%------------------------------------------------------------------------------
% File : LEO-II---2.3.1
% Problem : SWV799-1 : TPTP v9.3.1. Released v4.1.0.
% Transfm : none
% Format : tptp:raw
% Command : leo --cores 7 --timeout 300 --proofoutput 1 --foatp e --atp e=/export/starexec/sandbox2/solver/bin/eprover /export/starexec/sandbox2/benchmark/theBenchmark.p
% Computer : n007.cluster.edu
% Model : x86_64 x86_64
% CPU : Intel(R) Xeon(R) CPU E5-2620 v4 2.10GHz
% Memory : 8046.5625MB
% OS : Linux 6.8.0-71-generic
% CPULimit : 300s
% WCLimit : 300s
% DateTime : Wed Oct 7 10:59:04 AM UTC 2026
% Result : Unsatisfiable 101.33s 17.22s
% Output : CNFRefutation 101.33s
% Verified :
% SZS Type : Refutation
% Derivation depth : 22
% Number of leaves : 633
% Syntax : Number of formulae : 5308 (3511 unt; 0 typ; 0 def)
% Number of atoms : 26404 (9860 equ; 0 cnn)
% Maximal formula atoms : 7 ( 4 avg)
% Number of connectives : 96971 (5446 ~;7096 |; 0 &;84429 @)
% ( 0 <=>; 0 =>; 0 <=; 0 <~>)
% Maximal formula depth : 27 ( 4 avg)
% Number of types : 2 ( 0 usr)
% Number of type conns : 0 ( 0 >; 0 *; 0 +; 0 <<)
% Number of symbols : 84 ( 81 usr; 23 con; 0-4 aty)
% Number of variables : 18647 ( 0 ^;18647 !; 0 ?;18647 :)
% Comments :
%------------------------------------------------------------------------------
thf(tp_c_Event_Obad,type,
c_Event_Obad: $i ).
thf(tp_c_Event_Oevent_OGets,type,
c_Event_Oevent_OGets: $i > $i > $i ).
thf(tp_c_Event_Oevent_ONotes,type,
c_Event_Oevent_ONotes: $i > $i > $i ).
thf(tp_c_Event_Oevent_OSays,type,
c_Event_Oevent_OSays: $i > $i > $i > $i ).
thf(tp_c_Event_OinitState,type,
c_Event_OinitState: $i > $i ).
thf(tp_c_Event_Oknows,type,
c_Event_Oknows: $i > $i > $i ).
thf(tp_c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1,type,
c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1: $i > $i > $i ).
thf(tp_c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2,type,
c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2: $i > $i > $i ).
thf(tp_c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1,type,
c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1: $i > $i > $i > $i ).
thf(tp_c_Event_Oused,type,
c_Event_Oused: $i > $i ).
thf(tp_c_HOL_Ouminus__class_Ouminus,type,
c_HOL_Ouminus__class_Ouminus: $i > $i > $i ).
thf(tp_c_Lattices_Oupper__semilattice__class_Osup,type,
c_Lattices_Oupper__semilattice__class_Osup: $i > $i > $i > $i ).
thf(tp_c_List_Oappend,type,
c_List_Oappend: $i > $i > $i > $i ).
thf(tp_c_List_Olist_OCons,type,
c_List_Olist_OCons: $i > $i > $i > $i ).
thf(tp_c_List_Olist_ONil,type,
c_List_Olist_ONil: $i > $i ).
thf(tp_c_List_Oset,type,
c_List_Oset: $i > $i > $i ).
thf(tp_c_List_Osko__List__Xsplit__list__first__prop__iff__1__5,type,
c_List_Osko__List__Xsplit__list__first__prop__iff__1__5: $i > $i > $i > $i ).
thf(tp_c_List_Osko__List__Xsplit__list__last__prop__iff__1__5,type,
c_List_Osko__List__Xsplit__list__last__prop__iff__1__5: $i > $i > $i > $i ).
thf(tp_c_Message_Oagent_OServer,type,
c_Message_Oagent_OServer: $i ).
thf(tp_c_Message_Oagent_OSpy,type,
c_Message_Oagent_OSpy: $i ).
