8
In this book, we define an encapsulated function, initial-state, and show that
9
the invariant inv holds for that state. Thus our stuttering bisimulation will
10
claim that there exists an initial state such that if you run the program from
11
that state then the execution of the program matches the spec upto finite
16
(include-book "programs")
17
(include-book "properties")
20
;; BEGIN Proofs of theorems.
23
(((initial-state-b) => *))
26
(defun initial-state-b ()
34
(defun initial-state-c ()
38
(DEFTHM inv-b-c-initial-state->>
39
(inv-b-c (initial-state-b))
42
(DEFTHM fair-inv-b-c-initial-state->>
43
(fair-inv-b-c (initial-state-b))
46
(DEFTHM inv-c-s-rep-initial-state->>
47
(inv-c-s (rep-c-s (initial-state-b)))