSM]
trace_with_start_valid_trace_from_to [instance, in VLSM.Core.VLSM]
trace_with_start_valid_trace [instance, in VLSM.Core.VLSM]
trace_with_start_valid_trace_from [instance, in VLSM.Core.VLSM]
trace_with_last_valid_trace_init [instance, in VLSM.Core.VLSM]
trace_with_last_valid_trace_from [instance, in VLSM.Core.VLSM]
trace_prefix_fn_valid [lemma, in VLSM.Core.VLSM]
trace_prefix_valid [lemma, in VLSM.Core.VLSM]
trace_prefix_fn [definition, in VLSM.Core.VLSM]
trace_prefix [definition, in VLSM.Core.VLSM]
Trace_messages_sind [definition, in VLSM.Core.VLSM]
Trace_messages_rec [definition, in VLSM.Core.VLSM]
Trace_messages_ind [definition, in VLSM.Core.VLSM]
Trace_messages_rect [definition, in VLSM.Core.VLSM]
Trace_messages [inductive, in VLSM.Core.VLSM]
trace_segment [definition, in VLSM.Core.VLSM]
trace_nth [definition, in VLSM.Core.VLSM]
trace_last [definition, in VLSM.Core.VLSM]
trace_first [definition, in VLSM.Core.VLSM]
Trace_sind [definition, in VLSM.Core.VLSM]
Trace_rec [definition, in VLSM.Core.VLSM]
Trace_ind [definition, in VLSM.Core.VLSM]
Trace_rect [definition, in VLSM.Core.VLSM]
trace_received_not_sent_before_or_after_invariant [definition, in VLSM.Core.VLSM]
trace_received_not_sent_before_or_after [definition, in VLSM.Core.VLSM]
trace_has_message_observed_iff [lemma, in VLSM.Core.VLSM]
trace_has_message_prefix [lemma, in VLSM.Core.VLSM]
trace_has_message [definition, in VLSM.Core.VLSM]
trace_to_plan_to_trace [lemma, in VLSM.Core.Plans]
trace_to_plan_to_trace_from_to [lemma, in VLSM.Core.Plans]
trace_to_plan [definition, in VLSM.Core.Plans]
trace_project_preserves_valid_trace [projection, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
trace_witnessing_equivocation_prop [definition, in VLSM.Core.Equivocation.WitnessedEquivocation]
transition [projection, in VLSM.Core.VLSM]
TransitionMonotoneVLSM [record, in VLSM.Core.TraceableVLSM]
TransitionValidation [record, in VLSM.Core.Validator]
transition_preserves_global_equivocation [definition, in VLSM.Core.MessageDependencies]
transition_preserves_CompositeHasBeenObserved [lemma, in VLSM.Core.MessageDependencies]
transition_preserves_HasBeenObserved [lemma, in VLSM.Core.MessageDependencies]
transition_sub_projection [lemma, in VLSM.Core.SubProjectionTraces]
transition_next [constructor, in VLSM.Core.VLSM]
transition_item [record, in VLSM.Core.VLSM]
transition_monotone_empty_trace [lemma, in VLSM.Core.TraceableVLSM]
transition_monotone_in_futures [lemma, in VLSM.Core.TraceableVLSM]
transition_monotonicity [projection, in VLSM.Core.TraceableVLSM]
transition_item_project_consistency [projection, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
transition_receiving_no_sender_reflects_is_equivocating_tracewise [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
transition_is_equivocating_tracewise_char [lemma, in VLSM.Core.Equivocation.TraceWiseEquivocation]
transition_validator_messages [lemma, in VLSM.Core.Validator]
transition_validator [definition, in VLSM.Core.Validator]
transitive_tc_idempotent [lemma, in VLSM.Lib.Preamble]
Transitive_state_suffix [instance, in VLSM.Examples.ELMO.UMO]
TripleStrictlyComparable [instance, in VLSM.Lib.Preamble]
tripling_vlsm [definition, in VLSM.Examples.Tutorial.Multiply]
tripling_machine [definition, in VLSM.Examples.Tutorial.Multiply]
tripling_transition [definition, in VLSM.Examples.Tutorial.Multiply]
ttA [definition, in VLSM.Lib.TraceProperties]
ttA_AppendT_implies [lemma, in VLSM.Lib.TraceProperties]
TtT [definition, in VLSM.Lib.TraceProperties]
ttT [definition, in VLSM.Lib.TraceProperties]
TtT_AppendT_idem [lemma, in VLSM.Lib.TraceProperties]
ttT_setoidT [lemma, in VLSM.Lib.TraceProperties]
tv_state_destructor_size [lemma, in VLSM.Core.TraceableVLSM]
tv_state_destructor_initial [projection, in VLSM.Core.TraceableVLSM]
tv_state_destructor_transition [projection, in VLSM.Core.TraceableVLSM]
tv_state_destructor_destination [projection, in VLSM.Core.TraceableVLSM]
tv_monotone [projection, in VLSM.Core.TraceableVLSM]
tv_tiv_transition [projection, in VLSM.Core.Validator]
tv_transition [projection, in VLSM.Core.Validator]
tv_tiv [projection, in VLSM.Core.Validator]
two [constructor, in VLSM.Examples.Tutorial.Multiply]
two_element_decompositions [definition, in VLSM.Lib.ListExtras]


U

UMO [definition, in VLSM.Examples.ELMO.UMO]
UMO [library]
UMO_sentMessages_characterization [lemma, in VLSM.Examples.ELMO.UMO]
UMO_messages [definition, in VLSM.Examples.ELMO.UMO]
UMO_messages_aux [definition, in VLSM.Examples.ELMO.UMO]
UMO_receivedMessages [definition, in VLSM.Examples.ELMO.UMO]
UMO_receivedMessages_aux [definition, in VLSM.Examples.ELMO.UMO]
UMO_sentMessages [definition, in VLSM.Examples.ELMO.UMO]
UMO_sentMessages_aux [definition, in VLSM.Examples.ELMO.UMO]
UMO_obs [definition, in VLSM.Examples.ELMO.UMO]
UMO_obs_aux [definition, in VLSM.Examples.ELMO.UMO]
UMO_state2trace [definition, in VLSM.Examples.ELMO.UMO]
UMO_state2trace_aux [definition, in VLSM.Examples.ELMO.UMO]
UMO_component_state2trace [definition, in VLSM.Examples.ELMO.UMO]
UMO_transition_item [definition, in VLSM.Examples.ELMO.UMO]
UMO_label [definition, in VLSM.Examples.ELMO.UMO]
UMO_state [definition, in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservations_inv [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservation_inv_message [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservation_inv_Send [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservation_inv_Send_state [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservation_inv [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_inv [lemma, in VLSM.Examples.ELMO.UMO]
UMO_component_valid_transition_size [lemma, in VLSM.Examples.ELMO.UMO]
UMO_component_transition_adr [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_constrained_state_prop [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_valid_state_prop [lemma, in VLSM.Examples.ELMO.UMO]
UMO_based_valid_reachable [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_impl [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_elem_of_messages_ind [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_ind' [lemma, in VLSM.Examples.ELMO.UMO]
UMO_reachable_sind [definition, in VLSM.Examples.ELMO.UMO]
UMO_reachable_ind [definition, in VLSM.Examples.ELMO.UMO]
UMO_reachable [inductive, in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state_spec [lemma, in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state_unique [lemma, in VLSM.Examples.ELMO.UMO]
UMO_component [definition, in VLSM.Examples.ELMO.UMO]
UMO_component_machine [definition, in VLSM.Examples.ELMO.UMO]
UMO_component_valid_sind [definition, in VLSM.Examples.ELMO.UMO]
UMO_component_valid_ind [definition, in VLSM.Examples.ELMO.UMO]
UMO_component_valid [inductive, in VLSM.Examples.ELMO.UMO]
UMO_component_transition [definition, in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state [definition, in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state_type [definition, in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state_prop [definition, in VLSM.Examples.ELMO.UMO]
undecided [constructor, in VLSM.Examples.Tutorial.MuddyChildrenRounds]
unfold_last_hd [lemma, in VLSM.Lib.ListExtras]
unfold_robs [lemma, in VLSM.Examples.ELMO.MO]
unfold_robs_rev [lemma, in VLSM.Examples.ELMO.MO]
unfold_robs_fwd [lemma, in VLSM.Examples.ELMO.MO]
unfold_rec_obs [lemma, in VLSM.Examples.ELMO.MO]
union_size_le_sum [lemma, in VLSM.Lib.FinSetExtras]
union_size_ge_average [lemma, in VLSM.Lib.FinSetExtras]
union_size_ge_size2 [lemma, in VLSM.Lib.FinSetExtras]
union_size_ge_size1 [lemma, in VLSM.Lib.FinSetExtras]
unique_transition_to_state [projection, in VLSM.Core.HistoryVLSM]
unlock_finite_trace_last [lemma, in VLSM.Core.VLSM]
unroll_last [lemma, in VLSM.Lib.ListExtras]
update [definition, in VLSM.Lib.Preamble]
update_fsfun_proper [instance, in VLSM.Lib.FinSuppFn]
update_fsfun_neq [lemma, in VLSM.Lib.FinSuppFn]
update_fsfun_eq [lemma, in VLSM.Lib.FinSuppFn]
update_fsfun [definition, in VLSM.Lib.FinSuppFn]
update_supp_all [lemma, in VLSM.Lib.FinSuppFn]
update_supp [definition, in VLSM.Lib.FinSuppFn]
update_IM_complement_Hbs [instance, in VLSM.Core.SubProjectionTraces]
update_IM [definition, in VLSM.Core.SubProjectionTraces]
update_neq [lemma, in VLSM.Lib.Preamble]
update_eq [lemma, in VLSM.Lib.Preamble]
up_to_n_full [lemma, in VLSM.Lib.NatExtras]
up_to_n_listing_length [lemma, in VLSM.Lib.NatExtras]
up_to_n_listing [definition, in VLSM.Lib.NatExtras]
use_Exists [lemma, in VLSM.Lib.StreamExtras]


V

valid [projection, in VLSM.Core.VLSM]
Validator [library]
validators_pivotal_ind [lemma, in VLSM.Core.ReachableThreshold]
validator_limited_non_byzantine_traces_are_limited_non_equivocating [lemma, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
validator_fixed_limited_non_byzantine_traces_are_limited_non_equivocating [lemma, in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
validator_preloaded_with_all_messages_incl [lemma, in VLSM.Core.ByzantineTraces]
validator_component_byzantine_fault_tolerance [lemma, in VLSM.Core.ByzantineTraces]
validator_fixed_byzantine_traces_equivocation_char [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
validator_fixed_non_byzantine_eq_fixed_non_equivocating [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
validator_fixed_non_byzantine_vlsm_lift_initial_message [lemma, in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
validator_free_states_are_projection_states [lemma, in VLSM.Core.Validator]
validator_alt_free_states_are_projection_states [lemma, in VLSM.Core.Validator]
valid_free_validating_equiv_message_validating [lemma, in VLSM.Core.MessageDependencies]
valid_free_validating_is_message_validating [lemma, in VLSM.Core.MessageDependencies]
valid_all_dependencies_emittable_from_dependencies_prop [definition, in VLSM.Core.MessageDependencies]
valid_state_limited_equivocation [lemma, in VLSM.Core.Equivocators.LimitedStateEquivocation]
valid_state_sub_projection [lemma, in VLSM.Core.SubProjectionTraces]
valid_sub_projection [lemma, in VLSM.Core.SubProjectionTraces]
valid_state_prop_alt_equiv [lemma, in VLSM.Core.VLSM]
valid_state_prop_alt [definition, in VLSM.Core.VLSM]
valid_transition_next_sind [definition, in VLSM.Core.VLSM]
valid_transition_next_ind [definition, in VLSM.Core.VLSM]
valid_transition_next [inductive, in VLSM.Core.VLSM]
valid_transition [record, in VLSM.Core.VLSM]
valid_trace_first_pstate [projection, in VLSM.Core.VLSM]
valid_trace_add_default_last [definition, in VLSM.Core.VLSM]
valid_trace_forget_last [projection, in VLSM.Core.VLSM]
valid_trace_last_pstate [projection, in VLSM.Core.VLSM]
valid_trace_get_last [projection, in VLSM.Core.VLSM]
valid_trace_add_last [projection, in VLSM.Core.VLSM]
valid_decidable [projection, in VLSM.Core.VLSM]
valid_trace_nth [lemma, in VLSM.Core.VLSM]
valid_trace_segment [lemma, in VLSM.Core.VLSM]
valid_state_has_trace [lemma, in VLSM.Core.VLSM]
valid_state_message_has_trace [lemma, in VLSM.Core.VLSM]
valid_trace_from_iff [lemma, in VLSM.Core.VLSM]
valid_trace_initial [lemma, in VLSM.Core.VLSM]
valid_trace_from [lemma, in VLSM.Core.VLSM]
valid_trace [definition, in VLSM.Core.VLSM]
valid_trace_prop [definition, in VLSM.Core.VLSM]
valid_trace_from_prop [definition, in VLSM.Core.VLSM]
valid_trace_observed_is_valid [lemma, in VLSM.Core.VLSM]
valid_trace_input_is_valid [lemma, in VLSM.Core.VLSM]
valid_trace_output_is_valid [lemma, in VLSM.Core.VLSM]
valid_message_prop_iff [lemma, in VLSM.Core.VLSM]
valid_state_prop_ind [lemma, in VLSM.Core.VLSM]
valid_state_prop_iff [lemma, in VLSM.Core.VLSM]
valid_iff_valid_state_prop [lemma, in VLSM.Core.VLSM]
valid_iff_valid_message_prop [lemma, in VLSM.Core.VLSM]
valid_impl_valid_message_prop [lemma, in VLSM.Core.VLSM]
valid_impl_valid_state_prop [lemma, in VLSM.Core.VLSM]
valid_state_message_prop_impl_valid [lemma, in VLSM.Core.VLSM]
valid_state_ind [definition, in VLSM.Core.VLSM]
valid_message_ind [definition, in VLSM.Core.VLSM]
valid_state_mrec_sind [definition, in VLSM.Core.VLSM]
valid_state_mrec_ind [definition, in VLSM.Core.VLSM]
valid_message_mrec_sind [definition, in VLSM.Core.VLSM]
valid_message_mrec_ind [definition, in VLSM.Core.VLSM]
valid_state_mrec_generated [constructor, in VLSM.Core.VLSM]
valid_state_mrec_initial [constructor, in VLSM.Core.VLSM]
valid_state_mrec [inductive, in VLSM.Core.VLSM]
valid_message_mrec_generated [constructor, in VLSM.Core.VLSM]
valid_message_mrec_initial [constructor, in VLSM.Core.VLSM]
valid_message_mrec_None [constructor, in VLSM.Core.VLSM]
valid_message_mrec [inductive, in VLSM.Core.VLSM]
valid_message [definition, in VLSM.Core.VLSM]
valid_state [definition, in VLSM.Core.VLSM]
valid_message_prop [definition, in VLSM.Core.VLSM]
valid_state_prop [definition, in VLSM.Core.VLSM]
valid_initial_state [definition, in VLSM.Core.VLSM]
valid_state_message_prop_sind [definition, in VLSM.Core.VLSM]
valid_state_message_prop_ind [definition, in VLSM.Core.VLSM]
valid_generated_state_message [constructor, in VLSM.Core.VLSM]
valid_initial_state_message [constructor, in VLSM.Core.VLSM]
valid_state_message_prop [inductive, in VLSM.Core.VLSM]
valid_state_23_pos [lemma, in VLSM.Examples.Tutorial.Multiply]
valid_state10 [definition, in VLSM.Examples.Tutorial.Multiply]
valid_state01 [definition, in VLSM.Examples.Tutorial.Multiply]
valid_state00 [definition, in VLSM.Examples.Tutorial.Multiply]
valid_staten0 [definition, in VLSM.Examples.Tutorial.Multiply]
valid_state0n [definition, in VLSM.Examples.Tutorial.Multiply]
valid_state22 [definition, in VLSM.Examples.Tutorial.Multiply]
valid_state11 [definition, in VLSM.Examples.Tutorial.Multiply]
valid_state_23_geq1 [definition, in VLSM.Examples.Tutorial.Multiply]
valid_state_component_initial_or_transition [lemma, in VLSM.Core.Composition]
valid_state_project_preloaded [lemma, in VLSM.Core.Composition]
valid_state_project_preloaded_to_preloaded [lemma, in VLSM.Core.Composition]
valid_state_preloaded_composite_free_lift [lemma, in VLSM.Core.Composition]
valid_preloaded_lifts_can_be_emitted [lemma, in VLSM.Core.Composition]
valid_trace_prop_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
valid_trace_from_prop_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
valid_message_prop_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
valid_state_prop_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
valid_state_message_prop_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
valid_state_has_fixed_equivocation [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
valid_state_prop_from_constrained_equiv [lemma, in VLSM.Core.PreloadedVLSM]
valid_state_prop_from_constrained_right_impl [lemma, in VLSM.Core.PreloadedVLSM]
valid_state_prop_from_constrained_left_impl [lemma, in VLSM.Core.PreloadedVLSM]
valid_state_prop_from_constrained [definition, in VLSM.Core.PreloadedVLSM]
valid_transition_next_preloaded_iff [lemma, in VLSM.Core.PreloadedVLSM]
valid_transition_preloaded_iff [lemma, in VLSM.Core.PreloadedVLSM]
valid_message_projection_rev [lemma, in VLSM.Core.ProjectionTraces]
valid_preloaded_composite_vlsm_induced_projection_validator_iff [lemma, in VLSM.Core.Validator]
valid_preloaded_composite_vlsm_induced_projection_validator [definition, in VLSM.Core.Validator]
valid_state_contains_unique_valid_trace [lemma, in VLSM.Examples.ELMO.UMO]
VLSM [record, in VLSM.Core.VLSM]
VLSM [library]
VLSMEmbedding [library]
VLSMEquality [library]
VLSMInclusion [library]
VLSMMachine [record, in VLSM.Core.VLSM]
VLSMPartialProjection [library]
VLSMProjections [library]
VLSMStutteringEmbedding [library]
VLSMTotalProjection [library]
VLSMType [record, in VLSM.Core.VLSM]
VLSM_eq_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_infinite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_infinite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_can_emit [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_can_produce [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_input_valid [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_input_valid_transition [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_in_futures [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_finite_valid_trace_from_to [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_initial_state [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_finite_valid_trace_init_to [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_finite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_trans [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_sym [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_refl [lemma, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq [abbreviation, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_part [definition, in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_embedding_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_eq_projection_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_embedding_eq_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_projection_eq_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_incl_embedding_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_incl_projection_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_embedding_incl_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_projection_incl_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_embedding_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_embedding_projection_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_projection_embedding_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_projection_trans [lemma, in VLSM.Core.VLSMProjections]
VLSM_vdecidable [record, in VLSM.Core.VLSM]
vlsm_machine [projection, in VLSM.Core.VLSM]
vlsm_type [projection, in VLSM.Core.VLSM]
VLSM_embedding_valid_state_message [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_infinite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_infinite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_valid_message [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_can_emit [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_can_produce [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_input_valid [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_input_valid_transition [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_in_futures [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_valid_trace_from_to [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_weaken [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_initial_state [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_valid_trace_init_to [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_is_projection [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_trace_last [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_valid_message [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_can_emit [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_can_produce [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_infinite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_input_valid [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_input_valid_transition [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_in_futures [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_finite_valid_trace_from_to [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_is_projection [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_finite_trace_last [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_projection_type [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_infinite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_infinite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_transition_item_project [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding [record, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding [record, in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_projection_infinite_finite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_valid_trace_init_to [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_initial_state [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_in_futures [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_valid_trace_from_to [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_input_valid [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_input_valid_transition [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_weaken [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_partial_projection_from_projection [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_last [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_project_in [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_project_app_rev [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_project_app [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_in [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_in_futures [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_finite_valid_trace_from_to [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_input_valid [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_input_valid_transition [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_partial_projection_from_projection [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_infinite_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_infinite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_finite_trace_last [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_trace_project_app_rev [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_trace_project_app [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_infinite_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_infinite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_in [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection [record, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection [record, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_partial_projection_type_from_projection [lemma, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_partial_trace_project_from_projection [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_type [record, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_incl_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_infinite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_infinite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_valid_message [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_can_emit [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_can_produce [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_valid_state_message [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_input_valid [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_input_valid_transition [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_in_futures [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_valid_trace_from_to [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_initial_state [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_valid_trace_init_to [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl [abbreviation, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_is_embedding_finite_trace_project [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_is_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_embedding_iff [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_traces_characterization [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_trans [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_refl [lemma, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl [abbreviation, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_part [definition, in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_stuttering_embedding_infinite_finite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_valid_trace_init_to [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_initial_state [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_in_futures [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_valid_trace_from_to [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_input_valid_transition_item [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_weaken [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_partial_projection_from_stuttering_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_trace_last [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_trace_project_app [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_input_valid_transition_item [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_in_futures [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_valid_trace_from_to [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_partial_projection_from_stuttering_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_infinite_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_infinite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_trace_last [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_trace_project_app [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_infinite_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_infinite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_trace_project [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding [record, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding [record, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_partial_projection_type_from_stuttering_embedding [lemma, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_partial_trace_project_from_stuttering_embedding [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_type [record, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_incl_has_been_directly_observed_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_received_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_sent_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_directly_observed [lemma, in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_received [lemma, in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_sent [lemma, in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_directly_observed_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_received_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_sent_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_directly_observed [lemma, in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_received [lemma, in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_sent [lemma, in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_has_been_directly_observed [lemma, in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_has_been_received [lemma, in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_has_been_sent [lemma, in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_oracle [lemma, in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_selected_message_exists_in_some_preloaded_traces [lemma, in VLSM.Core.EquivocationProjections]
VLSM_projection_has_been_directly_observed_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_projection_has_been_received_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_projection_has_been_sent_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_projection_oracle_reflect [lemma, in VLSM.Core.EquivocationProjections]
VLSM_incl_preloaded_constrained [lemma, in VLSM.Core.ConstrainedVLSM]
VLSM_incl_constrained_preloaded [lemma, in VLSM.Core.ConstrainedVLSM]
VLSM_incl_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
VLSM_embedding_constrained_vlsm [lemma, in VLSM.Core.ConstrainedVLSM]
VLSM_partial_projection_input_valid [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_input_valid_transition [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_weaken [definition, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_initial_state [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_finite_valid_trace [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection_input_valid [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection_input_valid_transition [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection_valid_state [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection_finite_valid_trace_from [lemma, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection [record, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection [record, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_type [record, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
vlsm_is_preloaded_with_valid [lemma, in VLSM.Core.PreloadedVLSM]
vlsm_is_preloaded_with_False_valid_state_message [lemma, in VLSM.Core.PreloadedVLSM]
vlsm_is_preloaded_with_False_initial_message_rev [lemma, in VLSM.Core.PreloadedVLSM]
vlsm_is_preloaded_with_False_initial_message [lemma, in VLSM.Core.PreloadedVLSM]
vlsm_is_preloaded_with_False [lemma, in VLSM.Core.PreloadedVLSM]
vlsm_incl_preloaded_with_all_messages_vlsm [lemma, in VLSM.Core.PreloadedVLSM]
vlsm_incl_preloaded [lemma, in VLSM.Core.PreloadedVLSM]
VLSM_incl_message_validator [lemma, in VLSM.Core.Validator]
VLSM_embedding_message_validator [lemma, in VLSM.Core.Validator]
VLSM_incl_projection_validator [lemma, in VLSM.Core.Validator]
VLSM_canceling_embedding_projection_validator [lemma, in VLSM.Core.Validator]
VLSM_embedding_projection_validator [lemma, in VLSM.Core.Validator]
VLSM_incl_UMO_MOComponent [lemma, in VLSM.Examples.ELMO.MO]
Vote [constructor, in VLSM.Examples.Paxos.Voting]
voted_none_but [definition, in VLSM.Examples.Paxos.Voting]
voted_for_dec [instance, in VLSM.Examples.Paxos.Voting]
voted_for [definition, in VLSM.Examples.Paxos.Voting]
votes [projection, in VLSM.Examples.Paxos.Voting]
votes_from_paxos_acceptor_iff [lemma, in VLSM.Examples.Paxos.Paxos]
votes_from_paxos_acceptor_from_sent [lemma, in VLSM.Examples.Paxos.Paxos]
votes_from_paxos_acceptor_to_sent [lemma, in VLSM.Examples.Paxos.Paxos]
votes_from_paxos_acceptor [definition, in VLSM.Examples.Paxos.Paxos]
vote_in_voteset [definition, in VLSM.Examples.Paxos.Paxos]
vote_messages_sound [lemma, in VLSM.Examples.Paxos.Paxos]
vote_messages_complete [lemma, in VLSM.Examples.Paxos.Paxos]
vote_messages [definition, in VLSM.Examples.Paxos.Paxos]
vote_stable [lemma, in VLSM.Examples.Paxos.Voting]
vote_committed [definition, in VLSM.Examples.Paxos.Voting]
Voting [library]
voting_simulates_consensus [lemma, in VLSM.Examples.Paxos.Voting]
voting_initial_in_consensus [lemma, in VLSM.Examples.Paxos.Voting]
voting_step_in_consensus [lemma, in VLSM.Examples.Paxos.Voting]
voting_safe [lemma, in VLSM.Examples.Paxos.Voting]
voting_vlsm [definition, in VLSM.Examples.Paxos.Voting]
voting_composition_constraint [definition, in VLSM.Examples.Paxos.Voting]
vs0 [definition, in VLSM.Core.VLSM]
vs0_uniqueness [lemma, in VLSM.Examples.ELMO.UMO]
vs0_uniqueness [lemma, in VLSM.Examples.ELMO.MO]
vt_transition [projection, in VLSM.Core.VLSM]
vt_valid [projection, in VLSM.Core.VLSM]
VT0 [lemma, in VLSM.Examples.Paxos.Voting]
VT1 [lemma, in VLSM.Examples.Paxos.Voting]
V_SafeAt_stable [lemma, in VLSM.Examples.Paxos.Paxos]
V_DidNotVoteIn_iff [lemma, in VLSM.Examples.Paxos.Paxos]
V_VotedFor_iff [lemma, in VLSM.Examples.Paxos.Paxos]
V_SafeAt [definition, in VLSM.Examples.Paxos.Paxos]
V_VotedFor [definition, in VLSM.Examples.Paxos.Paxos]
V_DidNotVoteIn [definition, in VLSM.Examples.Paxos.Paxos]


W

was_voted [definition, in VLSM.Examples.Paxos.Paxos]
was_sent_before_totally_orders_sentMessages_UMO_reachable [lemma, in VLSM.Examples.ELMO.UMO]
was_sent_before_characterization_2 [lemma, in VLSM.Examples.ELMO.UMO]
was_sent_before_characterization_1 [lemma, in VLSM.Examples.ELMO.UMO]
was_sent_before [definition, in VLSM.Examples.ELMO.UMO]
weak_projection_valid_message_preservation_from_full [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_embedding_initial_message_preservation [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_projection_transition_consistency_None_from_full [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_projection_transition_preservation_Some_from_full [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_embedding_transition_preservation [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_projection_valid_preservation_from_full [lemma, in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_embedding_valid_preservation [definition, in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_full_trace_project_preserves_valid_trace [projection, in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_projection_valid_message_preservation [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_transition_preservation_Some [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_valid_preservation [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_initial_state_preservation [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_trace_project_preserves_valid_trace [projection, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_type [projection, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_transition_consistency_None [definition, in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_incl_initial_message_preservation [definition, in VLSM.Core.VLSMProjections.VLSMInclusion]
weak_incl_transition_preservation [definition, in VLSM.Core.VLSMProjections.VLSMInclusion]
weak_incl_valid_preservation [definition, in VLSM.Core.VLSMProjections.VLSMInclusion]
weak_stuttering_embedding_initial_state_preservation [definition, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
weak_stuttering_embedding_preserves_valid_trace [projection, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
weak_stuttering_embedding_type [projection, in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
weak_constraint_subsumption_weakest [lemma, in VLSM.Core.ConstrainedVLSM]
weak_constraint_subsumption_incl [lemma, in VLSM.Core.ConstrainedVLSM]
weak_input_valid_constraint_subsumption [definition, in VLSM.Core.ConstrainedVLSM]
weak_partial_trace_project_preserves_valid_trace [projection, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
weak_partial_projection_type [projection, in VLSM.Core.VLSMProjections.VLSMPartialProjection]
weak_projection_transition_consistency_Some [definition, in VLSM.Core.Validator]
weight [projection, in VLSM.Lib.Measurable]
weight [constructor, in VLSM.Lib.Measurable]
weight_proj1_sig [definition, in VLSM.Lib.Measurable]
well_formed_expression_flatten_formula_equiv [lemma, in VLSM.Examples.Tutorial.Formulas]
well_formed_expression_are_flatten_formulas [lemma, in VLSM.Examples.Tutorial.Formulas]
well_formed_is_flatten_formula_helper [lemma, in VLSM.Examples.Tutorial.Formulas]
well_formed_flatten_formula_helper [lemma, in VLSM.Examples.Tutorial.Formulas]
well_formed_expression [definition, in VLSM.Examples.Tutorial.Formulas]
WitnessedEquivocation [library]
WitnessedEquivocationCapability [record, in VLSM.Core.Equivocation.WitnessedEquivocation]


X

Xj_incl_Pre_Sub_Free [lemma, in VLSM.Core.SubProjectionTraces]


Z

zero_predecessors [lemma, in VLSM.Lib.TopSort]
zero_descriptor_proper [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
zero_descriptor_not_equivocating [lemma, in VLSM.Core.Equivocators.EquivocatorsComposition]
zero_descriptor [definition, in VLSM.Core.Equivocators.EquivocatorsComposition]
zero_fsfun_rew [lemma, in VLSM.Lib.FinSuppFn]
zero_fsfun [definition, in VLSM.Lib.FinSuppFn]
zero_descriptor_constraint_lifting_prop [definition, in VLSM.Core.Equivocators.SimulatingFree]
zero_descriptor_transition_preserves_fixed_equivocation [lemma, in VLSM.Core.Equivocators.FixedEquivocation]
zero_descriptor_transition_reflects_equivocating_state [lemma, in VLSM.Core.Equivocators.Equivocators]
zproj [definition, in VLSM.Examples.Tutorial.Multiply]


_

_messages_a [definition, in VLSM.Core.Plans]
_trace_to_plan [definition, in VLSM.Core.Plans]
_transition_item_to_plan_item [definition, in VLSM.Core.Plans]
_apply_plan_cons [lemma, in VLSM.Core.Plans]
_apply_plan_app [lemma, in VLSM.Core.Plans]
_apply_plan_last [lemma, in VLSM.Core.Plans]
_apply_plan [definition, in VLSM.Core.Plans]
_apply_plan_folder_additive [lemma, in VLSM.Core.Plans]
_apply_plan_folder [definition, in VLSM.Core.Plans]
_equivocators_valid_trace_project [lemma, in VLSM.Core.Equivocators.FixedEquivocation]


other

¬ _ (formula_scope) [notation, in VLSM.Examples.Tutorial.Formulas]
_ ↔ _ (formula_scope) [notation, in VLSM.Examples.Tutorial.Formulas]
_ → _ (formula_scope) [notation, in VLSM.Examples.Tutorial.Formulas]
_ ∧ _ (formula_scope) [notation, in VLSM.Examples.Tutorial.Formulas]
_ ∨ _ (formula_scope) [notation, in VLSM.Examples.Tutorial.Formulas]
⊥ (formula_scope) [notation, in VLSM.Examples.Tutorial.Formulas]
⊤ (formula_scope) [notation, in VLSM.Examples.Tutorial.Formulas]
_ <**> _ [notation, in VLSM.Examples.ELMO.BaseELMO]
_ <*> _ [notation, in VLSM.Examples.ELMO.BaseELMO]
_ <++> _ [notation, in VLSM.Examples.ELMO.BaseELMO]
_ <+> _ [notation, in VLSM.Examples.ELMO.BaseELMO]
_ +++ _ [notation, in VLSM.Lib.Traces]
_ *** _ [notation, in VLSM.Lib.TraceProperties]
_ *+* _ [notation, in VLSM.Lib.TraceProperties]
_ andA _ [notation, in VLSM.Lib.TraceProperties]
_ ->> _ [notation, in VLSM.Lib.TraceProperties]
_ =>> _ [notation, in VLSM.Lib.TraceProperties]
_ orT _ [notation, in VLSM.Lib.TraceProperties]
_ andT _ [notation, in VLSM.Lib.TraceProperties]
_ eq: _ [notation, in VLSM.Lib.EquationsExtras]
_ ::: _ [notation, in VLSM.Lib.NeList]
<< _ ; _ >> [notation, in VLSM.Lib.TraceProperties]
[| _ |] [notation, in VLSM.Lib.TraceProperties]


Notation Index

S

_ <**> _ [in VLSM.Examples.ELMO.BaseELMO]
_ <*> _ [in VLSM.Examples.ELMO.BaseELMO]
_ <++> _ [in VLSM.Examples.ELMO.BaseELMO]
_ <+> _ [in VLSM.Examples.ELMO.BaseELMO]
¬ _ [in VLSM.Examples.Tutorial.Formulas]
_ ↔ _ [in VLSM.Examples.Tutorial.Formulas]
_ → _ [in VLSM.Examples.Tutorial.Formulas]
_ ∧ _ [in VLSM.Examples.Tutorial.Formulas]
_ ∨ _ [in VLSM.Examples.Tutorial.Formulas]
⊥ [in VLSM.Examples.Tutorial.Formulas]
⊤ [in VLSM.Examples.Tutorial.Formulas]
_ +++ _ [in VLSM.Lib.Traces]
_ *** _ [in VLSM.Lib.TraceProperties]
_ *+* _ [in VLSM.Lib.TraceProperties]
<< _ ; _ >> [in VLSM.Lib.TraceProperties]
[| _ |] [in VLSM.Lib.TraceProperties]
_ andA _ [in VLSM.Lib.TraceProperties]
_ ->> _ [in VLSM.Lib.TraceProperties]
_ =>> _ [in VLSM.Lib.TraceProperties]
_ orT _ [in VLSM.Lib.TraceProperties]
_ andT _ [in VLSM.Lib.TraceProperties]
_ <hb _ [in VLSM.Examples.ELMO.ELMO]


other

¬ _ (formula_scope) [in VLSM.Examples.Tutorial.Formulas]
_ ↔ _ (formula_scope) [in VLSM.Examples.Tutorial.Formulas]
_ → _ (formula_scope) [in VLSM.Examples.Tutorial.Formulas]
_ ∧ _ (formula_scope) [in VLSM.Examples.Tutorial.Formulas]
_ ∨ _ (formula_scope) [in VLSM.Examples.Tutorial.Formulas]
⊥ (formula_scope) [in VLSM.Examples.Tutorial.Formulas]
⊤ (formula_scope) [in VLSM.Examples.Tutorial.Formulas]
_ <**> _ [in VLSM.Examples.ELMO.BaseELMO]
_ <*> _ [in VLSM.Examples.ELMO.BaseELMO]
_ <++> _ [in VLSM.Examples.ELMO.BaseELMO]
_ <+> _ [in VLSM.Examples.ELMO.BaseELMO]
_ +++ _ [in VLSM.Lib.Traces]
_ *** _ [in VLSM.Lib.TraceProperties]
_ *+* _ [in VLSM.Lib.TraceProperties]
_ andA _ [in VLSM.Lib.TraceProperties]
_ ->> _ [in VLSM.Lib.TraceProperties]
_ =>> _ [in VLSM.Lib.TraceProperties]
_ orT _ [in VLSM.Lib.TraceProperties]
_ andT _ [in VLSM.Lib.TraceProperties]
_ eq: _ [in VLSM.Lib.EquationsExtras]
_ ::: _ [in VLSM.Lib.NeList]
<< _ ; _ >> [in VLSM.Lib.TraceProperties]
[| _ |] [in VLSM.Lib.TraceProperties]


Library Index

A

AllELMO
AnnotatedVLSM


B

BaseELMO
ByzantineTraces


C

Composition
Consensus
ConstrainedVLSM
Ctauto


E

ELMO
EquationsExtras
Equivocation
EquivocationProjections
EquivocatorReplay
Equivocators
EquivocatorsComposition
EquivocatorsCompositionProjections
EquivocatorsProjections


F

FinSetExtras
FinSuppFn
FixedEquivocation
FixedEquivocationSimulation
FixedSetByzantineTraces
FixedSetEquivocation
Formulas
FreeCompositionValidator
FullNode
FullReplayTraces


H

HistoryVLSM


I

Itauto


L

LimitedByzantineTraces
LimitedEquivocationSimulation
LimitedMessageEquivocation
LimitedStateEquivocation
ListExtras
ListSetExtras


M

Measurable
MessageDependencies
MessageProperties
MinimalEquivocationTrace
MO
MsgDepFixedSetEquivocation
MsgDepLimitedEquivocation
MuddyChildrenRounds
Multiply


N

NatExtras
NeList
NoEquivocation


P

Paxos
Plans
Preamble
PreloadedVLSM
PrimesComposition
ProjectionTraces


R

ReachableThreshold
RealsExtras


S

SimulatingFree
SortedLists
SsrExport
StdppExtras
StdppListSet
StreamExtras
StreamFilters
SubProjectionTraces


T

TopSort
TraceableVLSM
TraceClassicalProperties
TraceProperties
Traces
TraceWiseEquivocation


U

UMO


V

Validator
VLSM
VLSMEmbedding
VLSMEquality
VLSMInclusion
VLSMPartialProjection
VLSMProjections
VLSMStutteringEmbedding
VLSMTotalProjection
Voting


W

WitnessedEquivocation


Lemma Index

A

addObservations_app [in VLSM.Examples.ELMO.BaseELMO]
addObservations_nil [in VLSM.Examples.ELMO.BaseELMO]
addObservation_cons [in VLSM.Examples.ELMO.BaseELMO]
addObservation_acyclic [in VLSM.Examples.ELMO.BaseELMO]
addObservation_inj [in VLSM.Examples.ELMO.BaseELMO]
addObservation_size [in VLSM.Examples.ELMO.BaseELMO]
addObservation_rect [in VLSM.Examples.ELMO.BaseELMO]
addObservation_rec [in VLSM.Examples.ELMO.BaseELMO]
addObservation_ind [in VLSM.Examples.ELMO.BaseELMO]
addObservation'_rect [in VLSM.Examples.ELMO.BaseELMO]
addObservation'_rec [in VLSM.Examples.ELMO.BaseELMO]
addObservation'_ind [in VLSM.Examples.ELMO.BaseELMO]
add_remove_inverse [in VLSM.Lib.ListSetExtras]
add_fsfun_succ_r [in VLSM.Lib.FinSuppFn]
add_fsfun_succ_l [in VLSM.Lib.FinSuppFn]
add_fsfun_rew [in VLSM.Lib.FinSuppFn]
add_fsfun_supp_all [in VLSM.Lib.FinSuppFn]
add_in_sorted_list_existing [in VLSM.Lib.SortedLists]
add_in_sorted_list_sorted [in VLSM.Lib.SortedLists]
add_in_sorted_list_tail [in VLSM.Lib.SortedLists]
add_in_sorted_list_head [in VLSM.Lib.SortedLists]
add_in_sorted_list_iff [in VLSM.Lib.SortedLists]
add_in_sorted_list_in_rev [in VLSM.Lib.SortedLists]
add_in_sorted_list_in [in VLSM.Lib.SortedLists]
add_in_sorted_list_no_empty [in VLSM.Lib.SortedLists]
adr_neq_no_self_equiv [in VLSM.Examples.ELMO.ELMO]
adr_of_sentMessages [in VLSM.Examples.ELMO.UMO]
adr_of_valid_state [in VLSM.Examples.ELMO.UMO]
adr_of_constrained_state [in VLSM.Examples.ELMO.UMO]
adr_of_valid_trace [in VLSM.Examples.ELMO.UMO]
adr_of_constrained_trace [in VLSM.Examples.ELMO.UMO]
adr_of_states_within_valid_trace [in VLSM.Examples.ELMO.UMO]
adr_of_states_within_constrained_trace [in VLSM.Examples.ELMO.UMO]
adr2idx_idx [in VLSM.Examples.ELMO.BaseELMO]
all_pre_traces_to_valid_state_are_valid_free [in VLSM.Core.Equivocation]
all_intermediary_transitions_are_receive [in VLSM.Examples.ELMO.ELMO]
all_latest_composite_observed_before_send [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
all_latest_composite_observed_before_send_one_step [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
alt_proj_option_valid_message [in VLSM.Core.ByzantineTraces]
alt_option_valid_message [in VLSM.Core.ByzantineTraces]
alt_preloaded_with_all_messages_incl [in VLSM.Core.ByzantineTraces]
andA_AppendT [in VLSM.Lib.TraceProperties]
andT_setoidT [in VLSM.Lib.TraceProperties]
and_proper_l [in VLSM.Lib.Preamble]
annotated_projection_validator_prop_alt_iff [in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_transition_consistency [in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_initial_lift [in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_state_lift [in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_label_lift [in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator_transition_None [in VLSM.Core.AnnotatedVLSM]
annotated_composite_preloaded_projection [in VLSM.Core.AnnotatedVLSM]
annotated_limited_incl_constrained_limited [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
annotated_free_input_valid_projection [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
annotate_trace_project [in VLSM.Core.AnnotatedVLSM]
annotate_trace_last_original_state [in VLSM.Core.AnnotatedVLSM]
annotate_trace_from_last_original_state [in VLSM.Core.AnnotatedVLSM]
annotate_trace_from_app [in VLSM.Core.AnnotatedVLSM]
annotate_trace_from_unroll [in VLSM.Core.AnnotatedVLSM]
annotate_trace_item_project [in VLSM.Core.AnnotatedVLSM]
any_message_is_valid_in_preloaded [in VLSM.Core.PreloadedVLSM]
AppendT_implies_InfiniteT [in VLSM.Lib.TraceProperties]
AppendT_FiniteT_idem [in VLSM.Lib.TraceProperties]
AppendT_ttA_implies [in VLSM.Lib.TraceProperties]
AppendT_Singleton [in VLSM.Lib.TraceProperties]
appendT_singletonT [in VLSM.Lib.TraceProperties]
AppendT_andA [in VLSM.Lib.TraceProperties]
AppendT_ttA [in VLSM.Lib.TraceProperties]
AppendT_cont_R [in VLSM.Lib.TraceProperties]
AppendT_cont_L [in VLSM.Lib.TraceProperties]
AppendT_cont [in VLSM.Lib.TraceProperties]
AppendT_assoc_L [in VLSM.Lib.TraceProperties]
appendT_finalTA [in VLSM.Lib.TraceProperties]
appendT_assoc_L [in VLSM.Lib.TraceProperties]
appendT_setoidT [in VLSM.Lib.TraceProperties]
appendT_cont_R [in VLSM.Lib.TraceProperties]
appendT_cont_L [in VLSM.Lib.TraceProperties]
appendT_cont [in VLSM.Lib.TraceProperties]
AppendT_assoc_R [in VLSM.Lib.TraceClassicalProperties]
appendT_assoc_R [in VLSM.Lib.TraceClassicalProperties]
apply_plan_last_valid [in VLSM.Core.Plans]
app_cons [in VLSM.Lib.ListExtras]
asymmetric_minimal_among_iff [in VLSM.Lib.Preamble]
at_least_one_send_not_previously_observed [in VLSM.Core.Equivocation.MinimalEquivocationTrace]