thf(tp_c_Message_Oanalz,type,
c_Message_Oanalz: $i > $i ).
thf(tp_c_Message_OinvKey,type,
c_Message_OinvKey: $i ).
thf(tp_c_Message_OkeysFor,type,
c_Message_OkeysFor: $i > $i ).
thf(tp_c_Message_Omsg_OAgent,type,
c_Message_Omsg_OAgent: $i > $i ).
thf(tp_c_Message_Omsg_OCrypt,type,
c_Message_Omsg_OCrypt: $i > $i > $i ).
thf(tp_c_Message_Omsg_OHash,type,
c_Message_Omsg_OHash: $i > $i ).
thf(tp_c_Message_Omsg_OKey,type,
c_Message_Omsg_OKey: $i ).
thf(tp_c_Message_Omsg_OMPair,type,
c_Message_Omsg_OMPair: $i > $i > $i ).
thf(tp_c_Message_Omsg_ONonce,type,
c_Message_Omsg_ONonce: $i > $i ).
thf(tp_c_Message_Oparts,type,
c_Message_Oparts: $i > $i ).
thf(tp_c_Message_OsymKeys,type,
c_Message_OsymKeys: $i ).
thf(tp_c_Message_Osynth,type,
c_Message_Osynth: $i > $i ).
thf(tp_c_NS__Shared__Mirabelle_OIssues,type,
c_NS__Shared__Mirabelle_OIssues: $i > $i > $i > $i > $o ).
thf(tp_c_NS__Shared__Mirabelle_Ons__shared,type,
c_NS__Shared__Mirabelle_Ons__shared: $i ).
thf(tp_c_NS__Shared__Mirabelle_Ons__sharedp,type,
c_NS__Shared__Mirabelle_Ons__sharedp: $i > $o ).
thf(tp_c_Orderings_Obot__class_Obot,type,
c_Orderings_Obot__class_Obot: $i > $i ).
thf(tp_c_Orderings_Otop__class_Otop,type,
c_Orderings_Otop__class_Otop: $i > $i ).
thf(tp_c_Public_Okeymode_OEncryption,type,
c_Public_Okeymode_OEncryption: $i ).
thf(tp_c_Public_Okeymode_OSignature,type,
c_Public_Okeymode_OSignature: $i ).
thf(tp_c_Public_OpublicKey,type,
c_Public_OpublicKey: $i > $i ).
thf(tp_c_Public_OshrK,type,
c_Public_OshrK: $i ).
thf(tp_c_Set_Oimage,type,
c_Set_Oimage: $i > $i > $i > $i > $i ).
thf(tp_c_Set_Oinsert,type,
c_Set_Oinsert: $i > $i > $i > $i ).
thf(tp_c_fequal,type,
c_fequal: $i > $i > $i > $o ).
thf(tp_c_in,type,
c_in: $i > $i > $i > $o ).
thf(tp_c_lessequals,type,
c_lessequals: $i > $i > $i > $o ).
thf(tp_class_HOL_Oord,type,
class_HOL_Oord: $i > $o ).
thf(tp_class_Lattices_Oboolean__algebra,type,
class_Lattices_Oboolean__algebra: $i > $o ).
thf(tp_class_Lattices_Obounded__lattice,type,
class_Lattices_Obounded__lattice: $i > $o ).
thf(tp_class_Lattices_Olattice,type,
class_Lattices_Olattice: $i > $o ).
thf(tp_class_Lattices_Oupper__semilattice,type,
class_Lattices_Oupper__semilattice: $i > $o ).
thf(tp_class_OrderedGroup_Ogroup__add,type,
class_OrderedGroup_Ogroup__add: $i > $o ).
thf(tp_class_OrderedGroup_Opordered__ab__group__add,type,
class_OrderedGroup_Opordered__ab__group__add: $i > $o ).
thf(tp_class_Orderings_Obot,type,
class_Orderings_Obot: $i > $o ).
thf(tp_class_Orderings_Olinorder,type,
class_Orderings_Olinorder: $i > $o ).
thf(tp_class_Orderings_Oorder,type,
class_Orderings_Oorder: $i > $o ).
thf(tp_class_Orderings_Opreorder,type,
class_Orderings_Opreorder: $i > $o ).
thf(tp_class_Orderings_Otop,type,
class_Orderings_Otop: $i > $o ).
thf(tp_hAPP,type,
hAPP: $i > $i > $i ).
thf(tp_hBOOL,type,
hBOOL: $i > $o ).
thf(tp_tc_Event_Oevent,type,
tc_Event_Oevent: $i ).
thf(tp_tc_List_Olist,type,
tc_List_Olist: $i > $i ).
thf(tp_tc_Message_Oagent,type,
tc_Message_Oagent: $i ).
thf(tp_tc_Message_Omsg,type,
tc_Message_Omsg: $i ).
thf(tp_tc_bool,type,
tc_bool: $i ).
thf(tp_tc_fun,type,
tc_fun: $i > $i > $i ).
thf(tp_tc_nat,type,
tc_nat: $i ).
thf(tp_v_A,type,
v_A: $i ).
thf(tp_v_B,type,
v_B: $i ).
thf(tp_v_K,type,
v_K: $i ).
thf(tp_v_NA,type,
v_NA: $i ).
thf(tp_v_NB,type,
v_NB: $i ).
thf(tp_v_X,type,
v_X: $i ).
thf(tp_v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1,type,
v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1: $i > $i > $i > $i ).
thf(tp_v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1,type,
v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1: $i > $i > $i > $i > $i ).
thf(tp_v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1,type,
v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1: $i > $i > $i ).
thf(tp_v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2,type,
v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2: $i > $i > $i ).
thf(tp_v_sko__NS__Shared__Mirabelle__XIssues__def__1,type,
v_sko__NS__Shared__Mirabelle__XIssues__def__1: $i > $i > $i > $i > $i ).
thf(tp_v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1,type,
v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1: $i > $i > $i > $i ).
thf(tp_v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1,type,
v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1: $i > $i > $i > $i ).
thf(tp_v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1,type,
v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1: $i > $i > $i > $i ).
thf(1,axiom,
! [V_X: $i,V_Y: $i,T_a: $i] :
( ( V_X = V_Y )
| ~ ( c_fequal @ V_X @ V_Y @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ATP__Linkup_Ofequal__imp__equal_0) ).
thf(2,axiom,
! [V_x: $i,T_a: $i] : ( c_fequal @ V_x @ V_x @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ATP__Linkup_Oequal__imp__fequal_0) ).
thf(3,axiom,
class_HOL_Oord @ tc_bool,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_bool__HOL_Oord) ).
thf(4,axiom,
class_Orderings_Obot @ tc_bool,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_bool__Orderings_Obot) ).
thf(5,axiom,
class_Orderings_Otop @ tc_bool,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_bool__Orderings_Otop) ).
thf(6,axiom,
class_Orderings_Oorder @ tc_bool,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_bool__Orderings_Oorder) ).
thf(7,axiom,
class_Lattices_Olattice @ tc_bool,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_bool__Lattices_Olattice) ).
thf(8,axiom,
class_Orderings_Opreorder @ tc_bool,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_bool__Orderings_Opreorder) ).
thf(9,axiom,
class_Lattices_Oboolean__algebra @ tc_bool,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_bool__Lattices_Oboolean__algebra) ).
thf(10,axiom,
class_Lattices_Obounded__lattice @ tc_bool,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_bool__Lattices_Obounded__lattice) ).
thf(11,axiom,
class_Lattices_Oupper__semilattice @ tc_bool,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_bool__Lattices_Oupper__semilattice) ).
thf(12,axiom,
class_HOL_Oord @ tc_nat,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_nat__HOL_Oord) ).
thf(13,axiom,
class_Orderings_Obot @ tc_nat,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_nat__Orderings_Obot) ).
thf(14,axiom,
class_Orderings_Oorder @ tc_nat,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_nat__Orderings_Oorder) ).
thf(15,axiom,
class_Lattices_Olattice @ tc_nat,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_nat__Lattices_Olattice) ).
thf(16,axiom,
class_Orderings_Olinorder @ tc_nat,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_nat__Orderings_Olinorder) ).