B

ballot_chose_in_proposals [in VLSM.Examples.Paxos.Voting]
ballot_chose_inrange [in VLSM.Examples.Paxos.Voting]
Ballot_lt_wf [in VLSM.Examples.Paxos.Voting]
Ballot'_Zeq_iff [in VLSM.Examples.Paxos.Voting]
basic_VLSM_strong_embedding [in VLSM.Core.VLSMProjections.VLSMEmbedding]
basic_VLSM_embedding [in VLSM.Core.VLSMProjections.VLSMEmbedding]
basic_VLSM_weak_embedding_strengthen [in VLSM.Core.VLSMProjections.VLSMEmbedding]
basic_VLSM_weak_embedding [in VLSM.Core.VLSMProjections.VLSMEmbedding]
basic_VLSM_strong_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_weak_projection_strengthen [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_weak_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_projection_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_projection_finite_valid_trace_init_to [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_projection_type [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
basic_VLSM_strong_incl [in VLSM.Core.VLSMProjections.VLSMInclusion]
basic_VLSM_incl [in VLSM.Core.VLSMProjections.VLSMInclusion]
basic_VLSM_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_weak_stuttering_embedding_strengthen [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_weak_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_stuttering_embedding_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_stuttering_embedding_finite_valid_trace_init_to [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_stuttering_embedding_type [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
basic_VLSM_incl_preloaded_with [in VLSM.Core.PreloadedVLSM]
basic_VLSM_incl_preloaded [in VLSM.Core.PreloadedVLSM]
basic_VLSM_embedding_preloaded_with [in VLSM.Core.PreloadedVLSM]
basic_VLSM_embedding_preloaded [in VLSM.Core.PreloadedVLSM]
basic_VLSM_projection_preloaded_with [in VLSM.Core.PreloadedVLSM]
basic_VLSM_projection_type_preloaded_with [in VLSM.Core.PreloadedVLSM]
basic_VLSM_projection_preloaded [in VLSM.Core.PreloadedVLSM]
basic_VLSM_projection_type_preloaded [in VLSM.Core.PreloadedVLSM]
basic_projection_induces_friendliness [in VLSM.Core.Validator]
basic_weak_projection_transition_consistency_Some [in VLSM.Core.Validator]
bisim_hd [in VLSM.Lib.Traces]
bisim_trans [in VLSM.Lib.Traces]
bisim_sym [in VLSM.Lib.Traces]
bisim_refl [in VLSM.Lib.Traces]
byzantine_alt_byzantine_iff [in VLSM.Core.ByzantineTraces]
byzantine_alt_byzantine [in VLSM.Core.ByzantineTraces]
byzantine_preloaded_with_all_messages [in VLSM.Core.ByzantineTraces]


C

calculate_safe_values_some_ok [in VLSM.Examples.Paxos.Paxos]
calculate_safe_values_any_ok [in VLSM.Examples.Paxos.Paxos]
cannot_resend_received_message_in_future [in VLSM.Core.Equivocation]
cannot_resend_message_stepwise_ELMO_component [in VLSM.Examples.ELMO.ELMO]
cannot_resend_message_stepwise_MO_component [in VLSM.Examples.ELMO.MO]
can_emit_with_more [in VLSM.Core.SubProjectionTraces]
can_emit_sub_projection [in VLSM.Core.SubProjectionTraces]
can_produce_has_been_sent [in VLSM.Core.Equivocation]
can_emit_has_trace [in VLSM.Core.VLSM]
can_emit_from_valid_trace [in VLSM.Core.VLSM]
can_produce_from_valid_trace [in VLSM.Core.VLSM]
can_emit_iff [in VLSM.Core.VLSM]
can_produce_valid_iff [in VLSM.Core.VLSM]
can_produce_valid [in VLSM.Core.VLSM]
can_emit_composite_project [in VLSM.Core.Composition]
can_emit_free_composite_project [in VLSM.Core.Composition]
can_emit_composite_free_lift [in VLSM.Core.Composition]
can_emit_projection [in VLSM.Core.EquivocationProjections]
can_emit_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
can_produce_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
cat_option_nth [in VLSM.Lib.ListExtras]
cat_option_app [in VLSM.Lib.ListExtras]
cat_option_length_le [in VLSM.Lib.ListExtras]
cat_option_length [in VLSM.Lib.ListExtras]
cbq_blocks [in VLSM.Examples.Paxos.Voting]
channel_authentication_sender_safety [in VLSM.Core.Equivocation]
check_safe_at_okay [in VLSM.Examples.Paxos.Paxos]
check_quorum [in VLSM.Examples.Paxos.Voting]
choice_stable [in VLSM.Examples.Paxos.Voting]
choosing_well_position_exists [in VLSM.Core.TraceableVLSM]
chosen_subsingleton [in VLSM.Examples.Paxos.Voting]
chosen_iff [in VLSM.Examples.Paxos.Voting]
coeqv_limited_equivocation_state_not_heavy [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_state_annotation_nodup [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_transition_state_annotation_incl [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
CompareStrictOrder_pair_compare [in VLSM.Lib.Preamble]
CompareStrictOrder_option_compare [in VLSM.Lib.Preamble]
CompareStrictOrder_dsig_compare [in VLSM.Lib.Preamble]
compare_lt_asymmetric [in VLSM.Lib.Preamble]
compare_lt_strict_order [in VLSM.Lib.Preamble]
compare_lt_transitive [in VLSM.Lib.Preamble]
compare_lt_irreflexive [in VLSM.Lib.Preamble]
compare_asymmetric' [in VLSM.Lib.Preamble]
compare_eq_refl [in VLSM.Lib.Preamble]
complete_suffix_empty [in VLSM.Lib.ListExtras]
complete_suffix_correct [in VLSM.Lib.ListExtras]
complete_prefix_correct [in VLSM.Lib.ListExtras]
complete_prefix_empty [in VLSM.Lib.ListExtras]
component_projection_validator_prop_primes [in VLSM.Examples.Tutorial.PrimesComposition]
component_reflects_composite_messages_step_update [in VLSM.Examples.ELMO.ELMO]
component_projection_validator_constraint_subsumption [in VLSM.Core.ProjectionTraces]
component_projection_validator_is_message_validator [in VLSM.Core.ProjectionTraces]
component_projection_validator_prop_is_induced [in VLSM.Core.ProjectionTraces]
component_projection_to_preloaded [in VLSM.Core.ProjectionTraces]
component_projection [in VLSM.Core.Validator]
component_transition_projection_Some [in VLSM.Core.Validator]
component_transition_projection_None [in VLSM.Core.Validator]
component_state_projection_lift [in VLSM.Core.Validator]
component_label_projection_lift [in VLSM.Core.Validator]
CompositeHasBeenObserved_step_update [in VLSM.Core.MessageDependencies]
composite_observed_before_send_subsumes_msg_dep_rel [in VLSM.Core.MessageDependencies]
composite_observed_before_send_iff [in VLSM.Core.MessageDependencies]
composite_ObservedBeforeSendTransition_project [in VLSM.Core.MessageDependencies]
composite_observed_before_send_lift [in VLSM.Core.MessageDependencies]
composite_ObservedBeforeSendTransition_lift [in VLSM.Core.MessageDependencies]
composite_HasBeenObserved_iff [in VLSM.Core.MessageDependencies]
composite_HasBeenObserved_lift [in VLSM.Core.MessageDependencies]
composite_equivocators_initial_state_project [in VLSM.Core.Equivocators.LimitedStateEquivocation]
composite_trace_sub_projection_lift [in VLSM.Core.SubProjectionTraces]
composite_state_sub_projection_lift [in VLSM.Core.SubProjectionTraces]
composite_label_sub_projection_option_lift [in VLSM.Core.SubProjectionTraces]
composite_state_sub_projection_lift_to [in VLSM.Core.SubProjectionTraces]
composite_initial_state_sub_projection [in VLSM.Core.SubProjectionTraces]
composite_state_pos [in VLSM.Examples.Tutorial.PrimesComposition]
composite_computable_messages_oracle [in VLSM.Core.Equivocation]
composite_has_been_directly_observed_lift [in VLSM.Core.Equivocation]
composite_has_been_directly_observed_from_component [in VLSM.Core.Equivocation]
composite_has_been_directly_observed_free_iff [in VLSM.Core.Equivocation]
composite_has_been_directly_observed_sent_received_iff [in VLSM.Core.Equivocation]
composite_directly_observed_valid [in VLSM.Core.Equivocation]
composite_sent_valid [in VLSM.Core.Equivocation]
composite_emitted_by_validator_have_sender [in VLSM.Core.Equivocation]
composite_no_initial_valid_messages_have_sender [in VLSM.Core.Equivocation]
composite_no_initial_valid_messages_emitted_by_sender [in VLSM.Core.Equivocation]
composite_has_been_directly_observed_stepwise_props [in VLSM.Core.Equivocation]
composite_has_been_directly_observed_dec [in VLSM.Core.Equivocation]
composite_has_been_received_dec [in VLSM.Core.Equivocation]
composite_proper_sent [in VLSM.Core.Equivocation]
composite_has_been_sent_dec [in VLSM.Core.Equivocation]
composite_stepwise_props [in VLSM.Core.Equivocation]
composite_validator_byzantine_traces_are_not_byzantine [in VLSM.Core.ByzantineTraces]
composite_state_to_trace_P_monotonic [in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_preserves_not_in_indices_initial [in VLSM.Core.TraceableVLSM]
composite_state_destructor_head_reachable [in VLSM.Core.TraceableVLSM]
composite_state_destructor_lookup_reachable [in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_size [in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_reflects_initiality [in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_initial [in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_state_update [in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_index [in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_transition [in VLSM.Core.TraceableVLSM]
composite_tv_state_destructor_destination [in VLSM.Core.TraceableVLSM]
composite_state_update_size_monotone [in VLSM.Core.TraceableVLSM]
composite_latest_sent_observed_in_chain [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_sent_observed_in_before_send [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_valid_transitions_from_to_trace [in VLSM.Core.Composition]
composite_valid_transition_projection_inv [in VLSM.Core.Composition]
composite_valid_transition_projection [in VLSM.Core.Composition]
composite_valid_transition_next_reachable_iff [in VLSM.Core.Composition]
composite_valid_transition_reachable_iff [in VLSM.Core.Composition]
composite_decidable_initial_message [in VLSM.Core.Composition]
composite_transition_project_active [in VLSM.Core.Composition]
composite_constrained_state_project [in VLSM.Core.Composition]
composite_initial_state_prop_lift [in VLSM.Core.Composition]
composite_update_initial_state_with_initial [in VLSM.Core.Composition]
composite_transition_state_eq [in VLSM.Core.Composition]
composite_transition_state_neq [in VLSM.Core.Composition]
composite_directly_observed_were_sent_invariant [in VLSM.Core.Equivocation.NoEquivocation]
composite_initial_state_prop_not_None [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
composite_transition_no_sender_equivocators_weight [in VLSM.Core.Equivocation.TraceWiseEquivocation]
composite_valid_transitions_from_to_reflects_reachability [in VLSM.Core.HistoryVLSM]
composite_valid_transition_future_reflects_rechability [in VLSM.Core.HistoryVLSM]
composite_valid_transition_next_reflects_rechability [in VLSM.Core.HistoryVLSM]
composite_valid_transition_reflects_rechability [in VLSM.Core.HistoryVLSM]
composite_quasi_unique_transition_to_state [in VLSM.Core.HistoryVLSM]
composite_transition_item_projection_neq [in VLSM.Core.ProjectionTraces]
composite_transition_item_projection_iff [in VLSM.Core.ProjectionTraces]
composite_vlsm_induced_projection_composition_iff [in VLSM.Core.ProjectionTraces]
composite_vlsm_induced_projection_is_projection [in VLSM.Core.ProjectionTraces]
composite_vlsm_induced_projection_validator_iff [in VLSM.Core.Validator]
composite_projection_induced_validator_is_projection [in VLSM.Core.Validator]
composite_project_label_eq [in VLSM.Core.Validator]
composition_valid_message_ge_2 [in VLSM.Examples.Tutorial.PrimesComposition]
composition_valid_messages_powers_of_mults [in VLSM.Examples.Tutorial.PrimesComposition]
composition_valid_messages_powers_of_mults_left [in VLSM.Examples.Tutorial.PrimesComposition]
composition_valid_messages_powers_of_mults_right [in VLSM.Examples.Tutorial.PrimesComposition]
composition_23_3_initial [in VLSM.Examples.Tutorial.Multiply]
composition_23_2_initial [in VLSM.Examples.Tutorial.Multiply]
ComputableReceivedMessages_initial_state_empty [in VLSM.Core.Equivocation]
ComputableSentMessages_initial_state_empty [in VLSM.Core.Equivocation]
computable_messages_oracle_initial_state_empty [in VLSM.Core.Equivocation]
com_computable_oracle [in VLSM.Core.Equivocation]
consensus_invariant [in VLSM.Examples.Paxos.Consensus]
consistency_from_valid_state_proj2 [in VLSM.Core.Equivocation]
consistent_valid_state_prop [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
consistent_finite_valid_trace_from_to [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
constrained_transition_preserves_message_dependencies_full_node_condition [in VLSM.Core.MessageDependencies]
constrained_has_been_received_stepwise_props [in VLSM.Core.Equivocation]
constrained_has_been_sent_stepwise_props [in VLSM.Core.Equivocation]
constrained_limited_to_annotated_limited_valid_message [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
constrained_limited_to_annotated_limited_valid_state [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
constrained_preloaded_incl [in VLSM.Core.ConstrainedVLSM]
constrained_preloaded_vlsm_incl_preloaded_with_all_messages [in VLSM.Core.ConstrainedVLSM]
constrained_preloaded_comm [in VLSM.Core.ConstrainedVLSM]
constrained_message_prop_direct_equiv [in VLSM.Core.PreloadedVLSM]
constrained_state_prop_direct_equiv [in VLSM.Core.PreloadedVLSM]
constrained_state_prop_state_update_init [in VLSM.Examples.ELMO.UMO]
constrained_state_prop_addObservations_inv [in VLSM.Examples.ELMO.UMO]
constrained_state_prop_addObservation_inv [in VLSM.Examples.ELMO.UMO]
constrained_state_prop_Receive [in VLSM.Examples.ELMO.UMO]
constrained_state_prop_Send [in VLSM.Examples.ELMO.UMO]
constrained_state_contains_unique_constrained_trace [in VLSM.Examples.ELMO.UMO]
constrained_state_contains_unique_constrained_trace [in VLSM.Examples.ELMO.MO]
constrained_state_prop_MO_msg_valid [in VLSM.Examples.ELMO.MO]
constraint_subsumption_byzantine_message_prop [in VLSM.Core.ConstrainedVLSM]
constraint_subsumption_incl [in VLSM.Core.ConstrainedVLSM]
constraint_subsumption_valid_state_message_preservation [in VLSM.Core.ConstrainedVLSM]
constraint_subsumption_input_valid [in VLSM.Core.ConstrainedVLSM]
construct_equivocators_partial_trace_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
corr_conflict_props [in VLSM.Examples.Paxos.Voting]
count_predecessors_zero [in VLSM.Lib.TopSort]


D

Decision_iff [in VLSM.Lib.Preamble]
dec_sig_sigT_eq_rev [in VLSM.Lib.Preamble]
dec_sig_sigT_eq [in VLSM.Lib.Preamble]
dec_sig_to_exist [in VLSM.Lib.Preamble]
delta_nat_fsfun_neq [in VLSM.Lib.FinSuppFn]
delta_nat_fsfun_eq [in VLSM.Lib.FinSuppFn]
dependencies_are_valid [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
destruct_equivocators_partial_trace_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
difference_size_ge_disjoint_case [in VLSM.Lib.FinSetExtras]
difference_size [in VLSM.Lib.FinSetExtras]
difference_with_intersection [in VLSM.Lib.FinSetExtras]
difference_size_subset [in VLSM.Lib.FinSetExtras]
difference_size_le_self [in VLSM.Lib.FinSetExtras]
diff_app_nodup [in VLSM.Lib.ListSetExtras]
directly_observed_valid [in VLSM.Core.Equivocation]
directly_observed_messages_set_iff [in VLSM.Core.Equivocation]
directly_observed_were_sent_invariant [in VLSM.Core.Equivocation.NoEquivocation]
directly_observed_were_sent_preserved [in VLSM.Core.Equivocation.NoEquivocation]
directly_observed_were_sent_initial [in VLSM.Core.Equivocation.NoEquivocation]
directly_observable_totally_orders_sent_messages_valid_state_prop [in VLSM.Examples.ELMO.UMO]
directly_observable_totally_orders_sent_messages_UMO_reachable [in VLSM.Examples.ELMO.UMO]
directly_observable_addObservations [in VLSM.Examples.ELMO.UMO]
directly_observable_addObservation [in VLSM.Examples.ELMO.UMO]
directly_observable_spec_other [in VLSM.Examples.ELMO.UMO]
doubling_valid_states [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_states_left [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_states_right [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_messages_powers_of_2 [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_messages_powers_of_2_left [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_messages_powers_of_2_right [in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_states [in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_states_left [in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_states_right [in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_messages [in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_messages_right [in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_messages_left [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_is_constrained [in VLSM.Examples.Tutorial.Multiply]
doubling_example_valid_transition [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_2' [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_1' [in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_trace1 [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_3 [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_2 [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_transition_1 [in VLSM.Examples.Tutorial.Multiply]
doubling_example_transition_1 [in VLSM.Examples.Tutorial.Multiply]
drop_last [in VLSM.Lib.ListExtras]
drop_nth [in VLSM.Lib.ListExtras]
drop_lookup [in VLSM.Lib.ListExtras]
drop_tail_comm [in VLSM.Lib.ListExtras]
drop_S_tail [in VLSM.Lib.ListExtras]
dsig_NoDup_map [in VLSM.Lib.StdppExtras]
dsig_compare_transitive [in VLSM.Lib.Preamble]
dsig_compare_reflexive [in VLSM.Lib.Preamble]
DupT_AppendT_SingletonT_andA_DupT [in VLSM.Lib.TraceProperties]
DupT_andA_AppendT_SingletonT [in VLSM.Lib.TraceProperties]
DupT_andA_AppendT_SingletonT_DupT [in VLSM.Lib.TraceProperties]
DupT_cont [in VLSM.Lib.TraceProperties]
dupT_setoidT [in VLSM.Lib.TraceProperties]
dupT_cont [in VLSM.Lib.TraceProperties]
dupT_Tcons [in VLSM.Lib.TraceProperties]


E

elements_subseteq [in VLSM.Lib.FinSetExtras]
elem_of_paxos_votes [in VLSM.Examples.Paxos.Paxos]
elem_of_leaders_messages [in VLSM.Examples.Paxos.Paxos]
elem_of_rec_obs_fn_1 [in VLSM.Examples.ELMO.BaseELMO]
elem_of_receivedAddresses [in VLSM.Examples.ELMO.BaseELMO]
elem_of_messages_addObservation [in VLSM.Examples.ELMO.BaseELMO]
elem_of_messages [in VLSM.Examples.ELMO.BaseELMO]
elem_of_receivedMessages_addObservation [in VLSM.Examples.ELMO.BaseELMO]
elem_of_receivedMessages [in VLSM.Examples.ELMO.BaseELMO]
elem_of_sentMessages_addObservation [in VLSM.Examples.ELMO.BaseELMO]
elem_of_sentMessages [in VLSM.Examples.ELMO.BaseELMO]
elem_of_map_filter_addObservation [in VLSM.Examples.ELMO.BaseELMO]
elem_of_addObservation [in VLSM.Examples.ELMO.BaseELMO]
elem_of_union_fold [in VLSM.Lib.ListSetExtras]
elem_of_add_fsfun [in VLSM.Lib.FinSuppFn]
elem_of_delta_nat_fsfun [in VLSM.Lib.FinSuppFn]
elem_of_succ_fsfun [in VLSM.Lib.FinSuppFn]
elem_of_update_fsfun [in VLSM.Lib.FinSuppFn]
elem_of_fin_supp [in VLSM.Lib.FinSuppFn]
elem_of_composite_observed_messages_set [in VLSM.Core.Equivocation]
elem_of_composite_sent_messages_set [in VLSM.Core.Equivocation]
elem_of_composite_received_messages_set [in VLSM.Core.Equivocation]
elem_of_composite_oracle_set [in VLSM.Core.Equivocation]
elem_of_sent_messages_set [in VLSM.Core.Equivocation]
elem_of_trace_in_futures_right [in VLSM.Core.VLSM]
elem_of_trace_in_futures_left [in VLSM.Core.VLSM]
elem_of_list_split_2 [in VLSM.Lib.StdppExtras]
elem_of_cat_option [in VLSM.Lib.StdppExtras]
elem_of_take [in VLSM.Lib.StdppExtras]
elem_of_pre_VLSM_projection_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
elem_of_mmap_insert [in VLSM.Lib.FinSetExtras]
elem_of_set_map_inj [in VLSM.Lib.FinSetExtras]
elem_of_VLSM_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
elem_of_VLSM_weak_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
elem_of_pre_VLSM_stuttering_embedding_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
elem_of_equivocating_senders_in_trace [in VLSM.Core.Equivocation.TraceWiseEquivocation]
elem_of_stream_prefix [in VLSM.Lib.StreamExtras]
elem_of_list_prod [in VLSM.Lib.ListExtras]
elem_of_two_element_decompositions [in VLSM.Lib.ListExtras]
elem_of_one_element_decompositions [in VLSM.Lib.ListExtras]
elem_of_list_annotate [in VLSM.Lib.ListExtras]
elem_of_UMO_sentMessages [in VLSM.Examples.ELMO.UMO]
elem_of_UMO_reachable_obs_Send_split_2 [in VLSM.Examples.ELMO.UMO]
elem_of_obs_split_2 [in VLSM.Examples.ELMO.UMO]
elem_of_UMO_reachable_obs_Send_UMO_reachable [in VLSM.Examples.ELMO.UMO]
elem_of_UMO_reachable_obs_Send_split [in VLSM.Examples.ELMO.UMO]
elem_of_obs_split [in VLSM.Examples.ELMO.UMO]
ELMO_components_validating [in VLSM.Examples.ELMO.ELMO]
ELMO_valid_states_only_receive_valid_messages [in VLSM.Examples.ELMO.ELMO]
ELMO_update_state_with_initial [in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators_step_update_Receive_already_Observed [in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators_step_update_Receive [in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators_step_update_Send [in VLSM.Examples.ELMO.ELMO]
ELMO_state_to_minimal_equivocation_trace_valid [in VLSM.Examples.ELMO.ELMO]
ELMO_state_to_minimal_equivocation_equivocating_validators [in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators_iff_simple_by_generic [in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators_iff_msg_dep_equivocation [in VLSM.Examples.ELMO.ELMO]
ELMO_CHBO_in_messages [in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators_iff_simple [in VLSM.Examples.ELMO.ELMO]
ELMO_state_to_minimal_equivocation_trace_equivocation_monotonic [in VLSM.Examples.ELMO.ELMO]
ELMO_channel_authentication_prop [in VLSM.Examples.ELMO.ELMO]
ELMO_composite_observed_before_send_sizeState_Proper [in VLSM.Examples.ELMO.ELMO]
ELMO_has_been_directly_observed_sizeState [in VLSM.Examples.ELMO.ELMO]
ELMO_state_to_minimal_equivocation_trace_reachable [in VLSM.Examples.ELMO.ELMO]
ELMO_valid_state_not_heavy [in VLSM.Examples.ELMO.ELMO]
ELMO_not_heavy_receive_observed_message [in VLSM.Examples.ELMO.ELMO]
ELMO_not_heavy_send_message [in VLSM.Examples.ELMO.ELMO]
ELMO_initial_state_not_heavy [in VLSM.Examples.ELMO.ELMO]
ELMO_initial_state_equivocating_validators [in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators_are_Message_validators [in VLSM.Examples.ELMO.ELMO]
ELMO_latest_observation_Send_state [in VLSM.Examples.ELMO.ELMO]
ELMO_component_state_destructor_input_constrained_transition_item [in VLSM.Examples.ELMO.ELMO]
ELMO_component_state_destructor_initial [in VLSM.Examples.ELMO.ELMO]
ELMO_component_messages_of_constrained_trace [in VLSM.Examples.ELMO.ELMO]
ELMO_component_sizeState_of_constrained_trace_output [in VLSM.Examples.ELMO.ELMO]
ELMO_component_sentMessages_of_constrained_trace [in VLSM.Examples.ELMO.ELMO]
ELMO_component_receivedMessages_of_constrained_trace [in VLSM.Examples.ELMO.ELMO]
ELMO_component_elem_of_constrained_trace [in VLSM.Examples.ELMO.ELMO]
ELMO_component_input_constrained_transition_iff [in VLSM.Examples.ELMO.ELMO]
ELMO_recv_valid_prefix [in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_Send_inv [in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_prefix [in VLSM.Examples.ELMO.ELMO]
ELMO_reachable_msg_valid_full [in VLSM.Examples.ELMO.ELMO]
ELMO_unique_traces [in VLSM.Examples.ELMO.ELMO]
ELMO_unique_trace_segments [in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_transition_size [in VLSM.Examples.ELMO.ELMO]
ELMO_input_constrained_transition_inj [in VLSM.Examples.ELMO.ELMO]
ELMO_constrained_transition_output_not_initial [in VLSM.Examples.ELMO.ELMO]
ELMO_reachable_adr [in VLSM.Examples.ELMO.ELMO]
ELMO_no_self_equiv_reachable [in VLSM.Examples.ELMO.ELMO]
ELMO_full_node_reachable [in VLSM.Examples.ELMO.ELMO]
ELMO_component_message_dependencies_full_node_condition [in VLSM.Examples.ELMO.ELMO]
ELMO_reachable_view [in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_has_sender [in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_to_reach [in VLSM.Examples.ELMO.ELMO]
emittable_from_dependencies_prop_iff [in VLSM.Core.MessageDependencies]
emitted_messages_are_valid_iff [in VLSM.Core.VLSM]
emitted_messages_are_valid [in VLSM.Core.VLSM]
empty_fsfun_supp_inv [in VLSM.Lib.FinSuppFn]
empty_fsfun_supp [in VLSM.Lib.FinSuppFn]
empty_composition_no_valid_message [in VLSM.Core.Composition]
empty_composition_no_emit [in VLSM.Core.Composition]
empty_composition_no_initial_message [in VLSM.Core.Composition]
empty_composition_no_label [in VLSM.Core.Composition]
empty_composition_single_state [in VLSM.Core.Composition]
empty_composition_no_index [in VLSM.Core.Composition]
empty_initial_message_or_final_output_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
entry_of_combine_votesets [in VLSM.Examples.Paxos.Paxos]
entry_of_singleton_voteset [in VLSM.Examples.Paxos.Paxos]
EqSt_stream_prefix [in VLSM.Lib.StreamExtras]
equivocating_indices_equivocating_validators [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocating_indices_initially_empty [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocating_validators_fixed_equivocation_characterization [in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_validators_witness_last_char [in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_validators_step_update [in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_validators_witness_monotonicity [in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_senders_in_trace_witnessing_equivocation_prop [in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_messages_dependencies_are_directly_observed_or_equivocator_emitted [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
equivocating_messages_are_equivocator_emitted [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
equivocating_validators_empty_in_initial_state [in VLSM.Core.Equivocation.TraceWiseEquivocation]
equivocating_validators_is_equivocating_tracewise_iff [in VLSM.Core.Equivocation.TraceWiseEquivocation]
equivocating_senders_in_trace_prefix [in VLSM.Core.Equivocation.TraceWiseEquivocation]
equivocating_transition_preserves_fixed_equivocation [in VLSM.Core.Equivocators.FixedEquivocation]
equivocation_in_trace_last_char [in VLSM.Core.Equivocation]
equivocation_in_trace_prefix [in VLSM.Core.Equivocation]
equivocation_limit_recv_msg_prefix_ok [in VLSM.Examples.ELMO.ELMO]
equivocation_limit_recv_ok_msg_ok [in VLSM.Examples.ELMO.ELMO]
equivocators_limited_valid_trace_projects_to_annotated_limited_equivocation [in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_valid_trace_projects_to_fixed_limited_equivocation [in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_valid_trace_is_fixed [in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_equivocations_vlsm_incl_no_equivocations [in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_equivocations_vlsm_incl_free [in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_initial_message [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_initial_state_project [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_state_project_state_update_eqv [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_initial_state_size [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_no_equivocations_vlsm_incl_equivocators_free [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_pre_trace_preserves_equivocating_state [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_pre_trace_cannot_decrease_state_size [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_plan_cannot_decrease_state_size [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_transition_cannot_decrease_state_size [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_transition_preserves_equivocating_indices [in VLSM.Core.Equivocators.EquivocatorsComposition]
Equivocators_Fixed_Strong_eq [in VLSM.Core.Equivocation.FixedSetEquivocation]
Equivocators_Fixed_Strong_incl [in VLSM.Core.Equivocation.FixedSetEquivocation]
equivocators_composition_for_directly_observed_index_incl_embedding [in VLSM.Core.Equivocation.FixedSetEquivocation]
Equivocators_Strong_Fixed_incl [in VLSM.Core.Equivocation.FixedSetEquivocation]
equivocators_no_equivocations_vlsm_X_vlsm_projection [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_valid_trace_from_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_no_equivocations_vlsm_X_vlsm_partial_projection [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_finite_trace_sub_projection_commute [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_finite_trace_sub_projection_item_commute [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_trace_project_final_state [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_VLSM_projection_finite_trace_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_trace_project_app [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_trace_project_characterization [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_partial_trace_project_extends_left [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_partial_trace_project_characterization [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_output_reflecting_iff [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_output_reflecting_inv [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_zero_descriptors [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_preserves_zero_descriptors [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_finite_trace_projection_list_commute [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_preserves_equivocating_indices_final [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_from_state_descriptors [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_preserves_equivocating_indices [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_app_inv [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_app_inv_item [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_app_iff [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_folder_additive [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_folder_additive_iff [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_fold_None [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_inv_characterization [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_proper_characterization [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_proper_descriptor_characterization [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_proper [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_proper_descriptor [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_preserves_zero_descriptors [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project_preserves_equivocating_indices [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_of_msg_subset_of_recv [in VLSM.Examples.ELMO.ELMO]
equivocators_finite_valid_trace_init_to_rev [in VLSM.Core.Equivocators.SimulatingFree]
equivocators_can_emit_free [in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocators_total_trace_project_replayed_trace_from [in VLSM.Core.Equivocators.FullReplayTraces]
equivocators_trace_project_replayed_trace_from_left [in VLSM.Core.Equivocators.FullReplayTraces]
equivocators_total_state_project_replayed_trace_from [in VLSM.Core.Equivocators.FullReplayTraces]
equivocators_trace_project_replayed_initial_state_from [in VLSM.Core.Equivocators.FullReplayTraces]
equivocators_vlsm_transition_item_project_zero_descriptor [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocators_composition_can_emit_sender [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
equivocators_fixed_equivocations_all_eq [in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_trace_sub_item_input_is_seeded_or_sub_previously_sent [in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_trace_project_preserves_proper_fixed_equivocator_descriptors [in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_vlsm_subset_incl [in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_vlsm_incl_no_equivocations [in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_vlsm_incl_PreFree [in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_vlsm_incl_free [in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_limited_valid_trace_projects_to_annotated_limited_equivocation_rev [in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
equivocators_Fixed_incl_Limited [in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
equivocator_initial_state_project [in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocator_descriptors_update_twice [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors_update_id [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors_update_eq [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors_update_eq_rew [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors_update_neq [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_ComputableSentMessages [in VLSM.Core.Equivocators.MessageProperties]
equivocator_elem_of_sent_messages_set [in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_sent_stepwise_props [in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_received_stepwise_props [in VLSM.Core.Equivocators.MessageProperties]
equivocator_oracle_stepwise_props [in VLSM.Core.Equivocators.MessageProperties]
equivocator_oracle_dec [in VLSM.Core.Equivocators.MessageProperties]
equivocator_vlsm_trace_project_output_reflecting_inv [in VLSM.Core.Equivocators.MessageProperties]
equivocator_vlsm_trace_project_output_reflecting [in VLSM.Core.Equivocators.MessageProperties]
equivocator_state_append_sent_right [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_sent_left [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_in_futures [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_weak_projection [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_preloaded_weak_projection [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_preloaded_with_weak_projection [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_transition_initial_state [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_initial_state_in_futures [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_transition [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_append_valid [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_state_descriptor_project_replayed_trace_from_left [in VLSM.Core.Equivocators.FullReplayTraces]
equivocator_state_project_replayed_trace_from_left [in VLSM.Core.Equivocators.FullReplayTraces]
equivocator_state_descriptor_project_replayed_initial_state_from_left [in VLSM.Core.Equivocators.FullReplayTraces]
equivocator_state_project_replayed_initial_state_from_left [in VLSM.Core.Equivocators.FullReplayTraces]
equivocator_zero_projection [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_inv [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_valid [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv5 [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv5_new_machine [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv4 [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv3 [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_valid_transition_project_inv2 [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_app_inv [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_app [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_cons [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_on_new_machine [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_inv_characterization [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_preserves_equivocating_indices [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_proper_characterization [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_inv_messages [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_proper [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_transition_item_project_inv_none [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_transition_item_project_some_inj [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project_reflect_non_equivocating [in VLSM.Core.Equivocators.FixedEquivocation]
equivocator_state_project_valid_message [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_valid_state [in VLSM.Core.Equivocators.Equivocators]
equivocator_transition_preserves_equivocating_state [in VLSM.Core.Equivocators.Equivocators]
equivocator_transition_cannot_decrease_state_size [in VLSM.Core.Equivocators.Equivocators]
equivocator_transition_reflects_singleton_state [in VLSM.Core.Equivocators.Equivocators]
equivocator_transition_no_equivocation_zero_descriptor [in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm_initial_state_preservation_rev [in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm_initial_message_preservation_rev [in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm_initial_message_preservation [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_update_commute [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_extend_commute [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_singleton_is_extend [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_project_3 [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_project_2 [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_project_1 [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_lst [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append_size [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_project_3 [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_project_2 [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_project_1 [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_lst [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend_size [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update_project_neq [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update_project_eq [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update_lst [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update_size [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_zero [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_ext [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_None_rev [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_Some_rev [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_None [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project_Some [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_eq [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_projection_irrel [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_last_n [in VLSM.Core.Equivocators.Equivocators]
EquivPreloadedBase_Fixed_weak_embedding [in VLSM.Core.Equivocation.FixedSetEquivocation]
eq_Observation [in VLSM.Examples.ELMO.BaseELMO]
eq_Message [in VLSM.Examples.ELMO.BaseELMO]
eq_State [in VLSM.Examples.ELMO.BaseELMO]
eq_equivocating_indices_equivocation_fault' [in VLSM.Core.Equivocators.EquivocatorsComposition]
eq_equivocating_indices_equivocation_fault [in VLSM.Core.Equivocators.EquivocatorsComposition]
eq_equivocating_validators_equivocation_fault [in VLSM.Core.Equivocation]
eq_dec_refl [in VLSM.Lib.Preamble]
even_constrained_primes_composition_all_validators [in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_incl_left [in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_no_validator [in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_valid_message_char [in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_valid_messages_left [in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition_emits_multiplier [in VLSM.Examples.Tutorial.PrimesComposition]
examine_leaders_output [in VLSM.Examples.Paxos.Paxos]
examine_paxos_acceptor_output [in VLSM.Examples.Paxos.Paxos]
examine_one_trace [in VLSM.Core.Equivocation]
existing_false_label_equivocator_state_project_same [in VLSM.Core.Equivocators.Equivocators]
existing_false_label_equivocator_state_project_not_same [in VLSM.Core.Equivocators.Equivocators]
existing_true_label_equivocator_state_project_last [in VLSM.Core.Equivocators.Equivocators]
existing_true_label_equivocator_state_project_not_last [in VLSM.Core.Equivocators.Equivocators]
existing_false_label_equivocator_transition_size [in VLSM.Core.Equivocators.Equivocators]
existing_true_label_equivocator_transition_size [in VLSM.Core.Equivocators.Equivocators]
existing_descriptor_proper [in VLSM.Core.Equivocators.Equivocators]
existing_equivocator_label_forget_proper [in VLSM.Core.Equivocators.Equivocators]
existsb_first [in VLSM.Lib.StdppExtras]
existsb_forall [in VLSM.Lib.StdppExtras]
existsb_last [in VLSM.Lib.StdppExtras]
existsb_Exists [in VLSM.Lib.StdppExtras]
exists_pivotal_validator [in VLSM.Core.ReachableThreshold]
exists_right_finite_trace_from [in VLSM.Core.VLSM]
exists_equivocators_transition_item_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
Exists_last [in VLSM.Lib.StdppExtras]
exists_proj1_sig [in VLSM.Lib.Preamble]
exists_equivocator_transition_item_project [in VLSM.Core.Equivocators.EquivocatorsProjections]
Exists_Str_nth_tl [in VLSM.Lib.StreamExtras]
Exists_impl [in VLSM.Lib.StreamExtras]
Exists_map_conv [in VLSM.Lib.StreamExtras]
Exists_choose_first_good [in VLSM.Lib.ListExtras]
Exists_first [in VLSM.Lib.ListExtras]
Exists1_exists [in VLSM.Lib.StreamExtras]
extend_right_finite_trace_from_to [in VLSM.Core.VLSM]
extend_right_finite_trace_from [in VLSM.Core.VLSM]
ext_elem_of_filter [in VLSM.Lib.StdppExtras]


F

false_composite_no_equivocation_vlsm_with_preloaded [in VLSM.Core.Equivocation.NoEquivocation]
ffT_setoidT [in VLSM.Lib.TraceProperties]
fFurther [in VLSM.Lib.StreamExtras]
fHere [in VLSM.Lib.StreamExtras]
FilteringSubsequence_iff [in VLSM.Lib.StreamFilters]
filtering_subsequence_prefix_is_filter_last [in VLSM.Lib.StreamFilters]
filtering_subsequence_prefix_length [in VLSM.Lib.StreamFilters]
filtering_subsequence_prefix_is_filter [in VLSM.Lib.StreamFilters]
filtering_subsequence_witness_rev [in VLSM.Lib.StreamFilters]
filtering_subsequence_witness [in VLSM.Lib.StreamFilters]
filtering_subsequence_iff [in VLSM.Lib.StreamFilters]
filtering_subsequence_prefix_sorted [in VLSM.Lib.StreamFilters]
filtering_subsequence_sorted [in VLSM.Lib.StreamFilters]
filter_set_eq [in VLSM.Lib.ListSetExtras]
filter_set_add [in VLSM.Lib.ListSetExtras]
filter_subseteq_fn [in VLSM.Lib.StdppExtras]
filter_subseteq [in VLSM.Lib.StdppExtras]
filter_length_fn [in VLSM.Lib.StdppExtras]
filter_complement [in VLSM.Lib.StdppExtras]
filter_ext_elem_of [in VLSM.Lib.StdppExtras]
filter_subprop [in VLSM.Lib.FinSetExtras]
filter_subset [in VLSM.Lib.FinSetExtras]
filter_annotate_app [in VLSM.Lib.ListExtras]
filter_annotate_unroll [in VLSM.Lib.ListExtras]
filter_annotate_length [in VLSM.Lib.ListExtras]
finalTA_lastdup [in VLSM.Lib.TraceProperties]
finalTA_hd_append_trace [in VLSM.Lib.TraceProperties]
finalTA_finiteT [in VLSM.Lib.TraceProperties]
finalTB_finiteT [in VLSM.Lib.TraceProperties]
final_state_component_initial_or_transition [in VLSM.Core.Composition]
find_least_among_is_minimal [in VLSM.Lib.Preamble]
find_least_among_helper_is_minimal [in VLSM.Lib.Preamble]
find_least_among_helper_minimal [in VLSM.Lib.Preamble]
find_least_among_helper_has_property [in VLSM.Lib.Preamble]
find_least_among_helper_bounded [in VLSM.Lib.Preamble]
find_first_indexed_largest_nat_with_propery_bounded_None [in VLSM.Lib.NatExtras]
find_first_indexed_largest_nat_with_propery_bounded_Some [in VLSM.Lib.NatExtras]
find_largest_nat_with_property_bounded_None [in VLSM.Lib.NatExtras]
find_largest_nat_with_property_bounded_Some [in VLSM.Lib.NatExtras]
FinitelyManyBound_impl_rev [in VLSM.Lib.StreamExtras]
FinitelyMany_from_bound [in VLSM.Lib.StreamExtras]
FiniteT_SingletonT [in VLSM.Lib.TraceProperties]
FiniteT_AppendT_idem [in VLSM.Lib.TraceProperties]
finiteT_finalTA [in VLSM.Lib.TraceProperties]
finiteT_infiniteT_not [in VLSM.Lib.TraceProperties]
finiteT_bisim_eq [in VLSM.Lib.TraceProperties]
finiteT_setoidT [in VLSM.Lib.TraceProperties]
finiteT_infiniteT [in VLSM.Lib.TraceClassicalProperties]
finite_valid_trace_from_sub_projection [in VLSM.Core.SubProjectionTraces]
finite_valid_trace_sub_projection [in VLSM.Core.SubProjectionTraces]
finite_trace_sub_projection_last_state [in VLSM.Core.SubProjectionTraces]
finite_valid_trace_from_to_alt_equiv [in VLSM.Core.VLSM]
finite_valid_trace_from_to_alt_right_impl [in VLSM.Core.VLSM]
finite_valid_trace_from_to_alt_left_impl [in VLSM.Core.VLSM]
finite_valid_trace_init_to_alt_equiv [in VLSM.Core.VLSM]
finite_valid_trace_init_to_alt_right_impl [in VLSM.Core.VLSM]
finite_valid_trace_init_to_alt_left_impl [in VLSM.Core.VLSM]
finite_valid_trace_from_to_last_transition [in VLSM.Core.VLSM]
finite_valid_trace_from_to_complete_left [in VLSM.Core.VLSM]
finite_valid_trace_from_complete_left [in VLSM.Core.VLSM]
finite_valid_trace_init_to_rev_strong_ind [in VLSM.Core.VLSM]
finite_valid_trace_init_to_add_emit [in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_forget_emit [in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_valid_state_message_rev [in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_valid_state_message [in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_output [in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_initial_state [in VLSM.Core.VLSM]
finite_valid_trace_init_to_rev_ind [in VLSM.Core.VLSM]
finite_valid_trace_from_to_rev_ind [in VLSM.Core.VLSM]
finite_valid_trace_init_to_prefix_1 [in VLSM.Core.VLSM]
finite_valid_trace_init_to_prefix [in VLSM.Core.VLSM]
finite_valid_trace_init_to_snoc_rev [in VLSM.Core.VLSM]
finite_valid_trace_init_to_snoc [in VLSM.Core.VLSM]
finite_valid_trace_init_to_last [in VLSM.Core.VLSM]
finite_valid_trace_init_to_forget_last [in VLSM.Core.VLSM]
finite_valid_trace_init_add_last [in VLSM.Core.VLSM]
finite_valid_trace_from_to_snoc [in VLSM.Core.VLSM]
finite_valid_trace_from_to_app_split [in VLSM.Core.VLSM]
finite_valid_trace_from_to_app [in VLSM.Core.VLSM]
finite_valid_trace_from_to_last_pstate [in VLSM.Core.VLSM]
finite_valid_trace_from_to_first_pstate [in VLSM.Core.VLSM]
finite_valid_trace_from_add_last [in VLSM.Core.VLSM]
finite_valid_trace_from_to_last [in VLSM.Core.VLSM]
finite_valid_trace_from_to_forget_last [in VLSM.Core.VLSM]
finite_valid_trace_from_to_singleton [in VLSM.Core.VLSM]
finite_valid_trace_from_segment [in VLSM.Core.VLSM]
finite_valid_trace_from_suffix [in VLSM.Core.VLSM]
finite_valid_trace_from_prefix [in VLSM.Core.VLSM]
finite_valid_trace_rev_ind [in VLSM.Core.VLSM]
finite_valid_trace_from_rev_ind [in VLSM.Core.VLSM]
finite_valid_trace_from_app_iff [in VLSM.Core.VLSM]
finite_valid_trace_consecutive_valid_transition [in VLSM.Core.VLSM]
finite_valid_trace_last_pstate [in VLSM.Core.VLSM]
finite_valid_trace_tail [in VLSM.Core.VLSM]
finite_valid_trace_first_pstate [in VLSM.Core.VLSM]
finite_valid_trace_first_valid_transition [in VLSM.Core.VLSM]
finite_valid_trace_empty [in VLSM.Core.VLSM]
finite_valid_trace_singleton [in VLSM.Core.VLSM]
finite_trace_last_suffix [in VLSM.Core.VLSM]
finite_trace_last_prefix [in VLSM.Core.VLSM]
finite_trace_nth_length [in VLSM.Core.VLSM]
finite_trace_nth_app2 [in VLSM.Core.VLSM]
finite_trace_nth_app1 [in VLSM.Core.VLSM]
finite_trace_nth_last [in VLSM.Core.VLSM]
finite_trace_nth_first [in VLSM.Core.VLSM]
finite_trace_last_output_is_last [in VLSM.Core.VLSM]
finite_trace_last_is_last [in VLSM.Core.VLSM]
finite_trace_last_app [in VLSM.Core.VLSM]
finite_trace_last_nil [in VLSM.Core.VLSM]
finite_trace_last_cons [in VLSM.Core.VLSM]
finite_valid_plan_from_one [in VLSM.Core.Plans]
finite_valid_plan_iff [in VLSM.Core.Plans]
finite_valid_trace_from_to_plan [in VLSM.Core.Plans]
finite_valid_plan_from_to_app_iff [in VLSM.Core.Plans]
finite_valid_plan_empty [in VLSM.Core.Plans]
finite_valid_plan_from_app_iff [in VLSM.Core.Plans]
finite_valid_trace_init_to_emit_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_init_to_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_from_to_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_from_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
finite_valid_trace_init_to_from_constrained_equiv [in VLSM.Core.PreloadedVLSM]
finite_valid_trace_init_to_from_constrained_left_impl [in VLSM.Core.PreloadedVLSM]
finite_valid_trace_init_to_from_constrained_right_impl [in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to_direct_equiv [in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to_direct_left_impl [in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to_direct_right_impl [in VLSM.Core.PreloadedVLSM]
finite_trace_projection_list_in_rev [in VLSM.Core.ProjectionTraces]
finite_trace_projection_list_in [in VLSM.Core.ProjectionTraces]
finite_valid_trace_from_to_UMO_state2trace [in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_UMO_state2trace [in VLSM.Examples.ELMO.UMO]
finite_valid_trace_init_to_state2trace' [in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_state2trace' [in VLSM.Examples.ELMO.UMO]
finite_valid_trace_init_to_state2trace_inv [in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_state2trace_inv [in VLSM.Examples.ELMO.UMO]
finite_valid_trace_init_to_state2trace [in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_state2trace [in VLSM.Examples.ELMO.UMO]
finite_valid_trace_init_to_unique [in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_unique [in VLSM.Examples.ELMO.UMO]
finite_valid_trace_from_to_unique [in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_from_to_unique [in VLSM.Examples.ELMO.UMO]
finite_valid_trace_from_to_inv [in VLSM.Examples.ELMO.UMO]
finite_valid_trace_from_to_size [in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_from_to_inv [in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_from_to_size [in VLSM.Examples.ELMO.UMO]
finite_constrained_trace_init_to_state2trace' [in VLSM.Examples.ELMO.MO]
finite_constrained_trace_init_to_state2trace_inv [in VLSM.Examples.ELMO.MO]
finite_constrained_trace_init_to_state2trace [in VLSM.Examples.ELMO.MO]
finite_valid_trace_init_to_unique [in VLSM.Examples.ELMO.MO]
finite_valid_trace_from_to_unique [in VLSM.Examples.ELMO.MO]
finite_valid_trace_from_to_size [in VLSM.Examples.ELMO.MO]
finite_constrained_trace_init_to_unique [in VLSM.Examples.ELMO.MO]
finite_constrained_trace_from_to_unique [in VLSM.Examples.ELMO.MO]
finite_constrained_trace_from_to_size [in VLSM.Examples.ELMO.MO]
fin_supp_NoDup [in VLSM.Lib.FinSuppFn]
first_transition_valid [in VLSM.Core.VLSM]
fitering_subsequence_stream_filter_map_prefix [in VLSM.Lib.StreamFilters]
fixed_non_equivocating_traces_char [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_non_equivocating_projection_friendliness [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_vlsm_composition_no_equivocators [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocator_lifting_initial_state [in VLSM.Core.Equivocation.FixedSetEquivocation]
Fixed_eq_StrongFixed [in VLSM.Core.Equivocation.FixedSetEquivocation]
Fixed_incl_StrongFixed [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_strong_equivocation_subsumption [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_output_has_strong_fixed_equivocation [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_input_has_strong_fixed_equivocation [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_valid_state_sub_projection [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_directly_observed_has_strong_fixed_equivocation [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_finite_valid_trace_sub_projection [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_finite_valid_trace_sub_projection_helper [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_output_has_strong_fixed_equivocation_helper [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_input_valid_transition_sub_projection_helper [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_input_has_strong_fixed_equivocation_helper [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_vlsm_composition_index_incl [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_constraint_index_incl_subsumption [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_index_incl_subsumption [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_vlsm_composition_incl_free [in VLSM.Core.Equivocation.FixedSetEquivocation]
Fixed_incl_Limited [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
fixed_transition_preserves_annotation_equivocators [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
fixed_full_node_equivocation_incl [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
fixed_non_byzantine_eq_fixed_non_equivocating_from_initial [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_incl_fixed_non_equivocating_from_initial [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_vlsm_lift_from_initial [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_vlsm_lift_valid [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_equivocating_traces_are_byzantine [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_equivocating_incl_fixed_non_byzantine [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_equivocating_incl_sub_non_equivocating [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_preloaded_eq [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_preloaded_incl [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection_valid_no_equivocations [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_trace_char1 [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection_friendliness [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection_incl_preloaded [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection_initial_state_preservation [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_IM_sender_safety [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_IM_preserves_channel_authentication [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_IM_no_initial_messages [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_equivocators_vlsm_projection [in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocators_vlsm_partial_projection [in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocators_valid_trace_project [in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocation_constraint_has_constraint_has_been_sent_prop [in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocators_initial_state_project [in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocation_constraint_subsumption [in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocation_constraint_subsumption_alt [in VLSM.Core.Equivocators.FixedEquivocation]
fixed_equivocators_finite_valid_trace_init_to_rev [in VLSM.Core.Equivocators.FixedEquivocationSimulation]
fixed_equivocation_has_replayable_message_prop [in VLSM.Core.Equivocators.FixedEquivocationSimulation]
fixed_equivocation_replay_has_message [in VLSM.Core.Equivocators.FixedEquivocationSimulation]
fixed_equivocating_non_equivocating_constraint_lifting [in VLSM.Core.Equivocators.FixedEquivocationSimulation]
fixed_equivocating_messages_sent_by_non_equivocating_are_valid [in VLSM.Core.Equivocators.FixedEquivocationSimulation]
flatten_formulas_are_well_formed_expressions [in VLSM.Examples.Tutorial.Formulas]
flatten_formula_common_prefix [in VLSM.Examples.Tutorial.Formulas]
flatten_formula_prefix [in VLSM.Examples.Tutorial.Formulas]
flatten_formula_prefix_helper [in VLSM.Examples.Tutorial.Formulas]
flatten_formula_formula_prefix_is_not_formula_prop_app_prefix [in VLSM.Examples.Tutorial.Formulas]
flatten_formula_formula_prefix_is_not_formula_prop_app [in VLSM.Examples.Tutorial.Formulas]
flatten_formula_nzlen [in VLSM.Examples.Tutorial.Formulas]
fold_left_ind_rev [in VLSM.Lib.ListExtras]
fold_left_ind [in VLSM.Lib.ListExtras]
fold_right_andb_false [in VLSM.Lib.ListExtras]
followsT_dupT [in VLSM.Lib.TraceProperties]
followsT_followsT [in VLSM.Lib.TraceProperties]
followsT_ttA [in VLSM.Lib.TraceProperties]
followsT_singleton_andA_R [in VLSM.Lib.TraceProperties]
followsT_singleton_andA_L [in VLSM.Lib.TraceProperties]
followsT_singletonT [in VLSM.Lib.TraceProperties]
followsT_cont [in VLSM.Lib.TraceProperties]
followsT_setoidT_R [in VLSM.Lib.TraceProperties]
followsT_setoidT_L [in VLSM.Lib.TraceProperties]
followsT_setoidT [in VLSM.Lib.TraceProperties]
followsT_hd [in VLSM.Lib.TraceProperties]
ForAllSuffix_subsumption [in VLSM.Lib.ListExtras]
ForAllSuffix_induction [in VLSM.Lib.ListExtras]
ForAllSuffix2_transitive_lookup [in VLSM.Lib.StdppExtras]
ForAllSuffix2_lookup [in VLSM.Lib.StdppExtras]
ForAllSuffix2_filter [in VLSM.Lib.ListExtras]
Forall_True [in VLSM.Lib.TopSort]
Forall_filter_nil [in VLSM.Lib.StdppExtras]
ForAll_impl [in VLSM.Lib.StreamExtras]
forall_ForAll [in VLSM.Lib.StreamExtras]
ForAll_tauto [in VLSM.Lib.StreamExtras]
ForAll_subsumption [in VLSM.Lib.StreamExtras]
ForAll_drop [in VLSM.Lib.ListExtras]
Forall_filter [in VLSM.Lib.ListExtras]
ForAll1_forall [in VLSM.Lib.StreamExtras]
ForAll1_subsumption [in VLSM.Lib.StreamExtras]
ForAll2_strict_lookup_inj [in VLSM.Lib.StreamExtras]
ForAll2_strict_lookup [in VLSM.Lib.StreamExtras]
ForAll2_strict_lookup_rev [in VLSM.Lib.StreamExtras]
ForAll2_transitive_lookup [in VLSM.Lib.StreamExtras]
ForAll2_forall [in VLSM.Lib.StreamExtras]
ForAll2_subsumption [in VLSM.Lib.StreamExtras]
free_valid_from_all_dependencies_emitable_from_dependencies [in VLSM.Core.MessageDependencies]
free_valid_from_valid_dependencies [in VLSM.Core.MessageDependencies]
free_valid_message_yields_projection_validator [in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_yields_message_validator [in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_is_valid [in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_emittable_from_dependencies [in VLSM.Core.Validators.FreeCompositionValidator]
free_component_message_validator_yields_validator [in VLSM.Core.Validators.FreeCompositionValidator]
free_component_message_validator_valid_trace [in VLSM.Core.Validators.FreeCompositionValidator]
free_radix_composite_vlsm_emits_multiplier [in VLSM.Examples.Tutorial.PrimesComposition]
free_composite_no_initial_valid_messages_have_sender [in VLSM.Core.Equivocation]
free_composite_no_initial_valid_messages_emitted_by_sender [in VLSM.Core.Equivocation]
free_composite_has_been_directly_observed_stepwise_props [in VLSM.Core.Equivocation]
free_composite_has_been_received_stepwise_props [in VLSM.Core.Equivocation]
free_composite_has_been_sent_stepwise_props [in VLSM.Core.Equivocation]
free_composite_stepwise_props [in VLSM.Core.Equivocation]
free_composite_23_reachable_00 [in VLSM.Examples.Tutorial.Multiply]
free_composition_23_reachable_0 [in VLSM.Examples.Tutorial.Multiply]
free_composition_23_valid_messages_powers_of_23 [in VLSM.Examples.Tutorial.Multiply]
free_composition_23_valid_messages_powers_of_23_left [in VLSM.Examples.Tutorial.Multiply]
free_composition_23_valid_messages_powers_of_23_right [in VLSM.Examples.Tutorial.Multiply]
free_has_strong_trace_witnessing_equivocation_prop [in VLSM.Core.Equivocation.WitnessedEquivocation]
free_valid_preloaded_lifts_can_be_emitted [in VLSM.Core.Composition]
free_composite_vlsm_spec [in VLSM.Core.Composition]
free_equivocators_valid_trace_project [in VLSM.Core.Equivocators.FixedEquivocation]
free_valid_state_component_initial_or_transition [in VLSM.Core.ProjectionTraces]
from_send_to_from_sent_argument [in VLSM.Core.Equivocation]
fsfun_sum_succ [in VLSM.Lib.FinSuppFn]
fsfun_sum_zero_inv [in VLSM.Lib.FinSuppFn]
fsfun_sum_proper [in VLSM.Lib.FinSuppFn]
fsfun_equiv_unfold [in VLSM.Lib.FinSuppFn]
fsfun_prod_succ [in VLSM.Lib.NatExtras]
fsfun_prod_zero [in VLSM.Lib.NatExtras]
fsFurther [in VLSM.Lib.ListExtras]
fsFurther2_transitive [in VLSM.Lib.ListExtras]
fsHere [in VLSM.Lib.ListExtras]
FullMessageDependencies_ind [in VLSM.Core.MessageDependencies]
full_node_sent_locally_is_globally_equivocating [in VLSM.Core.MessageDependencies]
full_node_is_globally_equivocating_iff [in VLSM.Core.MessageDependencies]
full_node_is_globally_equivocating_stronger [in VLSM.Core.MessageDependencies]
full_node_is_locally_equivocating_iff [in VLSM.Core.MessageDependencies]
full_node_HasBeenObserved_is_directly_observed [in VLSM.Core.MessageDependencies]
full_node_is_locally_equivocating_stronger [in VLSM.Core.MessageDependencies]
full_node_is_sent_locally_equivocating_weaker [in VLSM.Core.MessageDependencies]
full_node_has_been_received [in VLSM.Core.MessageDependencies]
full_node_free_valid_message_yields_projection_validator [in VLSM.Core.Validators.FreeCompositionValidator]
full_node_free_valid_message_yields_message_validator [in VLSM.Core.Validators.FreeCompositionValidator]
full_node_free_valid_message_entails [in VLSM.Core.Validators.FreeCompositionValidator]
full_node_free_valid_message_entails_helper [in VLSM.Core.Validators.FreeCompositionValidator]
full_node_condition_for_admissible_equivocators_subsumption [in VLSM.Core.Equivocation.FullNode]
full_node_prefix [in VLSM.Examples.ELMO.ELMO]
full_node_messages_iff_rec_obs [in VLSM.Examples.ELMO.ELMO]
full_node_rebase_rec_obs [in VLSM.Examples.ELMO.ELMO]
full_node_VLSM_reachable [in VLSM.Examples.ELMO.ELMO]
full_node_reachable_messages_ind [in VLSM.Examples.ELMO.ELMO]
full_node_limited_equivocation_valid_state_weight [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
full_node_msg_dep_limited_equivocation_vlsm_eq [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_msg_dep_limited_equivocation_vlsm_incl [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_msg_dep_composite_transition_message_equivocators [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_msg_dep_coequivocating_senders [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_fixed_equivocation_eq [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
full_node_fixed_equivocation_incl [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
full_node_fixed_equivocation_constraint_subsumption [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]


G

gathered_1b_ok [in VLSM.Examples.Paxos.Paxos]
generalized_equivocators_finite_valid_trace_init_to_rev [in VLSM.Core.Equivocators.SimulatingFree]
get_maximal_element_some [in VLSM.Lib.TopSort]
get_maximal_element_correct [in VLSM.Lib.TopSort]
global_equivocators_simple_step_update_receive_already_observed [in VLSM.Examples.ELMO.ELMO]
global_equivocators_simple_step_update_receive [in VLSM.Examples.ELMO.ELMO]
global_equivocators_simple_step_update_send_iff [in VLSM.Examples.ELMO.ELMO]
global_equivocators_simple_step_update_send [in VLSM.Examples.ELMO.ELMO]
global_equivocators_simple_iff_full_node_equivocation [in VLSM.Examples.ELMO.ELMO]


H

happensBefore_msg_dep [in VLSM.Examples.ELMO.ELMO]
HasBeenObserved_step_update [in VLSM.Core.MessageDependencies]
has_been_received_in_state_preloaded [in VLSM.Core.Equivocation]
has_been_received_in_state [in VLSM.Core.Equivocation]
has_been_sent_irrelevance [in VLSM.Core.Equivocation]
has_been_sent_iff_by_sender [in VLSM.Core.Equivocation]
has_been_received_messages_set_iff [in VLSM.Core.Equivocation]
has_been_directly_observed_consistency [in VLSM.Core.Equivocation]
has_been_directly_observed_from_sent_received_stepwise_props [in VLSM.Core.Equivocation]
has_been_directly_observed_from_sent_received_dec [in VLSM.Core.Equivocation]
has_been_directly_observed_sent_received_iff [in VLSM.Core.Equivocation]
has_been_directly_observed_examine_one_trace [in VLSM.Core.Equivocation]
has_been_directly_observed_step_update [in VLSM.Core.Equivocation]
has_been_directly_observed_no_inits [in VLSM.Core.Equivocation]
has_been_received_examine_one_trace [in VLSM.Core.Equivocation]
has_been_sent_examine_one_trace [in VLSM.Core.Equivocation]
has_been_received_consistency_proper_not_received [in VLSM.Core.Equivocation]
has_been_received_consistency [in VLSM.Core.Equivocation]
has_been_received_tracewise_props [in VLSM.Core.Equivocation]
has_been_received_step_update [in VLSM.Core.Equivocation]
has_been_received_no_inits [in VLSM.Core.Equivocation]
has_been_sent_consistency_proper_not_sent [in VLSM.Core.Equivocation]
has_been_sent_consistency [in VLSM.Core.Equivocation]
has_been_sent_tracewise_props [in VLSM.Core.Equivocation]
has_been_sent_step_update [in VLSM.Core.Equivocation]
has_been_sent_no_inits [in VLSM.Core.Equivocation]
has_last_or_null [in VLSM.Lib.ListExtras]
history_unique_trace_to_reachable [in VLSM.Core.HistoryVLSM]
Hzero [in VLSM.Core.Equivocators.Equivocators]


I

idx_adr2idx [in VLSM.Examples.ELMO.BaseELMO]
immediate_substate_wf [in VLSM.Examples.ELMO.BaseELMO]
immediate_dependency_msg_dep_rel [in VLSM.Examples.ELMO.ELMO]
implies_AppendT_ttA [in VLSM.Lib.TraceProperties]
implies_ttA_AppendT [in VLSM.Lib.TraceProperties]
impl_proper [in VLSM.Lib.Preamble]
incl_equivocating_validators_equivocation_fault [in VLSM.Core.Equivocation]
incl_singleton [in VLSM.Lib.ListExtras]
incomparable_iff [in VLSM.Examples.ELMO.ELMO]
indexed_reachable_composite_state_to_trace [in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_last [in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_reflects_initiality_2 [in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_result_state_is_initial [in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_result_state [in VLSM.Core.TraceableVLSM]
indexed_composite_state_to_trace_reflects_initiality_1 [in VLSM.Core.TraceableVLSM]
induced_sub_element_projection_is_projection [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_transition_preservation [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_valid_preservation [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_friendliness [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_lift [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_constraint_subsumption_incl [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_transition_is_composite [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_valid_projection [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_is_projection [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_transition_consistency_Some [in VLSM.Core.SubProjectionTraces]
induced_sub_projection_transition_consistency_None [in VLSM.Core.SubProjectionTraces]
induced_validator_incl_preloaded_with_all_messages [in VLSM.Core.Validator]
induced_validator_trace_lift [in VLSM.Core.Validator]
induced_validator_transition_item_lift [in VLSM.Core.Validator]
induced_validator_valid_is_input_valid [in VLSM.Core.Validator]
InfinitelyOften_impl [in VLSM.Lib.StreamExtras]
InfinitelyOften_tl [in VLSM.Lib.StreamExtras]
InfiniteT_implies_AppendT [in VLSM.Lib.TraceProperties]
infiniteT_trace_append [in VLSM.Lib.TraceProperties]
infiniteT_cons [in VLSM.Lib.TraceProperties]
infiniteT_setoidT [in VLSM.Lib.TraceProperties]
infinite_valid_trace_from_segment [in VLSM.Core.VLSM]
infinite_valid_trace_from_EqSt [in VLSM.Core.VLSM]
infinite_valid_trace_from_prefix_rev [in VLSM.Core.VLSM]
infinite_valid_trace_from_prefix [in VLSM.Core.VLSM]
infinite_valid_trace_from_app_iff [in VLSM.Core.VLSM]
infinite_valid_trace_consecutive_valid_transition [in VLSM.Core.VLSM]
infinite_valid_trace_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
infinite_valid_trace_from_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
initial_state_is_not_equivocating_statewise [in VLSM.Core.Equivocation]
initial_message_is_valid [in VLSM.Core.VLSM]
initial_state_is_valid [in VLSM.Core.VLSM]
initial_state_witnessing_equivocation_prop [in VLSM.Core.Equivocation.WitnessedEquivocation]
initial_state_equivocators_weight [in VLSM.Core.Equivocation.TraceWiseEquivocation]
initial_state_not_is_equivocating_tracewise [in VLSM.Core.Equivocation.TraceWiseEquivocation]
input_valid_transition_preserves_msg_dep_is_globally_equivocating [in VLSM.Core.MessageDependencies]
input_valid_transition_received_not_resent [in VLSM.Core.Equivocation]
input_valid_transition_forget_input [in VLSM.Core.VLSM]
input_valid_transition_in_futures [in VLSM.Core.VLSM]
input_valid_transition_to [in VLSM.Core.VLSM]
input_valid_transition_deterministic [in VLSM.Core.VLSM]
input_valid_state_message_outputs [in VLSM.Core.VLSM]
input_valid_transition_transition [in VLSM.Core.VLSM]
input_valid_transition_is_valid [in VLSM.Core.VLSM]
input_valid_transition_out [in VLSM.Core.VLSM]
input_valid_transition_outputs_valid_state_message [in VLSM.Core.VLSM]
input_valid_transition_in [in VLSM.Core.VLSM]
input_valid_transition_destination [in VLSM.Core.VLSM]
input_valid_transition_origin [in VLSM.Core.VLSM]
input_valid_transition_iff [in VLSM.Core.VLSM]
input_valid_can_transition [in VLSM.Core.VLSM]
input_valid_transition_valid [in VLSM.Core.VLSM]
input_valid_transition_reflects_trace_witnessing_equivocation_prop [in VLSM.Core.Equivocation.WitnessedEquivocation]
input_valid_transition_project_any [in VLSM.Core.Composition]
input_valid_transition_preloaded_project_any [in VLSM.Core.Composition]
input_valid_transition_preloaded_project_any_free [in VLSM.Core.Composition]
input_valid_transition_project_active [in VLSM.Core.Composition]
input_valid_transition_preloaded_project_active [in VLSM.Core.Composition]
input_valid_transition_preloaded_project_active_free [in VLSM.Core.Composition]
input_valid_transition_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
input_valid_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
input_valid_transition_receiving_no_sender_reflects_equivocating_validators [in VLSM.Core.Equivocation.TraceWiseEquivocation]
input_valid_transition_deterministic_conv [in VLSM.Examples.ELMO.UMO]
input_constrained_transition_deterministic_conv [in VLSM.Examples.ELMO.UMO]
input_valid_transition_size [in VLSM.Examples.ELMO.UMO]
input_constrained_transition_size [in VLSM.Examples.ELMO.UMO]
input_constrained_transition_Receive [in VLSM.Examples.ELMO.UMO]
input_constrained_transition_Send [in VLSM.Examples.ELMO.UMO]
input_valid_transition_deterministic_conv [in VLSM.Examples.ELMO.MO]
input_valid_transition_size [in VLSM.Examples.ELMO.MO]
input_valid_transition_Send [in VLSM.Examples.ELMO.MO]
input_constrained_transition_deterministic_conv [in VLSM.Examples.ELMO.MO]
input_constrained_transition_size [in VLSM.Examples.ELMO.MO]
input_constrained_transition_Receive [in VLSM.Examples.ELMO.MO]
input_constrained_transition_Send [in VLSM.Examples.ELMO.MO]
intersection_size2 [in VLSM.Lib.FinSetExtras]
intersection_size1 [in VLSM.Lib.FinSetExtras]
invert_finiteT_delay [in VLSM.Lib.TraceProperties]
inv_acceptor_votes_safe [in VLSM.Examples.Paxos.Voting]
inv_max_bal_limits_votes [in VLSM.Examples.Paxos.Voting]
inv_acceptor_no_conflict [in VLSM.Examples.Paxos.Voting]
in_futures_preserves_strong_fixed_equivocation [in VLSM.Core.Equivocation.FixedSetEquivocation]
in_futures_preserves_can_emit_by_equivocators_composition_for_sent [in VLSM.Core.Equivocation.FixedSetEquivocation]
in_futures_preserves_sent_by_non_equivocating [in VLSM.Core.Equivocation.FixedSetEquivocation]
in_futures_preserving_oracle_from_stepwise [in VLSM.Core.Equivocation]
in_futures_witness_reverse [in VLSM.Core.VLSM]
in_futures_valid_snd [in VLSM.Core.VLSM]
in_futures_witness [in VLSM.Core.VLSM]
in_futures_refl [in VLSM.Core.VLSM]
in_futures_valid_fst [in VLSM.Core.VLSM]
in_futures_strict_preserving [in VLSM.Core.VLSM]
in_futures_preserving [in VLSM.Core.VLSM]
in_futures_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
in_futures_reflects_fixed_equivocation [in VLSM.Core.Equivocators.FixedEquivocation]
irrelevant_components [in VLSM.Core.Composition]
irrelevant_components_one [in VLSM.Core.Composition]
is_Some_proj_elim [in VLSM.Lib.StdppExtras]
Is_true_iff_eq_true [in VLSM.Lib.Preamble]
is_equivocating_statewise_implies_is_equivocating_tracewise [in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_equivocating_tracewise_no_has_been_sent_iff [in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_equivocating_tracewise_no_has_been_sent_equivocating_senders_in_trace [in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_singleton_state_dec [in VLSM.Core.Equivocators.Equivocators]
IterT_LastA_DupT [in VLSM.Lib.TraceProperties]
IterT_DupT [in VLSM.Lib.TraceProperties]
IterT_IterT [in VLSM.Lib.TraceProperties]
iterT_iterT [in VLSM.Lib.TraceProperties]
IterT_IterT_2 [in VLSM.Lib.TraceProperties]
iterT_iterT_2 [in VLSM.Lib.TraceProperties]
IterT_fold_L [in VLSM.Lib.TraceProperties]
IterT_unfold_2 [in VLSM.Lib.TraceProperties]
IterT_unfold_1 [in VLSM.Lib.TraceProperties]
iterT_unfold_1 [in VLSM.Lib.TraceProperties]
IterT_fold_0 [in VLSM.Lib.TraceProperties]
iterT_split_2 [in VLSM.Lib.TraceProperties]
IterT_unfold_0 [in VLSM.Lib.TraceProperties]
iterT_split_1 [in VLSM.Lib.TraceProperties]
IterT_cont [in VLSM.Lib.TraceProperties]
iterT_appendT_dupT [in VLSM.Lib.TraceProperties]
iterT_cont [in VLSM.Lib.TraceProperties]
iterT_setoidT [in VLSM.Lib.TraceProperties]


L

LastA_DupT [in VLSM.Lib.TraceProperties]
LastA_LastA [in VLSM.Lib.TraceProperties]
LastA_IterA [in VLSM.Lib.TraceProperties]
LastA_andA [in VLSM.Lib.TraceProperties]
LastA_AppendA [in VLSM.Lib.TraceProperties]
lastA_appendA [in VLSM.Lib.TraceProperties]
LastA_SingletonT_unfold [in VLSM.Lib.TraceProperties]
LastA_SingletonT_fold [in VLSM.Lib.TraceProperties]
LastA_cont [in VLSM.Lib.TraceProperties]
lastA_cont [in VLSM.Lib.TraceProperties]
lastdup_hd [in VLSM.Lib.TraceProperties]
lastn_length_cons [in VLSM.Lib.StdppExtras]
lastn_cons [in VLSM.Lib.ListExtras]
lastn_app_le [in VLSM.Lib.ListExtras]
lastn_ge [in VLSM.Lib.ListExtras]
lastn_0 [in VLSM.Lib.ListExtras]
lastn_nil [in VLSM.Lib.ListExtras]
last_vote_was_sent_paxos [in VLSM.Examples.Paxos.Paxos]
last_vote_was_sent [in VLSM.Examples.Paxos.Paxos]
last_error_destination_last [in VLSM.Core.VLSM]
last_last_error [in VLSM.Lib.StdppExtras]
last_error_is_last [in VLSM.Lib.ListExtras]
last_error_some [in VLSM.Lib.ListExtras]
last_map [in VLSM.Lib.ListExtras]
last_app [in VLSM.Lib.ListExtras]
last_not_null [in VLSM.Lib.ListExtras]
leaders_has_been_sent_props [in VLSM.Examples.Paxos.Paxos]
leaders_messages_iff [in VLSM.Examples.Paxos.Paxos]
leaders_messages_correct [in VLSM.Examples.Paxos.Paxos]
leader_gathered_1b_step [in VLSM.Examples.Paxos.Paxos]
leader_messages_correct [in VLSM.Examples.Paxos.Paxos]
leader_result_not_initial [in VLSM.Examples.Paxos.Paxos]
lefo_alt [in VLSM.Examples.ELMO.ELMO]
length_lastn [in VLSM.Lib.ListExtras]
len_set_diff_map_set_add [in VLSM.Lib.ListSetExtras]
len_set_diff_decrease [in VLSM.Lib.ListSetExtras]
len_set_diff_incl_le [in VLSM.Lib.ListSetExtras]
lift_leaders_stable_prop [in VLSM.Examples.Paxos.Paxos]
lift_acceptor_stable_prop [in VLSM.Examples.Paxos.Paxos]
lift_component_stable_prop [in VLSM.Examples.Paxos.Paxos]
lift_initial_to_equivocators_state [in VLSM.Core.Equivocators.EquivocatorsComposition]
lift_sub_preloaded_free_embedding [in VLSM.Core.SubProjectionTraces]
lift_sub_free_embedding [in VLSM.Core.SubProjectionTraces]
lift_sub_free_preloaded_with_embedding [in VLSM.Core.SubProjectionTraces]
lift_sub_incl_preloaded_embedding [in VLSM.Core.SubProjectionTraces]
lift_sub_incl_embedding [in VLSM.Core.SubProjectionTraces]
lift_sub_incl_transition [in VLSM.Core.SubProjectionTraces]
lift_sub_incl_valid [in VLSM.Core.SubProjectionTraces]
lift_sub_incl_message_initial [in VLSM.Core.SubProjectionTraces]
lift_sub_incl_state_initial [in VLSM.Core.SubProjectionTraces]
lift_sub_to_transition [in VLSM.Core.SubProjectionTraces]
lift_sub_to_valid [in VLSM.Core.SubProjectionTraces]
lift_sub_transition [in VLSM.Core.SubProjectionTraces]
lift_sub_valid [in VLSM.Core.SubProjectionTraces]
lift_sub_message_initial [in VLSM.Core.SubProjectionTraces]
lift_sub_state_to_initial [in VLSM.Core.SubProjectionTraces]
lift_sub_state_initial [in VLSM.Core.SubProjectionTraces]
lift_sub_state_to_neq_state_update [in VLSM.Core.SubProjectionTraces]
lift_sub_state_to_neq [in VLSM.Core.SubProjectionTraces]
lift_sub_state_to_eq [in VLSM.Core.SubProjectionTraces]
lift_fixed_byzantine_traces_to_limited [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
lift_preloaded_fixed_non_byzantine_valid_transition_to_limited [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
lift_fixed_non_equivocating [in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_strong_fixed_non_equivocating [in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_sub_state_to_sent_are_directly_observed [in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_sub_state_to_strong_fixed_equivocation [in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_sub_state_to_sent_by_non_equivocating_iff [in VLSM.Core.Equivocation.FixedSetEquivocation]
lift_generated_to_seeded [in VLSM.Core.Equivocation]
lift_preloaded_state_to_seeded [in VLSM.Core.Equivocation]
lift_preloaded_trace_to_seeded [in VLSM.Core.Equivocation]
lift_receive_trace [in VLSM.Examples.ELMO.ELMO]
lift_equivocators_sub_weak_projection [in VLSM.Core.Equivocators.FullReplayTraces]
lift_initial_message [in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_transition [in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_valid [in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_state_to_size [in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_state_to_sub [in VLSM.Core.Equivocators.FullReplayTraces]
lift_to_preloaded_free_weak_embedding [in VLSM.Core.Composition]
lift_to_free_weak_embedding [in VLSM.Core.Composition]
lift_to_composite_initial_message_preservation [in VLSM.Core.Composition]
lift_to_composite_transition_preservation [in VLSM.Core.Composition]
lift_to_composite_valid_preservation [in VLSM.Core.Composition]
lift_to_composite_preloaded_VLSM_embedding [in VLSM.Core.Composition]
lift_to_composite_generalized_preloaded_VLSM_embedding [in VLSM.Core.Composition]
lift_to_composite_VLSM_embedding [in VLSM.Core.Composition]
lift_to_UMO_constrained_state_prop [in VLSM.Examples.ELMO.UMO]
lift_to_UMO_finite_constrained_trace_from_to [in VLSM.Examples.ELMO.UMO]
lift_to_UMO_finite_valid_trace_from_to [in VLSM.Examples.ELMO.UMO]
lift_to_UMO_input_valid_transition [in VLSM.Examples.ELMO.UMO]
lift_to_UMO_valid_message_prop [in VLSM.Examples.ELMO.UMO]
lift_to_UMO_valid_state_prop [in VLSM.Examples.ELMO.UMO]
lift_to_UMO [in VLSM.Examples.ELMO.UMO]
LimitedEquivocationProp_impl_not_heavy [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_equivocators_vlsm_projection [in VLSM.Core.Equivocators.LimitedStateEquivocation]
limited_equivocators_vlsm_partial_projection [in VLSM.Core.Equivocators.LimitedStateEquivocation]
limited_equivocators_valid_trace_project [in VLSM.Core.Equivocators.LimitedStateEquivocation]
limited_PreNonByzantine_vlsm_lift [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
limited_PreNonByzantine_lift_valid [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
limited_PreNonByzantine_valid_state_lift_not_heavy [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
limited_valid_state_has_trace_exhibiting_limited_equivocation [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_traces_exhibiting_limited_equivocation_are_valid_rev [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_equivocation_valid_state [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_equivocators_valid_state_rev [in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
limited_equivocators_finite_valid_trace_init_to_rev [in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
list_subseteq_inv_app [in VLSM.Lib.StdppExtras]
list_max_elem_of_exists2 [in VLSM.Lib.StdppExtras]
list_max_elem_of_exists [in VLSM.Lib.StdppExtras]
list_subseteq_filter [in VLSM.Lib.StdppExtras]
list_difference_singleton_length_in [in VLSM.Lib.StdppExtras]
list_difference_singleton_not_in [in VLSM.Lib.StdppExtras]
list_lookup_lt [in VLSM.Lib.StdppExtras]
list_compare_transitive [in VLSM.Lib.Preamble]
list_compare_reflexive [in VLSM.Lib.Preamble]
list_to_set_size [in VLSM.Lib.FinSetExtras]
list_filter_map_mbind [in VLSM.Lib.NeList]
list_to_option_ne_list_unroll [in VLSM.Lib.NeList]
list_subseteq_tran [in VLSM.Lib.ListExtras]
list_sum_decrease [in VLSM.Lib.ListExtras]
list_sum_map [in VLSM.Lib.ListExtras]
list_max_exists [in VLSM.Lib.ListExtras]
list_segment_singleton [in VLSM.Lib.ListExtras]
list_segment_app [in VLSM.Lib.ListExtras]
list_segment_nth [in VLSM.Lib.ListExtras]
list_filter_map_app [in VLSM.Lib.ListExtras]
list_annotate_forget [in VLSM.Lib.ListExtras]
list_annotate_NoDup [in VLSM.Lib.ListExtras]
list_annotate_app [in VLSM.Lib.ListExtras]
list_annotate_eq [in VLSM.Lib.ListExtras]
list_annotate_pi [in VLSM.Lib.ListExtras]
list_annotate_length [in VLSM.Lib.ListExtras]
localize_sent_messages [in VLSM.Examples.Paxos.Paxos]
localize_send [in VLSM.Examples.Paxos.Paxos]
LocallySorted_elem_of_lt [in VLSM.Lib.SortedLists]
LocallySorted_tl [in VLSM.Lib.SortedLists]
LocallySorted_filter [in VLSM.Lib.SortedLists]
LocallySorted_ForAll2 [in VLSM.Lib.SortedLists]
local_equivocators_full_step_update [in VLSM.Examples.ELMO.ELMO]
local_equivocators_iff_full [in VLSM.Examples.ELMO.ELMO]
local_equivocators_iff_simple [in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_iff_full [in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_prev [in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_add_Receive [in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_increase_only_received_adr [in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_nondecreasing [in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_no_self [in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_add_Send [in VLSM.Examples.ELMO.ELMO]
local_equivocators_simple_addObservation [in VLSM.Examples.ELMO.ELMO]
longer_subseteq_has_dups [in VLSM.Lib.StdppExtras]
lsorted_pair_wise_unordered [in VLSM.Lib.SortedLists]
lsorted_pairwise_ordered [in VLSM.Lib.SortedLists]
lsorted_app [in VLSM.Lib.SortedLists]


M

map_set_eq [in VLSM.Lib.ListSetExtras]
map_list_subseteq [in VLSM.Lib.ListSetExtras]
map_tail [in VLSM.Lib.StdppExtras]
map_list_subseteq [in VLSM.Lib.ListExtras]
maximal_element_in [in VLSM.Lib.TopSort]
maxVBal_mono [in VLSM.Examples.Paxos.Paxos]
maxVBal_le_paxos_maxBal [in VLSM.Examples.Paxos.Paxos]
max_suffix_residual_prefix [in VLSM.Lib.ListExtras]
max_suffix_is_longest [in VLSM.Lib.ListExtras]
max_suffix_is_suffix [in VLSM.Lib.ListExtras]
max_suffix_comm_let [in VLSM.Lib.ListExtras]
max_suffix_spec [in VLSM.Lib.ListExtras]
max_suffix_last_inv [in VLSM.Lib.ListExtras]
max_suffix_last [in VLSM.Lib.ListExtras]
max_suffix_app_let [in VLSM.Lib.ListExtras]
max_suffix_diag [in VLSM.Lib.ListExtras]
max_prefix_residual_suffix [in VLSM.Lib.ListExtras]
max_prefix_is_longest [in VLSM.Lib.ListExtras]
max_prefix_idem [in VLSM.Lib.ListExtras]
max_prefix_comm_let [in VLSM.Lib.ListExtras]
max_prefix_comm [in VLSM.Lib.ListExtras]
max_prefix_spec [in VLSM.Lib.ListExtras]
max_prefix_head_inv [in VLSM.Lib.ListExtras]
max_prefix_app_let [in VLSM.Lib.ListExtras]
max_prefix_app [in VLSM.Lib.ListExtras]
max_prefix_head [in VLSM.Lib.ListExtras]
max_prefix_diag [in VLSM.Lib.ListExtras]
max_prefix_nil_r [in VLSM.Lib.ListExtras]
max_prefix_nil_l [in VLSM.Lib.ListExtras]
mbind_nils [in VLSM.Lib.StdppExtras]
mbind_app [in VLSM.Lib.StdppExtras]
MC_safety_initial [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_safety [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_round_bound [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_progress [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_undecided_to_muddy_increase_round [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_undecided_increase_round [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_muddy_increase_round [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_muddy_to_clean_increase_round [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_undecided_muddy_to_muddy_increase_round [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_noequiv_valid [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_valid_message [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_clean_muddy_trace_valid [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_clean_muddy_trace_last_helper [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_clean_muddy_trace_last_target [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_muddy_muddy_trace_valid [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_message_from_valid_state [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_muddy_muddy_trace_last_helper [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_muddy_muddy_trace_last_target [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_noninitial_state_undecided_round_less_obs [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_noequiv_muddy [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_preservation_inductive [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_preservation [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_helper_from_constraint [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_preservation_muddy_from_clean [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_preservation_muddy_from_undecided [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_equiv_MC_component_invariant_inductive [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_undecided_round_lt_obs_minus_one [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_undecided_round_obs [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_undecided_round_obs_minus_one [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_muddy_round_obs_minus_one [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_muddy_round_obs [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_clean_round_obs_plus_one [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_undecided_receive_clean_round_obs [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_number_of_muddy_seen [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_clean_number_of_muddy_seen_iff [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_clean_number_of_muddy_seen [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_muddy_number_of_muddy_seen_iff [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_muddy_number_of_muddy_seen [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_non_initial_valid_consistent [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_in_futures_preserves_consistency [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_in_futures_preserves_muddy [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_in_futures_preserves_obs_equiv [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_trans_preserves_obs_equiv [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_preserves_consistency [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_preserves_muddy [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_state_update_preserves_obs_equiv [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive_equiv [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
messages_sizeState [in VLSM.Examples.ELMO.BaseELMO]
messages_addObservation [in VLSM.Examples.ELMO.BaseELMO]
messages_received_from_component_of_valid_state_are_valid [in VLSM.Core.Equivocation]
messages_sent_from_component_of_valid_state_are_valid [in VLSM.Core.Equivocation]
messages_sent_from_component_produced_previously [in VLSM.Core.Equivocation]
messages_hb_transitive [in VLSM.Examples.ELMO.ELMO]
messages_with_valid_dependences_can_be_emitted [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
messages_rec_obs [in VLSM.Examples.ELMO.MO]
Message_sender_index_address [in VLSM.Examples.ELMO.BaseELMO]
Message_sender_index_inv [in VLSM.Examples.ELMO.BaseELMO]
Message_sender_Some_adr_iff [in VLSM.Examples.ELMO.BaseELMO]
Message_sender_Some_adr [in VLSM.Examples.ELMO.BaseELMO]
Message_full_dependencies_sizeState [in VLSM.Examples.ELMO.BaseELMO]
Message_eq_dec [in VLSM.Examples.ELMO.BaseELMO]
message_equivocators_can_emit [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
message_suffix_directly_observable [in VLSM.Examples.ELMO.UMO]
midpointT_after [in VLSM.Lib.TraceProperties]
midpointT_before [in VLSM.Lib.TraceProperties]
midpointT_midp [in VLSM.Lib.TraceClassicalProperties]
minimal_equivocation_choice_monotone [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
minimal_equivocation_choice_is_choosing_well [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
minimal_among_le_0 [in VLSM.Lib.Preamble]
min_predecessors_zero [in VLSM.Lib.TopSort]
min_predecessors_correct [in VLSM.Lib.TopSort]
min_predecessors_in [in VLSM.Lib.TopSort]
mjoin_app [in VLSM.Lib.StdppExtras]
mk_vlsm_machine [in VLSM.Core.VLSM]
mk_singleton_initial_state [in VLSM.Core.Equivocators.Equivocators]
mode_not_empty [in VLSM.Lib.StdppExtras]
monotone_nat_stream_tl [in VLSM.Lib.StreamExtras]
monotone_nat_stream_find [in VLSM.Lib.StreamExtras]
monotone_nat_stream_rev [in VLSM.Lib.StreamExtras]
monotone_nat_stream_prop_from_successor [in VLSM.Lib.StreamExtras]
MO_component_validating [in VLSM.Examples.ELMO.MO]
MO_msg_valid_free [in VLSM.Examples.ELMO.MO]
MO_channel_authentication_prop [in VLSM.Examples.ELMO.MO]
MO_reachable_adr [in VLSM.Examples.ELMO.MO]
MO_reachable_view [in VLSM.Examples.ELMO.MO]
MO_component_valid_transition_size [in VLSM.Examples.ELMO.MO]
MO_msg_valid__MO_msg_valid_alt [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Send_inv [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Receive_conv [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_Receive_conv [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_Receive_conv [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Receive [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_Receive [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_Receive [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Send_conv [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_Send_conv [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_Send_conv [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_Send [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_Send [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_Send [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_shorten [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_shorten [in VLSM.Examples.ELMO.MO]
MO_msg_valid_dep [in VLSM.Examples.ELMO.MO]
MO_msg_valid_P_adr [in VLSM.Examples.ELMO.MO]
msg_dep_happens_before_wf [in VLSM.Core.MessageDependencies]
msg_dep_rel_full_message_dependecies_subset [in VLSM.Core.MessageDependencies]
msg_dep_reflects_sub_free_validity [in VLSM.Core.MessageDependencies]
msg_dep_locally_is_globally_equivocating [in VLSM.Core.MessageDependencies]
msg_dep_happens_before_composite_no_initial_valid_messages_emitted_by_sender [in VLSM.Core.MessageDependencies]
msg_dep_reflects_happens_before_free_validity [in VLSM.Core.MessageDependencies]
msg_dep_reflects_free_validity [in VLSM.Core.MessageDependencies]
msg_dep_full_node_input_valid_happens_before_has_been_directly_observed [in VLSM.Core.MessageDependencies]
msg_dep_full_node_happens_before_reflects_has_been_directly_observed [in VLSM.Core.MessageDependencies]
msg_dep_full_node_reflects_has_been_directly_observed [in VLSM.Core.MessageDependencies]
msg_dep_has_been_sent [in VLSM.Core.MessageDependencies]
msg_dep_reflects_validity [in VLSM.Core.MessageDependencies]
msg_dep_happens_before_reflect [in VLSM.Core.MessageDependencies]
msg_dep_happens_before_iff_one [in VLSM.Core.MessageDependencies]
msg_dep_reflects_free_valid_message [in VLSM.Core.Validators.FreeCompositionValidator]
msg_dep_validator_limited_non_equivocating_byzantine_traces_are_limited_non_equivocating [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
msg_dep_limited_fixed_equivocation [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_fixed_limited_equivocation [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_fixed_limited_equivocation_witnessed [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_full_node_limited_equivocation_vlsm_incl [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_full_node_transition_iff [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_full_node_valid_iff [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_annotate_trace_with_equivocators_project [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_annotate_trace_with_equivocators_last_original_state [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_annotate_trace_with_equivocators_app [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_full_node_fixed_set_equivocation_constraint_subsumption [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_strong_fixed_equivocation_eq [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_strong_fixed_equivocation_incl [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_rel_reflects_strong_fixed_equivocation [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_strong_fixed_equivocation_constraint_subsumption [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_strong_fixed_equivocation_subsumption [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_rel_reflects_dependencies_with_non_equivocating_senders_were_sent [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
MuddyUnion_elem [in VLSM.Examples.Tutorial.MuddyChildrenRounds]