thf(17,axiom,
class_Orderings_Opreorder @ tc_nat,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_nat__Orderings_Opreorder) ).
thf(18,axiom,
class_Lattices_Oupper__semilattice @ tc_nat,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_nat__Lattices_Oupper__semilattice) ).
thf(19,axiom,
! [T_2: $i,T_1: $i] :
( ( class_HOL_Oord @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_HOL_Oord @ T_1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_fun__HOL_Oord) ).
thf(20,axiom,
! [T_2: $i,T_1: $i] :
( ( class_Orderings_Obot @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Obot @ T_1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_fun__Orderings_Obot) ).
thf(21,axiom,
! [T_2: $i,T_1: $i] :
( ( class_Orderings_Otop @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Otop @ T_1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_fun__Orderings_Otop) ).
thf(22,axiom,
! [T_2: $i,T_1: $i] :
( ( class_Orderings_Oorder @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Oorder @ T_1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_fun__Orderings_Oorder) ).
thf(23,axiom,
! [T_2: $i,T_1: $i] :
( ( class_Lattices_Olattice @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Olattice @ T_1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_fun__Lattices_Olattice) ).
thf(24,axiom,
! [T_2: $i,T_1: $i] :
( ( class_Orderings_Opreorder @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Opreorder @ T_1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_fun__Orderings_Opreorder) ).
thf(25,axiom,
! [T_2: $i,T_1: $i] :
( ( class_Lattices_Oboolean__algebra @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Oboolean__algebra @ T_1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_fun__Lattices_Oboolean__algebra) ).
thf(26,axiom,
! [T_2: $i,T_1: $i] :
( ( class_Lattices_Obounded__lattice @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Obounded__lattice @ T_1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_fun__Lattices_Obounded__lattice) ).
thf(27,axiom,
! [T_2: $i,T_1: $i] :
( ( class_Lattices_Oupper__semilattice @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Olattice @ T_1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',clsarity_fun__Lattices_Oupper__semilattice) ).
thf(28,axiom,
! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__conj__parts_0) ).
thf(29,axiom,
! [V_c: $i,V_H: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__into__parts_0) ).
thf(30,axiom,
! [V_c: $i,V_H: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_not__parts__not__analz_0) ).
thf(31,axiom,
! [V_x: $i,V_y: $i] :
( ( ( hAPP @ c_Public_OshrK @ V_x )
!= ( hAPP @ c_Public_OshrK @ V_y ) )
| ( V_x = V_y ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__injective_0) ).
thf(32,axiom,
! [V_nat: $i,V_nat_H: $i,V_msg_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I42_J_0) ).
thf(33,axiom,
! [V_msg1_H: $i,V_msg2_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I41_J_0) ).
thf(34,axiom,
! [V_nat: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I40_J_0) ).
thf(35,axiom,
! [V_nat_H: $i,V_msg_H: $i,V_msg1: $i,V_msg2: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I49_J_0) ).
thf(36,axiom,
! [V_msg1_H: $i,V_msg2_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I35_J_0) ).
thf(37,axiom,
! [V_X: $i,V_evs: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ V_X ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__Spy__analz__bad_0) ).
thf(38,axiom,
! [V_msg1: $i,V_msg2: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) )
| ( V_msg2 = V_msg2_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I6_J_1) ).
thf(39,axiom,
! [V_msg1: $i,V_msg2: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) )
| ( V_msg1 = V_msg1_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I6_J_0) ).
thf(40,axiom,
! [V_agent: $i,V_nat_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_ONonce @ V_nat_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I10_J_0) ).
thf(41,axiom,
! [V_nat: $i,V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OCrypt @ V_nat @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I7_J_1) ).
thf(42,axiom,
! [V_nat: $i,V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OCrypt @ V_nat @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) )
| ( V_nat = V_nat_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I7_J_0) ).
thf(43,axiom,
! [V_nat: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I36_J_0) ).
thf(44,axiom,
! [V_S: $i,V_x: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_S @ V_x ) )
| ~ ( c_in @ V_x @ V_S @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_mem__def_0) ).
thf(45,axiom,
! [V_x: $i,V_S: $i,T_a: $i] :
( ( c_in @ V_x @ V_S @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_S @ V_x ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_mem__def_1) ).