N

NatFSFun_complete [in VLSM.Lib.FinSuppFn]
nat_fsfun_ind [in VLSM.Lib.FinSuppFn]
nat_fsfun_inv [in VLSM.Lib.FinSuppFn]
nat_sequence_from_prefix_sorted [in VLSM.Lib.StreamExtras]
nat_sequence_from_sorted [in VLSM.Lib.StreamExtras]
nat_sequence_nth [in VLSM.Lib.StreamExtras]
nat_sequence_from_nth [in VLSM.Lib.StreamExtras]
NeList_to_ne_list_to_NeList [in VLSM.Lib.NeList]
NeList_to_ne_list_to_list [in VLSM.Lib.NeList]
NeList_to_ne_list_unroll [in VLSM.Lib.NeList]
newmachine_descriptor_dec [in VLSM.Core.Equivocators.Equivocators]
new_machine_label_equivocator_state_project_not_last [in VLSM.Core.Equivocators.Equivocators]
new_machine_label_equivocator_state_project_last [in VLSM.Core.Equivocators.Equivocators]
new_machine_label_equivocator_transition_size [in VLSM.Core.Equivocators.Equivocators]
ne_list_to_NonEmptyList_to_ne_list [in VLSM.Lib.NeList]
ne_list_concat_min_length [in VLSM.Lib.NeList]
ne_list_to_NeList_to_ne_list [in VLSM.Lib.NeList]
ne_list_to_list_to_nelist [in VLSM.Lib.NeList]
ne_list_to_list_unroll [in VLSM.Lib.NeList]
ne_list_min_length [in VLSM.Lib.NeList]
nil_singletonT [in VLSM.Lib.TraceProperties]
node_generated_without_further_equivocation_weaken [in VLSM.Core.Equivocation.FullNode]
NoDup_elem_of_remove [in VLSM.Lib.StdppExtras]
NoDup_subseteq_length [in VLSM.Lib.ListExtras]
nodup_append_left [in VLSM.Lib.ListExtras]
NoDup_omap [in VLSM.Lib.ListExtras]
NonEmptyList_to_ne_list_to_NonEmptyList [in VLSM.Lib.NeList]
non_empty_valid_trace_from_can_produce [in VLSM.Core.VLSM]
non_equivocating_received_message_continues_trace [in VLSM.Examples.ELMO.ELMO]
non_initial_state_has_init_tr [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
non_byzantine_components_same_sym [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
non_byzantine_components_same [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
notT_setoidT [in VLSM.Lib.TraceProperties]
not_equivocating_equivocator_descriptors_proper [in VLSM.Core.Equivocators.EquivocatorsComposition]
not_elem_of_fin_supp [in VLSM.Lib.FinSuppFn]
not_finiteT_infiniteT [in VLSM.Lib.TraceProperties]
not_adr_received [in VLSM.Examples.ELMO.ELMO]
not_CompositeNthSentNotObserved_is_observed [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
not_CompositeNthNotSend_is_sent [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
not_heavy_impl_LimitedEquivocationProp [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
not_bounding_impl_liveness [in VLSM.Lib.Preamble]
not_infiniteT_finiteT [in VLSM.Lib.TraceClassicalProperties]
not_composite_valid_transition_next_initial [in VLSM.Core.HistoryVLSM]
not_equivocating_sent_message_has_been_directly_observed_in_projection [in VLSM.Core.Equivocators.FixedEquivocation]
not_equivocating_equivocator_descriptors_proper_fixed [in VLSM.Core.Equivocators.FixedEquivocation]
not_equivocating_index_has_singleton_state [in VLSM.Core.Equivocators.FixedEquivocation]
not_prime_divide_prime [in VLSM.Lib.NatExtras]
not_Exists_ForAll [in VLSM.Lib.StreamExtras]
not_ForAll [in VLSM.Lib.StreamExtras]
not_Exists [in VLSM.Lib.StreamExtras]
no_additional_equivocations_constraint_dec [in VLSM.Core.Equivocation]
no_additional_equivocations_dec [in VLSM.Core.Equivocation]
no_equivocation_in_empty_trace [in VLSM.Core.Equivocation]
no_equivocating_equivocators_transition_item_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
no_equivocations_preloaded_traces [in VLSM.Core.Equivocation.NoEquivocation]
no_equivocating_equivocator_transition_item_project [in VLSM.Core.Equivocators.EquivocatorsProjections]
no_input_no_equivocating_senders_in_trace [in VLSM.Core.Equivocation.TraceWiseEquivocation]
no_equivocating_equivocators_finite_valid_trace_init_to_rev [in VLSM.Core.Equivocators.FixedEquivocationSimulation]
no_initial_messages_in_sub_IM [in VLSM.Core.Equivocators.FixedEquivocationSimulation]
nth_error_filter [in VLSM.Lib.StdppExtras]
nth_error_stdpp_last [in VLSM.Lib.StdppExtras]
nth_error_eq [in VLSM.Lib.ListExtras]
nth_error_map [in VLSM.Lib.ListExtras]
nth_error_length [in VLSM.Lib.ListExtras]
nth_error_filter_index_le [in VLSM.Lib.ListExtras]
nth_error_list_annotate [in VLSM.Lib.ListExtras]
nth_error_last [in VLSM.Lib.ListExtras]


O

Observation_eq_dec [in VLSM.Examples.ELMO.BaseELMO]
observed_before_send_subsumes_msg_dep_rel [in VLSM.Core.MessageDependencies]
obs_sizeState [in VLSM.Examples.ELMO.BaseELMO]
obs_rec_obs [in VLSM.Examples.ELMO.MO]
occurrences_ordering [in VLSM.Lib.StdppExtras]
omap_subseteq [in VLSM.Lib.StdppExtras]
omap_Forall [in VLSM.Lib.ListExtras]
omap_as_filter [in VLSM.Lib.ListExtras]
omap_nth [in VLSM.Lib.ListExtras]
omap_length [in VLSM.Lib.ListExtras]
omap_app_rev [in VLSM.Lib.ListExtras]
option_can_produce_valid_iff [in VLSM.Core.VLSM]
option_can_produce_valid [in VLSM.Core.VLSM]
option_initial_message_is_valid [in VLSM.Core.VLSM]
option_valid_message_Some [in VLSM.Core.VLSM]
option_valid_message_None [in VLSM.Core.VLSM]
option_compare_transitive [in VLSM.Lib.Preamble]
option_compare_reflexive [in VLSM.Lib.Preamble]
option_can_produce_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
option_valid_message_prop_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
option_initial_message_prop_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
option_valid_message_prop_from_constrained_equiv [in VLSM.Core.PreloadedVLSM]
option_valid_message_prop_from_constrained_right_impl [in VLSM.Core.PreloadedVLSM]
option_valid_message_prop_from_constrained_left_impl [in VLSM.Core.PreloadedVLSM]
oracle_component_selected_previously [in VLSM.Core.Equivocation]
oracle_step_property_from_trace [in VLSM.Core.Equivocation]
oracle_no_inits_from_trace [in VLSM.Core.Equivocation]
oracle_trace_props_from_stepwise [in VLSM.Core.Equivocation]
oracle_stepwise_props_change_selector [in VLSM.Core.Equivocation]
oracle_initial_trace_update [in VLSM.Core.Equivocation]
oracle_partial_trace_update [in VLSM.Core.Equivocation]
order_decompositions [in VLSM.Lib.ListExtras]
OrT_right [in VLSM.Lib.TraceProperties]
OrT_left [in VLSM.Lib.TraceProperties]
orT_setoidT [in VLSM.Lib.TraceProperties]


P

pair_compare_transitive [in VLSM.Lib.Preamble]
pair_compare_lt [in VLSM.Lib.Preamble]
pair_compare_reflexive [in VLSM.Lib.Preamble]
parity_composite_23_reachable_00 [in VLSM.Examples.Tutorial.Multiply]
parity_composition_23_reachable_0 [in VLSM.Examples.Tutorial.Multiply]
parity_23_final_state_prop23_equiv [in VLSM.Examples.Tutorial.Multiply]
parity_23_final_state_prop23_right [in VLSM.Examples.Tutorial.Multiply]
parity_23_final_state_prop23_left [in VLSM.Examples.Tutorial.Multiply]
parity_composition_23_valid_messages_powers_of_23 [in VLSM.Examples.Tutorial.Multiply]
parity_composition_23_valid_messages_powers_of_23_left [in VLSM.Examples.Tutorial.Multiply]
parity_composition_23_valid_messages_powers_of_23_right [in VLSM.Examples.Tutorial.Multiply]
parity_constraint_23_even [in VLSM.Examples.Tutorial.Multiply]
past_vote_info_is_invariant [in VLSM.Examples.Paxos.Paxos]
paxos_invariants [in VLSM.Examples.Paxos.Paxos]
paxos_votes_good [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_sent_bounds_maxBal [in VLSM.Examples.Paxos.Paxos]
paxos_maxBal_mono [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_has_been_sent_stepwise_props [in VLSM.Examples.Paxos.Paxos]
pivotal_validator_extension [in VLSM.Core.ReachableThreshold]
pivotal_validator_extension_list [in VLSM.Core.ReachableThreshold]
plan_independence [in VLSM.Core.Plans]
precedes_closed_set_eq [in VLSM.Lib.TopSort]
precedes_transitive [in VLSM.Lib.TopSort]
precedes_asymmetric [in VLSM.Lib.TopSort]
precedes_irreflexive [in VLSM.Lib.TopSort]
prefix_of_take [in VLSM.Lib.ListExtras]
PreFreeE_Free_vlsm_projection_type [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
PreFreeE_PreFree_vlsm_partial_projection [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
PreFreeSubE_PreFreeE_weak_embedding [in VLSM.Core.Equivocators.FullReplayTraces]
preloaded_equivocators_limited_equivocations_vlsm_incl_free [in VLSM.Core.Equivocators.LimitedStateEquivocation]
preloaded_equivocators_no_equivocations_vlsm_incl_PreFree [in VLSM.Core.Equivocators.EquivocatorsComposition]
preloaded_sub_composite_input_valid_projection [in VLSM.Core.SubProjectionTraces]
preloaded_sub_element_embedding [in VLSM.Core.SubProjectionTraces]
preloaded_sub_composition_all_embedding [in VLSM.Core.SubProjectionTraces]
preloaded_lift_sub_state_to_initial_state [in VLSM.Core.SubProjectionTraces]
preloaded_equivocator_vlsm_trace_project_valid_item [in VLSM.Core.Equivocators.MessageProperties]
preloaded_equivocator_vlsm_trace_project_valid_item_new_machine [in VLSM.Core.Equivocators.MessageProperties]
preloaded_Fixed_incl_Preloaded [in VLSM.Core.Equivocation.FixedSetEquivocation]
preloaded_free_composite_directly_observed_valid [in VLSM.Core.Equivocation]
preloaded_composite_received_valid [in VLSM.Core.Equivocation]
preloaded_composite_sent_valid [in VLSM.Core.Equivocation]
preloaded_messages_received_from_component_of_valid_state_are_valid_free [in VLSM.Core.Equivocation]
preloaded_messages_sent_from_component_of_valid_state_are_valid_free [in VLSM.Core.Equivocation]
preloaded_sent_can_emit [in VLSM.Core.Equivocation]
preloaded_has_been_received_stepwise_props [in VLSM.Core.Equivocation]
preloaded_has_been_sent_stepwise_props [in VLSM.Core.Equivocation]
preloaded_equivocators_no_equivocations_vlsm_X_vlsm_projection [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
preloaded_equivocators_valid_trace_project_proper_initial [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
preloaded_equivocators_valid_trace_project_inv [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
preloaded_equivocators_valid_trace_from_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
preloaded_with_all_messages_alt_eq [in VLSM.Core.ByzantineTraces]
preloaded_with_all_messages_alt_incl [in VLSM.Core.ByzantineTraces]
preloaded_alt_valid_state [in VLSM.Core.ByzantineTraces]
preloaded_has_strong_trace_witnessing_equivocation_prop [in VLSM.Core.Equivocation.WitnessedEquivocation]
preloaded_annotated_composite_preloaded_projection [in VLSM.Core.AnnotatedVLSM]
preloaded_with_all_empty_composition_no_emit [in VLSM.Core.Composition]
preloaded_empty_free_composition_no_emit [in VLSM.Core.Composition]
preloaded_empty_composition_no_emit [in VLSM.Core.Composition]
preloaded_with_all_messages_free_composite_vlsm_spec [in VLSM.Core.Composition]
preloaded_free_composite_vlsm_spec [in VLSM.Core.Composition]
preloaded_eq_no_equivocations [in VLSM.Core.Equivocation.NoEquivocation]
preloaded_incl_no_equivocations [in VLSM.Core.Equivocation.NoEquivocation]
preloaded_equivocator_zero_projection [in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_equivocator_vlsm_valid_trace_project_inv2 [in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_equivocator_vlsm_trace_project_valid_inv [in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_equivocator_vlsm_trace_project_valid [in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_with_equivocator_vlsm_trace_project_valid [in VLSM.Core.Equivocators.EquivocatorsProjections]
preloaded_constraint_subsumption_stronger [in VLSM.Core.ConstrainedVLSM]
preloaded_constraint_subsumption_incl_free [in VLSM.Core.ConstrainedVLSM]
preloaded_constraint_subsumption_incl [in VLSM.Core.ConstrainedVLSM]
preloaded_constraint_subsumption_input_valid [in VLSM.Core.ConstrainedVLSM]
preloaded_non_byzantine_vlsm_lift [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_incl [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_vlsm_lift [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_vlsm_lift_initial_message [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_vlsm_lift_valid [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_VLSM_embedding' [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_VLSM_embedding [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_equivocators_composition_sub_projection_commute_inv [in VLSM.Core.Equivocators.FixedEquivocation]
preloaded_equivocators_composition_sub_projection_commute [in VLSM.Core.Equivocators.FixedEquivocation]
preloaded_equivocators_fixed_equivocations_vlsm_incl_free [in VLSM.Core.Equivocators.FixedEquivocation]
preloaded_with_all_messages_eq_validating_preloaded_vlsm [in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_idem [in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_with_valid_eq [in VLSM.Core.PreloadedVLSM]
preloaded_weaken_finite_valid_trace_from_to [in VLSM.Core.PreloadedVLSM]
preloaded_weaken_finite_valid_trace_from [in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_can_emit [in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_incl_preloaded_with_all_messages [in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_idem_r [in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_idem_l [in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_incl [in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_incl_relaxed [in VLSM.Core.PreloadedVLSM]
preloaded_weaken_valid_trace_from [in VLSM.Core.PreloadedVLSM]
preloaded_weaken_input_valid_transition [in VLSM.Core.PreloadedVLSM]
preloaded_weaken_valid_state_message_prop [in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_valid_state_prop [in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_valid_state_message_preservation [in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_message_valid_initial_state_message [in VLSM.Core.PreloadedVLSM]
preloaded_equivocator_state_project_valid_state [in VLSM.Core.Equivocators.Equivocators]
preloaded_with_equivocator_state_project_valid_message [in VLSM.Core.Equivocators.Equivocators]
preloaded_with_equivocator_state_project_valid_state [in VLSM.Core.Equivocators.Equivocators]
preloaded_equivocator_state_projection_preserves_validity [in VLSM.Core.Equivocators.Equivocators]
preloaded_with_all_messages_validator_component_proj_eq [in VLSM.Core.ProjectionTraces]
preloaded_with_all_messages_projection_input_valid_transition_neq [in VLSM.Core.ProjectionTraces]
preloaded_with_all_messages_projection_input_valid_transition_eq [in VLSM.Core.ProjectionTraces]
preloaded_finite_valid_trace_init_to_projection [in VLSM.Core.ProjectionTraces]
preloaded_finite_valid_trace_from_to_projection [in VLSM.Core.ProjectionTraces]
preloaded_finite_valid_trace_projection [in VLSM.Core.ProjectionTraces]
preloaded_valid_state_projection [in VLSM.Core.ProjectionTraces]
preloaded_component_projection [in VLSM.Core.ProjectionTraces]
preloaded_with_all_messages_self_validator_vlsm_eq [in VLSM.Core.Validator]
preloaded_with_all_messages_self_validator_vlsm_incl [in VLSM.Core.Validator]
preloaded_composite_vlsm_induced_projection_validator_iff [in VLSM.Core.Validator]
preloaded_with_all_messages_validator_proj_eq [in VLSM.Core.Validator]
preloaded_with_all_messages_validator_proj_incl [in VLSM.Core.Validator]
PreSeededXE_incl_PreFreeE [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
PreSubFree_PreFree_weak_embedding [in VLSM.Core.SubProjectionTraces]
prev_vote_committed [in VLSM.Examples.Paxos.Voting]
prev_votes [in VLSM.Examples.Paxos.Voting]
pre_VLSM_embedding_finite_trace_project_trans [in VLSM.Core.VLSMProjections]
pre_VLSM_projection_finite_trace_project_trans [in VLSM.Core.VLSMProjections]
pre_equivocators_valid_trace_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
pre_VLSM_embedding_finite_trace_last_output [in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_finite_trace_last [in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_infinite_trace_project_EqSt [in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_infinite_trace_project_infinitely_often [in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_projection_finite_trace_project_elem_of [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_finite_trace_project_elem_of_iff [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_finite_trace_project_app_rev [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_finite_trace_project_app [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project_finitely_many [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project_infinitely_often [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project_is_Some_rev [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project_is_Some [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_free_lift_to_free_weak_embedding [in VLSM.Core.Composition]
pre_lift_to_free_weak_embedding [in VLSM.Core.Composition]
pre_composite_free_update_state_with_initial [in VLSM.Core.Composition]
pre_VLSM_stuttering_embedding_finite_trace_last [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_VLSM_stuttering_embedding_finite_trace_project_app [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_traces_with_valid_inputs_are_valid [in VLSM.Core.PreloadedVLSM]
pre_trace_segments_with_valid_inputs_are_valid [in VLSM.Core.PreloadedVLSM]
pre_composite_vlsm_induced_projection_validator_iff [in VLSM.Core.Validator]
primes_vlsm_composition_valid_message_char [in VLSM.Examples.Tutorial.PrimesComposition]
primes_factorization [in VLSM.Lib.NatExtras]
prod_powers_add [in VLSM.Lib.NatExtras]
prod_powers_elem_of_dom [in VLSM.Lib.NatExtras]
prod_powers_gt [in VLSM.Lib.NatExtras]
prod_powers_delta [in VLSM.Lib.NatExtras]
prod_powers_aux_gt [in VLSM.Lib.NatExtras]
prod_powers_aux_ge_1 [in VLSM.Lib.NatExtras]
prod_powers_aux_ext_forall [in VLSM.Lib.NatExtras]
progress_Exists_neq [in VLSM.Lib.StreamExtras]
projection_friendly_trace_char [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
projection_friendly_in_futures [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
projection_has_not_been_directly_observed_is_equivocating [in VLSM.Core.Equivocators.FixedEquivocation]
projection_friendliness_lift_to_composite_VLSM_embedding [in VLSM.Core.ProjectionTraces]
projection_friendliness_sufficient_condition_valid_state [in VLSM.Core.ProjectionTraces]
projection_valid_implies_destination_projection_valid_message [in VLSM.Core.ProjectionTraces]
projection_valid_implies_destination_projection_valid_state [in VLSM.Core.ProjectionTraces]
projection_valid_implies_projection_valid_state_message_outputs [in VLSM.Core.ProjectionTraces]
projection_valid_implies_projection_valid_state [in VLSM.Core.ProjectionTraces]
projection_valid_implies_composition_valid_message [in VLSM.Core.ProjectionTraces]
projection_valid_input_valid [in VLSM.Core.ProjectionTraces]
projection_valid_implies_valid [in VLSM.Core.Validator]
projection_validator_prop_alt_iff [in VLSM.Core.Validator]
projection_induced_valid_transition_eq [in VLSM.Core.Validator]
projection_induced_validator_eq [in VLSM.Core.Validator]
projection_induced_validator_incl [in VLSM.Core.Validator]
projection_induced_validator_is_projection [in VLSM.Core.Validator]
projection_induced_valid_message_char [in VLSM.Core.Validator]
projection_induced_validator_is_validating [in VLSM.Core.Validator]
projection_validator_messages_transitions [in VLSM.Core.Validator]
projection_validator_is_message_validator [in VLSM.Core.Validator]
proj_preloaded_with_all_messages_incl [in VLSM.Core.ProjectionTraces]
proj_preloaded_with_all_messages_valid_state_message_preservation [in VLSM.Core.ProjectionTraces]
proper_equivocator_descriptors_state_update_eqv [in VLSM.Core.Equivocators.EquivocatorsComposition]
proper_not_directly_observed [in VLSM.Core.Equivocation]
proper_directly_observed [in VLSM.Core.Equivocation]
proper_not_received [in VLSM.Core.Equivocation]
proper_received [in VLSM.Core.Equivocation]
proper_not_sent [in VLSM.Core.Equivocation]
proper_sent [in VLSM.Core.Equivocation]
Proper_tc [in VLSM.Lib.Preamble]
Proper_reflects_Irreflexive [in VLSM.Lib.Preamble]
propT_imp_trans [in VLSM.Lib.TraceProperties]
propT_imp_refl [in VLSM.Lib.TraceProperties]
propT_imp_andT [in VLSM.Lib.TraceProperties]
propT_imp_conseq_R [in VLSM.Lib.TraceProperties]
propT_imp_conseq_L [in VLSM.Lib.TraceProperties]
prove_none_have_message_from_stepwise [in VLSM.Core.Equivocation]
prove_all_have_message_from_stepwise [in VLSM.Core.Equivocation]
PT1 [in VLSM.Examples.Paxos.Paxos]
P1bInv_is_invariant [in VLSM.Examples.Paxos.Paxos]
P1cInv_is_invariant [in VLSM.Examples.Paxos.Paxos]
P2aInv_is_invariant [in VLSM.Examples.Paxos.Paxos]


Q

Q_nonempty [in VLSM.Examples.Paxos.Voting]


R

radix_valid_messages_powers_of_mult [in VLSM.Examples.Tutorial.PrimesComposition]
radix_valid_messages_powers_of_mult_left [in VLSM.Examples.Tutorial.PrimesComposition]
radix_valid_messages_powers_of_mult_right [in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_states [in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_states_left [in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_states_right [in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_messages [in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_messages_right [in VLSM.Examples.Tutorial.PrimesComposition]
radix_constrained_messages_left [in VLSM.Examples.Tutorial.PrimesComposition]
reachable_composite_state_to_trace [in VLSM.Core.TraceableVLSM]
reachable_state_to_trace [in VLSM.Core.TraceableVLSM]
reachable_received_messages_reachable [in VLSM.Examples.ELMO.ELMO]
reachable_messages_are_msg_valid [in VLSM.Examples.ELMO.ELMO]
reachable_sent_messages_adr [in VLSM.Examples.ELMO.ELMO]
reachable_sent_messages_reachable [in VLSM.Examples.ELMO.ELMO]
reachable_full_node_for_all_messages [in VLSM.Examples.ELMO.ELMO]
reachable_obs_msg [in VLSM.Examples.ELMO.ELMO]
reachable_msg_obs [in VLSM.Examples.ELMO.ELMO]
receivable_messages_reachable [in VLSM.Examples.ELMO.ELMO]
receivedAddresses_addObservation [in VLSM.Examples.ELMO.BaseELMO]
receivedMessages_addObservation [in VLSM.Examples.ELMO.BaseELMO]
received_component_received_previously [in VLSM.Core.Equivocation]
received_valid [in VLSM.Core.Equivocation]
received_messages_proper [in VLSM.Core.Equivocation]
received_in_messages [in VLSM.Examples.ELMO.ELMO]
receiving_not_already_equivocating_global_local_equivocators [in VLSM.Examples.ELMO.ELMO]
receiving_already_equivocating_global_local_equivocators [in VLSM.Examples.ELMO.ELMO]
receiving_already_sent_global_local_equivocators [in VLSM.Examples.ELMO.ELMO]
recons [in VLSM.Lib.StreamExtras]
rec_obs_fn_sizeState [in VLSM.Examples.ELMO.BaseELMO]
rec_obs_acyclic [in VLSM.Examples.ELMO.MO]
rec_obs_size_desc [in VLSM.Examples.ELMO.MO]
rec_obs_addObservation_iff [in VLSM.Examples.ELMO.MO]
rec_obs_recv_inv [in VLSM.Examples.ELMO.MO]
rec_obs_send_inv [in VLSM.Examples.ELMO.MO]
rec_obs_input_constrained_transition [in VLSM.Examples.ELMO.MO]
reflecting_composite_for_reachable_component [in VLSM.Examples.ELMO.ELMO]
refutation [in VLSM.Lib.StreamExtras]
relevant_components_free [in VLSM.Core.Composition]
relevant_components_one_free [in VLSM.Core.Composition]
relevant_component_transition2_free [in VLSM.Core.Composition]
relevant_component_transition_free [in VLSM.Core.Composition]
remove_equivocating_transitions_preloaded_projection [in VLSM.Core.SubProjectionTraces]
remove_equivocating_strong_embedding_initial_state_preservation [in VLSM.Core.SubProjectionTraces]
remove_equivocating_strong_projection_transition_consistency_None [in VLSM.Core.SubProjectionTraces]
remove_equivocating_strong_projection_transition_preservation_Some [in VLSM.Core.SubProjectionTraces]
remove_equivocating_strong_projection_valid_preservation [in VLSM.Core.SubProjectionTraces]
remove_equivocating_transitions_fixed_projection [in VLSM.Core.Equivocation.FixedSetEquivocation]
remove_hd_last [in VLSM.Lib.ListExtras]
replayed_trace_from_valid_equivocating [in VLSM.Core.Equivocators.SimulatingFree]
replayed_initial_state_from_valid [in VLSM.Core.Equivocators.FullReplayTraces]
replayed_trace_from_finite_trace_last [in VLSM.Core.Equivocators.FullReplayTraces]
replayed_initial_state_from_lift [in VLSM.Core.Equivocators.FullReplayTraces]
restrict_observed_to_non_equivocating_incl_rev [in VLSM.Core.Equivocation.FixedSetEquivocation]
restrict_observed_to_non_equivocating_incl [in VLSM.Core.Equivocation.FixedSetEquivocation]


S

SafeAt_alt_iff [in VLSM.Examples.Paxos.Voting]
safeAt_alt_rev [in VLSM.Examples.Paxos.Voting]
safeAt_alt_fwd [in VLSM.Examples.Paxos.Voting]
safe_at_preserved [in VLSM.Examples.Paxos.Voting]
same_VLSM_embedding [in VLSM.Core.VLSMProjections]
same_VLSM_initial_message_preservation [in VLSM.Core.VLSM]
same_VLSM_initial_state_preservation [in VLSM.Core.VLSM]
same_VLSM_transition_preservation [in VLSM.Core.VLSM]
same_VLSM_valid_preservation [in VLSM.Core.VLSM]
same_IM_preloaded_free_embedding [in VLSM.Core.Composition]
same_IM_embedding [in VLSM.Core.Composition]
same_IM_composite_has_been_sent_preservation [in VLSM.Core.EquivocationProjections]
satisfyT_cont [in VLSM.Lib.TraceProperties]
SeededNoEquiv_subsumption [in VLSM.Core.Equivocators.FullReplayTraces]
SeededXE_SeededX_vlsm_partial_projection [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
SeededXE_incl_PreFreeE [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
SeededXE_SeededNoEquiv_weak_embedding [in VLSM.Core.Equivocators.FullReplayTraces]
SeededXE_PreFreeE_weak_embedding [in VLSM.Core.Equivocators.FullReplayTraces]
SeededXE_Free_embedding [in VLSM.Core.Equivocators.FullReplayTraces]
seeded_equivocators_valid_trace_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
seeded_no_equivocation_incl_preloaded [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
seeded_equivocators_initial_message [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
seeded_equivocators_finite_valid_trace_init_to_rev [in VLSM.Core.Equivocators.SimulatingFree]
seeded_no_equivocation_incl_preloaded [in VLSM.Core.Equivocation.NoEquivocation]
selected_messages_consistency_prop_from_stepwise [in VLSM.Core.Equivocation]
selected_message_exists_in_all_traces_initial_state [in VLSM.Core.Equivocation]
selected_message_exists_preloaded_not_some_iff_no [in VLSM.Core.Equivocation]
selected_message_exists_not_some_iff_no [in VLSM.Core.Equivocation]
self_messages_sent [in VLSM.Examples.ELMO.ELMO]
sender_id_m_2b [in VLSM.Examples.Paxos.Paxos]
sender_safety_alt_iff [in VLSM.Core.Equivocation]
sending_1b_updates_maxBal [in VLSM.Examples.Paxos.Paxos]
sends_unique_argument [in VLSM.Examples.Paxos.Paxos]
send_implies_sent_argument [in VLSM.Examples.Paxos.Paxos]
sentMessages_addObservation [in VLSM.Examples.ELMO.BaseELMO]
sentMessages_characterization [in VLSM.Examples.ELMO.UMO]
sent_1c_implies_ShowsSafeAt [in VLSM.Examples.Paxos.Paxos]
sent_2a_after_1c [in VLSM.Examples.Paxos.Paxos]
sent_2b_unique [in VLSM.Examples.Paxos.Paxos]
sent_2a_unique [in VLSM.Examples.Paxos.Paxos]
sent_2b_after_2a [in VLSM.Examples.Paxos.Paxos]
sent_1b_impl_sent_lastvote_as_2b [in VLSM.Examples.Paxos.Paxos]
sent_1b_once [in VLSM.Examples.Paxos.Paxos]
sent_vote_le_maxVBal [in VLSM.Examples.Paxos.Paxos]
sent_by_non_equivocating_are_directly_observed [in VLSM.Core.Equivocation.FixedSetEquivocation]
sent_by_non_equivocating_are_sent [in VLSM.Core.Equivocation.FixedSetEquivocation]
sent_component_sent_previously [in VLSM.Core.Equivocation]
sent_valid [in VLSM.Core.Equivocation]
sent_can_emit [in VLSM.Core.Equivocation]
sent_messages_proper [in VLSM.Core.Equivocation]
sent_are_valid [in VLSM.Core.Equivocators.FullReplayTraces]
sent_by_non_equivocating_msg_dep_rel_strong_fixed_equivocation [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
set_union_iterated_preserves_prop [in VLSM.Lib.ListSetExtras]
set_diff_filter_nodup [in VLSM.Lib.ListSetExtras]
set_diff_filter_iff [in VLSM.Lib.ListSetExtras]
set_prod_nodup [in VLSM.Lib.ListSetExtras]
set_remove_list_1 [in VLSM.Lib.ListSetExtras]
set_union_iterated_empty [in VLSM.Lib.ListSetExtras]
set_eq_remove_union_not_elem_of [in VLSM.Lib.ListSetExtras]
set_eq_remove_union_elem_of [in VLSM.Lib.ListSetExtras]
set_eq_remove [in VLSM.Lib.ListSetExtras]
set_remove_length [in VLSM.Lib.ListSetExtras]
set_add_length [in VLSM.Lib.ListSetExtras]
set_remove_elem_of_iff [in VLSM.Lib.ListSetExtras]
set_remove_nodup_1 [in VLSM.Lib.ListSetExtras]
set_remove_first [in VLSM.Lib.ListSetExtras]
set_remove_elim [in VLSM.Lib.ListSetExtras]
set_remove_not_elem_of [in VLSM.Lib.ListSetExtras]
set_add_new [in VLSM.Lib.ListSetExtras]
set_add_ignore [in VLSM.Lib.ListSetExtras]
set_map_singleton [in VLSM.Lib.ListSetExtras]
set_map_eq [in VLSM.Lib.ListSetExtras]
set_map_subseteq [in VLSM.Lib.ListSetExtras]
set_map_exists [in VLSM.Lib.ListSetExtras]
set_map_elem_of [in VLSM.Lib.ListSetExtras]
set_map_nodup [in VLSM.Lib.ListSetExtras]
set_union_empty_left [in VLSM.Lib.ListSetExtras]
set_union_iterated_subseteq [in VLSM.Lib.ListSetExtras]
set_union_in_iterated [in VLSM.Lib.ListSetExtras]
set_union_iterated_nodup [in VLSM.Lib.ListSetExtras]
set_union_subseteq_iff [in VLSM.Lib.ListSetExtras]
set_union_subseteq_right [in VLSM.Lib.ListSetExtras]
set_union_subseteq_left [in VLSM.Lib.ListSetExtras]
set_union_nodup_left [in VLSM.Lib.ListSetExtras]
set_union_empty [in VLSM.Lib.ListSetExtras]
set_union_comm [in VLSM.Lib.ListSetExtras]
set_eq_Forall [in VLSM.Lib.ListSetExtras]
set_eq_cons [in VLSM.Lib.ListSetExtras]
set_eq_empty_iff [in VLSM.Lib.ListSetExtras]
set_eq_proj2 [in VLSM.Lib.ListSetExtras]
set_eq_proj1 [in VLSM.Lib.ListSetExtras]
set_eq_fin_set [in VLSM.Lib.ListSetExtras]
set_eq_extract_forall [in VLSM.Lib.ListSetExtras]
set_remove_preserves_not_in_indices_initial [in VLSM.Core.TraceableVLSM]
set_diff_nodup [in VLSM.Lib.StdppListSet]
set_diff_iff [in VLSM.Lib.StdppListSet]
set_diff_elim2 [in VLSM.Lib.StdppListSet]
set_diff_elim1 [in VLSM.Lib.StdppListSet]
set_diff_intro [in VLSM.Lib.StdppListSet]
set_union_nodup [in VLSM.Lib.StdppListSet]
set_union_iff [in VLSM.Lib.StdppListSet]
set_union_elim [in VLSM.Lib.StdppListSet]
set_union_intro [in VLSM.Lib.StdppListSet]
set_remove_nodup [in VLSM.Lib.StdppListSet]
set_remove_iff [in VLSM.Lib.StdppListSet]
set_remove_3 [in VLSM.Lib.StdppListSet]
set_remove_2 [in VLSM.Lib.StdppListSet]
set_remove_1 [in VLSM.Lib.StdppListSet]
set_add_nodup [in VLSM.Lib.StdppListSet]
set_add_iff [in VLSM.Lib.StdppListSet]
set_add_not_empty [in VLSM.Lib.StdppListSet]
set_add_elim [in VLSM.Lib.StdppListSet]
set_add_intro [in VLSM.Lib.StdppListSet]
set_add_intro2 [in VLSM.Lib.StdppListSet]
set_add_intro1 [in VLSM.Lib.StdppListSet]
set_Exists2_union_inv [in VLSM.Lib.StdppExtras]
set_Exists2_union_4 [in VLSM.Lib.StdppExtras]
set_Exists2_union_3 [in VLSM.Lib.StdppExtras]
set_Exists2_union_2 [in VLSM.Lib.StdppExtras]
set_Exists2_union_1 [in VLSM.Lib.StdppExtras]
set_Exists2_pair [in VLSM.Lib.StdppExtras]
set_Exists2_singleton [in VLSM.Lib.StdppExtras]
set_Exists2_empty [in VLSM.Lib.StdppExtras]
set_Forall2_union_inv_2 [in VLSM.Lib.StdppExtras]
set_Forall2_union_inv_1 [in VLSM.Lib.StdppExtras]
set_Forall2_union [in VLSM.Lib.StdppExtras]
set_Forall2_pair [in VLSM.Lib.StdppExtras]
set_Forall2_singleton [in VLSM.Lib.StdppExtras]
set_Forall2_empty [in VLSM.Lib.StdppExtras]
set_map_id [in VLSM.Lib.FinSetExtras]
set_map_size_upper_bound [in VLSM.Lib.FinSetExtras]
set_map_subset [in VLSM.Lib.FinSetExtras]
set_equality_predicate [in VLSM.Lib.SortedLists]
set_eq_first_equal [in VLSM.Lib.SortedLists]
ShowsSafeAt_impl_V_SafeAt [in VLSM.Examples.Paxos.Paxos]
ShowsSafeAt_stable [in VLSM.Examples.Paxos.Paxos]
simple_get_maximal_element_some [in VLSM.Lib.TopSort]
simple_get_maximal_element_correct [in VLSM.Lib.TopSort]
simple_maximal_element_in [in VLSM.Lib.TopSort]
simple_top_sort_correct [in VLSM.Lib.TopSort]
simple_topologically_sorted_precedes_closed_remove_last [in VLSM.Lib.TopSort]
SingletonT_andA_AppendT [in VLSM.Lib.TraceProperties]
SingletonT_AppendT [in VLSM.Lib.TraceProperties]
SingletonT_DupT_AppendT_andA_DupT [in VLSM.Lib.TraceProperties]
singletonT_andA_followsT [in VLSM.Lib.TraceProperties]
SingletonT_cont [in VLSM.Lib.TraceProperties]
singletonT_nil [in VLSM.Lib.TraceProperties]
singletonT_cont [in VLSM.Lib.TraceProperties]
singletonT_setoidT [in VLSM.Lib.TraceProperties]
single_equivocator_projection [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
sizeObservation_unfold [in VLSM.Examples.ELMO.BaseELMO]
size_MuddyUnion_input_valid_transition [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
specialized_proper_sent_rev [in VLSM.Core.Equivocation]
specialized_proper_sent [in VLSM.Core.Equivocation]
specialized_selected_message_exists_in_some_traces_from [in VLSM.Core.Equivocation]
special_receivable_messages_emittable_in_future [in VLSM.Examples.ELMO.ELMO]
stabilization [in VLSM.Lib.StreamExtras]
State_eq_dec [in VLSM.Examples.ELMO.BaseELMO]
state_received_not_sent_invariant_trace_iff [in VLSM.Core.Equivocation]
state_received_not_sent_trace_iff [in VLSM.Core.Equivocation]
state_update_23_three [in VLSM.Examples.Tutorial.Multiply]
state_update_23_two [in VLSM.Examples.Tutorial.Multiply]
state_update_23_twice [in VLSM.Examples.Tutorial.Multiply]
state_update_23_neq [in VLSM.Examples.Tutorial.Multiply]
state_update_23_eq [in VLSM.Examples.Tutorial.Multiply]
state_suffix_addObservation_inv [in VLSM.Examples.ELMO.ELMO]
state_to_minimal_equivocation_trace_equivocation_monotonic [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
state_update_twice_neq [in VLSM.Core.Composition]
state_update_twice [in VLSM.Core.Composition]
state_update_id [in VLSM.Core.Composition]
state_update_eq [in VLSM.Core.Composition]
state_update_neq [in VLSM.Core.Composition]
state_suffix_totally_orders_sent_messages_valid_state_prop [in VLSM.Examples.ELMO.UMO]
state_suffix_totally_orders_sent_messages_UMO_reachable [in VLSM.Examples.ELMO.UMO]
state_suffix_totally_orders_sent_messages_valid_state_prop_aux [in VLSM.Examples.ELMO.UMO]
state_suffix_totally_orders_sent_messages_UMO_reachable_aux [in VLSM.Examples.ELMO.UMO]
state_suffix_of_finite_constrained_trace_init_to [in VLSM.Examples.ELMO.UMO]
state_suffix_of_finite_constrained_trace_from_to [in VLSM.Examples.ELMO.UMO]
state_suffix_of_input_constrained_transition [in VLSM.Examples.ELMO.UMO]
state_suffix_of_UMO_component_valid_transition [in VLSM.Examples.ELMO.UMO]
state_suffix_addObservations [in VLSM.Examples.ELMO.UMO]
state_suffix_addObservation [in VLSM.Examples.ELMO.UMO]
state_suffix_empty_minimum [in VLSM.Examples.ELMO.UMO]
state_suffix_empty_minimal [in VLSM.Examples.ELMO.UMO]
state_suffix_totally_orders_valid_sent_messages' [in VLSM.Examples.ELMO.MO]
state_suffix_totally_orders_valid_sent_messages [in VLSM.Examples.ELMO.MO]
stdpp_nat_le_sum [in VLSM.Lib.StdppExtras]
stepwise_props_from_trace [in VLSM.Core.Equivocation]
step_cases'' [in VLSM.Examples.Paxos.Voting]
step_cases' [in VLSM.Examples.Paxos.Voting]
step_cases [in VLSM.Examples.Paxos.Voting]
stop_IterT [in VLSM.Lib.TraceProperties]
stream_map_option_EqSt [in VLSM.Lib.StreamFilters]
stream_concat_map_prefix [in VLSM.Lib.StreamFilters]
stream_map_option_prefix [in VLSM.Lib.StreamFilters]
stream_filter_positions_filtering_subsequence [in VLSM.Lib.StreamFilters]
stream_filter_positions_monotone [in VLSM.Lib.StreamFilters]
stream_filter_positions_Str_nth_tl [in VLSM.Lib.StreamFilters]
stream_filter_positions_unroll [in VLSM.Lib.StreamFilters]
stream_filter_fst_pos_nth_tl_has_property [in VLSM.Lib.StreamFilters]
stream_filter_fst_pos_le [in VLSM.Lib.StreamFilters]
stream_filter_fst_pos_infinitely_often [in VLSM.Lib.StreamFilters]
stream_filter_fst_pos_characterization [in VLSM.Lib.StreamFilters]
stream_filter_Forall [in VLSM.Lib.StreamFilters]
stream_concat_prefix [in VLSM.Lib.StreamExtras]
stream_concat_unroll [in VLSM.Lib.StreamExtras]
stream_prepend_prefix_r [in VLSM.Lib.StreamExtras]
stream_prepend_prefix_l [in VLSM.Lib.StreamExtras]
stream_prepend_prefix [in VLSM.Lib.StreamExtras]
stream_prefix_nth_last [in VLSM.Lib.StreamExtras]
stream_segment_app [in VLSM.Lib.StreamExtras]
stream_prefix_segment_suffix [in VLSM.Lib.StreamExtras]
stream_prefix_segment [in VLSM.Lib.StreamExtras]
stream_segment_alt_iff [in VLSM.Lib.StreamExtras]
stream_segment_nth [in VLSM.Lib.StreamExtras]
stream_prefix_of [in VLSM.Lib.StreamExtras]
stream_prefix_prefix [in VLSM.Lib.StreamExtras]
stream_prefix_suffix [in VLSM.Lib.StreamExtras]
stream_suffix_nth [in VLSM.Lib.StreamExtras]
stream_suffix_S [in VLSM.Lib.StreamExtras]
stream_prefix_ForAll2 [in VLSM.Lib.StreamExtras]
stream_prefix_ForAll [in VLSM.Lib.StreamExtras]
stream_prefix_length [in VLSM.Lib.StreamExtras]
stream_prefix_map [in VLSM.Lib.StreamExtras]
stream_prefix_app_r [in VLSM.Lib.StreamExtras]
stream_prefix_app_l [in VLSM.Lib.StreamExtras]
stream_prefix_EqSt [in VLSM.Lib.StreamExtras]
stream_prefix_S [in VLSM.Lib.StreamExtras]
stream_prefix_lookup [in VLSM.Lib.StreamExtras]
stream_prefix_nth [in VLSM.Lib.StreamExtras]
stream_app_inj_l [in VLSM.Lib.StreamExtras]
stream_app_f_equal [in VLSM.Lib.StreamExtras]
stream_app_assoc [in VLSM.Lib.StreamExtras]
stream_eq_hd_tl [in VLSM.Lib.StreamExtras]
strict_minimal_among_iff [in VLSM.Lib.Preamble]
strict_minimal_among_lt_0 [in VLSM.Lib.Preamble]
StrongFixed_incl_Free [in VLSM.Core.Equivocation.FixedSetEquivocation]
StrongFixed_incl_Fixed [in VLSM.Core.Equivocation.FixedSetEquivocation]
StrongFixed_incl_Limited [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
StrongFixed_valid_state_not_heavy [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
strong_fixed_equivocation_vlsm_composition_no_equivocators [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_constraint_no_equivocators [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_no_equivocators [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_lift_sub_state_to [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_eqv_valid_message_in_futures [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_eqv_valid_message [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_constraint_subsumption [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_subsumption [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_embedding_initial_message_preservation_weaken [in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_embedding_transition_preservation_weaken [in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_projection_transition_consistency_None_from_full [in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_projection_transition_preservation_Some_from_full [in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_embedding_valid_preservation_weaken [in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_projection_valid_preservation_from_full [in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_projection_valid_message_preservation_weaken [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_transition_preservation_Some_weaken [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_valid_preservation_weaken [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_initial_state_preservation_weaken [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_transition_consistency_None_weaken [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_witness_has_fixed_equivocation [in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_trace_witnessing_equivocation_prop_extend_neq [in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_trace_witnessing_equivocation_prop_extend_eq [in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_witness_equivocating_validators_prefix_monotonicity [in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_VLSM_stuttering_embedding_type [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
strong_stuttering_embedding_initial_state_preservation_weaken [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
strong_msg_dep_fixed_equivocation_incl [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
strong_fixed_equivocation_msg_dep_constraint_subsumption [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
strong_constraint_subsumption_strongest [in VLSM.Core.ConstrainedVLSM]
strong_constraint_subsumption_all_fixed [in VLSM.Core.Equivocators.FixedEquivocation]
strong_constraint_subsumption_fixed_all [in VLSM.Core.Equivocators.FixedEquivocation]
stuttering_embedding_friendly_trace_char [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
stuttering_embedding_friendly_finite_valid_trace_from_to [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
st_obs_finite_valid_trace_from_to [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
submseteq_list_subseteq [in VLSM.Lib.ListExtras]
submseteq_tail_l [in VLSM.Lib.ListExtras]
subseteq_Forall [in VLSM.Lib.ListSetExtras]
subseteq_appr [in VLSM.Lib.ListSetExtras]
subseteq_remove_union [in VLSM.Lib.ListSetExtras]
sub_equivocator_IM_initial_state_commute [in VLSM.Core.Equivocators.EquivocatorsComposition]
sub_no_indices_no_can_emit [in VLSM.Core.SubProjectionTraces]
sub_transition_element_project_Some [in VLSM.Core.SubProjectionTraces]
sub_element_state_project [in VLSM.Core.SubProjectionTraces]
sub_element_label_project [in VLSM.Core.SubProjectionTraces]
sub_transition_element_project_None [in VLSM.Core.SubProjectionTraces]
sub_valid_preloaded_lifts_can_be_emitted [in VLSM.Core.SubProjectionTraces]
sub_element_state_neq [in VLSM.Core.SubProjectionTraces]
sub_element_state_eq [in VLSM.Core.SubProjectionTraces]
sub_composition_all_embedding_rev [in VLSM.Core.SubProjectionTraces]
sub_composition_all_embedding [in VLSM.Core.SubProjectionTraces]
sub_IM_no_equivocation_preservation [in VLSM.Core.SubProjectionTraces]
sub_IM_has_been_sent_iff_by_sender [in VLSM.Core.SubProjectionTraces]
sub_IM_sender_safety [in VLSM.Core.SubProjectionTraces]
sub_IM_preserves_no_initial_messages [in VLSM.Core.SubProjectionTraces]
sub_IM_preserves_channel_authentication [in VLSM.Core.SubProjectionTraces]
sub_can_emit_sender [in VLSM.Core.SubProjectionTraces]
sub_IM_state_update_neq [in VLSM.Core.SubProjectionTraces]
sub_IM_state_update_eq [in VLSM.Core.SubProjectionTraces]
sub_IM_state_pi [in VLSM.Core.SubProjectionTraces]
sub_replayed_trace_from_valid_equivocating [in VLSM.Core.Equivocators.FullReplayTraces]
sub_preloaded_replayed_trace_from_valid_equivocating [in VLSM.Core.Equivocators.FullReplayTraces]
succ_fsfun_supp_not_in [in VLSM.Lib.FinSuppFn]
succ_fsfun_supp_in [in VLSM.Lib.FinSuppFn]
succ_fsfun_neq [in VLSM.Lib.FinSuppFn]
succ_fsfun_eq [in VLSM.Lib.FinSuppFn]
sufficient_validators_pivotal [in VLSM.Core.ReachableThreshold]
suffix_max_suffix [in VLSM.Lib.ListExtras]
suffix_lastn [in VLSM.Lib.ListExtras]
suffix_rev [in VLSM.Lib.ListExtras]
sumbool_forall [in VLSM.Lib.ListExtras]
sum_list_with_zero [in VLSM.Lib.StdppExtras]
sum_list_with_ext_forall [in VLSM.Lib.StdppExtras]
sum_weights_union_empty [in VLSM.Lib.Measurable]
sum_weights_disj_union [in VLSM.Lib.Measurable]
sum_weights_app_list [in VLSM.Lib.Measurable]
sum_weights_in [in VLSM.Lib.Measurable]
sum_weights_proper [in VLSM.Lib.Measurable]
sum_weights_subseteq [in VLSM.Lib.Measurable]
sum_weights_subseteq_list [in VLSM.Lib.Measurable]
sum_weights_in_list [in VLSM.Lib.Measurable]
sum_weights_positive [in VLSM.Lib.Measurable]
sum_weights_positive_list [in VLSM.Lib.Measurable]
sum_weights_singleton [in VLSM.Lib.Measurable]
sum_weights_empty [in VLSM.Lib.Measurable]
sum_weights_list_rew [in VLSM.Lib.Measurable]
swap_head_last [in VLSM.Lib.ListExtras]


T

take_app_inv [in VLSM.Lib.ListExtras]
take_nth_last [in VLSM.Lib.ListExtras]
take_nth [in VLSM.Lib.ListExtras]
take_segment_suffix [in VLSM.Lib.ListExtras]
take_prefix [in VLSM.Lib.ListExtras]
tc_composite_observed_before_send_subsumes_happens_before [in VLSM.Core.MessageDependencies]
tc_composite_observed_before_send_subsumes_msg_dep_rel [in VLSM.Core.MessageDependencies]
tc_comparable [in VLSM.Lib.Preamble]
tc_CompSpec [in VLSM.Lib.Preamble]
tc_reflect_irreflexive [in VLSM.Lib.Preamble]
tc_wf_projected [in VLSM.Lib.Preamble]
tc_r_iff [in VLSM.Lib.Preamble]
tc_reflect [in VLSM.Lib.Preamble]
toplogically_sorted_remove_last [in VLSM.Lib.TopSort]
topologically_sorted_precedes_closed_remove_last [in VLSM.Lib.TopSort]
topologically_sorted_occurrences_ordering [in VLSM.Lib.TopSort]
top_sort_correct [in VLSM.Lib.TopSort]
top_sort_sorted [in VLSM.Lib.TopSort]
top_sort_nodup [in VLSM.Lib.TopSort]
top_sort_set_eq [in VLSM.Lib.TopSort]
top_sort_precedes [in VLSM.Lib.TopSort]
top_sort_before [in VLSM.Lib.TopSort]
traceable_vlsm_initial_state_dec [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
traces_exhibiting_limited_equivocation_are_valid_rev [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
traces_exhibiting_limited_equivocation_are_valid [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
tracewise_not_heavy_LimitedEquivocationProp_iff [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
tracewise_basic_equivocation_state_validators_comprehensive_prop [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
trace_monotone_global_equivocation_def_equiv [in VLSM.Core.MessageDependencies]
trace_append_bism [in VLSM.Lib.Traces]
trace_append_cons [in VLSM.Lib.Traces]
trace_append_nil [in VLSM.Lib.Traces]
trace_destr [in VLSM.Lib.Traces]
trace_append_infiniteT [in VLSM.Lib.TraceProperties]
trace_to_initial_state_has_no_inputs [in VLSM.Core.Equivocation]
trace_prefix_fn_valid [in VLSM.Core.VLSM]
trace_prefix_valid [in VLSM.Core.VLSM]
trace_has_message_observed_iff [in VLSM.Core.VLSM]
trace_has_message_prefix [in VLSM.Core.VLSM]
trace_to_plan_to_trace [in VLSM.Core.Plans]
trace_to_plan_to_trace_from_to [in VLSM.Core.Plans]
transition_preserves_CompositeHasBeenObserved [in VLSM.Core.MessageDependencies]
transition_preserves_HasBeenObserved [in VLSM.Core.MessageDependencies]
transition_sub_projection [in VLSM.Core.SubProjectionTraces]
transition_monotone_empty_trace [in VLSM.Core.TraceableVLSM]
transition_monotone_in_futures [in VLSM.Core.TraceableVLSM]
transition_receiving_no_sender_reflects_is_equivocating_tracewise [in VLSM.Core.Equivocation.TraceWiseEquivocation]
transition_is_equivocating_tracewise_char [in VLSM.Core.Equivocation.TraceWiseEquivocation]
transition_validator_messages [in VLSM.Core.Validator]
transitive_tc_idempotent [in VLSM.Lib.Preamble]
ttA_AppendT_implies [in VLSM.Lib.TraceProperties]
TtT_AppendT_idem [in VLSM.Lib.TraceProperties]
ttT_setoidT [in VLSM.Lib.TraceProperties]
tv_state_destructor_size [in VLSM.Core.TraceableVLSM]


U

UMO_sentMessages_characterization [in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservations_inv [in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservation_inv_message [in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservation_inv_Send [in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservation_inv_Send_state [in VLSM.Examples.ELMO.UMO]
UMO_reachable_addObservation_inv [in VLSM.Examples.ELMO.UMO]
UMO_reachable_inv [in VLSM.Examples.ELMO.UMO]
UMO_component_valid_transition_size [in VLSM.Examples.ELMO.UMO]
UMO_component_transition_adr [in VLSM.Examples.ELMO.UMO]
UMO_reachable_constrained_state_prop [in VLSM.Examples.ELMO.UMO]
UMO_reachable_valid_state_prop [in VLSM.Examples.ELMO.UMO]
UMO_based_valid_reachable [in VLSM.Examples.ELMO.UMO]
UMO_reachable_impl [in VLSM.Examples.ELMO.UMO]
UMO_reachable_elem_of_messages_ind [in VLSM.Examples.ELMO.UMO]
UMO_reachable_ind' [in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state_spec [in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state_unique [in VLSM.Examples.ELMO.UMO]
unfold_last_hd [in VLSM.Lib.ListExtras]
unfold_robs [in VLSM.Examples.ELMO.MO]
unfold_robs_rev [in VLSM.Examples.ELMO.MO]
unfold_robs_fwd [in VLSM.Examples.ELMO.MO]
unfold_rec_obs [in VLSM.Examples.ELMO.MO]
union_size_le_sum [in VLSM.Lib.FinSetExtras]
union_size_ge_average [in VLSM.Lib.FinSetExtras]
union_size_ge_size2 [in VLSM.Lib.FinSetExtras]
union_size_ge_size1 [in VLSM.Lib.FinSetExtras]
unlock_finite_trace_last [in VLSM.Core.VLSM]
unroll_last [in VLSM.Lib.ListExtras]
update_fsfun_neq [in VLSM.Lib.FinSuppFn]
update_fsfun_eq [in VLSM.Lib.FinSuppFn]
update_supp_all [in VLSM.Lib.FinSuppFn]
update_neq [in VLSM.Lib.Preamble]
update_eq [in VLSM.Lib.Preamble]
up_to_n_full [in VLSM.Lib.NatExtras]
up_to_n_listing_length [in VLSM.Lib.NatExtras]
use_Exists [in VLSM.Lib.StreamExtras]


V

validators_pivotal_ind [in VLSM.Core.ReachableThreshold]
validator_limited_non_byzantine_traces_are_limited_non_equivocating [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
validator_fixed_limited_non_byzantine_traces_are_limited_non_equivocating [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
validator_preloaded_with_all_messages_incl [in VLSM.Core.ByzantineTraces]
validator_component_byzantine_fault_tolerance [in VLSM.Core.ByzantineTraces]
validator_fixed_byzantine_traces_equivocation_char [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
validator_fixed_non_byzantine_eq_fixed_non_equivocating [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
validator_fixed_non_byzantine_vlsm_lift_initial_message [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
validator_free_states_are_projection_states [in VLSM.Core.Validator]
validator_alt_free_states_are_projection_states [in VLSM.Core.Validator]
valid_free_validating_equiv_message_validating [in VLSM.Core.MessageDependencies]
valid_free_validating_is_message_validating [in VLSM.Core.MessageDependencies]
valid_state_limited_equivocation [in VLSM.Core.Equivocators.LimitedStateEquivocation]
valid_state_sub_projection [in VLSM.Core.SubProjectionTraces]
valid_sub_projection [in VLSM.Core.SubProjectionTraces]
valid_state_prop_alt_equiv [in VLSM.Core.VLSM]
valid_trace_nth [in VLSM.Core.VLSM]
valid_trace_segment [in VLSM.Core.VLSM]
valid_state_has_trace [in VLSM.Core.VLSM]
valid_state_message_has_trace [in VLSM.Core.VLSM]
valid_trace_from_iff [in VLSM.Core.VLSM]
valid_trace_initial [in VLSM.Core.VLSM]
valid_trace_from [in VLSM.Core.VLSM]
valid_trace_observed_is_valid [in VLSM.Core.VLSM]
valid_trace_input_is_valid [in VLSM.Core.VLSM]
valid_trace_output_is_valid [in VLSM.Core.VLSM]
valid_message_prop_iff [in VLSM.Core.VLSM]
valid_state_prop_ind [in VLSM.Core.VLSM]
valid_state_prop_iff [in VLSM.Core.VLSM]
valid_iff_valid_state_prop [in VLSM.Core.VLSM]
valid_iff_valid_message_prop [in VLSM.Core.VLSM]
valid_impl_valid_message_prop [in VLSM.Core.VLSM]
valid_impl_valid_state_prop [in VLSM.Core.VLSM]
valid_state_message_prop_impl_valid [in VLSM.Core.VLSM]
valid_state_23_pos [in VLSM.Examples.Tutorial.Multiply]
valid_state_component_initial_or_transition [in VLSM.Core.Composition]
valid_state_project_preloaded [in VLSM.Core.Composition]
valid_state_project_preloaded_to_preloaded [in VLSM.Core.Composition]
valid_state_preloaded_composite_free_lift [in VLSM.Core.Composition]
valid_preloaded_lifts_can_be_emitted [in VLSM.Core.Composition]
valid_trace_prop_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
valid_trace_from_prop_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
valid_message_prop_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
valid_state_prop_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
valid_state_message_prop_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
valid_state_has_fixed_equivocation [in VLSM.Core.Equivocators.FixedEquivocation]
valid_state_prop_from_constrained_equiv [in VLSM.Core.PreloadedVLSM]
valid_state_prop_from_constrained_right_impl [in VLSM.Core.PreloadedVLSM]
valid_state_prop_from_constrained_left_impl [in VLSM.Core.PreloadedVLSM]
valid_transition_next_preloaded_iff [in VLSM.Core.PreloadedVLSM]
valid_transition_preloaded_iff [in VLSM.Core.PreloadedVLSM]
valid_message_projection_rev [in VLSM.Core.ProjectionTraces]
valid_preloaded_composite_vlsm_induced_projection_validator_iff [in VLSM.Core.Validator]
valid_state_contains_unique_valid_trace [in VLSM.Examples.ELMO.UMO]
VLSM_eq_valid_trace [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_infinite_valid_trace [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_infinite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_can_emit [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_can_produce [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_input_valid [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_input_valid_transition [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_in_futures [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_finite_valid_trace_from_to [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_initial_state [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_valid_state [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_finite_valid_trace_init_to [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_finite_valid_trace [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_trans [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_sym [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_refl [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_eq_embedding_trans [in VLSM.Core.VLSMProjections]
VLSM_eq_projection_trans [in VLSM.Core.VLSMProjections]
VLSM_embedding_eq_trans [in VLSM.Core.VLSMProjections]
VLSM_projection_eq_trans [in VLSM.Core.VLSMProjections]
VLSM_incl_embedding_trans [in VLSM.Core.VLSMProjections]
VLSM_incl_projection_trans [in VLSM.Core.VLSMProjections]
VLSM_embedding_incl_trans [in VLSM.Core.VLSMProjections]
VLSM_projection_incl_trans [in VLSM.Core.VLSMProjections]
VLSM_embedding_trans [in VLSM.Core.VLSMProjections]
VLSM_embedding_projection_trans [in VLSM.Core.VLSMProjections]
VLSM_projection_embedding_trans [in VLSM.Core.VLSMProjections]
VLSM_projection_trans [in VLSM.Core.VLSMProjections]
VLSM_embedding_valid_state_message [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_valid_trace [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_infinite_valid_trace [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_infinite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_valid_message [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_can_emit [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_can_produce [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_input_valid [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_input_valid_transition [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_in_futures [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_valid_trace_from_to [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_valid_state [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_weaken [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_initial_state [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_valid_trace_init_to [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_is_projection [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_valid_trace [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_trace_last [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_valid_message [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_can_emit [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_can_produce [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_infinite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_input_valid [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_input_valid_transition [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_in_futures [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_finite_valid_trace_from_to [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_valid_state [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_is_projection [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_finite_trace_last [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_projection_type [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_projection_infinite_finite_valid_trace [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_valid_trace [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_valid_trace_init_to [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_initial_state [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_in_futures [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_valid_trace_from_to [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_input_valid [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_input_valid_transition [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_valid_state [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_partial_projection_from_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_valid_trace [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_last [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_project_in [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_project_app_rev [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_project_app [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_in_futures [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_finite_valid_trace_from_to [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_input_valid [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_input_valid_transition [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_valid_state [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_partial_projection_from_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_infinite_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_infinite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_finite_trace_last [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_trace_project_app_rev [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_trace_project_app [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_partial_projection_type_from_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_incl_valid_trace [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_infinite_valid_trace [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_infinite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_valid_message [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_can_emit [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_can_produce [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_valid_state_message [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_input_valid [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_input_valid_transition [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_in_futures [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_valid_trace_from_to [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_initial_state [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_valid_state [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_valid_trace_init_to [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_valid_trace [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_is_embedding_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_is_embedding [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_embedding_iff [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_finite_traces_characterization [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_trans [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl_refl [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_stuttering_embedding_infinite_finite_valid_trace [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_valid_trace [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_valid_trace_init_to [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_initial_state [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_in_futures [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_valid_trace_from_to [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_input_valid_transition_item [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_valid_state [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_partial_projection_from_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_valid_trace [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_trace_last [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_trace_project_app [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_input_valid_transition_item [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_in_futures [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_valid_trace_from_to [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_valid_state [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_partial_projection_from_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_infinite_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_infinite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_trace_last [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_trace_project_app [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_partial_projection_type_from_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_incl_has_been_directly_observed_reflect [in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_received_reflect [in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_sent_reflect [in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_directly_observed [in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_received [in VLSM.Core.EquivocationProjections]
VLSM_incl_has_been_sent [in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_directly_observed_reflect [in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_received_reflect [in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_sent_reflect [in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_directly_observed [in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_received [in VLSM.Core.EquivocationProjections]
VLSM_embedding_has_been_sent [in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_has_been_directly_observed [in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_has_been_received [in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_has_been_sent [in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_oracle [in VLSM.Core.EquivocationProjections]
VLSM_weak_embedding_selected_message_exists_in_some_preloaded_traces [in VLSM.Core.EquivocationProjections]
VLSM_projection_has_been_directly_observed_reflect [in VLSM.Core.EquivocationProjections]
VLSM_projection_has_been_received_reflect [in VLSM.Core.EquivocationProjections]
VLSM_projection_has_been_sent_reflect [in VLSM.Core.EquivocationProjections]
VLSM_projection_oracle_reflect [in VLSM.Core.EquivocationProjections]
VLSM_incl_preloaded_constrained [in VLSM.Core.ConstrainedVLSM]
VLSM_incl_constrained_preloaded [in VLSM.Core.ConstrainedVLSM]
VLSM_incl_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
VLSM_embedding_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
VLSM_partial_projection_input_valid [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_input_valid_transition [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_valid_state [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_initial_state [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_finite_valid_trace [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection_input_valid [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection_input_valid_transition [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection_valid_state [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection_finite_valid_trace_from [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
vlsm_is_preloaded_with_valid [in VLSM.Core.PreloadedVLSM]
vlsm_is_preloaded_with_False_valid_state_message [in VLSM.Core.PreloadedVLSM]
vlsm_is_preloaded_with_False_initial_message_rev [in VLSM.Core.PreloadedVLSM]
vlsm_is_preloaded_with_False_initial_message [in VLSM.Core.PreloadedVLSM]
vlsm_is_preloaded_with_False [in VLSM.Core.PreloadedVLSM]
vlsm_incl_preloaded_with_all_messages_vlsm [in VLSM.Core.PreloadedVLSM]
vlsm_incl_preloaded [in VLSM.Core.PreloadedVLSM]
VLSM_incl_message_validator [in VLSM.Core.Validator]
VLSM_embedding_message_validator [in VLSM.Core.Validator]
VLSM_incl_projection_validator [in VLSM.Core.Validator]
VLSM_canceling_embedding_projection_validator [in VLSM.Core.Validator]
VLSM_embedding_projection_validator [in VLSM.Core.Validator]
VLSM_incl_UMO_MOComponent [in VLSM.Examples.ELMO.MO]
votes_from_paxos_acceptor_iff [in VLSM.Examples.Paxos.Paxos]
votes_from_paxos_acceptor_from_sent [in VLSM.Examples.Paxos.Paxos]
votes_from_paxos_acceptor_to_sent [in VLSM.Examples.Paxos.Paxos]
vote_messages_sound [in VLSM.Examples.Paxos.Paxos]
vote_messages_complete [in VLSM.Examples.Paxos.Paxos]
vote_stable [in VLSM.Examples.Paxos.Voting]
voting_simulates_consensus [in VLSM.Examples.Paxos.Voting]
voting_initial_in_consensus [in VLSM.Examples.Paxos.Voting]
voting_step_in_consensus [in VLSM.Examples.Paxos.Voting]
voting_safe [in VLSM.Examples.Paxos.Voting]
vs0_uniqueness [in VLSM.Examples.ELMO.UMO]
vs0_uniqueness [in VLSM.Examples.ELMO.MO]
VT0 [in VLSM.Examples.Paxos.Voting]
VT1 [in VLSM.Examples.Paxos.Voting]
V_SafeAt_stable [in VLSM.Examples.Paxos.Paxos]
V_DidNotVoteIn_iff [in VLSM.Examples.Paxos.Paxos]
V_VotedFor_iff [in VLSM.Examples.Paxos.Paxos]


W

was_sent_before_totally_orders_sentMessages_UMO_reachable [in VLSM.Examples.ELMO.UMO]
was_sent_before_characterization_2 [in VLSM.Examples.ELMO.UMO]
was_sent_before_characterization_1 [in VLSM.Examples.ELMO.UMO]
weak_projection_valid_message_preservation_from_full [in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_projection_transition_consistency_None_from_full [in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_projection_transition_preservation_Some_from_full [in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_projection_valid_preservation_from_full [in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_constraint_subsumption_weakest [in VLSM.Core.ConstrainedVLSM]
weak_constraint_subsumption_incl [in VLSM.Core.ConstrainedVLSM]
well_formed_expression_flatten_formula_equiv [in VLSM.Examples.Tutorial.Formulas]
well_formed_expression_are_flatten_formulas [in VLSM.Examples.Tutorial.Formulas]
well_formed_is_flatten_formula_helper [in VLSM.Examples.Tutorial.Formulas]
well_formed_flatten_formula_helper [in VLSM.Examples.Tutorial.Formulas]


X

Xj_incl_Pre_Sub_Free [in VLSM.Core.SubProjectionTraces]


Z

zero_predecessors [in VLSM.Lib.TopSort]
zero_descriptor_proper [in VLSM.Core.Equivocators.EquivocatorsComposition]
zero_descriptor_not_equivocating [in VLSM.Core.Equivocators.EquivocatorsComposition]
zero_fsfun_rew [in VLSM.Lib.FinSuppFn]
zero_descriptor_transition_preserves_fixed_equivocation [in VLSM.Core.Equivocators.FixedEquivocation]
zero_descriptor_transition_reflects_equivocating_state [in VLSM.Core.Equivocators.Equivocators]


_

_apply_plan_cons [in VLSM.Core.Plans]
_apply_plan_app [in VLSM.Core.Plans]
_apply_plan_last [in VLSM.Core.Plans]
_apply_plan_folder_additive [in VLSM.Core.Plans]
_equivocators_valid_trace_project [in VLSM.Core.Equivocators.FixedEquivocation]


Constructor Index

A

acceptor_ix [in VLSM.Examples.Paxos.Paxos]
any_value [in VLSM.Examples.Paxos.Paxos]
A_send_2b [in VLSM.Examples.Paxos.Paxos]
A_send_1b [in VLSM.Examples.Paxos.Paxos]


B

bin_op_iff [in VLSM.Examples.Tutorial.Formulas]
bin_op_impl [in VLSM.Examples.Tutorial.Formulas]
bin_op_disj [in VLSM.Examples.Tutorial.Formulas]
bin_op_conj [in VLSM.Examples.Tutorial.Formulas]
bisim_cons [in VLSM.Lib.Traces]
bisim_nil [in VLSM.Lib.Traces]
Bot [in VLSM.Examples.Tutorial.Formulas]


C

chbo_indirectly [in VLSM.Core.MessageDependencies]
chbo_directly [in VLSM.Core.MessageDependencies]
clean [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
compare_asymmetric [in VLSM.Lib.Preamble]
compare_transitive [in VLSM.Lib.Preamble]
compare_eq [in VLSM.Lib.Preamble]
component_invariant_muddy [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
component_invariant_clean [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
component_invariant_undecided [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
composite_nth_sent_not_observed [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_nth_not_send [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
Conj [in VLSM.Examples.Tutorial.Formulas]
ContinueWith [in VLSM.Core.Equivocators.Equivocators]
ct_extend [in VLSM.Core.PreloadedVLSM]
ct_empty [in VLSM.Core.PreloadedVLSM]
cvtft_cons [in VLSM.Core.Composition]
cvtft_empty [in VLSM.Core.Composition]


D

Decided [in VLSM.Examples.Paxos.Consensus]
Disj [in VLSM.Examples.Tutorial.Formulas]


E

ecr_valid_send [in VLSM.Examples.ELMO.ELMO]
ecr_valid_receive [in VLSM.Examples.ELMO.ELMO]
efdp [in VLSM.Core.MessageDependencies]
ELMOCV_Send [in VLSM.Examples.ELMO.ELMO]
ELMOCV_Receive [in VLSM.Examples.ELMO.ELMO]
emit [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ep_valid_send [in VLSM.Examples.ELMO.ELMO]
ep_valid_receive [in VLSM.Examples.ELMO.ELMO]
even_constraint [in VLSM.Examples.Tutorial.PrimesComposition]
Existing [in VLSM.Core.Equivocators.Equivocators]


F

FBot [in VLSM.Examples.Tutorial.Formulas]
FConj [in VLSM.Examples.Tutorial.Formulas]
FDisj [in VLSM.Examples.Tutorial.Formulas]
FIff [in VLSM.Examples.Tutorial.Formulas]
FImpl [in VLSM.Examples.Tutorial.Formulas]
finalTA_delay [in VLSM.Lib.TraceProperties]
finalTA_nil [in VLSM.Lib.TraceProperties]
finalTB_delay [in VLSM.Lib.TraceProperties]
finalTB_nil [in VLSM.Lib.TraceProperties]
Finite [in VLSM.Core.VLSM]
finiteT_delay [in VLSM.Lib.TraceProperties]
finiteT_nil [in VLSM.Lib.TraceProperties]
Finite_messages [in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_extend [in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_empty [in VLSM.Core.VLSM]
finite_valid_trace_from_to_extend [in VLSM.Core.VLSM]
finite_valid_trace_from_to_empty [in VLSM.Core.VLSM]
finite_valid_trace_from_extend [in VLSM.Core.VLSM]
finite_valid_trace_from_empty [in VLSM.Core.VLSM]
FNeg [in VLSM.Examples.Tutorial.Formulas]
followsT_delay [in VLSM.Lib.TraceProperties]
followsT_nil [in VLSM.Lib.TraceProperties]
ForkWith [in VLSM.Core.Equivocators.Equivocators]
FTop [in VLSM.Examples.Tutorial.Formulas]
FVar [in VLSM.Examples.Tutorial.Formulas]
fvtit_def [in VLSM.Core.PreloadedVLSM]


H

hbo_indirectly [in VLSM.Core.MessageDependencies]
hbo_directly [in VLSM.Core.MessageDependencies]


I

IBot [in VLSM.Examples.Tutorial.Formulas]
IConj [in VLSM.Examples.Tutorial.Formulas]
IDisj [in VLSM.Examples.Tutorial.Formulas]
Iff [in VLSM.Examples.Tutorial.Formulas]
IIff [in VLSM.Examples.Tutorial.Formulas]
IImpl [in VLSM.Examples.Tutorial.Formulas]
Impl [in VLSM.Examples.Tutorial.Formulas]
INeg [in VLSM.Examples.Tutorial.Formulas]
Infinite [in VLSM.Core.VLSM]
infiniteT_delay [in VLSM.Lib.TraceProperties]
Infinite_messages [in VLSM.Core.VLSM]
infinite_valid_trace_from_extend [in VLSM.Core.VLSM]
init [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
iterT_loop [in VLSM.Lib.TraceProperties]
iterT_stop [in VLSM.Lib.TraceProperties]
ITop [in VLSM.Examples.Tutorial.Formulas]
IVar [in VLSM.Examples.Tutorial.Formulas]


L

leaders_ix [in VLSM.Examples.Paxos.Paxos]
lefo_prev [in VLSM.Examples.ELMO.ELMO]
lefo_last [in VLSM.Examples.ELMO.ELMO]
limited_equivocation [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
local_even_constraint [in VLSM.Examples.Tutorial.PrimesComposition]
L_send_2a [in VLSM.Examples.Paxos.Paxos]
L_send_1c [in VLSM.Examples.Paxos.Paxos]
L_recv_1b [in VLSM.Examples.Paxos.Paxos]
L_send_1a [in VLSM.Examples.Paxos.Paxos]


M

MC_no_equivocation_inductive_undecided [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive_msg_eq [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_receive [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_emit [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_init [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
message_has_sender [in VLSM.Examples.ELMO.ELMO]
midpointT_delay [in VLSM.Lib.TraceProperties]
midpointT_nil [in VLSM.Lib.TraceProperties]
MOCV_Send [in VLSM.Examples.ELMO.MO]
MOCV_Receive [in VLSM.Examples.ELMO.MO]
MO_mv_recv [in VLSM.Examples.ELMO.MO]
MO_mv_send [in VLSM.Examples.ELMO.MO]
MO_mv_nil [in VLSM.Examples.ELMO.MO]
muddy [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MVF_recv [in VLSM.Examples.ELMO.ELMO]
MVF_send [in VLSM.Examples.ELMO.ELMO]
MVF_nil [in VLSM.Examples.ELMO.ELMO]
mvt_extend [in VLSM.Core.VLSM]
mvt_empty [in VLSM.Core.VLSM]
m_2b [in VLSM.Examples.Paxos.Paxos]
m_2a [in VLSM.Examples.Paxos.Paxos]
m_1c [in VLSM.Examples.Paxos.Paxos]
m_1b [in VLSM.Examples.Paxos.Paxos]
m_1a [in VLSM.Examples.Paxos.Paxos]


N

Neg [in VLSM.Examples.Tutorial.Formulas]
nel_cons [in VLSM.Lib.NeList]
nel_singl [in VLSM.Lib.NeList]
NewMachine [in VLSM.Core.Equivocators.Equivocators]
ne_cons_equiv [in VLSM.Lib.NeList]
ne_one_equiv [in VLSM.Lib.NeList]


O

observed_before_message [in VLSM.Core.MessageDependencies]
observed_is_message [in VLSM.Core.MessageDependencies]
observed_before_state [in VLSM.Core.MessageDependencies]
OCV_Receive [in VLSM.Examples.ELMO.UMO]
OCV_Send [in VLSM.Examples.ELMO.UMO]
ovmp_def_emit [in VLSM.Core.PreloadedVLSM]
ovmp_def_initial [in VLSM.Core.PreloadedVLSM]


P

PVar [in VLSM.Examples.Tutorial.Formulas]
P_succ [in VLSM.Lib.FinSuppFn]
P_zero [in VLSM.Lib.FinSuppFn]


R

reach_recv [in VLSM.Examples.ELMO.UMO]
reach_send [in VLSM.Examples.ELMO.UMO]
reach_init [in VLSM.Examples.ELMO.UMO]
Receive [in VLSM.Examples.ELMO.BaseELMO]
receive [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
rec_recv [in VLSM.Examples.ELMO.BaseELMO]
rec_prev [in VLSM.Examples.ELMO.BaseELMO]
rec_new [in VLSM.Examples.ELMO.BaseELMO]


S

SafeQuorum [in VLSM.Examples.Paxos.Voting]
SafeStart [in VLSM.Examples.Paxos.Voting]
sc_wsb_r [in VLSM.Examples.ELMO.UMO]
sc_wsb_l [in VLSM.Examples.ELMO.UMO]
sc_refl [in VLSM.Examples.ELMO.UMO]
Send [in VLSM.Examples.ELMO.BaseELMO]
SFurther [in VLSM.Lib.ListExtras]
SHere [in VLSM.Lib.ListExtras]
SHereAndFurther [in VLSM.Lib.ListExtras]
SkipToRound [in VLSM.Examples.Paxos.Voting]
SNil [in VLSM.Lib.ListExtras]
some_values [in VLSM.Examples.Paxos.Paxos]
Spawn [in VLSM.Core.Equivocators.Equivocators]
substate_new [in VLSM.Examples.ELMO.BaseELMO]
substate_prev [in VLSM.Examples.ELMO.BaseELMO]


T

Tcons [in VLSM.Lib.Traces]
three [in VLSM.Examples.Tutorial.Multiply]
Tnil [in VLSM.Lib.Traces]
Top [in VLSM.Examples.Tutorial.Formulas]
tpge_step [in VLSM.Core.MessageDependencies]
tpge_initial [in VLSM.Core.MessageDependencies]
transition_next [in VLSM.Core.VLSM]
two [in VLSM.Examples.Tutorial.Multiply]


U

undecided [in VLSM.Examples.Tutorial.MuddyChildrenRounds]


V

valid_state_mrec_generated [in VLSM.Core.VLSM]
valid_state_mrec_initial [in VLSM.Core.VLSM]
valid_message_mrec_generated [in VLSM.Core.VLSM]
valid_message_mrec_initial [in VLSM.Core.VLSM]
valid_message_mrec_None [in VLSM.Core.VLSM]
valid_generated_state_message [in VLSM.Core.VLSM]
valid_initial_state_message [in VLSM.Core.VLSM]
Vote [in VLSM.Examples.Paxos.Voting]


W

weight [in VLSM.Lib.Measurable]


Inductive Index

A

acceptor_label [in VLSM.Examples.Paxos.Voting]
AllOrFin [in VLSM.Examples.Paxos.Paxos]


B

BinOp [in VLSM.Examples.Tutorial.Formulas]
bisim [in VLSM.Lib.Traces]


C

ChildStatus [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
CompareAsymmetric [in VLSM.Lib.Preamble]
CompareReflexive [in VLSM.Lib.Preamble]
CompareTransitive [in VLSM.Lib.Preamble]
CompositeHasBeenObserved [in VLSM.Core.MessageDependencies]
CompositeNthNotSend [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthSentNotObserved [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_valid_transitions_from_to [in VLSM.Core.Composition]
consensus_action [in VLSM.Examples.Paxos.Consensus]
constrained_transitions_from_to [in VLSM.Core.PreloadedVLSM]


E

ELMOProtocol_valid_transition [in VLSM.Examples.ELMO.ELMO]
ELMO_component_RAM_transition [in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid [in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full [in VLSM.Examples.ELMO.ELMO]
Emittable_from_dependencies_prop [in VLSM.Core.MessageDependencies]
EquivocatorLabel [in VLSM.Core.Equivocators.Equivocators]
EvenConstraint [in VLSM.Examples.Tutorial.PrimesComposition]
ExistsSuffix [in VLSM.Lib.ListExtras]


F

finalTA [in VLSM.Lib.TraceProperties]
finalTB [in VLSM.Lib.TraceProperties]
finiteT [in VLSM.Lib.TraceProperties]
finite_valid_trace_init_to_emit [in VLSM.Core.VLSM]
finite_valid_trace_from_to [in VLSM.Core.VLSM]
finite_valid_trace_from [in VLSM.Core.VLSM]
finite_valid_trace_init_to_from_constrained [in VLSM.Core.PreloadedVLSM]
followsT [in VLSM.Lib.TraceProperties]
ForAllSuffix [in VLSM.Lib.ListExtras]
Formula [in VLSM.Examples.Tutorial.Formulas]


H

HasBeenObserved [in VLSM.Core.MessageDependencies]


I

immediate_substate [in VLSM.Examples.ELMO.BaseELMO]
index [in VLSM.Examples.Tutorial.Formulas]
index23 [in VLSM.Examples.Tutorial.Multiply]
infiniteT [in VLSM.Lib.TraceProperties]
infinite_valid_trace_from [in VLSM.Core.VLSM]
iterT [in VLSM.Lib.TraceProperties]


L

Label [in VLSM.Examples.ELMO.BaseELMO]
Label [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
leader_label [in VLSM.Examples.Paxos.Paxos]
LimitedEquivocationProp [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
LocalEvenConstraint [in VLSM.Examples.Tutorial.PrimesComposition]
local_equivocators_full_obs [in VLSM.Examples.ELMO.ELMO]


M

MachineDescriptor [in VLSM.Core.Equivocators.Equivocators]
MC_component_invariant_inductive [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Measurable [in VLSM.Lib.Measurable]
MessageHasSender [in VLSM.Examples.ELMO.ELMO]
message_valid_transitions_from_to [in VLSM.Core.VLSM]
midpointT [in VLSM.Lib.TraceProperties]
MO_component_valid [in VLSM.Examples.ELMO.MO]
MO_msg_valid [in VLSM.Examples.ELMO.MO]


N

NatFSFun [in VLSM.Lib.FinSuppFn]
ne_list_equiv [in VLSM.Lib.NeList]
ne_list [in VLSM.Lib.NeList]


O

ObservedBeforeStateOrMessage [in VLSM.Core.MessageDependencies]
option_valid_message_prop_from_constrained [in VLSM.Core.PreloadedVLSM]


P

paxos_index [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label [in VLSM.Examples.Paxos.Paxos]
paxos_message_body [in VLSM.Examples.Paxos.Paxos]


R

rec_obs [in VLSM.Examples.ELMO.BaseELMO]


S

SafeAt_alt [in VLSM.Examples.Paxos.Voting]
sent_comparable [in VLSM.Examples.ELMO.UMO]
symbol [in VLSM.Examples.Tutorial.Formulas]


T

trace [in VLSM.Lib.Traces]
Trace [in VLSM.Core.VLSM]
TraceMonotoneGlobalEquivocation [in VLSM.Core.MessageDependencies]
Trace_messages [in VLSM.Core.VLSM]


U

UMO_reachable [in VLSM.Examples.ELMO.UMO]
UMO_component_valid [in VLSM.Examples.ELMO.UMO]


V

valid_transition_next [in VLSM.Core.VLSM]
valid_state_mrec [in VLSM.Core.VLSM]
valid_message_mrec [in VLSM.Core.VLSM]
valid_state_message_prop [in VLSM.Core.VLSM]


Projection Index

A

adr [in VLSM.Examples.ELMO.BaseELMO]
adrs_eq [in VLSM.Examples.ELMO.UMO]


C

cdobst_observed_m1 [in VLSM.Core.MessageDependencies]
cdobst_output_m2 [in VLSM.Core.MessageDependencies]
cdobst_transition [in VLSM.Core.MessageDependencies]
clsoi_observed [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
clsoi_output [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
clsoi_destructor [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
compare [in VLSM.Lib.Preamble]
compare_strictorder [in VLSM.Lib.Preamble]
compare_asymmetric [in VLSM.Lib.Preamble]
compare_transitive [in VLSM.Lib.Preamble]
compare_eq [in VLSM.Lib.Preamble]
component_sees_equivocators [in VLSM.Examples.ELMO.ELMO]
component_sees_messages [in VLSM.Examples.ELMO.ELMO]
crm_computable_oracle [in VLSM.Core.Equivocation]
csm_computable_oracle [in VLSM.Core.Equivocation]
cw_chosen_position_exists [in VLSM.Core.TraceableVLSM]
cw_chosen_index_in_indices [in VLSM.Core.TraceableVLSM]
cw_proof_independent [in VLSM.Core.TraceableVLSM]


D

destination [in VLSM.Core.VLSM]
dobst_observed_m1 [in VLSM.Core.MessageDependencies]
dobst_output_m2 [in VLSM.Core.MessageDependencies]
dobst_transition [in VLSM.Core.MessageDependencies]


E

ELMO_mv_local_equivocation_limit_ok [in VLSM.Examples.ELMO.ELMO]
ELMO_mv_msg_valid_full [in VLSM.Examples.ELMO.ELMO]
ELMO_mv_no_self_equiv [in VLSM.Examples.ELMO.ELMO]
ELMO_mv_full_node [in VLSM.Examples.ELMO.ELMO]
equivocating_validators [in VLSM.Core.Equivocation]
equivocation_fault [in VLSM.Core.Equivocation]