thf(46,axiom,
! [V_nat: $i,V_nat_H: $i] :
( ( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_ONonce @ V_nat_H ) )
| ( V_nat = V_nat_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I3_J_0) ).
thf(47,axiom,
! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__analzD_0) ).
thf(48,axiom,
! [V_nat_H: $i,V_agent: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I13_J_0) ).
thf(49,axiom,
! [V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__in__knows_0) ).
thf(50,axiom,
! [V_nat_H: $i,V_msg_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I19_J_0) ).
thf(51,axiom,
! [V_msg1: $i,V_msg2: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I48_J_0) ).
thf(52,axiom,
! [V_nat: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I34_J_0) ).
thf(53,axiom,
! [V_agent: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I18_J_0) ).
thf(54,axiom,
! [V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Spy__spies__bad__shrK_0) ).
thf(55,axiom,
! [V_agent: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I16_J_0) ).
thf(56,axiom,
! [V_nat: $i,V_nat_H: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) )
| ( V_nat = V_nat_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I4_J_0) ).
thf(57,axiom,
! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Message_Oparts @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__partsD_0) ).
thf(58,axiom,
! [V_X: $i,V_evs: $i,V_A: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__imp__analz__Spy_0) ).
thf(59,axiom,
! [V_X: $i,V_H: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__shrK__Decrypt_0) ).
thf(60,axiom,
! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts_OBody_0) ).
thf(61,axiom,
! [V_nat_H: $i,V_agent: $i] :
( ( c_Message_Omsg_ONonce @ V_nat_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I11_J_0) ).
thf(62,axiom,
! [V_msg1_H: $i,V_msg2_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I17_J_0) ).
thf(63,axiom,
! [V_H: $i] :
( ( c_Message_Oanalz @ ( c_Message_Oparts @ V_H ) )
= ( c_Message_Oparts @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__parts_0) ).
thf(64,axiom,
! [V_nat: $i,V_nat_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I30_J_0) ).
thf(65,axiom,
! [V_H: $i] :
( ( c_Message_Oparts @ ( c_Message_Oparts @ V_H ) )
= ( c_Message_Oparts @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__idem_0) ).
thf(66,axiom,
! [V_nat_H: $i,V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I43_J_0) ).
thf(67,axiom,
! [V_X: $i,V_evs: $i,V_S: $i,V_A: $i,V_KA: $i,V_N: $i,V_B: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ V_KA @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ V_B @ ( c_Message_Omsg_OMPair @ V_K @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_NS3__msg__in__parts__spies_0) ).
thf(68,axiom,
c_in @ c_Message_Oagent_OSpy @ c_Event_Obad @ tc_Message_Oagent,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Spy__in__bad_0) ).
thf(69,axiom,
! [V_X: $i,V_evs: $i,V_A: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__imp__spies_0) ).
thf(70,axiom,
! [V_X: $i,V_evs: $i,V_A: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__imp__parts__knows__Spy_0) ).
thf(71,axiom,
! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ V_H @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz_OInj_0) ).
thf(72,axiom,
! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ V_H @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts_OInj_0) ).
thf(73,axiom,
! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I1_J_2) ).
thf(74,axiom,
! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_agent2 = V_agent2_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I1_J_1) ).
thf(75,axiom,
! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_agent1 = V_agent1_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I1_J_0) ).
thf(76,axiom,
! [V_nat_H: $i,V_nat: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I31_J_0) ).
thf(77,axiom,
! [V_agent: $i,V_nat_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I12_J_0) ).
thf(78,axiom,
! [V_nat_H: $i,V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I37_J_0) ).
thf(79,axiom,
! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts_OFst_0) ).
thf(80,axiom,
! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts_OSnd_0) ).
thf(81,axiom,
! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz_OFst_0) ).
thf(82,axiom,
! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz_OSnd_0) ).
thf(83,axiom,
! [V_H: $i] :
( ( c_Message_Oanalz @ ( c_Message_Oanalz @ V_H ) )
= ( c_Message_Oanalz @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__idem_0) ).