F

final_state_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
fngee_not_sent [in VLSM.Core.MessageDependencies]
fngee_received [in VLSM.Core.MessageDependencies]
fngee_sender [in VLSM.Core.MessageDependencies]
fnlee_incomparable [in VLSM.Core.MessageDependencies]
fnlee_observed2 [in VLSM.Core.MessageDependencies]
fnlee_observed1 [in VLSM.Core.MessageDependencies]
fnlee_sender2 [in VLSM.Core.MessageDependencies]
fnlee_sender1 [in VLSM.Core.MessageDependencies]
fnslee_incomparable [in VLSM.Core.MessageDependencies]
fnslee_observed2 [in VLSM.Core.MessageDependencies]
fnslee_observed1 [in VLSM.Core.MessageDependencies]
fnslee_sender2 [in VLSM.Core.MessageDependencies]
fnslee_sender1 [in VLSM.Core.MessageDependencies]
fs_is_filter [in VLSM.Lib.StreamFilters]
fs_monotone [in VLSM.Lib.StreamFilters]
full_message_dependencies_irreflexive [in VLSM.Core.MessageDependencies]
full_message_dependencies_happens_before [in VLSM.Core.MessageDependencies]
full_trace_project_preserves_valid_trace [in VLSM.Core.VLSMProjections.VLSMEmbedding]
fvm_dependencies [in VLSM.Core.Validators.FreeCompositionValidator]
fvm_emittable [in VLSM.Core.Validators.FreeCompositionValidator]


G

gathered_1b [in VLSM.Examples.Paxos.Paxos]
ges_not_sent [in VLSM.Examples.ELMO.ELMO]
ges_recv [in VLSM.Examples.ELMO.ELMO]
ges_adr [in VLSM.Examples.ELMO.ELMO]
ges_m [in VLSM.Examples.ELMO.ELMO]
globeqv_neq [in VLSM.Examples.ELMO.MO]
globeqv_nss [in VLSM.Examples.ELMO.MO]
globeqv_cro [in VLSM.Examples.ELMO.MO]
globeqv_adr [in VLSM.Examples.ELMO.MO]
globeqv_ob [in VLSM.Examples.ELMO.MO]


H

has_been_directly_observed_stepwise_props [in VLSM.Core.Equivocation]
has_been_directly_observed_dec [in VLSM.Core.Equivocation]
has_been_directly_observed [in VLSM.Core.Equivocation]
has_been_received_stepwise_props [in VLSM.Core.Equivocation]
has_been_received_dec [in VLSM.Core.Equivocation]
has_been_received [in VLSM.Core.Equivocation]
has_been_sent_stepwise_props [in VLSM.Core.Equivocation]
has_been_sent_dec [in VLSM.Core.Equivocation]
has_been_sent [in VLSM.Core.Equivocation]


I

incs_not_equal [in VLSM.Examples.ELMO.MO]
incs_not_state_suffix21 [in VLSM.Examples.ELMO.MO]
incs_not_state_suffix12 [in VLSM.Examples.ELMO.MO]
initial_message [in VLSM.Core.VLSM]
initial_message_prop [in VLSM.Core.VLSM]
initial_state [in VLSM.Core.VLSM]
initial_state_prop [in VLSM.Core.VLSM]
input [in VLSM.Core.VLSM]
input_a [in VLSM.Core.Plans]
is_equivocating_dec [in VLSM.Core.Equivocation]
is_equivocating [in VLSM.Core.Equivocation]
is_equivocating_tracewise_witness [in VLSM.Core.Equivocation.WitnessedEquivocation]


L

l [in VLSM.Core.VLSM]
label [in VLSM.Examples.ELMO.BaseELMO]
label [in VLSM.Core.VLSM]
label_a [in VLSM.Core.Plans]
lastVote [in VLSM.Examples.Paxos.Paxos]
lceqv_incomparable [in VLSM.Examples.ELMO.MO]
lceqv_rec_obs2 [in VLSM.Examples.ELMO.MO]
lceqv_rec_obs1 [in VLSM.Examples.ELMO.MO]
lceqv_adr2 [in VLSM.Examples.ELMO.MO]
lceqv_adr1 [in VLSM.Examples.ELMO.MO]
lceqv_ob2 [in VLSM.Examples.ELMO.MO]
lceqv_ob1 [in VLSM.Examples.ELMO.MO]
lcobs_rel [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
lcobs_output_j [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
lcobs_destruct_j [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
lcobs_output_i [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
lcobs_destruct_i [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
les_incomparable [in VLSM.Examples.ELMO.ELMO]
les_obs_m2 [in VLSM.Examples.ELMO.ELMO]
les_obs_m1 [in VLSM.Examples.ELMO.ELMO]
les_adr2 [in VLSM.Examples.ELMO.ELMO]
les_adr1 [in VLSM.Examples.ELMO.ELMO]
les_m2 [in VLSM.Examples.ELMO.ELMO]
les_m1 [in VLSM.Examples.ELMO.ELMO]
lifted_transition_input_valid [in VLSM.Core.Validator]


M

maxBal [in VLSM.Examples.Paxos.Voting]
mdgee_not_sent [in VLSM.Core.MessageDependencies]
mdgee_rec_observed [in VLSM.Core.MessageDependencies]
mdgee_sender [in VLSM.Core.MessageDependencies]
mdlee_incomparable [in VLSM.Core.MessageDependencies]
mdlee_observed2 [in VLSM.Core.MessageDependencies]
mdlee_observed1 [in VLSM.Core.MessageDependencies]
mdlee_sender2 [in VLSM.Core.MessageDependencies]
mdlee_sender1 [in VLSM.Core.MessageDependencies]
message [in VLSM.Examples.ELMO.BaseELMO]
message_dependencies_are_sufficient [in VLSM.Core.MessageDependencies]
message_dependencies_are_necessary [in VLSM.Core.MessageDependencies]
MO_msg_valid_alt_recvs'' [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends' [in VLSM.Examples.ELMO.MO]
msg_status [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
msg_round [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
msg_index [in VLSM.Examples.Tutorial.MuddyChildrenRounds]


N

nel_tl [in VLSM.Lib.NeList]
nel_hd [in VLSM.Lib.NeList]
nl_tl [in VLSM.Lib.NeList]
nl_hd [in VLSM.Lib.NeList]
not_heavy [in VLSM.Core.Equivocation]
not_valid_transition_next_initial [in VLSM.Core.HistoryVLSM]


O

obs [in VLSM.Examples.ELMO.BaseELMO]
obs_prefix [in VLSM.Examples.ELMO.UMO]
oracle_step_update [in VLSM.Core.Equivocation]
oracle_no_inits [in VLSM.Core.Equivocation]
original_state [in VLSM.Core.AnnotatedVLSM]
output [in VLSM.Core.VLSM]


P

partial_trace_project_preserves_valid_trace [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
partial_projection_type [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
partial_trace_project_extends_left [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
paxos_maxBal [in VLSM.Examples.Paxos.Paxos]
projection_type [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
proper_not_oracle_holds [in VLSM.Core.Equivocation]
proper_oracle_holds [in VLSM.Core.Equivocation]
P_adr_state [in VLSM.Examples.ELMO.MO]


R

received_messages_set [in VLSM.Core.Equivocation]
rs_status [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
rs_round [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
rt_reachable [in VLSM.Core.ReachableThreshold]
rt_positive [in VLSM.Core.ReachableThreshold]


S

s [in VLSM.Examples.ELMO.MO]
sent_2a [in VLSM.Examples.Paxos.Paxos]
sent_1c [in VLSM.Examples.Paxos.Paxos]
sent_1a [in VLSM.Examples.Paxos.Paxos]
sent_messages [in VLSM.Examples.Paxos.Paxos]
sent_messages_set [in VLSM.Core.Equivocation]
state [in VLSM.Examples.ELMO.BaseELMO]
state [in VLSM.Core.VLSM]
state_validators [in VLSM.Core.Equivocation]
state_annotation [in VLSM.Core.AnnotatedVLSM]
StrictOrder_Transitive [in VLSM.Lib.Preamble]
StrictOrder_Reflexive [in VLSM.Lib.Preamble]
stuttering_embedding_preserves_valid_trace [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
stuttering_embedding_type [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
st_rs [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
st_obs [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
s0 [in VLSM.Core.VLSM]


T

tiv_state_project [in VLSM.Core.Validator]
tiv_label_project [in VLSM.Core.Validator]
trace_project_preserves_valid_trace [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
transition [in VLSM.Core.VLSM]
transition_monotonicity [in VLSM.Core.TraceableVLSM]
transition_item_project_consistency [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
tv_state_destructor_initial [in VLSM.Core.TraceableVLSM]
tv_state_destructor_transition [in VLSM.Core.TraceableVLSM]
tv_state_destructor_destination [in VLSM.Core.TraceableVLSM]
tv_monotone [in VLSM.Core.TraceableVLSM]
tv_tiv_transition [in VLSM.Core.Validator]
tv_transition [in VLSM.Core.Validator]
tv_tiv [in VLSM.Core.Validator]


U

unique_transition_to_state [in VLSM.Core.HistoryVLSM]


V

valid [in VLSM.Core.VLSM]
valid_trace_first_pstate [in VLSM.Core.VLSM]
valid_trace_forget_last [in VLSM.Core.VLSM]
valid_trace_last_pstate [in VLSM.Core.VLSM]
valid_trace_get_last [in VLSM.Core.VLSM]
valid_trace_add_last [in VLSM.Core.VLSM]
valid_decidable [in VLSM.Core.VLSM]
vlsm_machine [in VLSM.Core.VLSM]
vlsm_type [in VLSM.Core.VLSM]
votes [in VLSM.Examples.Paxos.Voting]
vt_transition [in VLSM.Core.VLSM]
vt_valid [in VLSM.Core.VLSM]


W

weak_full_trace_project_preserves_valid_trace [in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_trace_project_preserves_valid_trace [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_type [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_stuttering_embedding_preserves_valid_trace [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
weak_stuttering_embedding_type [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
weak_partial_trace_project_preserves_valid_trace [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
weak_partial_projection_type [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
weight [in VLSM.Lib.Measurable]


Section Index

P

projection_validation_constraint_subsumption [in VLSM.Core.ProjectionTraces]


S

sec_msg_dep_is_globally_equivocating_props [in VLSM.Core.MessageDependencies]
sec_CompositeHasBeenObserved_dec [in VLSM.Core.MessageDependencies]
sec_free_composition_validators [in VLSM.Core.MessageDependencies]
sec_FullMessageDependencies_happens_before [in VLSM.Core.MessageDependencies]
sec_FullMessageDependencies [in VLSM.Core.MessageDependencies]
sec_sub_composite_message_dependencies [in VLSM.Core.MessageDependencies]
sec_composite_message_dependencies_equivocation [in VLSM.Core.MessageDependencies]
sec_composite_message_dependencies [in VLSM.Core.MessageDependencies]
sec_message_dependencies_equivocation [in VLSM.Core.MessageDependencies]
sec_message_dependencies [in VLSM.Core.MessageDependencies]
sec_paxos_spec.sec_paxos_refinement_map [in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_paxos_vlsm [in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_leaders_vlsm.sec_one_leader [in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_leaders_vlsm [in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_paxos_acceptor_vlsm_lem [in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec.sec_paxos_acceptor_vlsm [in VLSM.Examples.Paxos.Paxos]
sec_paxos_spec [in VLSM.Examples.Paxos.Paxos]
sec_limited_state_equivocation.sec_equivocators_projection_constrained_limited [in VLSM.Core.Equivocators.LimitedStateEquivocation]
sec_limited_state_equivocation.sec_equivocators_projection_annotated_limited [in VLSM.Core.Equivocators.LimitedStateEquivocation]
sec_limited_state_equivocation [in VLSM.Core.Equivocators.LimitedStateEquivocation]
sec_simple_top_sort [in VLSM.Lib.TopSort]
sec_top_sort [in VLSM.Lib.TopSort]
sec_topologically_sorted.sec_topologically_sorted_fixed_list [in VLSM.Lib.TopSort]
sec_topologically_sorted [in VLSM.Lib.TopSort]
sec_min_predecessors [in VLSM.Lib.TopSort]
sec_BaseELMO_Observations [in VLSM.Examples.ELMO.BaseELMO]
sec_base_ELMO [in VLSM.Examples.ELMO.BaseELMO]
sec_formula.sec_formula_interpretation [in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_valid_message_char [in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_vlsm [in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_binop_vlsm [in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_neg_vlsm [in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_var_vlsm [in VLSM.Examples.Tutorial.Formulas]
sec_formula.sec_expression_const_vlsm [in VLSM.Examples.Tutorial.Formulas]
sec_formula [in VLSM.Examples.Tutorial.Formulas]
sec_equivocators_sub_projections [in VLSM.Core.Equivocators.EquivocatorsComposition]
sec_fully_equivocating_composition.sec_equivocating_indices_BasicEquivocation [in VLSM.Core.Equivocators.EquivocatorsComposition]
sec_fully_equivocating_composition [in VLSM.Core.Equivocators.EquivocatorsComposition]
sec_fsfun_fixed_domain.sec_fsfun_fixed_supp_value [in VLSM.Lib.FinSuppFn]
sec_fsfun_fixed_domain [in VLSM.Lib.FinSuppFn]
sec_free_composition_message_validator.sec_full_node_free_valid_message_validators [in VLSM.Core.Validators.FreeCompositionValidator]
sec_free_composition_message_validator.sec_free_valid_message_validators [in VLSM.Core.Validators.FreeCompositionValidator]
sec_free_composition_message_validator [in VLSM.Core.Validators.FreeCompositionValidator]
sec_free_composition_validator [in VLSM.Core.Validators.FreeCompositionValidator]
sec_traces [in VLSM.Lib.Traces]
sec_update_IM [in VLSM.Core.SubProjectionTraces]
sec_empty_sub_composition [in VLSM.Core.SubProjectionTraces]
sec_sub_composition_preloaded_lift [in VLSM.Core.SubProjectionTraces]
sec_sub_composition_element [in VLSM.Core.SubProjectionTraces]
sec_sub_composition_all [in VLSM.Core.SubProjectionTraces]
sec_sub_composition_sender [in VLSM.Core.SubProjectionTraces]
sec_sub_composition_incl [in VLSM.Core.SubProjectionTraces]
sec_lift_sub_state_to_preloaded [in VLSM.Core.SubProjectionTraces]
sec_sub_composition.sec_sub_projection_with_no_equivocation_constraints [in VLSM.Core.SubProjectionTraces]
sec_sub_composition.sec_induced_sub_projection_subsumption [in VLSM.Core.SubProjectionTraces]
sec_sub_composition.sec_induced_sub_projection [in VLSM.Core.SubProjectionTraces]
sec_sub_composition [in VLSM.Core.SubProjectionTraces]
sec_primes_vlsm_composition [in VLSM.Examples.Tutorial.PrimesComposition]
sec_free_composition [in VLSM.Examples.Tutorial.PrimesComposition]
sec_composition [in VLSM.Examples.Tutorial.PrimesComposition]
sec_radix_vlsm [in VLSM.Examples.Tutorial.PrimesComposition]
sec_msg_dep_limited_byzantine_traces [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
sec_limited_byzantine_traces.sec_fixed_limited_selection [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
sec_limited_byzantine_traces [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
sec_equivocator_vlsm_message_properties.sec_ComputableSentMessages_lifting [in VLSM.Core.Equivocators.MessageProperties]
sec_equivocator_vlsm_message_properties.sec_has_been_sent_lifting [in VLSM.Core.Equivocators.MessageProperties]
sec_equivocator_vlsm_message_properties.sec_has_been_received_lifting [in VLSM.Core.Equivocators.MessageProperties]
sec_equivocator_vlsm_message_properties.sec_oracle_lifting [in VLSM.Core.Equivocators.MessageProperties]
sec_equivocator_vlsm_message_properties [in VLSM.Core.Equivocators.MessageProperties]
sec_reachable_threshold_props [in VLSM.Core.ReachableThreshold]
sec_equivocator_state_append_projection [in VLSM.Core.Equivocators.EquivocatorReplay]
sec_trace_properties [in VLSM.Lib.TraceProperties]
sec_VLSM_eq_properties [in VLSM.Core.VLSMProjections.VLSMEquality]
sec_VLSM_equality [in VLSM.Core.VLSMProjections.VLSMEquality]
sec_transitivity_props [in VLSM.Core.VLSMProjections]
sec_same_VLSM_embedding [in VLSM.Core.VLSMProjections]
sec_voting_simulates_consensus [in VLSM.Examples.Paxos.Voting]
sec_voting_spec.sec_voting_vlsm [in VLSM.Examples.Paxos.Voting]
sec_voting_spec.sec_acceptor_vlsm.sec_acceptor_state_predicates [in VLSM.Examples.Paxos.Voting]
sec_voting_spec.sec_acceptor_vlsm [in VLSM.Examples.Paxos.Voting]
sec_voting_spec [in VLSM.Examples.Paxos.Voting]
sec_fixed_non_equivocator_lifting [in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocation_no_equivocators [in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocator_lifting [in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_Fixed_eq_StrongFixed [in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocator_sub_projection.sec_fixed_finite_valid_trace_sub_projection_helper_lemmas [in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocator_sub_projection [in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocation_index_incl [in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocation_without_fullnode.sec_strong_fixed_equivocation [in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_fixed_equivocation_without_fullnode [in VLSM.Core.Equivocation.FixedSetEquivocation]
sec_has_been_received_in_state [in VLSM.Core.Equivocation]
sec_all_traces_to_valid_state_are_valid [in VLSM.Core.Equivocation]
sec_has_been_sent_irrelevance [in VLSM.Core.Equivocation]
sec_cannot_resend_message [in VLSM.Core.Equivocation]
sec_composite_computable_sent_received_observed [in VLSM.Core.Equivocation]
sec_CompositeComputableMessages [in VLSM.Core.Equivocation]
sec_composite.sec_composite_has_been_received [in VLSM.Core.Equivocation]
sec_composite.sec_stepwise_props [in VLSM.Core.Equivocation]
sec_composite [in VLSM.Core.Equivocation]
sec_computable_sent_received_observed.sec_computable_observed [in VLSM.Core.Equivocation]
sec_computable_sent_received_observed [in VLSM.Core.Equivocation]
sec_sent_received_observed_capabilities [in VLSM.Core.Equivocation]
sec_stepwise_from_trace [in VLSM.Core.Equivocation]
sec_trace_from_stepwise [in VLSM.Core.Equivocation]
sec_simple [in VLSM.Core.Equivocation]
sec_finite_valid_trace_init_to_alt [in VLSM.Core.VLSM]
sec_valid_transition_props [in VLSM.Core.VLSM]
sec_same_VLSM.sec_definitions [in VLSM.Core.VLSM]
sec_same_VLSM [in VLSM.Core.VLSM]
sec_VLSM [in VLSM.Core.VLSM]
sec_trace_lemmas [in VLSM.Core.VLSM]
sec_traces [in VLSM.Core.VLSM]
sec_equivocators_composition_vlsm_projection [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
sec_equivocators_composition_sub_projections.sec_seeded_equivocators_valid_trace_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
sec_equivocators_composition_sub_projections [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
sec_equivocators_composition_projections [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
sec_basic_VLSM_embedding.sec_weak_embedding [in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_basic_VLSM_embedding [in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding.sec_embedding_properties [in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding.sec_weak_projection_properties [in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding.sec_basic_definitions [in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding.sec_pre_definitions [in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_VLSM_embedding [in VLSM.Core.VLSMProjections.VLSMEmbedding]
sec_composite_validator_byzantine_traces [in VLSM.Core.ByzantineTraces]
sec_single_validator_byzantine_traces [in VLSM.Core.ByzantineTraces]
sec_byzantine_traces.sec_preloaded_with_all_messages_byzantine_alt [in VLSM.Core.ByzantineTraces]
sec_byzantine_traces [in VLSM.Core.ByzantineTraces]
sec_23_composition.sec_state_update_23_def [in VLSM.Examples.Tutorial.Multiply]
sec_23_composition [in VLSM.Examples.Tutorial.Multiply]
sec_full_node_constraint [in VLSM.Core.Equivocation.FullNode]
sec_traceable_vlsm_composition [in VLSM.Core.TraceableVLSM]
sec_traceable_vlsm_props [in VLSM.Core.TraceableVLSM]
sec_valid_plans [in VLSM.Core.Plans]
sec_apply_plans [in VLSM.Core.Plans]
sec_plans [in VLSM.Core.Plans]
sec_ELMO.sec_ELMOProtocol [in VLSM.Examples.ELMO.ELMO]
sec_ELMO.sec_MessageDependencies_ELMO_component [in VLSM.Examples.ELMO.ELMO]
sec_ELMO.sec_TraceableVLSM_ELMO_component [in VLSM.Examples.ELMO.ELMO]
sec_ELMO.sec_ELMO_component_lemmas [in VLSM.Examples.ELMO.ELMO]
sec_ELMO [in VLSM.Examples.ELMO.ELMO]
sec_all_equivocating [in VLSM.Core.Equivocators.SimulatingFree]
sec_seeded_all_equivocating [in VLSM.Core.Equivocators.SimulatingFree]
sec_generalized_constraints [in VLSM.Core.Equivocators.SimulatingFree]
sec_minimal_equivocation_trace [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
sec_minimal_equivocation_choice [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
sec_other_defs [in VLSM.Lib.StdppListSet]
sec_fst_defs [in VLSM.Lib.StdppListSet]
sec_Forall2_Exists2_props [in VLSM.Lib.StdppExtras]
sec_stream_concat_map [in VLSM.Lib.StreamFilters]
sec_stream_map_option [in VLSM.Lib.StreamFilters]
sec_stream_filter_positions [in VLSM.Lib.StreamFilters]
sec_has_limited_equivocation [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_fixed_limited_message_equivocation [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_tracewise_limited_message_equivocation [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_basic_limited_message_equivocation [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_limited_message_equivocation [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
sec_basic_VLSM_projection.sec_weak_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_basic_VLSM_projection.sec_basic_VLSM_projection_type [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_basic_VLSM_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_projection_properties.sec_projection_friendliness [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_projection_properties [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_weak_projection_properties [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_VLSM_projection_definitions [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_projection_transition_consistency_None [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_projection_type_properties [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection.sec_pre_definitions [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_VLSM_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
sec_find_least_among [in VLSM.Lib.Preamble]
sec_witnessed_equivocation_fixed_set [in VLSM.Core.Equivocation.WitnessedEquivocation]
sec_witnessed_equivocation.sec_witnessed_equivocation_properties [in VLSM.Core.Equivocation.WitnessedEquivocation]
sec_witnessed_equivocation [in VLSM.Core.Equivocation.WitnessedEquivocation]
sec_composite_annotated_vlsm_projections [in VLSM.Core.AnnotatedVLSM]
sec_annotated_vlsm_projections [in VLSM.Core.AnnotatedVLSM]
sec_annotated_vlsm [in VLSM.Core.AnnotatedVLSM]
sec_map [in VLSM.Lib.FinSetExtras]
sec_fin_set.sec_filter [in VLSM.Lib.FinSetExtras]
sec_fin_set.sec_general [in VLSM.Lib.FinSetExtras]
sec_fin_set [in VLSM.Lib.FinSetExtras]
sec_all_equivocating.sec_seeded_no_equiv [in VLSM.Core.Equivocators.FullReplayTraces]
sec_all_equivocating.sec_preloaded_constrained_projection [in VLSM.Core.Equivocators.FullReplayTraces]
sec_all_equivocating [in VLSM.Core.Equivocators.FullReplayTraces]
sec_basic_VLSM_incl [in VLSM.Core.VLSMProjections.VLSMInclusion]
sec_VLSM_incl_properties [in VLSM.Core.VLSMProjections.VLSMInclusion]
sec_VLSM_incl_preservation [in VLSM.Core.VLSMProjections.VLSMInclusion]
sec_VLSM_inclusion [in VLSM.Core.VLSMProjections.VLSMInclusion]
sec_composite_state [in VLSM.Core.Composition]
sec_composite_valid_transition [in VLSM.Core.Composition]
sec_same_IM_embedding.sec_preloaded_constrained [in VLSM.Core.Composition]
sec_same_IM_embedding [in VLSM.Core.Composition]
sec_empty_composition_properties [in VLSM.Core.Composition]
sec_composite_plan_properties [in VLSM.Core.Composition]
sec_composite_decidable_initial_message [in VLSM.Core.Composition]
sec_binary_free_composition [in VLSM.Core.Composition]
sec_VLSM_composition [in VLSM.Core.Composition]
sec_basic_VLSM_stuttering_embedding.sec_weak_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_basic_VLSM_stuttering_embedding.sec_strong_VLSM_stuttering_embedding_type [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_basic_VLSM_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_properties.sec_stuttering_embedding_friendliness [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_properties.sec_stuttering_embedding_trace_projection_redefinitions [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_properties [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_weak_stuttering_embedding_properties.sec_weak_stuttering_embedding_trace_projection_redefinitions [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_weak_stuttering_embedding_properties [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_VLSM_stuttering_embedding_definitions [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_type_properties.sec_pre_properties [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_stuttering_embedding_type_properties [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_pre_definitions [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sec_consensus_spec [in VLSM.Examples.Paxos.Consensus]
sec_composite_no_equivocation.sec_seeded_composite_vlsm_no_equivocation.sec_seeded_composite_vlsm_no_equivocation_definition [in VLSM.Core.Equivocation.NoEquivocation]
sec_composite_no_equivocation.sec_seeded_composite_vlsm_no_equivocation [in VLSM.Core.Equivocation.NoEquivocation]
sec_composite_no_equivocation.sec_composite_no_equivocation_invariants [in VLSM.Core.Equivocation.NoEquivocation]
sec_composite_no_equivocation [in VLSM.Core.Equivocation.NoEquivocation]
sec_no_equivocation_invariants [in VLSM.Core.Equivocation.NoEquivocation]
sec_no_equivocations [in VLSM.Core.Equivocation.NoEquivocation]
sec_sender_safety_can_emit_projection [in VLSM.Core.EquivocationProjections]
sec_same_IM_oracle_properties [in VLSM.Core.EquivocationProjections]
sec_incl_oracle [in VLSM.Core.EquivocationProjections]
sec_embedding_oracle [in VLSM.Core.EquivocationProjections]
sec_weak_embedding_oracle.sec_selectors [in VLSM.Core.EquivocationProjections]
sec_weak_embedding_oracle [in VLSM.Core.EquivocationProjections]
sec_projection_oracle.sec_selectors [in VLSM.Core.EquivocationProjections]
sec_projection_oracle [in VLSM.Core.EquivocationProjections]
sec_trace_classical_properties [in VLSM.Lib.TraceClassicalProperties]
sec_msg_dep_fixed_limited_equivocation [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_full_node_msg_dep_limited_equivocation_equivalence [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_full_node_limited_equivocation [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_msg_dep_limited_equivocation [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_coequivocating_senders_limited_equivocation [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
sec_equivocator_vlsm_projections [in VLSM.Core.Equivocators.EquivocatorsProjections]
sec_muddy [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
sec_full_node_fixed_set_equivocation [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
sec_msg_dep_fixed_set_equivocation [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
sec_measurable_props [in VLSM.Lib.Measurable]
sec_constraint_subsumption [in VLSM.Core.ConstrainedVLSM]
sec_constrained_vlsm_commutation_lemmas [in VLSM.Core.ConstrainedVLSM]
sec_constrained_vlsm_lemmas [in VLSM.Core.ConstrainedVLSM]
sec_constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
sec_tracewise_equivocation [in VLSM.Core.Equivocation.TraceWiseEquivocation]
sec_fixed_non_equivocating_vs_byzantine.sec_validator_fixed_set_byzantine.sec_assuming_initial_messages_lift [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_non_equivocating_vs_byzantine.sec_validator_fixed_set_byzantine [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_non_equivocating_vs_byzantine [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_byzantine_traces.sec_fixed_byzantine_traces_as_preloaded [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_byzantine_traces.sec_fixed_byzantine_traces_as_projections [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_fixed_byzantine_traces [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_emit_any_signed_message_vlsm [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
sec_history_vlsm_composite [in VLSM.Core.HistoryVLSM]
sec_history_vlsm_preloaded [in VLSM.Core.HistoryVLSM]
sec_all_equivocating [in VLSM.Core.Equivocators.FixedEquivocation]
sec_from_equivocators_to_components [in VLSM.Core.Equivocators.FixedEquivocation]
sec_fixed_equivocation_with_fullnode [in VLSM.Core.Equivocators.FixedEquivocation]
sec_equivocators_fixed_equivocations_vlsm [in VLSM.Core.Equivocators.FixedEquivocation]
sec_VLSM_partial_projection.sec_partial_projection_properties [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
sec_VLSM_partial_projection.sec_weak_partial_projection_properties [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
sec_VLSM_partial_projection [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
sec_constrained_direct_defs [in VLSM.Core.PreloadedVLSM]
sec_VLSM_eq_preloaded_properties [in VLSM.Core.PreloadedVLSM]
sec_VLSM_incl_preloaded_properties [in VLSM.Core.PreloadedVLSM]
sec_preloaded_vlsm_inclusion [in VLSM.Core.PreloadedVLSM]
sec_preloaded_vlsm_embedding [in VLSM.Core.PreloadedVLSM]
sec_preloaded_vlsm_total_projection [in VLSM.Core.PreloadedVLSM]
sec_preloaded_valid_transition [in VLSM.Core.PreloadedVLSM]
sec_preloaded_with_all_messages_vlsm [in VLSM.Core.PreloadedVLSM]
sec_constrained_defs [in VLSM.Core.PreloadedVLSM]
sec_prod_powers [in VLSM.Lib.NatExtras]
sec_no_equivocation [in VLSM.Core.Equivocators.FixedEquivocationSimulation]
sec_fixed_equivocating [in VLSM.Core.Equivocators.FixedEquivocationSimulation]
sec_equivocator_vlsm_valid_state_projections [in VLSM.Core.Equivocators.Equivocators]
sec_equivocator_vlsm [in VLSM.Core.Equivocators.Equivocators]
sec_composition [in VLSM.Core.ProjectionTraces]
sec_projection_friendliness_sufficient_condition [in VLSM.Core.ProjectionTraces]
sec_fixed_projection [in VLSM.Core.ProjectionTraces]
sec_binary_free_composition_projections [in VLSM.Core.ProjectionTraces]
sec_projection_traces_membership [in VLSM.Core.ProjectionTraces]
sec_preloaded_projection_traces [in VLSM.Core.ProjectionTraces]
sec_projections [in VLSM.Core.ProjectionTraces]
sec_self_validator_vlsm [in VLSM.Core.Validator]
sec_component_projection_validator_alt [in VLSM.Core.Validator]
sec_component_projection_validator [in VLSM.Core.Validator]
sec_induced_validator_validators.sec_preloaded_with_all_messages_validator_proj [in VLSM.Core.Validator]
sec_induced_validator_validators [in VLSM.Core.Validator]
sec_projection_induced_validator_incl [in VLSM.Core.Validator]
sec_projection_induced_validator.sec_projection_induced_validator_as_projection.sec_projection_induced_friendliness [in VLSM.Core.Validator]
sec_projection_induced_validator.sec_projection_induced_validator_as_projection [in VLSM.Core.Validator]
sec_projection_induced_validator.sec_projection_induced_validator_pre_definitions [in VLSM.Core.Validator]
sec_projection_induced_validator [in VLSM.Core.Validator]
sec_projection_validator [in VLSM.Core.Validator]
sec_input_validation_definitions [in VLSM.Core.Validator]
sec_limited_equivocation_simulation.sec_equivocators_simulating_annotated_limited [in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
sec_limited_equivocation_simulation [in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
sec_fixed_limited_state_equivocation [in VLSM.Core.Equivocators.LimitedEquivocationSimulation]
sec_temporal [in VLSM.Lib.StreamExtras]
sec_infinitely_often [in VLSM.Lib.StreamExtras]
sec_max_suffix [in VLSM.Lib.ListExtras]
sec_max_prefix [in VLSM.Lib.ListExtras]
sec_suffix_quantifiers [in VLSM.Lib.ListExtras]
sec_list_annotate_props [in VLSM.Lib.ListExtras]
sec_UMO.sec_UMOProtocol [in VLSM.Examples.ELMO.UMO]
sec_UMO.sec_UMO_component_lemmas [in VLSM.Examples.ELMO.UMO]
sec_UMO [in VLSM.Examples.ELMO.UMO]
sec_MO.sec_MOProtocol [in VLSM.Examples.ELMO.MO]
sec_MO.sec_MO_component_lemmas [in VLSM.Examples.ELMO.MO]
sec_MO.sec_alternative_definition_of_validity [in VLSM.Examples.ELMO.MO]
sec_MO [in VLSM.Examples.ELMO.MO]


Instance Index

A

acceptor_surj [in VLSM.Examples.Paxos.Paxos]
acceptor_inj [in VLSM.Examples.Paxos.Paxos]
acceptor_label_dec [in VLSM.Examples.Paxos.Voting]
add_fsfun_assoc [in VLSM.Lib.FinSuppFn]
add_fsfun_right_id [in VLSM.Lib.FinSuppFn]
add_fsfun_left_id [in VLSM.Lib.FinSuppFn]
add_fsfun_comm [in VLSM.Lib.FinSuppFn]
add_fsfun_proper [in VLSM.Lib.FinSuppFn]
AllOrFin_eq_dec [in VLSM.Examples.Paxos.Paxos]
AMap_FinMapDom [in VLSM.Examples.Paxos.Paxos]
annotated_initial_state_prop_inhabited [in VLSM.Core.AnnotatedVLSM]
ASet_Dom [in VLSM.Examples.Paxos.Paxos]


B

ballot_state_empty [in VLSM.Examples.Paxos.Paxos]
ballot_chose_dec [in VLSM.Examples.Paxos.Voting]
Bempty [in VLSM.Examples.Paxos.Voting]
Bfmap [in VLSM.Examples.Paxos.Voting]
binary_index_inhabited [in VLSM.Core.Composition]
binary_index_dec [in VLSM.Core.Composition]
Blookup [in VLSM.Examples.Paxos.Voting]
Bmap_dom [in VLSM.Examples.Paxos.Voting]
Bmap_eq_dec [in VLSM.Examples.Paxos.Voting]
Bmerge [in VLSM.Examples.Paxos.Voting]
Bomap [in VLSM.Examples.Paxos.Voting]
bool_decision [in VLSM.Lib.Preamble]
Bpartial_alter [in VLSM.Examples.Paxos.Voting]


C

cancel_pi [in VLSM.Examples.Paxos.Paxos]
ChildStatus_eq_dec [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
coeqv_limited_equivocation_vlsm_has_been_sent [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
comparable_dec [in VLSM.Lib.Preamble]
comparable_reflexive [in VLSM.Lib.Preamble]
comparable_symmetric [in VLSM.Lib.Preamble]
CompareStrictOrder_list_compare [in VLSM.Lib.Preamble]
compare_lt_dec [in VLSM.Lib.Preamble]
compare_asymmetric_intro [in VLSM.Lib.Preamble]
compare_eq_dec [in VLSM.Lib.Preamble]
CompositeHasBeenObserved_dec [in VLSM.Core.MessageDependencies]
composite_message_dependencies [in VLSM.Core.MessageDependencies]
composite_latest_sent_not_observed_dec [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_not_send_dec [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_initial_state_inh [in VLSM.Core.Composition]
ComputableReceivedMessages_HasBeenReceivedCapability [in VLSM.Core.Equivocation]
ComputableReceivedMessages_ELMO_component [in VLSM.Examples.ELMO.ELMO]
ComputableSentMessages_HasBeenSentCapability [in VLSM.Core.Equivocation]
ComputableSentMessages_ELMO_component [in VLSM.Examples.ELMO.ELMO]
computable_received_message_has_been_sent_dec [in VLSM.Core.Equivocation]
computable_sent_message_has_been_sent_dec [in VLSM.Core.Equivocation]
constrained_vlsm_HasBeenDirectlyObservedCapability [in VLSM.Core.Equivocation]
constrained_vlsm_HasBeenReceivedCapability [in VLSM.Core.Equivocation]
constrained_vlsm_HasBeenSentCapability [in VLSM.Core.Equivocation]


D

Decision_MC_initial_state_prop [in VLSM.Examples.Tutorial.MuddyChildrenRounds]


E

elem_of_all_or_fin [in VLSM.Examples.Paxos.Paxos]
elem_of_ne_list_dec [in VLSM.Lib.NeList]
elem_of_ne_list [in VLSM.Lib.NeList]
ELMOTransitionMonotoneVLSM [in VLSM.Examples.ELMO.ELMO]
ELMO_component_tc_composite_observed_before_send_irreflexive [in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators_dec [in VLSM.Examples.ELMO.ELMO]
ELMO_local_equivocation [in VLSM.Examples.ELMO.ELMO]
emit_any_message_vlsm_state_inh [in VLSM.Core.ByzantineTraces]
emit_any_signed_message_vlsm_state_inh [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
empty_validators_inhabited [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
EqDecision_Message [in VLSM.Examples.ELMO.BaseELMO]
EqDecision_Observation [in VLSM.Examples.ELMO.BaseELMO]
EqDecision_State [in VLSM.Examples.ELMO.BaseELMO]
EqDecision_Label [in VLSM.Examples.ELMO.BaseELMO]
Equivalence_set_eq [in VLSM.Lib.ListSetExtras]
equivocating_indices_BasicEquivocation [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocation_in_trace_dec [in VLSM.Core.Equivocation]
equivocation_dec_tracewise [in VLSM.Core.Equivocation.TraceWiseEquivocation]
equivocator_HasBeenSentCapability [in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_sent_dec [in VLSM.Core.Equivocators.MessageProperties]
equivocator_HasBeenReceivedCapability [in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_received_dec [in VLSM.Core.Equivocators.MessageProperties]
equivocator_initial_state_inh [in VLSM.Core.Equivocators.Equivocators]
eq_equiv [in VLSM.Core.VLSM]
eq_dec_index23 [in VLSM.Examples.Tutorial.Multiply]
existing_descriptor_dec [in VLSM.Core.Equivocators.Equivocators]


F

FinMapDom_Bmap_Bset [in VLSM.Examples.Paxos.Voting]
FinMap_Ballot_Bmap [in VLSM.Examples.Paxos.Voting]
finset_equiv_dec [in VLSM.Lib.FinSetExtras]
fin_supp_proper [in VLSM.Lib.FinSuppFn]
fin_set_singleton_eq_dec [in VLSM.Lib.FinSetExtras]
fin_set_empty_eq_dec [in VLSM.Lib.FinSetExtras]
fin_set_subseteq_dec [in VLSM.Lib.FinSetExtras]
flatten_formula_inj [in VLSM.Examples.Tutorial.Formulas]
free_composite_HasBeenDirectlyObservedCapability [in VLSM.Core.Equivocation]
free_composite_HasBeenReceivedCapability [in VLSM.Core.Equivocation]
free_composite_HasBeenSentCapability [in VLSM.Core.Equivocation]
fsfun_eq_dec [in VLSM.Lib.FinSuppFn]
fsfun_has_fin_supp [in VLSM.Lib.FinSuppFn]
fsfun_project_proper [in VLSM.Lib.FinSuppFn]
fsfun_equivalence [in VLSM.Lib.FinSuppFn]
fsfun_equiv [in VLSM.Lib.FinSuppFn]
fsfun_prod_proper [in VLSM.Lib.NatExtras]


H

HasBeenDirectlyObservedCapability_from_sent_received [in VLSM.Core.Equivocation]
HasBeenDirectlyObservedCapability_ELMO_component [in VLSM.Examples.ELMO.ELMO]
HasBeenDirectlyObservedCapability_UMO_component [in VLSM.Examples.ELMO.UMO]
HasBeenDirectlyObservedCapability_MOComponent [in VLSM.Examples.ELMO.MO]
HasBeenReceivedCapability_UMO_component [in VLSM.Examples.ELMO.UMO]
HasBeenReceivedCapability_MOComponent [in VLSM.Examples.ELMO.MO]
HasBeenSentCapability_UMO_component [in VLSM.Examples.ELMO.UMO]
HasBeenSentCapability_MOComponent [in VLSM.Examples.ELMO.MO]


I

IM_HasBeenSentCapability [in VLSM.Examples.Paxos.Paxos]
incomparable_sym [in VLSM.Examples.ELMO.UMO]
index_dec [in VLSM.Examples.Tutorial.Formulas]
Inhabited_MC_initial_state_type [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Inhabited_UMO_component_initial_state_type [in VLSM.Examples.ELMO.UMO]
in_futures_trans [in VLSM.Core.VLSM]
Irreflexive_state_suffix [in VLSM.Examples.ELMO.UMO]
isReceive_dec [in VLSM.Examples.ELMO.BaseELMO]
isSend_dec [in VLSM.Examples.ELMO.BaseELMO]
is_equivocating_state_dec [in VLSM.Core.Equivocators.Equivocators]
item_equivocating_in_trace_dec [in VLSM.Core.Equivocation.TraceWiseEquivocation]


L

latest_composite_observed_before_send_irreflexive [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
latest_composite_observed_before_send_trans [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
leaders_has_been_sent_cap [in VLSM.Examples.Paxos.Paxos]
leaders_has_been_sent_dec [in VLSM.Examples.Paxos.Paxos]
list_subseteq_dec [in VLSM.Lib.ListExtras]
local_equivocators_full_dec [in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_obs_dec [in VLSM.Examples.ELMO.ELMO]


M

MC_obs_equiv_equiv [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_trans [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_symm [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equiv_refl [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_initial_state_dec [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MessageDependencies_ELMO_component [in VLSM.Examples.ELMO.ELMO]
MessageDependencies_MO_component [in VLSM.Examples.ELMO.MO]
Message_validator_measurable [in VLSM.Examples.ELMO.BaseELMO]
Message_sender_index_inj [in VLSM.Examples.ELMO.BaseELMO]
Message_FullMessageDependencies [in VLSM.Examples.ELMO.BaseELMO]
msg_dep_happens_before_strict [in VLSM.Core.MessageDependencies]
msg_dep_happens_before_irrefl [in VLSM.Core.MessageDependencies]
msg_dep_happens_before_dec [in VLSM.Core.MessageDependencies]
multiplying_initial_state_type_inhabited [in VLSM.Examples.Tutorial.Multiply]


N

ne_list_subseteq [in VLSM.Lib.NeList]
ne_list_join [in VLSM.Lib.NeList]
ne_list_fmap [in VLSM.Lib.NeList]
ne_list_bind [in VLSM.Lib.NeList]
ne_list_ret [in VLSM.Lib.NeList]
NonEmptyList_inhabited [in VLSM.Lib.NeList]
not_equivocating_equivocator_descriptors_dec [in VLSM.Core.Equivocators.EquivocatorsComposition]


P

paxos_index_finite [in VLSM.Examples.Paxos.Paxos]
paxos_index_eq_dec [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_has_been_sent_inst [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_has_been_sent_dec [in VLSM.Examples.Paxos.Paxos]
paxos_message_eq_dec [in VLSM.Examples.Paxos.Paxos]
pi_cancel [in VLSM.Examples.Paxos.Paxos]
precedes_P_strict [in VLSM.Lib.TopSort]
precedes_P_irreflexive [in VLSM.Lib.TopSort]
precedes_P_transitive [in VLSM.Lib.TopSort]
preloaded_HasBeenReceivedCapability [in VLSM.Core.Equivocation]
preloaded_HasBeenSentCapability [in VLSM.Core.Equivocation]
preloaded_TransitionMonotoneVLSM [in VLSM.Core.TraceableVLSM]
preloaded_history_vlsm [in VLSM.Core.HistoryVLSM]
primes_inhabited [in VLSM.Lib.NatExtras]
prime_decision [in VLSM.Lib.NatExtras]
prod_powers_aux_proper [in VLSM.Lib.NatExtras]
projection_induced_initial_state_inh [in VLSM.Core.Validator]
projT1_proper [in VLSM.Lib.FinSuppFn]


R

ReachableThreshold_Address [in VLSM.Examples.ELMO.ELMO]
Rle_transitive [in VLSM.Lib.RealsExtras]


S

sent_by_non_equivocating_dec [in VLSM.Core.Equivocation.FixedSetEquivocation]
sent_comparable_dec [in VLSM.Examples.ELMO.UMO]
sent_comparable_sym [in VLSM.Examples.ELMO.UMO]
set_elem_of_subseteq [in VLSM.Lib.ListSetExtras]
set_eq_elem_of [in VLSM.Lib.ListSetExtras]
set_eq_dec [in VLSM.Lib.ListSetExtras]
state_suffix_dec [in VLSM.Examples.ELMO.UMO]
stdpp_finite_sub_index [in VLSM.Core.SubProjectionTraces]
StrictlyComparable_list [in VLSM.Lib.Preamble]
StrictlyComparable_pair [in VLSM.Lib.Preamble]
StrictlyComparable_option [in VLSM.Lib.Preamble]
StrictlyComparable_dsig [in VLSM.Lib.Preamble]
StrictOrder_state_suffix [in VLSM.Examples.ELMO.UMO]
sub_index_prop_dec [in VLSM.Core.SubProjectionTraces]
succ_fsfun_proper [in VLSM.Lib.FinSuppFn]
sum_list_with_proper [in VLSM.Lib.StdppExtras]
sum_weights_list_permutation_proper [in VLSM.Lib.Measurable]
symbol_dec [in VLSM.Examples.Tutorial.Formulas]


T

TraceableVLSM_ELMO_component [in VLSM.Examples.ELMO.ELMO]
trace_with_start_valid_trace_init_to [in VLSM.Core.VLSM]
trace_with_start_valid_trace_from_to [in VLSM.Core.VLSM]
trace_with_start_valid_trace [in VLSM.Core.VLSM]
trace_with_start_valid_trace_from [in VLSM.Core.VLSM]
trace_with_last_valid_trace_init [in VLSM.Core.VLSM]
trace_with_last_valid_trace_from [in VLSM.Core.VLSM]
Transitive_state_suffix [in VLSM.Examples.ELMO.UMO]
TripleStrictlyComparable [in VLSM.Lib.Preamble]


U

update_fsfun_proper [in VLSM.Lib.FinSuppFn]
update_IM_complement_Hbs [in VLSM.Core.SubProjectionTraces]


V

voted_for_dec [in VLSM.Examples.Paxos.Voting]


Abbreviation Index

A

ASet [in VLSM.Examples.Paxos.Paxos]


B

Bset [in VLSM.Examples.Paxos.Voting]


C

composition_constraint [in VLSM.Examples.Paxos.Voting]


D

decide_eq [in VLSM.Lib.Preamble]


H

happensBefore [in VLSM.Examples.ELMO.ELMO]


P

Pred_Stable_In [in VLSM.Examples.Paxos.Paxos]
propT [in VLSM.Lib.TraceClassicalProperties]


T

trace [in VLSM.Lib.TraceProperties]
trace [in VLSM.Lib.TraceClassicalProperties]


V

VLSM_eq [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_incl [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_incl [in VLSM.Core.VLSMProjections.VLSMInclusion]


Definition Index

A

acceptor_votes_safe_prop [in VLSM.Examples.Paxos.Voting]
acceptor_no_conflict_prop [in VLSM.Examples.Paxos.Voting]
acceptor_vlsm [in VLSM.Examples.Paxos.Voting]
acceptor_machine [in VLSM.Examples.Paxos.Voting]
acceptor_transition [in VLSM.Examples.Paxos.Voting]
acceptor_valid [in VLSM.Examples.Paxos.Voting]
acceptor_initial_state_prop [in VLSM.Examples.Paxos.Voting]
acceptor_initial [in VLSM.Examples.Paxos.Voting]
acceptor_type [in VLSM.Examples.Paxos.Voting]
acceptor_label_sind [in VLSM.Examples.Paxos.Voting]
acceptor_label_rec [in VLSM.Examples.Paxos.Voting]
acceptor_label_ind [in VLSM.Examples.Paxos.Voting]
acceptor_label_rect [in VLSM.Examples.Paxos.Voting]
addObservation [in VLSM.Examples.ELMO.BaseELMO]
addObservations [in VLSM.Examples.ELMO.BaseELMO]
addObservationsToMessage [in VLSM.Examples.ELMO.BaseELMO]
addObservationToMessage [in VLSM.Examples.ELMO.BaseELMO]
addObservation_both_ind [in VLSM.Examples.ELMO.BaseELMO]
addObservation' [in VLSM.Examples.ELMO.BaseELMO]
add_fsfun [in VLSM.Lib.FinSuppFn]
add_fsfun_supp [in VLSM.Lib.FinSuppFn]
add_in_sorted_list_fn [in VLSM.Lib.SortedLists]
adr2idx [in VLSM.Examples.ELMO.BaseELMO]
allQuorum [in VLSM.Examples.Paxos.Voting]
all_dependencies_emittable_from_dependencies_prop [in VLSM.Core.MessageDependencies]
all_traces_have_message_prop [in VLSM.Core.Equivocation]
all_equivocating_replayed_trace_from [in VLSM.Core.Equivocators.SimulatingFree]
alternate_byzantine_trace_prop [in VLSM.Core.ByzantineTraces]
andA [in VLSM.Lib.TraceProperties]
AndT [in VLSM.Lib.TraceProperties]
annotated_composite_induced_validator_is_projection [in VLSM.Core.AnnotatedVLSM]
annotated_composite_induced_validator [in VLSM.Core.AnnotatedVLSM]
annotated_projection_validator_prop_alt [in VLSM.Core.AnnotatedVLSM]
annotated_composite_state_lift [in VLSM.Core.AnnotatedVLSM]
annotated_composite_label_lift [in VLSM.Core.AnnotatedVLSM]
annotated_message_validator_prop [in VLSM.Core.AnnotatedVLSM]
annotated_projection_validator_prop [in VLSM.Core.AnnotatedVLSM]
annotated_composite_state_project [in VLSM.Core.AnnotatedVLSM]
annotated_composite_label_project [in VLSM.Core.AnnotatedVLSM]
annotated_vlsm [in VLSM.Core.AnnotatedVLSM]
annotated_vlsm_machine [in VLSM.Core.AnnotatedVLSM]
annotated_transition [in VLSM.Core.AnnotatedVLSM]
annotated_valid [in VLSM.Core.AnnotatedVLSM]
annotated_initial_state_prop [in VLSM.Core.AnnotatedVLSM]
annotated_type [in VLSM.Core.AnnotatedVLSM]
annotate_trace [in VLSM.Core.AnnotatedVLSM]
annotate_trace_from [in VLSM.Core.AnnotatedVLSM]
annotate_trace_item [in VLSM.Core.AnnotatedVLSM]
AppendT [in VLSM.Lib.TraceProperties]
appendT [in VLSM.Lib.TraceProperties]
apply_plan_last [in VLSM.Core.Plans]
apply_plan_app [in VLSM.Core.Plans]
apply_plan [in VLSM.Core.Plans]


B

Ballot [in VLSM.Examples.Paxos.Voting]
ballots_with_votes [in VLSM.Examples.Paxos.Voting]
ballot_no_conflict_prop [in VLSM.Examples.Paxos.Voting]
ballot_proposals [in VLSM.Examples.Paxos.Voting]
ballot_chose [in VLSM.Examples.Paxos.Voting]
Ballot_peano_ind [in VLSM.Examples.Paxos.Voting]
Ballot_to_Z [in VLSM.Examples.Paxos.Voting]
Ballot' [in VLSM.Examples.Paxos.Voting]
Ballot'_to_Z [in VLSM.Examples.Paxos.Voting]
basic_equivocation_state_validators_comprehensive_prop [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
basic_limited_equivocation_composite_vlsm [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
basic_limited_equivocation_constraint [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
binary_free_composition [in VLSM.Core.Composition]
binary_IM [in VLSM.Core.Composition]
binary_index [in VLSM.Core.Composition]
binary_free_composition_snd [in VLSM.Core.ProjectionTraces]
binary_free_composition_fst [in VLSM.Core.ProjectionTraces]
binop_state_proj [in VLSM.Examples.Tutorial.Formulas]
BinOp_sind [in VLSM.Examples.Tutorial.Formulas]
BinOp_ind [in VLSM.Examples.Tutorial.Formulas]
binop_state_cast [in VLSM.Examples.Tutorial.Formulas]
Bmap [in VLSM.Examples.Paxos.Voting]
bounded_stream_concat_map [in VLSM.Lib.StreamFilters]
bounded_stream_map_option [in VLSM.Lib.StreamFilters]
bounded_state_copies [in VLSM.Core.Equivocators.Equivocators]
bounding [in VLSM.Lib.Preamble]
build_trace_prefix_valid [in VLSM.Core.VLSM]
byzantine_trace_prop [in VLSM.Core.ByzantineTraces]
byzantine_message [in VLSM.Core.PreloadedVLSM]
byzantine_message_prop [in VLSM.Core.PreloadedVLSM]


C

calculate_safe_values [in VLSM.Examples.Paxos.Paxos]
cannot_resend_message_stepwise_prop [in VLSM.Core.Equivocation]
can_emit [in VLSM.Core.VLSM]
can_produce [in VLSM.Core.VLSM]
cat_option [in VLSM.Lib.ListExtras]
channel_authentication_prop [in VLSM.Core.Equivocation]
channel_authenticated_message [in VLSM.Core.Equivocation]
ChildStatus_sind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ChildStatus_rec [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ChildStatus_ind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
ChildStatus_rect [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
choice_function [in VLSM.Core.TraceableVLSM]
choosing_well [in VLSM.Core.TraceableVLSM]
chosen [in VLSM.Examples.Paxos.Voting]
chosen_by_ballot [in VLSM.Examples.Paxos.Voting]
chosen_transition_preserves_P [in VLSM.Core.TraceableVLSM]
coeqv_limited_equivocation_projection_validator_prop_alt [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_message_validator_prop [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_projection_validator_prop [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_annotate_trace_with_equivocators [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_vlsm [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_limited_equivocation_constraint [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_composite_transition_message_equivocators [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
coeqv_message_equivocators [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
combine_votesets [in VLSM.Examples.Paxos.Paxos]
comparable [in VLSM.Lib.Preamble]
compare_lt [in VLSM.Lib.Preamble]
complete_trace_prop [in VLSM.Core.VLSM]
complete_suffix_some [in VLSM.Lib.ListExtras]
complete_suffix [in VLSM.Lib.ListExtras]
complete_prefix_none [in VLSM.Lib.ListExtras]
complete_prefix_some [in VLSM.Lib.ListExtras]
complete_prefix [in VLSM.Lib.ListExtras]
components_23 [in VLSM.Examples.Tutorial.Multiply]
component_signed_message [in VLSM.Core.Equivocation]
component_reflects_composite_equivocators [in VLSM.Examples.ELMO.ELMO]
component_reflects_composite_messages [in VLSM.Examples.ELMO.ELMO]
component_message_validator_prop [in VLSM.Core.ProjectionTraces]
component_projection_validator_prop [in VLSM.Core.ProjectionTraces]
CompositeHasBeenObserved_sind [in VLSM.Core.MessageDependencies]
CompositeHasBeenObserved_ind [in VLSM.Core.MessageDependencies]
CompositeNthNotSend_sind [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthNotSend_ind [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthSentNotObserved_sind [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeNthSentNotObserved_ind [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_observed_before_send [in VLSM.Core.MessageDependencies]
composite_constraint [in VLSM.Core.Equivocators.LimitedStateEquivocation]
composite_label_sub_projection_option [in VLSM.Core.SubProjectionTraces]
composite_label_sub_projection [in VLSM.Core.SubProjectionTraces]
composite_state_sub_projection [in VLSM.Core.SubProjectionTraces]
composite_observed_messages_set [in VLSM.Core.Equivocation]
composite_sent_messages_set [in VLSM.Core.Equivocation]
composite_received_messages_set [in VLSM.Core.Equivocation]
composite_oracle_set [in VLSM.Core.Equivocation]
composite_has_been_directly_observed [in VLSM.Core.Equivocation]
composite_has_been_received [in VLSM.Core.Equivocation]
composite_has_been_sent [in VLSM.Core.Equivocation]
composite_oracle [in VLSM.Core.Equivocation]
composite_message_selector [in VLSM.Core.Equivocation]
composite_state_23_sum [in VLSM.Examples.Tutorial.Multiply]
composite_state_to_trace [in VLSM.Core.TraceableVLSM]
composite_state_size [in VLSM.Core.TraceableVLSM]
composite_state_destructor [in VLSM.Core.TraceableVLSM]
composite_latest_sent_observed_in [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_sent_not_observed_prop [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_latest_not_send_prop [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
composite_valid_transitions_from_to_sind [in VLSM.Core.Composition]
composite_valid_transitions_from_to_ind [in VLSM.Core.Composition]
composite_valid_transition_future [in VLSM.Core.Composition]
composite_valid_transition_next [in VLSM.Core.Composition]
composite_valid_transition_item [in VLSM.Core.Composition]
composite_valid_transition [in VLSM.Core.Composition]
composite_constrained_state_prop [in VLSM.Core.Composition]
composite_vlsm [in VLSM.Core.Composition]
composite_trace_to_plan [in VLSM.Core.Composition]
composite_apply_plan_last [in VLSM.Core.Composition]
composite_apply_plan_app [in VLSM.Core.Composition]
composite_apply_plan [in VLSM.Core.Composition]
composite_plan [in VLSM.Core.Composition]
composite_plan_item [in VLSM.Core.Composition]
composite_transition_item [in VLSM.Core.Composition]
composite_valid [in VLSM.Core.Composition]
composite_transition [in VLSM.Core.Composition]
composite_initial_message_prop [in VLSM.Core.Composition]
composite_s0 [in VLSM.Core.Composition]
composite_initial_state [in VLSM.Core.Composition]
composite_initial_state_prop [in VLSM.Core.Composition]
composite_type [in VLSM.Core.Composition]
composite_label [in VLSM.Core.Composition]
composite_state [in VLSM.Core.Composition]
composite_no_equivocation_vlsm_with_preloaded [in VLSM.Core.Equivocation.NoEquivocation]
composite_directly_observed_were_sent [in VLSM.Core.Equivocation.NoEquivocation]
composite_no_equivocations [in VLSM.Core.Equivocation.NoEquivocation]
composite_no_equivocations_except_from [in VLSM.Core.Equivocation.NoEquivocation]
composite_transition_item_projection [in VLSM.Core.ProjectionTraces]
composite_transition_item_projection_from_eq [in VLSM.Core.ProjectionTraces]
composite_vlsm_induced_projection [in VLSM.Core.ProjectionTraces]
composite_vlsm_induced_projection_validator [in VLSM.Core.Validator]
composite_vlsm_induced_projection_validator_machine [in VLSM.Core.Validator]
composite_vlsm_induced_projection_valid [in VLSM.Core.Validator]
composite_vlsm_induced_validator [in VLSM.Core.Validator]
composite_project_label [in VLSM.Core.Validator]
composite_rec_observation [in VLSM.Examples.ELMO.MO]
composition_constraint [in VLSM.Core.VLSM]
ComputableReceivedMessages_has_been_sent [in VLSM.Core.Equivocation]
ComputableSentMessages_has_been_sent [in VLSM.Core.Equivocation]
computable_messages_oracle_rel_dec [in VLSM.Core.Equivocation]
computable_messages_oracle_rel [in VLSM.Core.Equivocation]
computable_messages_oracle [in VLSM.Core.Equivocation]
consensus_blocking_quorum [in VLSM.Examples.Paxos.Voting]
consensus_vlsm [in VLSM.Examples.Paxos.Consensus]
consensus_vlsm_machine [in VLSM.Examples.Paxos.Consensus]
consensus_transition [in VLSM.Examples.Paxos.Consensus]
consensus_valid [in VLSM.Examples.Paxos.Consensus]
consensus_initial_message_prop [in VLSM.Examples.Paxos.Consensus]
consensus_initial_state_prop [in VLSM.Examples.Paxos.Consensus]
consensus_type [in VLSM.Examples.Paxos.Consensus]
consensus_label [in VLSM.Examples.Paxos.Consensus]
consensus_action_sind [in VLSM.Examples.Paxos.Consensus]
consensus_action_rec [in VLSM.Examples.Paxos.Consensus]
consensus_action_ind [in VLSM.Examples.Paxos.Consensus]
consensus_action_rect [in VLSM.Examples.Paxos.Consensus]
consensus_message [in VLSM.Examples.Paxos.Consensus]
consensus_state [in VLSM.Examples.Paxos.Consensus]
consistent [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
constrained_vlsm [in VLSM.Core.ConstrainedVLSM]
constrained_vlsm_machine [in VLSM.Core.ConstrainedVLSM]
constrained_vlsm_type [in VLSM.Core.ConstrainedVLSM]
constrained_message_prop_direct [in VLSM.Core.PreloadedVLSM]
constrained_state_prop_direct [in VLSM.Core.PreloadedVLSM]
constrained_transitions_from_to_sind [in VLSM.Core.PreloadedVLSM]
constrained_transitions_from_to_ind [in VLSM.Core.PreloadedVLSM]
constrained_state_message_prop [in VLSM.Core.PreloadedVLSM]
constrained_message_prop [in VLSM.Core.PreloadedVLSM]
constrained_state_prop [in VLSM.Core.PreloadedVLSM]
constrained_trace_prop [in VLSM.Core.PreloadedVLSM]
constrained_trace_from_prop [in VLSM.Core.PreloadedVLSM]
constraint_has_been_sent_prop [in VLSM.Core.Equivocators.FixedEquivocation]
count_predecessors [in VLSM.Lib.TopSort]


D

decidable_initial_messages_prop [in VLSM.Core.VLSM]
default_composite_label [in VLSM.Examples.Tutorial.Formulas]
default_label [in VLSM.Examples.Tutorial.Formulas]
delta_nat_fsfun [in VLSM.Lib.FinSuppFn]
dependencies_with_non_equivocating_senders_were_sent [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
did_not_vote_in [in VLSM.Examples.Paxos.Voting]
directly_observed_messages_set [in VLSM.Core.Equivocation]
directly_observed_were_sent [in VLSM.Core.Equivocation.NoEquivocation]
directly_observable [in VLSM.Examples.ELMO.UMO]
doubling_example_constrained_transition_not_valid [in VLSM.Examples.Tutorial.Multiply]
doubling_example_constrained_transition [in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_trace2 [in VLSM.Examples.Tutorial.Multiply]
doubling_constrained_trace2_init [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_trace2_init_alt [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_trace2_init [in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_last_state [in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_init_last_state [in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_init_first_state [in VLSM.Examples.Tutorial.Multiply]
doubling_trace2 [in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_last_item [in VLSM.Examples.Tutorial.Multiply]
doubling_trace2_init [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_trace1_alt [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_trace1 [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_message_prop_4 [in VLSM.Examples.Tutorial.Multiply]
doubling_can_emit_4 [in VLSM.Examples.Tutorial.Multiply]
doubling_valid_message_prop_2 [in VLSM.Examples.Tutorial.Multiply]
doubling_trace1_last_state [in VLSM.Examples.Tutorial.Multiply]
doubling_trace1_first_state [in VLSM.Examples.Tutorial.Multiply]
doubling_trace1 [in VLSM.Examples.Tutorial.Multiply]
doubling_trace1_last_item [in VLSM.Examples.Tutorial.Multiply]
doubling_trace1_init [in VLSM.Examples.Tutorial.Multiply]
doubling_vlsm [in VLSM.Examples.Tutorial.Multiply]
doubling_machine [in VLSM.Examples.Tutorial.Multiply]
doubling_transition [in VLSM.Examples.Tutorial.Multiply]
dsig_compare [in VLSM.Lib.Preamble]
DupT [in VLSM.Lib.TraceProperties]
dupT [in VLSM.Lib.TraceProperties]


E

element_of_filter [in VLSM.Lib.ListExtras]
element_of_subseteq [in VLSM.Lib.ListExtras]
ELMOProtocol [in VLSM.Examples.ELMO.ELMO]
ELMOProtocol_valid_transition_sind [in VLSM.Examples.ELMO.ELMO]
ELMOProtocol_valid_transition_ind [in VLSM.Examples.ELMO.ELMO]
ELMO_component_type [in VLSM.Examples.ELMO.BaseELMO]
ELMO_state_to_minimal_equivocation_trace [in VLSM.Examples.ELMO.ELMO]
ELMO_global_constraint [in VLSM.Examples.ELMO.ELMO]
ELMO_equivocating_validators [in VLSM.Examples.ELMO.ELMO]
ELMO_not_heavy [in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocation [in VLSM.Examples.ELMO.ELMO]
ELMO_global_equivocators [in VLSM.Examples.ELMO.ELMO]
ELMO_component_state_destructor [in VLSM.Examples.ELMO.ELMO]
ELMO_component_RAM_transition_sind [in VLSM.Examples.ELMO.ELMO]
ELMO_component_RAM_transition_ind [in VLSM.Examples.ELMO.ELMO]
ELMO_component [in VLSM.Examples.ELMO.ELMO]
ELMO_component_machine [in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_alt_iff [in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_alt [in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_sind [in VLSM.Examples.ELMO.ELMO]
ELMO_component_valid_ind [in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_sind [in VLSM.Examples.ELMO.ELMO]
ELMO_msg_valid_full_ind [in VLSM.Examples.ELMO.ELMO]
emittable [in VLSM.Core.Validators.FreeCompositionValidator]
emittable_from_dependencies_prop [in VLSM.Core.MessageDependencies]
Emittable_from_dependencies_prop_sind [in VLSM.Core.MessageDependencies]
Emittable_from_dependencies_prop_ind [in VLSM.Core.MessageDependencies]
emit_any_message_vlsm [in VLSM.Core.ByzantineTraces]
emit_any_message_vlsm_machine [in VLSM.Core.ByzantineTraces]
emit_any_message_vlsm_s0 [in VLSM.Core.ByzantineTraces]
emit_any_message_vlsm_type [in VLSM.Core.ByzantineTraces]
emit_any_signed_message_vlsm [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
emit_any_signed_message_vlsm_machine [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
emit_any_signed_message_vlsm_s0 [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
empty_fsfun [in VLSM.Lib.FinSuppFn]
empty_initial_message_or_final_output [in VLSM.Core.VLSM]
empty_set [in VLSM.Lib.StdppListSet]
ensures [in VLSM.Core.Plans]
equivocating_indices [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocating_wrt [in VLSM.Core.Equivocation]
equivocating_validators_fixed_equivocation_constraint [in VLSM.Core.Equivocation.WitnessedEquivocation]
equivocating_senders_in_trace [in VLSM.Core.Equivocation.TraceWiseEquivocation]
equivocation_fault_constraint [in VLSM.Core.Equivocation]
equivocation_dec_statewise [in VLSM.Core.Equivocation]
equivocation_in_trace [in VLSM.Core.Equivocation]
EquivocatorLabel_sind [in VLSM.Core.Equivocators.Equivocators]
EquivocatorLabel_rec [in VLSM.Core.Equivocators.Equivocators]
EquivocatorLabel_ind [in VLSM.Core.Equivocators.Equivocators]
EquivocatorLabel_rect [in VLSM.Core.Equivocators.Equivocators]
equivocators_limited_equivocations_vlsm [in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_limited_equivocations_constraint [in VLSM.Core.Equivocators.LimitedStateEquivocation]
equivocators_state_project [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_no_equivocations_vlsm [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_no_equivocations_constraint [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocators_composition_for_sent [in VLSM.Core.Equivocation.FixedSetEquivocation]
equivocators_composition_for_directly_observed [in VLSM.Core.Equivocation.FixedSetEquivocation]
equivocators_total_trace_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_label_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_total_state_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_partial_trace_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_trace_project_folder [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_transition_item_project [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
equivocators_fixed_equivocations_vlsm [in VLSM.Core.Equivocators.FixedEquivocation]
equivocators_fixed_equivocations_constraint [in VLSM.Core.Equivocators.FixedEquivocation]
equivocator_descriptors_update [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_descriptors [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_IM [in VLSM.Core.Equivocators.EquivocatorsComposition]
equivocator_sent_messages_set [in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_sent [in VLSM.Core.Equivocators.MessageProperties]
equivocator_has_been_received [in VLSM.Core.Equivocators.MessageProperties]
equivocator_oracle [in VLSM.Core.Equivocators.MessageProperties]
equivocator_selector [in VLSM.Core.Equivocators.MessageProperties]
equivocator_state_append_label [in VLSM.Core.Equivocators.EquivocatorReplay]
equivocator_label_zero_project [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_trace_project [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_vlsm_transition_item_project [in VLSM.Core.Equivocators.EquivocatorsProjections]
equivocator_can_emit [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
equivocator_state_descriptor_project [in VLSM.Core.Equivocators.Equivocators]
equivocator_label_descriptor [in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm [in VLSM.Core.Equivocators.Equivocators]
equivocator_vlsm_machine [in VLSM.Core.Equivocators.Equivocators]
equivocator_valid [in VLSM.Core.Equivocators.Equivocators]
equivocator_transition [in VLSM.Core.Equivocators.Equivocators]
equivocator_s0 [in VLSM.Core.Equivocators.Equivocators]
equivocator_initial_state [in VLSM.Core.Equivocators.Equivocators]
equivocator_initial_state_prop [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_append [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_extend [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_update [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_zero [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_project [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_s [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_last [in VLSM.Core.Equivocators.Equivocators]
equivocator_state_n [in VLSM.Core.Equivocators.Equivocators]
equivocator_label [in VLSM.Core.Equivocators.Equivocators]
equivocator_state [in VLSM.Core.Equivocators.Equivocators]
equivocator_type [in VLSM.Core.Equivocators.Equivocators]
EvenConstraint_sind [in VLSM.Examples.Tutorial.PrimesComposition]
EvenConstraint_ind [in VLSM.Examples.Tutorial.PrimesComposition]
even_prime_vlsms [in VLSM.Examples.Tutorial.PrimesComposition]
even_constrained_primes_composition [in VLSM.Examples.Tutorial.PrimesComposition]
exA [in VLSM.Lib.TraceProperties]
existing_equivocator_label_extract [in VLSM.Core.Equivocators.Equivocators]
existing_equivocator_label [in VLSM.Core.Equivocators.Equivocators]
existing_descriptor [in VLSM.Core.Equivocators.Equivocators]
ExistsSuffix_sind [in VLSM.Lib.ListExtras]
ExistsSuffix_ind [in VLSM.Lib.ListExtras]
Exists_choose_first [in VLSM.Lib.ListExtras]
Exists1 [in VLSM.Lib.StreamExtras]
expression [in VLSM.Examples.Tutorial.Formulas]
expression_vlsm [in VLSM.Examples.Tutorial.Formulas]
expression_components [in VLSM.Examples.Tutorial.Formulas]
expression_binop_vlsm [in VLSM.Examples.Tutorial.Formulas]
expression_binop_vlsm_machine [in VLSM.Examples.Tutorial.Formulas]
expression_binop_vlsm_transition [in VLSM.Examples.Tutorial.Formulas]
expression_binop_vlsm_type [in VLSM.Examples.Tutorial.Formulas]
expression_neg_vlsm [in VLSM.Examples.Tutorial.Formulas]
expression_neg_vlsm_machine [in VLSM.Examples.Tutorial.Formulas]
expression_neg_vlsm_transition [in VLSM.Examples.Tutorial.Formulas]
expression_neg_vlsm_type [in VLSM.Examples.Tutorial.Formulas]
expression_var_vlsm [in VLSM.Examples.Tutorial.Formulas]
expression_var_vlsm_machine [in VLSM.Examples.Tutorial.Formulas]
expression_var_vlsm_type [in VLSM.Examples.Tutorial.Formulas]
expression_const_vlsm [in VLSM.Examples.Tutorial.Formulas]
expression_const_vlsm_machine [in VLSM.Examples.Tutorial.Formulas]
expression_const_vlsm_type [in VLSM.Examples.Tutorial.Formulas]
ExT [in VLSM.Lib.TraceProperties]


F

ffA [in VLSM.Lib.TraceProperties]
FfT [in VLSM.Lib.TraceProperties]
ffT [in VLSM.Lib.TraceProperties]
field_selector [in VLSM.Core.VLSM]
filtering_subsequence_stream_filter_map [in VLSM.Lib.StreamFilters]
filtering_subsequence [in VLSM.Lib.StreamFilters]
filter_annotate [in VLSM.Lib.ListExtras]
finalA [in VLSM.Lib.TraceProperties]
finalTA_sind [in VLSM.Lib.TraceProperties]
finalTA_ind [in VLSM.Lib.TraceProperties]
finalTB_sind [in VLSM.Lib.TraceProperties]
finalTB_ind [in VLSM.Lib.TraceProperties]
find_sent_not_observed_decomposition [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
find_not_send_decomposition [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
find_decomposition [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
find_least_among [in VLSM.Lib.Preamble]
find_least_among_helper [in VLSM.Lib.Preamble]
find_first_indexed_largest_nat_with_propery_bounded [in VLSM.Lib.NatExtras]
find_largest_nat_with_property_bounded [in VLSM.Lib.NatExtras]
FinitelyMany [in VLSM.Lib.StreamExtras]
FinitelyManyBound [in VLSM.Lib.StreamExtras]
FiniteT [in VLSM.Lib.TraceProperties]
finiteT_sind [in VLSM.Lib.TraceProperties]
finiteT_ind [in VLSM.Lib.TraceProperties]
finiteT_infiniteT_dec [in VLSM.Lib.TraceClassicalProperties]
finite_trace_sub_projection_app [in VLSM.Core.SubProjectionTraces]
finite_trace_sub_projection [in VLSM.Core.SubProjectionTraces]
finite_valid_trace_from_to_alt [in VLSM.Core.VLSM]
finite_valid_trace_init_to_alt [in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_sind [in VLSM.Core.VLSM]
finite_valid_trace_init_to_emit_ind [in VLSM.Core.VLSM]
finite_valid_trace_init_to [in VLSM.Core.VLSM]
finite_valid_trace_from_to_sind [in VLSM.Core.VLSM]
finite_valid_trace_from_to_ind [in VLSM.Core.VLSM]
finite_valid_trace [in VLSM.Core.VLSM]
finite_valid_trace_from_sind [in VLSM.Core.VLSM]
finite_valid_trace_from_ind [in VLSM.Core.VLSM]
finite_trace_nth [in VLSM.Core.VLSM]
finite_trace_last_output [in VLSM.Core.VLSM]
finite_trace_last [in VLSM.Core.VLSM]
finite_valid_plan_from_to [in VLSM.Core.Plans]
finite_valid_plan_from [in VLSM.Core.Plans]
finite_valid_trace_init_to_from_constrained_sind [in VLSM.Core.PreloadedVLSM]
finite_valid_trace_init_to_from_constrained_ind [in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to_direct [in VLSM.Core.PreloadedVLSM]
finite_constrained_trace [in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_init_to [in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_from [in VLSM.Core.PreloadedVLSM]
finite_constrained_trace_from_to [in VLSM.Core.PreloadedVLSM]
finite_trace_projection_list [in VLSM.Core.ProjectionTraces]
fin_supp [in VLSM.Lib.FinSuppFn]
first [in VLSM.Core.Composition]
fitering_subsequence_stream_filter_map_prefix_ex [in VLSM.Lib.StreamFilters]
fixed_limited_byzantine_trace_prop [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
Fixed_incl_Free [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_vlsm_composition [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation_constraint [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_equivocation [in VLSM.Core.Equivocation.FixedSetEquivocation]
fixed_limited_equivocation_prop [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
fixed_byzantine_trace_alt_prop [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_set_signed_message [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_non_byzantine_projection [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_trace_prop [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
fixed_byzantine_IM [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
flatten_formula [in VLSM.Examples.Tutorial.Formulas]
followsT_dec [in VLSM.Lib.TraceProperties]
ForAllSuffix_sind [in VLSM.Lib.ListExtras]
ForAllSuffix_ind [in VLSM.Lib.ListExtras]
ForAllSuffix2 [in VLSM.Lib.ListExtras]
ForAll1 [in VLSM.Lib.StreamExtras]
ForAll2 [in VLSM.Lib.StreamExtras]
forget_annotations_projection [in VLSM.Core.AnnotatedVLSM]
formula_holds_prop [in VLSM.Examples.Tutorial.Formulas]
formula_interp [in VLSM.Examples.Tutorial.Formulas]
formula_vars [in VLSM.Examples.Tutorial.Formulas]
formula_prefix_is_not_formula_prop [in VLSM.Examples.Tutorial.Formulas]
Formula_sind [in VLSM.Examples.Tutorial.Formulas]
Formula_rec [in VLSM.Examples.Tutorial.Formulas]
Formula_ind [in VLSM.Examples.Tutorial.Formulas]
Formula_rect [in VLSM.Examples.Tutorial.Formulas]
FreeELMO [in VLSM.Examples.ELMO.ELMO]
free_valid_message_condition [in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_sind [in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_rec [in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_ind [in VLSM.Core.Validators.FreeCompositionValidator]
free_valid_message_rect [in VLSM.Core.Validators.FreeCompositionValidator]
free_sub_free_constraint [in VLSM.Core.SubProjectionTraces]
free_sub_free_state [in VLSM.Core.SubProjectionTraces]
free_sub_free_label [in VLSM.Core.SubProjectionTraces]
free_sub_free_index [in VLSM.Core.SubProjectionTraces]
free_sub_vlsm_composition [in VLSM.Core.SubProjectionTraces]
free_radix_composite_vlsm [in VLSM.Examples.Tutorial.PrimesComposition]
free_equivocating_vlsm_composition [in VLSM.Core.Equivocation.FixedSetEquivocation]
free_sub_free_equivocator_descriptors [in VLSM.Core.Equivocators.EquivocatorsCompositionProjections]
free_composition_23 [in VLSM.Examples.Tutorial.Multiply]
free_constraint [in VLSM.Core.Composition]
free_composite_vlsm [in VLSM.Core.Composition]
free_composite_vlsm_machine [in VLSM.Core.Composition]
free_composite_no_equivocation_vlsm_with_preloaded [in VLSM.Core.Equivocation.NoEquivocation]
from_sub_projection [in VLSM.Core.SubProjectionTraces]
fsfun [in VLSM.Lib.FinSuppFn]
fsfun_sum [in VLSM.Lib.FinSuppFn]
fsfun_project [in VLSM.Lib.FinSuppFn]
fsfun_prod [in VLSM.Lib.NatExtras]
full_node_is_globally_equivocating [in VLSM.Core.MessageDependencies]
full_node_is_sent_locally_equivocating [in VLSM.Core.MessageDependencies]
full_node_is_locally_equivocating [in VLSM.Core.MessageDependencies]
full_node_free_valid_message_condition [in VLSM.Core.Validators.FreeCompositionValidator]
full_node_condition_for_admissible_equivocators_alt [in VLSM.Core.Equivocation.FullNode]
full_node_condition_for_admissible_equivocators [in VLSM.Core.Equivocation.FullNode]
full_node [in VLSM.Examples.ELMO.ELMO]
full_node_limited_equivocation_vlsm [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_coequivocating_senders [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
full_node_fixed_set_equivocation_constraint [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
full_node_fixed_set_equivocation [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]


G

get_maximal_element [in VLSM.Lib.TopSort]


H

HasBeenObserved_sind [in VLSM.Core.MessageDependencies]
HasBeenObserved_ind [in VLSM.Core.MessageDependencies]
has_been_sent_msg_dep_comparable_prop [in VLSM.Core.MessageDependencies]
has_been_directly_observed_from_sent_received [in VLSM.Core.Equivocation]
has_been_received_tracewise_prop [in VLSM.Core.Equivocation]
has_not_been_received [in VLSM.Core.Equivocation]
has_been_received_stepwise_prop [in VLSM.Core.Equivocation]
has_been_sent_tracewise_prop [in VLSM.Core.Equivocation]
has_not_been_sent [in VLSM.Core.Equivocation]
has_been_sent_stepwise_prop [in VLSM.Core.Equivocation]
has_not_been_received_prop [in VLSM.Core.Equivocation]
has_been_received_prop [in VLSM.Core.Equivocation]
has_not_been_sent_prop [in VLSM.Core.Equivocation]
has_been_sent_prop [in VLSM.Core.Equivocation]
has_equivocating_sender [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
hd [in VLSM.Lib.Traces]


I

IM [in VLSM.Examples.Paxos.Paxos]
immediate_substate_sind [in VLSM.Examples.ELMO.BaseELMO]
immediate_substate_ind [in VLSM.Examples.ELMO.BaseELMO]
immediate_dependency [in VLSM.Examples.ELMO.ELMO]
incomparable [in VLSM.Examples.ELMO.UMO]
indexed_radix_vlsms [in VLSM.Examples.Tutorial.PrimesComposition]
indexed_composite_state_to_trace [in VLSM.Core.TraceableVLSM]
index_sind [in VLSM.Examples.Tutorial.Formulas]
index_rec [in VLSM.Examples.Tutorial.Formulas]
index_ind [in VLSM.Examples.Tutorial.Formulas]
index_rect [in VLSM.Examples.Tutorial.Formulas]
index23_sind [in VLSM.Examples.Tutorial.Multiply]
index23_rec [in VLSM.Examples.Tutorial.Multiply]
index23_ind [in VLSM.Examples.Tutorial.Multiply]
index23_rect [in VLSM.Examples.Tutorial.Multiply]
induced_sub_element_projection [in VLSM.Core.SubProjectionTraces]
induced_validator_transition_consistency_Some [in VLSM.Core.Validator]
induced_validator_state_lift_prop [in VLSM.Core.Validator]
induced_validator_label_lift_prop [in VLSM.Core.Validator]
InfinitelyOften [in VLSM.Lib.StreamExtras]
InfinitelyOften_nth_tl [in VLSM.Lib.StreamExtras]
InfiniteT [in VLSM.Lib.TraceProperties]
infinite_valid_trace [in VLSM.Core.VLSM]
initial_ballot_state [in VLSM.Examples.Paxos.Paxos]
initial_indices [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
initial_new_machine_transition_item [in VLSM.Core.Equivocators.FullReplayTraces]
input_valid_transition_preserving [in VLSM.Core.VLSM]
input_valid_transition_item [in VLSM.Core.VLSM]
input_valid_transition [in VLSM.Core.VLSM]
input_valid [in VLSM.Core.VLSM]
input_valid_constraint_subsumption [in VLSM.Core.ConstrainedVLSM]
input_constrained_transition_item [in VLSM.Core.PreloadedVLSM]
input_constrained_transition_to [in VLSM.Core.PreloadedVLSM]
input_constrained_transition [in VLSM.Core.PreloadedVLSM]
input_constrained [in VLSM.Core.PreloadedVLSM]
insert_gathered_1b [in VLSM.Examples.Paxos.Paxos]
Inv_past_vote_info_prop [in VLSM.Examples.Paxos.Paxos]
in_futures [in VLSM.Core.VLSM]
isReceive [in VLSM.Examples.ELMO.BaseELMO]
isSend [in VLSM.Examples.ELMO.BaseELMO]
is_chosen [in VLSM.Examples.Paxos.Paxos]
is_equivocating_statewise [in VLSM.Core.Equivocation]
is_equivocating_tracewise_no_has_been_sent [in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_equivocating_tracewise [in VLSM.Core.Equivocation.TraceWiseEquivocation]
is_newmachine_descriptor [in VLSM.Core.Equivocators.Equivocators]
is_equivocating_state [in VLSM.Core.Equivocators.Equivocators]
is_singleton_state [in VLSM.Core.Equivocators.Equivocators]
item_sends_or_receives [in VLSM.Core.VLSM]
item_equivocating_in_trace [in VLSM.Core.Equivocation.TraceWiseEquivocation]
IterT [in VLSM.Lib.TraceProperties]
iYC2 [in VLSM.Lib.SsrExport]
iYC2 [in VLSM.Lib.EquationsExtras]
iYC2 [in VLSM.Lib.Itauto]
iYC2 [in VLSM.Examples.ELMO.AllELMO]
iYC2 [in VLSM.Lib.Ctauto]


L

Label_sind [in VLSM.Examples.ELMO.BaseELMO]
Label_rec [in VLSM.Examples.ELMO.BaseELMO]
Label_ind [in VLSM.Examples.ELMO.BaseELMO]
Label_rect [in VLSM.Examples.ELMO.BaseELMO]
label_state_project [in VLSM.Examples.Paxos.Voting]
label_23 [in VLSM.Examples.Tutorial.Multiply]
Label_sind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Label_rec [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Label_ind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
Label_rect [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
LastA [in VLSM.Lib.TraceProperties]
lastA [in VLSM.Lib.TraceProperties]
lastdup [in VLSM.Lib.TraceProperties]
lastn [in VLSM.Lib.ListExtras]
last_in_trace_except_from [in VLSM.Core.Equivocators.SimulatingFree]
last_error [in VLSM.Lib.ListExtras]
latest_observation_Send [in VLSM.Examples.ELMO.ELMO]
latest_composite_observed_before_send [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
leaders_has_been_sent [in VLSM.Examples.Paxos.Paxos]
leaders_messages [in VLSM.Examples.Paxos.Paxos]
leaders_vlsm [in VLSM.Examples.Paxos.Paxos]
leaders_machine [in VLSM.Examples.Paxos.Paxos]
leaders_transition [in VLSM.Examples.Paxos.Paxos]
leaders_valid [in VLSM.Examples.Paxos.Paxos]
leaders_type [in VLSM.Examples.Paxos.Paxos]
leaders_label [in VLSM.Examples.Paxos.Paxos]
leaders_state [in VLSM.Examples.Paxos.Paxos]
leader_has_been_sent [in VLSM.Examples.Paxos.Paxos]
leader_messages [in VLSM.Examples.Paxos.Paxos]
leader_transition [in VLSM.Examples.Paxos.Paxos]
leader_valid [in VLSM.Examples.Paxos.Paxos]
leader_label_sind [in VLSM.Examples.Paxos.Paxos]
leader_label_rec [in VLSM.Examples.Paxos.Paxos]
leader_label_ind [in VLSM.Examples.Paxos.Paxos]
leader_label_rect [in VLSM.Examples.Paxos.Paxos]
lifted_alt_state [in VLSM.Core.ByzantineTraces]
lift_to_equivocators_state [in VLSM.Core.Equivocators.EquivocatorsComposition]
lift_sub_incl_label [in VLSM.Core.SubProjectionTraces]
lift_sub_incl_state [in VLSM.Core.SubProjectionTraces]
lift_sub_state [in VLSM.Core.SubProjectionTraces]
lift_sub_state_to [in VLSM.Core.SubProjectionTraces]
lift_sub_label [in VLSM.Core.SubProjectionTraces]
lift_to_composite_transition_item_state [in VLSM.Core.TraceableVLSM]
lift_equivocators_sub_state_to [in VLSM.Core.Equivocators.FullReplayTraces]
lift_equivocators_sub_label_to [in VLSM.Core.Equivocators.FullReplayTraces]
lift_to_composite_plan [in VLSM.Core.Composition]
lift_to_composite_finite_trace_last [in VLSM.Core.Composition]
lift_to_composite_finite_trace [in VLSM.Core.Composition]
lift_to_composite_plan_item [in VLSM.Core.Composition]
lift_to_composite_transition_item' [in VLSM.Core.Composition]
lift_to_composite_state' [in VLSM.Core.Composition]
lift_to_composite_transition_item [in VLSM.Core.Composition]
lift_to_composite_label [in VLSM.Core.Composition]
lift_to_composite_state [in VLSM.Core.Composition]
lift_to_UMO_trace [in VLSM.Examples.ELMO.UMO]
lift_to_UMO_state [in VLSM.Examples.ELMO.UMO]
lift_to_UMO_label [in VLSM.Examples.ELMO.UMO]
LimitedELMO [in VLSM.Examples.ELMO.ELMO]
LimitedEquivocationProp_sind [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
LimitedEquivocationProp_ind [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_byzantine_trace_prop [in VLSM.Core.ByzantineTraces.LimitedByzantineTraces]
limited_equivocation_composite_vlsm [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
limited_equivocation_constraint [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
list_compare [in VLSM.Lib.Preamble]
list_function_restriction [in VLSM.Lib.NeList]
list_to_option_ne_list [in VLSM.Lib.NeList]
list_sum_project_right [in VLSM.Lib.ListExtras]
list_sum_project_left [in VLSM.Lib.ListExtras]
list_filter_map [in VLSM.Lib.ListExtras]
list_annotate [in VLSM.Lib.ListExtras]
list_segment [in VLSM.Lib.ListExtras]
liveness [in VLSM.Lib.Preamble]
liveness_dec [in VLSM.Lib.Preamble]
LocalEvenConstraint_sind [in VLSM.Examples.Tutorial.PrimesComposition]
LocalEvenConstraint_ind [in VLSM.Examples.Tutorial.PrimesComposition]
local_equivocation_limit_ok [in VLSM.Examples.ELMO.ELMO]
local_equivocators_full [in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_obs_sind [in VLSM.Examples.ELMO.ELMO]
local_equivocators_full_obs_ind [in VLSM.Examples.ELMO.ELMO]


M

MachineDescriptor_sind [in VLSM.Core.Equivocators.Equivocators]
MachineDescriptor_rec [in VLSM.Core.Equivocators.Equivocators]
MachineDescriptor_ind [in VLSM.Core.Equivocators.Equivocators]
MachineDescriptor_rect [in VLSM.Core.Equivocators.Equivocators]
maxBal_limits_votes_prop [in VLSM.Examples.Paxos.Voting]
maximal_elements_set [in VLSM.Lib.StdppExtras]
maximal_elements_list2 [in VLSM.Lib.StdppExtras]
maximal_elements_list1 [in VLSM.Lib.StdppExtras]
maximal_elements_list [in VLSM.Lib.StdppExtras]
maximal_among [in VLSM.Lib.Preamble]
maxVBal [in VLSM.Examples.Paxos.Paxos]
maxVVal [in VLSM.Examples.Paxos.Paxos]
MCMachine [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MCType [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MCVLSM [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition_item_update [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_clean_muddy_trace [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_build_muddy_muddy_trace [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant_inductive [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_invariant [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_inductive_sind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_inductive_ind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_component_invariant_helper [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_obs_equivalence [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_non_initial_valid_state [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_initial_consistent_state [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_final_state [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_composite_vlsm [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_constraint [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive_sind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation_inductive_ind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_no_equivocation [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_initial_state [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_initial_state_type [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_sind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_valid_ind [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_transition [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MC_initial_state_prop [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MessageHasSender_sind [in VLSM.Examples.ELMO.ELMO]
MessageHasSender_ind [in VLSM.Examples.ELMO.ELMO]
messages [in VLSM.Examples.ELMO.BaseELMO]
messages' [in VLSM.Examples.ELMO.BaseELMO]
message_dependencies_full_node_condition_prop [in VLSM.Core.MessageDependencies]
message_dependencies_full_node_condition [in VLSM.Core.MessageDependencies]
message_sender [in VLSM.Examples.Paxos.Paxos]
Message_sender_index_inv_fn [in VLSM.Examples.ELMO.BaseELMO]
Message_sender_index [in VLSM.Examples.ELMO.BaseELMO]
Message_sender [in VLSM.Examples.ELMO.BaseELMO]
Message_validator [in VLSM.Examples.ELMO.BaseELMO]
Message_full_dependencies [in VLSM.Examples.ELMO.BaseELMO]
Message_dependencies [in VLSM.Examples.ELMO.BaseELMO]
Message_sind [in VLSM.Examples.ELMO.BaseELMO]
Message_rec [in VLSM.Examples.ELMO.BaseELMO]
Message_ind [in VLSM.Examples.ELMO.BaseELMO]
Message_rect [in VLSM.Examples.ELMO.BaseELMO]
message_valid_transitions_from_to_sind [in VLSM.Core.VLSM]
message_valid_transitions_from_to_ind [in VLSM.Core.VLSM]
message_index [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
message_round [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
message_status [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
message_as_byzantine_label [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
message_validator_prop [in VLSM.Core.Validator]
message_suffix [in VLSM.Examples.ELMO.UMO]
midp [in VLSM.Lib.TraceClassicalProperties]
minimal_equivocation_choice [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
minimal_among [in VLSM.Lib.Preamble]
min_predecessors [in VLSM.Lib.TopSort]
min_liveness [in VLSM.Lib.Preamble]
mk_singleton_state [in VLSM.Core.Equivocators.Equivocators]
mmap_insert [in VLSM.Lib.FinSetExtras]
MO [in VLSM.Examples.ELMO.MO]
mode [in VLSM.Lib.ListExtras]
mode1 [in VLSM.Lib.ListExtras]
monotone_nat_stream [in VLSM.Lib.StreamExtras]
monotone_nat_stream_prop [in VLSM.Lib.StreamExtras]
MO_msg_suffix [in VLSM.Examples.ELMO.MO]
MO_component [in VLSM.Examples.ELMO.MO]
MO_component_machine [in VLSM.Examples.ELMO.MO]
MO_component_valid_sind [in VLSM.Examples.ELMO.MO]
MO_component_valid_ind [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs_bounded [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends_bounded [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sind [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_rec [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_ind [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_rect [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_recvs' [in VLSM.Examples.ELMO.MO]
MO_msg_valid_alt_sends [in VLSM.Examples.ELMO.MO]
MO_msg_valid_sind [in VLSM.Examples.ELMO.MO]
MO_msg_valid_ind [in VLSM.Examples.ELMO.MO]
msg_dep_is_globally_equivocating [in VLSM.Core.MessageDependencies]
msg_dep_is_locally_equivocating [in VLSM.Core.MessageDependencies]
msg_dep_happens_before [in VLSM.Core.MessageDependencies]
msg_dep_rel [in VLSM.Core.MessageDependencies]
msg_dep_limited_equivocation_projection_validator_prop_alt [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_limited_equivocation_message_validator_prop [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_limited_equivocation_projection_validator_prop [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_composite_transition_message_equivocators [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_annotate_trace_with_equivocators [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_message_equivocators [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_limited_equivocation_vlsm [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_coequivocating_senders [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
msg_dep_fixed_set_equivocation_vlsm [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_fixed_set_equivocation_constraint [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
msg_dep_fixed_set_equivocation [in VLSM.Core.Equivocation.MsgDepFixedSetEquivocation]
MuddyUnion [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
multiplier_23 [in VLSM.Examples.Tutorial.Multiply]
multiplying_valid [in VLSM.Examples.Tutorial.Multiply]
multiplying_initial_state [in VLSM.Examples.Tutorial.Multiply]
multiplying_initial_state_type [in VLSM.Examples.Tutorial.Multiply]
multiplying_initial_state_prop [in VLSM.Examples.Tutorial.Multiply]
multiplying_type [in VLSM.Examples.Tutorial.Multiply]
multiplying_message [in VLSM.Examples.Tutorial.Multiply]
multiplying_state [in VLSM.Examples.Tutorial.Multiply]
multiplying_label [in VLSM.Examples.Tutorial.Multiply]
multiply_label [in VLSM.Examples.Tutorial.Multiply]


N

NatFSFun_sind [in VLSM.Lib.FinSuppFn]
NatFSFun_ind [in VLSM.Lib.FinSuppFn]
nat_sequence_prefix_sorted [in VLSM.Lib.StreamExtras]
nat_sequence_sorted [in VLSM.Lib.StreamExtras]
nat_sequence [in VLSM.Lib.StreamExtras]
nat_sequence_from [in VLSM.Lib.StreamExtras]
negate_oracle [in VLSM.Core.Equivocation]
NeList_to_ne_list [in VLSM.Lib.NeList]
NEL_singl [in VLSM.Lib.NeList]
newmachine_descriptors_list [in VLSM.Core.Equivocators.EquivocatorsComposition]
ne_list_to_NonEmptyList [in VLSM.Lib.NeList]
ne_list_from_non_empty_list [in VLSM.Lib.NeList]
ne_list_to_NeList [in VLSM.Lib.NeList]
ne_list_option_cons [in VLSM.Lib.NeList]
ne_list_to_list_tl [in VLSM.Lib.NeList]
ne_list_length [in VLSM.Lib.NeList]
ne_list_to_list [in VLSM.Lib.NeList]
ne_list_equiv_sind [in VLSM.Lib.NeList]
ne_list_equiv_ind [in VLSM.Lib.NeList]
ne_list_app [in VLSM.Lib.NeList]
ne_list_foldr [in VLSM.Lib.NeList]
ne_list_tl [in VLSM.Lib.NeList]
ne_list_hd [in VLSM.Lib.NeList]
ne_list_sind [in VLSM.Lib.NeList]
ne_list_rec [in VLSM.Lib.NeList]
ne_list_ind [in VLSM.Lib.NeList]
ne_list_rect [in VLSM.Lib.NeList]
node_generated_without_further_equivocation_alt [in VLSM.Core.Equivocation.FullNode]
node_generated_without_further_equivocation [in VLSM.Core.Equivocation.FullNode]
NonEmptyList_to_ne_list [in VLSM.Lib.NeList]
NonEmptyList_ind' [in VLSM.Lib.NeList]
NonEmptyList_sind [in VLSM.Lib.NeList]
NonEmptyList_rec [in VLSM.Lib.NeList]
NonEmptyList_ind [in VLSM.Lib.NeList]
NonEmptyList_rect [in VLSM.Lib.NeList]
non_sub_index_authenticated_message [in VLSM.Core.SubProjectionTraces]
non_byzantine_not_equivocating_constraint [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
NoPrevVotes [in VLSM.Examples.Paxos.Paxos]
NotT [in VLSM.Lib.TraceProperties]
notT [in VLSM.Lib.TraceProperties]
not_equivocating_equivocator_descriptors [in VLSM.Core.Equivocators.EquivocatorsComposition]
not_in_indices_initial_prop [in VLSM.Core.TraceableVLSM]
not_lt_plus_dec [in VLSM.Lib.Preamble]
not_directly_observed_happens_before_dependencies [in VLSM.Core.Equivocation.MsgDepLimitedEquivocation]
not_null_element [in VLSM.Lib.ListExtras]
no_initial_messages_in_IM_prop [in VLSM.Core.Equivocation]
no_additional_equivocations_constraint [in VLSM.Core.Equivocation]
no_additional_equivocations [in VLSM.Core.Equivocation]
no_traces_have_message_prop [in VLSM.Core.Equivocation]
no_self_equiv [in VLSM.Examples.ELMO.ELMO]
no_equivocations_additional_constraint [in VLSM.Core.Equivocation.NoEquivocation]
no_equivocations_additional_constraint_with_preloaded [in VLSM.Core.Equivocation.NoEquivocation]
no_equivocations [in VLSM.Core.Equivocation.NoEquivocation]
no_equivocations_except_from [in VLSM.Core.Equivocation.NoEquivocation]
nth_error_filter_index [in VLSM.Lib.ListExtras]


O

observable [in VLSM.Examples.ELMO.UMO]
observations2trace [in VLSM.Examples.ELMO.BaseELMO]
Observation_sind [in VLSM.Examples.ELMO.BaseELMO]
Observation_rec [in VLSM.Examples.ELMO.BaseELMO]
Observation_ind [in VLSM.Examples.ELMO.BaseELMO]
Observation_rect [in VLSM.Examples.ELMO.BaseELMO]
ObservedBeforeStateOrMessage_sind [in VLSM.Core.MessageDependencies]
ObservedBeforeStateOrMessage_ind [in VLSM.Core.MessageDependencies]
observed_before_send [in VLSM.Core.MessageDependencies]
one_element_decompositions [in VLSM.Lib.ListExtras]
option_can_produce [in VLSM.Core.VLSM]
option_valid_message_prop [in VLSM.Core.VLSM]
option_initial_message_prop [in VLSM.Core.VLSM]
option_compare [in VLSM.Lib.Preamble]
option_composite_initial_message_prop [in VLSM.Core.Composition]
option_valid_message_prop_from_constrained_sind [in VLSM.Core.PreloadedVLSM]
option_valid_message_prop_from_constrained_ind [in VLSM.Core.PreloadedVLSM]
OrT [in VLSM.Lib.TraceProperties]
other_components_after_send [in VLSM.Examples.ELMO.ELMO]


P

pair_compare [in VLSM.Lib.Preamble]
parity_23_final_state [in VLSM.Examples.Tutorial.Multiply]
parity_composition_23 [in VLSM.Examples.Tutorial.Multiply]
parity_constraint_23 [in VLSM.Examples.Tutorial.Multiply]
paxos_votes [in VLSM.Examples.Paxos.Paxos]
paxos_vlsm [in VLSM.Examples.Paxos.Paxos]
paxos_index_sind [in VLSM.Examples.Paxos.Paxos]
paxos_index_rec [in VLSM.Examples.Paxos.Paxos]
paxos_index_ind [in VLSM.Examples.Paxos.Paxos]
paxos_index_rect [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_has_been_sent [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_vlsm [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_machine [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_transition [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_valid [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_type [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label_sind [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label_rec [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label_ind [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_label_rect [in VLSM.Examples.Paxos.Paxos]
paxos_acceptor_initial [in VLSM.Examples.Paxos.Paxos]
paxos_message [in VLSM.Examples.Paxos.Paxos]
paxos_message_body_sind [in VLSM.Examples.Paxos.Paxos]
paxos_message_body_rec [in VLSM.Examples.Paxos.Paxos]
paxos_message_body_ind [in VLSM.Examples.Paxos.Paxos]
paxos_message_body_rect [in VLSM.Examples.Paxos.Paxos]
PInv [in VLSM.Examples.Paxos.Paxos]
plan [in VLSM.Core.Plans]
pos_R [in VLSM.Lib.Measurable]
potentially_pivotal [in VLSM.Core.ReachableThreshold]
precedes_closed [in VLSM.Lib.TopSort]
precedes_P [in VLSM.Lib.TopSort]
preloaded_free_equivocating_vlsm_composition [in VLSM.Core.Equivocation.FixedSetEquivocation]
preloaded_constraint_subsumption [in VLSM.Core.ConstrainedVLSM]
preloaded_fixed_non_byzantine_vlsm [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_fixed_non_byzantine_vlsm' [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
preloaded_with_all_messages_vlsm [in VLSM.Core.PreloadedVLSM]
preloaded_vlsm [in VLSM.Core.PreloadedVLSM]
preloaded_vlsm_machine [in VLSM.Core.PreloadedVLSM]
preloaded_with_all_messages_validator_component_proj_incl [in VLSM.Core.ProjectionTraces]
preserves [in VLSM.Core.Plans]
previous_state_descriptor_prop [in VLSM.Core.Equivocators.EquivocatorsProjections]
pre_induced_sub_element_projection [in VLSM.Core.SubProjectionTraces]
pre_induced_sub_projection [in VLSM.Core.SubProjectionTraces]
pre_VLSM_embedding_infinite_trace_project [in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_embedding_transition_item_project [in VLSM.Core.VLSMProjections.VLSMEmbedding]
pre_VLSM_projection_infinite_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_infinite_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_transition_item_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_projection_in_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
pre_VLSM_stuttering_embedding_infinite_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_VLSM_stuttering_embedding_infinite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_VLSM_stuttering_embedding_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
pre_composite_vlsm_induced_projection_validator [in VLSM.Core.Validator]
pre_composite_vlsm_induced_validator [in VLSM.Core.Validator]
pre_projection_induced_validator [in VLSM.Core.Validator]
primes [in VLSM.Lib.NatExtras]
primes_vlsm_composition [in VLSM.Examples.Tutorial.PrimesComposition]
prod_primes_powers [in VLSM.Lib.NatExtras]
prod_powers_aux [in VLSM.Lib.NatExtras]
progress [in VLSM.Lib.StreamExtras]
projection_friendly_prop [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
projection_friendliness_sufficient_condition [in VLSM.Core.ProjectionTraces]
projection_validator_prop_alt [in VLSM.Core.Validator]
projection_induced_validator [in VLSM.Core.Validator]
projection_induced_validator_machine [in VLSM.Core.Validator]
projection_induced_valid [in VLSM.Core.Validator]
projection_induced_transition [in VLSM.Core.Validator]
projection_induced_initial_message_prop [in VLSM.Core.Validator]
projection_induced_initial_state_prop [in VLSM.Core.Validator]
projection_validator_prop [in VLSM.Core.Validator]
propA [in VLSM.Lib.TraceProperties]
propA_imp [in VLSM.Lib.TraceProperties]
proper_equivocator_descriptors [in VLSM.Core.Equivocators.EquivocatorsComposition]
proper_fixed_equivocator_descriptors [in VLSM.Core.Equivocators.FixedEquivocation]
proper_existing_equivocator_label [in VLSM.Core.Equivocators.Equivocators]
proper_equivocator_label [in VLSM.Core.Equivocators.Equivocators]
proper_descriptor [in VLSM.Core.Equivocators.Equivocators]
propT [in VLSM.Lib.TraceProperties]
propT_imp [in VLSM.Lib.TraceProperties]
protocol_input_messages_trace [in VLSM.Core.VLSM]
protocol_output_messages_trace [in VLSM.Core.VLSM]
P1bInv_prop [in VLSM.Examples.Paxos.Paxos]
P1cInv_prop [in VLSM.Examples.Paxos.Paxos]
P2aInv_prop [in VLSM.Examples.Paxos.Paxos]


R

radix_composite_vlsm [in VLSM.Examples.Tutorial.PrimesComposition]
radix_label [in VLSM.Examples.Tutorial.PrimesComposition]
radix_vlsm [in VLSM.Examples.Tutorial.PrimesComposition]
radix_machine [in VLSM.Examples.Tutorial.PrimesComposition]
radix_transition [in VLSM.Examples.Tutorial.PrimesComposition]
ReachELMO [in VLSM.Examples.ELMO.ELMO]
receivedAddresses [in VLSM.Examples.ELMO.BaseELMO]
receivedMessages [in VLSM.Examples.ELMO.BaseELMO]
receivedMessages' [in VLSM.Examples.ELMO.BaseELMO]
received_messages [in VLSM.Core.Equivocation]
rec_obs_fn [in VLSM.Examples.ELMO.BaseELMO]
rec_obs_sind [in VLSM.Examples.ELMO.BaseELMO]
rec_obs_ind [in VLSM.Examples.ELMO.BaseELMO]
rec_obs_exists_dec [in VLSM.Examples.ELMO.ELMO]
remove_equivocating_state_project [in VLSM.Core.SubProjectionTraces]
remove_equivocating_label_project [in VLSM.Core.SubProjectionTraces]
replayable_message_prop [in VLSM.Core.Equivocators.SimulatingFree]
replayed_trace_from [in VLSM.Core.Equivocators.FullReplayTraces]
replayed_initial_state_from [in VLSM.Core.Equivocators.FullReplayTraces]


S

SafeAt [in VLSM.Examples.Paxos.Voting]
SafeAt_alt_sind [in VLSM.Examples.Paxos.Voting]
SafeAt_alt_ind [in VLSM.Examples.Paxos.Voting]
same_VLSM_state_rew [in VLSM.Core.VLSM]
same_VLSM_label_rew [in VLSM.Core.VLSM]
same_IM_state_rew [in VLSM.Core.Composition]
same_IM_label_rew [in VLSM.Core.Composition]
satisfyT [in VLSM.Lib.TraceProperties]
second [in VLSM.Core.Composition]
seeded_equivocators_no_equivocation_vlsm [in VLSM.Core.Equivocators.EquivocatorsComposition]
seeded_free_sub_composition [in VLSM.Core.SubProjectionTraces]
selected_messages_consistency_prop [in VLSM.Core.Equivocation]
selected_message_exists_in_no_preloaded_trace [in VLSM.Core.Equivocation]
selected_message_exists_in_some_preloaded_traces [in VLSM.Core.Equivocation]
selected_message_exists_in_all_preloaded_traces [in VLSM.Core.Equivocation]
self_validator_vlsm_prop [in VLSM.Core.Validator]
sender_nontriviality_prop [in VLSM.Core.Equivocation]
sender_safety_alt_prop [in VLSM.Core.Equivocation]
sender_safety_prop [in VLSM.Core.Equivocation]
sentMessages [in VLSM.Examples.ELMO.BaseELMO]
sentMessages' [in VLSM.Examples.ELMO.BaseELMO]
sent_by_non_equivocating [in VLSM.Core.Equivocation.FixedSetEquivocation]
sent_messages [in VLSM.Core.Equivocation]
sent_except_from [in VLSM.Core.Equivocation.NoEquivocation]
sent_comparable_sind [in VLSM.Examples.ELMO.UMO]
sent_comparable_ind [in VLSM.Examples.ELMO.UMO]
set [in VLSM.Lib.StdppListSet]
setoidT [in VLSM.Lib.TraceProperties]
set_sent_2a [in VLSM.Examples.Paxos.Paxos]
set_sent_1c [in VLSM.Examples.Paxos.Paxos]
set_sent_1a [in VLSM.Examples.Paxos.Paxos]
set_diff_filter [in VLSM.Lib.ListSetExtras]
set_remove_list2 [in VLSM.Lib.ListSetExtras]
set_remove_list1 [in VLSM.Lib.ListSetExtras]
set_remove_list [in VLSM.Lib.ListSetExtras]
set_eq [in VLSM.Lib.ListSetExtras]
set_map [in VLSM.Lib.StdppListSet]
set_fold_right [in VLSM.Lib.StdppListSet]
set_prod [in VLSM.Lib.StdppListSet]
set_diff [in VLSM.Lib.StdppListSet]
set_union [in VLSM.Lib.StdppListSet]
set_remove [in VLSM.Lib.StdppListSet]
set_add [in VLSM.Lib.StdppListSet]
set_Exists2 [in VLSM.Lib.StdppExtras]
set_Forall2 [in VLSM.Lib.StdppExtras]
ShowsSafeAt [in VLSM.Examples.Paxos.Paxos]
signed_messages_valid [in VLSM.Core.ByzantineTraces.FixedSetByzantineTraces]
SingletonT [in VLSM.Lib.TraceProperties]
singletonT [in VLSM.Lib.TraceProperties]
singleton_voteset [in VLSM.Examples.Paxos.Paxos]
sizeMessage [in VLSM.Examples.ELMO.BaseELMO]
sizeObservation [in VLSM.Examples.ELMO.BaseELMO]
sizeState [in VLSM.Examples.ELMO.BaseELMO]
spawn_initial_state [in VLSM.Core.Equivocators.FullReplayTraces]
specialized_selected_message_exists_in_no_trace [in VLSM.Core.Equivocation]
specialized_selected_message_exists_in_some_traces [in VLSM.Core.Equivocation]
specialized_selected_message_exists_in_all_traces [in VLSM.Core.Equivocation]
State_sind [in VLSM.Examples.ELMO.BaseELMO]
State_rec [in VLSM.Examples.ELMO.BaseELMO]
State_ind [in VLSM.Examples.ELMO.BaseELMO]
State_rect [in VLSM.Examples.ELMO.BaseELMO]
state_sub_item_input_is_seeded_or_sub_previously_sent [in VLSM.Core.SubProjectionTraces]
state_project [in VLSM.Examples.Paxos.Voting]
state_received_not_sent_invariant [in VLSM.Core.Equivocation]
state_received_not_sent [in VLSM.Core.Equivocation]
state_message_oracle [in VLSM.Core.Equivocation]
state_update_23 [in VLSM.Examples.Tutorial.Multiply]
state_23 [in VLSM.Examples.Tutorial.Multiply]
state_to_trace [in VLSM.Core.TraceableVLSM]
state_to_minimal_equivocation_trace [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
state_update [in VLSM.Core.Composition]
state_round_inc [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
state_round [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
state_status [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
state_has_fixed_equivocation [in VLSM.Core.Equivocators.FixedEquivocation]
state_after_sending [in VLSM.Examples.ELMO.MO]
state00 [in VLSM.Examples.Tutorial.Multiply]
state01 [in VLSM.Examples.Tutorial.Multiply]
state02 [in VLSM.Examples.Tutorial.Multiply]
state10 [in VLSM.Examples.Tutorial.Multiply]
state11 [in VLSM.Examples.Tutorial.Multiply]
state12 [in VLSM.Examples.Tutorial.Multiply]
state2trace [in VLSM.Examples.ELMO.BaseELMO]
state21 [in VLSM.Examples.Tutorial.Multiply]
state22 [in VLSM.Examples.Tutorial.Multiply]
steps_until_final_composite [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
steps_until_final_component [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
stream_concat_map_ex_min_prefix [in VLSM.Lib.StreamFilters]
stream_concat_map_ex_prefix [in VLSM.Lib.StreamFilters]
stream_concat_map [in VLSM.Lib.StreamFilters]
stream_map_option_prefix_ex [in VLSM.Lib.StreamFilters]
stream_map_option [in VLSM.Lib.StreamFilters]
stream_filter [in VLSM.Lib.StreamFilters]
stream_filter_map [in VLSM.Lib.StreamFilters]
stream_filter_positions [in VLSM.Lib.StreamFilters]
stream_filter_fst_pos [in VLSM.Lib.StreamFilters]
stream_concat [in VLSM.Lib.StreamExtras]
stream_prepend [in VLSM.Lib.StreamExtras]
stream_subsequence [in VLSM.Lib.StreamExtras]
stream_segment_alt [in VLSM.Lib.StreamExtras]
stream_segment [in VLSM.Lib.StreamExtras]
stream_suffix [in VLSM.Lib.StreamExtras]
stream_prefix [in VLSM.Lib.StreamExtras]
stream_app_cons [in VLSM.Lib.StreamExtras]
stream_app [in VLSM.Lib.StreamExtras]
strict_maximal_among [in VLSM.Lib.Preamble]
strict_minimal_among [in VLSM.Lib.Preamble]
strong_fixed_equivocation_vlsm_composition [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation_constraint [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_fixed_equivocation [in VLSM.Core.Equivocation.FixedSetEquivocation]
strong_embedding_initial_message_preservation [in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_embedding_transition_preservation [in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_embedding_valid_preservation [in VLSM.Core.VLSMProjections.VLSMEmbedding]
strong_projection_valid_message_preservation [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_transition_preservation_Some [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_valid_preservation [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_initial_state_preservation [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_projection_transition_consistency_None [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
strong_trace_witnessing_equivocation_prop [in VLSM.Core.Equivocation.WitnessedEquivocation]
strong_incl_initial_message_preservation [in VLSM.Core.VLSMProjections.VLSMInclusion]
strong_incl_initial_state_preservation [in VLSM.Core.VLSMProjections.VLSMInclusion]
strong_incl_transition_preservation [in VLSM.Core.VLSMProjections.VLSMInclusion]
strong_incl_valid_preservation [in VLSM.Core.VLSMProjections.VLSMInclusion]
strong_stuttering_embedding_initial_state_preservation [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
strong_transition_item_project_consistency [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
strong_constraint_subsumption [in VLSM.Core.ConstrainedVLSM]
stuttering_embedding_friendly_prop [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
stuttering_embedding_input_valid_transition_item_validity [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
sub_state_element_project [in VLSM.Core.SubProjectionTraces]
sub_label_element_project [in VLSM.Core.SubProjectionTraces]
sub_element_state [in VLSM.Core.SubProjectionTraces]
sub_element_label [in VLSM.Core.SubProjectionTraces]
sub_IM_not_equivocating_constraint [in VLSM.Core.SubProjectionTraces]
sub_IM_A [in VLSM.Core.SubProjectionTraces]
sub_IM_sender [in VLSM.Core.SubProjectionTraces]
sub_index_list_annotate [in VLSM.Core.SubProjectionTraces]
sub_IM [in VLSM.Core.SubProjectionTraces]
sub_index [in VLSM.Core.SubProjectionTraces]
sub_index_prop [in VLSM.Core.SubProjectionTraces]
succ_fsfun [in VLSM.Lib.FinSuppFn]
sum_project_right [in VLSM.Lib.Preamble]
sum_project_left [in VLSM.Lib.Preamble]
sum_weights_list [in VLSM.Lib.Measurable]
sum_weights [in VLSM.Lib.Measurable]
support [in VLSM.Lib.FinSuppFn]
symbol_to_index [in VLSM.Examples.Tutorial.Formulas]
symbol_sind [in VLSM.Examples.Tutorial.Formulas]
symbol_rec [in VLSM.Examples.Tutorial.Formulas]
symbol_ind [in VLSM.Examples.Tutorial.Formulas]
symbol_rect [in VLSM.Examples.Tutorial.Formulas]


T

tc_composite_observed_before_send [in VLSM.Core.MessageDependencies]
terminating_trace_prop [in VLSM.Core.VLSM]
topologically_sorted [in VLSM.Lib.TopSort]
topological_sorting [in VLSM.Lib.TopSort]
top_sort [in VLSM.Lib.TopSort]
top_sort_n [in VLSM.Lib.TopSort]
to_voting_state [in VLSM.Examples.Paxos.Paxos]
TraceMonotoneGlobalEquivocation_sind [in VLSM.Core.MessageDependencies]
TraceMonotoneGlobalEquivocation_ind [in VLSM.Core.MessageDependencies]
tracewise_limited_equivocation_vlsm_composition [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
tracewise_limited_equivocation_constraint [in VLSM.Core.Equivocation.LimitedMessageEquivocation]
trace_monotone_global_equivocation [in VLSM.Core.MessageDependencies]
trace_append [in VLSM.Lib.Traces]
trace_decompose [in VLSM.Lib.Traces]
trace_sub_item_input_is_seeded_or_sub_previously_sent [in VLSM.Core.SubProjectionTraces]
trace_prefix_fn [in VLSM.Core.VLSM]
trace_prefix [in VLSM.Core.VLSM]
Trace_messages_sind [in VLSM.Core.VLSM]
Trace_messages_rec [in VLSM.Core.VLSM]
Trace_messages_ind [in VLSM.Core.VLSM]
Trace_messages_rect [in VLSM.Core.VLSM]
trace_segment [in VLSM.Core.VLSM]
trace_nth [in VLSM.Core.VLSM]
trace_last [in VLSM.Core.VLSM]
trace_first [in VLSM.Core.VLSM]
Trace_sind [in VLSM.Core.VLSM]
Trace_rec [in VLSM.Core.VLSM]
Trace_ind [in VLSM.Core.VLSM]
Trace_rect [in VLSM.Core.VLSM]
trace_received_not_sent_before_or_after_invariant [in VLSM.Core.VLSM]
trace_received_not_sent_before_or_after [in VLSM.Core.VLSM]
trace_has_message [in VLSM.Core.VLSM]
trace_to_plan [in VLSM.Core.Plans]
trace_witnessing_equivocation_prop [in VLSM.Core.Equivocation.WitnessedEquivocation]
transition_preserves_global_equivocation [in VLSM.Core.MessageDependencies]
transition_validator [in VLSM.Core.Validator]
tripling_vlsm [in VLSM.Examples.Tutorial.Multiply]
tripling_machine [in VLSM.Examples.Tutorial.Multiply]
tripling_transition [in VLSM.Examples.Tutorial.Multiply]
ttA [in VLSM.Lib.TraceProperties]
TtT [in VLSM.Lib.TraceProperties]
ttT [in VLSM.Lib.TraceProperties]
two_element_decompositions [in VLSM.Lib.ListExtras]


U

UMO [in VLSM.Examples.ELMO.UMO]
UMO_messages [in VLSM.Examples.ELMO.UMO]
UMO_messages_aux [in VLSM.Examples.ELMO.UMO]
UMO_receivedMessages [in VLSM.Examples.ELMO.UMO]
UMO_receivedMessages_aux [in VLSM.Examples.ELMO.UMO]
UMO_sentMessages [in VLSM.Examples.ELMO.UMO]
UMO_sentMessages_aux [in VLSM.Examples.ELMO.UMO]
UMO_obs [in VLSM.Examples.ELMO.UMO]
UMO_obs_aux [in VLSM.Examples.ELMO.UMO]
UMO_state2trace [in VLSM.Examples.ELMO.UMO]
UMO_state2trace_aux [in VLSM.Examples.ELMO.UMO]
UMO_component_state2trace [in VLSM.Examples.ELMO.UMO]
UMO_transition_item [in VLSM.Examples.ELMO.UMO]
UMO_label [in VLSM.Examples.ELMO.UMO]
UMO_state [in VLSM.Examples.ELMO.UMO]
UMO_reachable_sind [in VLSM.Examples.ELMO.UMO]
UMO_reachable_ind [in VLSM.Examples.ELMO.UMO]
UMO_component [in VLSM.Examples.ELMO.UMO]
UMO_component_machine [in VLSM.Examples.ELMO.UMO]
UMO_component_valid_sind [in VLSM.Examples.ELMO.UMO]
UMO_component_valid_ind [in VLSM.Examples.ELMO.UMO]
UMO_component_transition [in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state [in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state_type [in VLSM.Examples.ELMO.UMO]
UMO_component_initial_state_prop [in VLSM.Examples.ELMO.UMO]
update [in VLSM.Lib.Preamble]
update_fsfun [in VLSM.Lib.FinSuppFn]
update_supp [in VLSM.Lib.FinSuppFn]
update_IM [in VLSM.Core.SubProjectionTraces]
up_to_n_listing [in VLSM.Lib.NatExtras]


V

valid_all_dependencies_emittable_from_dependencies_prop [in VLSM.Core.MessageDependencies]
valid_state_prop_alt [in VLSM.Core.VLSM]
valid_transition_next_sind [in VLSM.Core.VLSM]
valid_transition_next_ind [in VLSM.Core.VLSM]
valid_trace_add_default_last [in VLSM.Core.VLSM]
valid_trace [in VLSM.Core.VLSM]
valid_trace_prop [in VLSM.Core.VLSM]
valid_trace_from_prop [in VLSM.Core.VLSM]
valid_state_ind [in VLSM.Core.VLSM]
valid_message_ind [in VLSM.Core.VLSM]
valid_state_mrec_sind [in VLSM.Core.VLSM]
valid_state_mrec_ind [in VLSM.Core.VLSM]
valid_message_mrec_sind [in VLSM.Core.VLSM]
valid_message_mrec_ind [in VLSM.Core.VLSM]
valid_message [in VLSM.Core.VLSM]
valid_state [in VLSM.Core.VLSM]
valid_message_prop [in VLSM.Core.VLSM]
valid_state_prop [in VLSM.Core.VLSM]
valid_initial_state [in VLSM.Core.VLSM]
valid_state_message_prop_sind [in VLSM.Core.VLSM]
valid_state_message_prop_ind [in VLSM.Core.VLSM]
valid_state10 [in VLSM.Examples.Tutorial.Multiply]
valid_state01 [in VLSM.Examples.Tutorial.Multiply]
valid_state00 [in VLSM.Examples.Tutorial.Multiply]
valid_staten0 [in VLSM.Examples.Tutorial.Multiply]
valid_state0n [in VLSM.Examples.Tutorial.Multiply]
valid_state22 [in VLSM.Examples.Tutorial.Multiply]
valid_state11 [in VLSM.Examples.Tutorial.Multiply]
valid_state_23_geq1 [in VLSM.Examples.Tutorial.Multiply]
valid_state_prop_from_constrained [in VLSM.Core.PreloadedVLSM]
valid_preloaded_composite_vlsm_induced_projection_validator [in VLSM.Core.Validator]
VLSM_eq_part [in VLSM.Core.VLSMProjections.VLSMEquality]
VLSM_embedding_trace_project [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_infinite_trace_project [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_infinite_trace_project [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_embedding_transition_item_project [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_projection_weaken [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_infinite_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_in [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_infinite_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_infinite_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_in [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection_trace_project [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_partial_trace_project_from_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_incl_part [in VLSM.Core.VLSMProjections.VLSMInclusion]
VLSM_stuttering_embedding_weaken [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_infinite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_infinite_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_infinite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding_finite_trace_project [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_partial_trace_project_from_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_partial_projection_weaken [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
voted_none_but [in VLSM.Examples.Paxos.Voting]
voted_for [in VLSM.Examples.Paxos.Voting]
votes_from_paxos_acceptor [in VLSM.Examples.Paxos.Paxos]
vote_in_voteset [in VLSM.Examples.Paxos.Paxos]
vote_messages [in VLSM.Examples.Paxos.Paxos]
vote_committed [in VLSM.Examples.Paxos.Voting]
voting_vlsm [in VLSM.Examples.Paxos.Voting]
voting_composition_constraint [in VLSM.Examples.Paxos.Voting]
vs0 [in VLSM.Core.VLSM]
V_SafeAt [in VLSM.Examples.Paxos.Paxos]
V_VotedFor [in VLSM.Examples.Paxos.Paxos]
V_DidNotVoteIn [in VLSM.Examples.Paxos.Paxos]


W

was_voted [in VLSM.Examples.Paxos.Paxos]
was_sent_before [in VLSM.Examples.ELMO.UMO]
weak_embedding_initial_message_preservation [in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_embedding_transition_preservation [in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_embedding_valid_preservation [in VLSM.Core.VLSMProjections.VLSMEmbedding]
weak_projection_valid_message_preservation [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_transition_preservation_Some [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_valid_preservation [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_initial_state_preservation [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_projection_transition_consistency_None [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
weak_incl_initial_message_preservation [in VLSM.Core.VLSMProjections.VLSMInclusion]
weak_incl_transition_preservation [in VLSM.Core.VLSMProjections.VLSMInclusion]
weak_incl_valid_preservation [in VLSM.Core.VLSMProjections.VLSMInclusion]
weak_stuttering_embedding_initial_state_preservation [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
weak_input_valid_constraint_subsumption [in VLSM.Core.ConstrainedVLSM]
weak_projection_transition_consistency_Some [in VLSM.Core.Validator]
weight_proj1_sig [in VLSM.Lib.Measurable]
well_formed_expression [in VLSM.Examples.Tutorial.Formulas]


Z

zero_descriptor [in VLSM.Core.Equivocators.EquivocatorsComposition]
zero_fsfun [in VLSM.Lib.FinSuppFn]
zero_descriptor_constraint_lifting_prop [in VLSM.Core.Equivocators.SimulatingFree]
zproj [in VLSM.Examples.Tutorial.Multiply]


_

_messages_a [in VLSM.Core.Plans]
_trace_to_plan [in VLSM.Core.Plans]
_transition_item_to_plan_item [in VLSM.Core.Plans]
_apply_plan [in VLSM.Core.Plans]
_apply_plan_folder [in VLSM.Core.Plans]


Record Index

A

acceptor_state [in VLSM.Examples.Paxos.Voting]
annotated_state [in VLSM.Core.AnnotatedVLSM]


B

ballot_state [in VLSM.Examples.Paxos.Paxos]
BasicEquivocation [in VLSM.Core.Equivocation]


C

ChoosingWell [in VLSM.Core.TraceableVLSM]
CompareAsymmetric [in VLSM.Lib.Preamble]
CompareReflexive [in VLSM.Lib.Preamble]
CompareStrictOrder [in VLSM.Lib.Preamble]
CompareTransitive [in VLSM.Lib.Preamble]
component_reflects_composite [in VLSM.Examples.ELMO.ELMO]
CompositeLatestSentObservedIn [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
CompositeObservedBeforeSendTransition [in VLSM.Core.MessageDependencies]
ComputableReceivedMessages [in VLSM.Core.Equivocation]
ComputableSentMessages [in VLSM.Core.Equivocation]


E

ELMO_recv_valid [in VLSM.Examples.ELMO.ELMO]


F

FilteringSubsequence [in VLSM.Lib.StreamFilters]
free_valid_message [in VLSM.Core.Validators.FreeCompositionValidator]
FullMessageDependencies [in VLSM.Core.MessageDependencies]
FullNodeGlobalEquivocationEvidence [in VLSM.Core.MessageDependencies]
FullNodeLocalEquivocationEvidence [in VLSM.Core.MessageDependencies]
FullNodeSentLocalEquivocationEvidence [in VLSM.Core.MessageDependencies]


G

global_equivocators_simple [in VLSM.Examples.ELMO.ELMO]
global_equivocators [in VLSM.Examples.ELMO.MO]


H

HasBeenDirectlyObservedCapability [in VLSM.Core.Equivocation]
HasBeenReceivedCapability [in VLSM.Core.Equivocation]
HasBeenSentCapability [in VLSM.Core.Equivocation]
HistoryVLSM [in VLSM.Core.HistoryVLSM]


I

incomparable_state [in VLSM.Examples.ELMO.MO]
InputValidation [in VLSM.Core.Validator]


L

LatestCompositeObservedBeforeSend [in VLSM.Core.Equivocation.MinimalEquivocationTrace]
local_equivocators_simple [in VLSM.Examples.ELMO.ELMO]
local_equivocators [in VLSM.Examples.ELMO.MO]


M

Measurable [in VLSM.Lib.Measurable]
Message [in VLSM.Examples.ELMO.BaseELMO]
Message [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
MessageDependencies [in VLSM.Core.MessageDependencies]
MO_msg_valid_alt [in VLSM.Examples.ELMO.MO]
MsgDepGlobalEquivocationEvidence [in VLSM.Core.MessageDependencies]
MsgDepLocalEquivocationEvidence [in VLSM.Core.MessageDependencies]


N

NeList [in VLSM.Lib.NeList]
NonEmptyList [in VLSM.Lib.NeList]


O

Observation [in VLSM.Examples.ELMO.BaseELMO]
ObservedBeforeSendTransition [in VLSM.Core.MessageDependencies]
oracle_stepwise_props [in VLSM.Core.Equivocation]
oracle_tracewise_props [in VLSM.Core.Equivocation]


P

paxos_acceptor_state [in VLSM.Examples.Paxos.Paxos]
plan_item [in VLSM.Core.Plans]


R

ReachableThreshold [in VLSM.Core.ReachableThreshold]
RoundStatus [in VLSM.Examples.Tutorial.MuddyChildrenRounds]


S

State [in VLSM.Examples.ELMO.BaseELMO]
State [in VLSM.Examples.Tutorial.MuddyChildrenRounds]
state_suffix [in VLSM.Examples.ELMO.UMO]
StrictlyComparable [in VLSM.Lib.Preamble]


T

TraceableVLSM [in VLSM.Core.TraceableVLSM]
TraceWithLast [in VLSM.Core.VLSM]
TraceWithStart [in VLSM.Core.VLSM]
TransitionMonotoneVLSM [in VLSM.Core.TraceableVLSM]
TransitionValidation [in VLSM.Core.Validator]
transition_item [in VLSM.Core.VLSM]


V

valid_transition [in VLSM.Core.VLSM]
VLSM [in VLSM.Core.VLSM]
VLSMMachine [in VLSM.Core.VLSM]
VLSMType [in VLSM.Core.VLSM]
VLSM_vdecidable [in VLSM.Core.VLSM]
VLSM_embedding [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_weak_embedding [in VLSM.Core.VLSMProjections.VLSMEmbedding]
VLSM_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_weak_projection [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_projection_type [in VLSM.Core.VLSMProjections.VLSMTotalProjection]
VLSM_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_weak_stuttering_embedding [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_stuttering_embedding_type [in VLSM.Core.VLSMProjections.VLSMStutteringEmbedding]
VLSM_partial_projection [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_weak_partial_projection [in VLSM.Core.VLSMProjections.VLSMPartialProjection]
VLSM_partial_projection_type [in VLSM.Core.VLSMProjections.VLSMPartialProjection]


W

WitnessedEquivocationCapability [in VLSM.Core.Equivocation.WitnessedEquivocation]


Global Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (4963 entries)
Notation Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (45 entries)
Library Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (81 entries)
Lemma Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (2533 entries)
Constructor Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (175 entries)
Inductive Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (77 entries)
Projection Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (200 entries)
Section Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (303 entries)
Instance Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (190 entries)
Abbreviation Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (12 entries)
Definition Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (1271 entries)
Record Index A B C D E F G H I J K L M N O P Q R S T U V W X Y Z _ other (76 entries)