thf(84,axiom,
! [V_X: $i,V_A: $i,V_evs: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__imp__knows_0) ).
thf(85,axiom,
! [V_H: $i] :
( ( c_Message_Oparts @ ( c_Message_Oanalz @ V_H ) )
= ( c_Message_Oparts @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__analz_0) ).
thf(86,axiom,
! [V_agent: $i,V_agent_H: $i] :
( ( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OAgent @ V_agent_H ) )
| ( V_agent = V_agent_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I1_J_0) ).
thf(87,axiom,
! [V_K: $i,V_evs: $i,V_A: $i,V_NA: $i,V_B: $i,V_X: $i] :
( ( c_in @ V_K @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ V_B @ ( c_Message_Omsg_OMPair @ V_K @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Oops__parts__spies_0) ).
thf(88,axiom,
! [V_X: $i,V_evs: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Notes__imp__knows__Spy_0) ).
thf(89,axiom,
! [V_X: $i,V_evs: $i,V_B: $i,V_K: $i,V_A: $i,V_S: $i,V_NA: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__S__message__form_1) ).
thf(90,axiom,
! [V_X: $i,V_B: $i,V_K: $i,V_A: $i,V_evs: $i,V_NA: $i] :
( ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_cert__A__form_1) ).
thf(91,axiom,
! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs: $i,V_NA: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_B__trusts__NS5__lemma_0) ).
thf(92,axiom,
! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OSpy ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Gets__imp__knows__agents_0) ).
thf(93,axiom,
! [V_c: $i,V_evs: $i,V_A: $i,V_B: $i,V_X: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__mono__contra_I1_J_0) ).
thf(94,axiom,
! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__spies__pubK_0) ).
thf(95,axiom,
! [V_A: $i,V_NA: $i,V_B: $i,V_K: $i,V_X: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_A__trusts__NS2_0) ).
thf(96,axiom,
! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i,V_NA: $i,V_X: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_A__trusts__NS4__lemma_0) ).
thf(97,axiom,
! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i,V_NA: $i,V_X: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ V_evs )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_A__authenticates__and__keydist__to__B_0) ).
thf(98,axiom,
! [V_B: $i,V_A: $i,V_K: $i,V_Nb: $i,V_evs: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_Nb ) ) @ V_evs )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_Nb ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_B__Issues__A_0) ).
thf(99,axiom,
! [V_X: $i,V_evs: $i,V_A: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__imp__used_0) ).
thf(100,axiom,
! [V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Spy__analz__shrK_1) ).
thf(101,axiom,
! [V_A: $i,V_evs: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Spy__analz__shrK_0) ).
thf(102,axiom,
! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Notes__imp__knows_0) ).
thf(103,axiom,
! [V_A: $i,V_evs: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Spy__see__shrK_0) ).
thf(104,axiom,
! [V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Spy__see__shrK_1) ).
thf(105,axiom,
! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_spies__pubK_0) ).
thf(106,axiom,
! [V_c: $i,V_evs: $i] :
( ( c_in @ V_c @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_usedI_0) ).
thf(107,axiom,
! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz_ODecrypt_0) ).
thf(108,axiom,
! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i,V_NA: $i,V_X: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_A__trusts__NS4_0) ).
thf(109,axiom,
! [V_A: $i,V_B: $i,V_K: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ V_A @ V_B @ V_K @ V_evs ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_B__trusts__NS3_0) ).
thf(110,axiom,
! [V_B: $i,V_X: $i,V_evs: $i,V_K: $i,V_NB: $i,V_A: $i,V_NA: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ V_B @ V_X @ V_evs ) @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_NS4__implies__NS3_0) ).
thf(111,axiom,
! [V_N: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Nonce__notin__used__empty_0) ).
thf(112,axiom,
! [V_K: $i,V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__notin__used__empty_0) ).
thf(113,axiom,
! [V_b: $i,V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Spy__spies__bad__privateKey_0) ).
thf(114,axiom,
! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ V_K @ V_evs ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ V_K @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_B__trusts__NS5_0) ).
thf(115,axiom,
! [V_A: $i,V_B: $i,V_X: $i,V_evs3: $i,V_NA: $i,V_S: $i,V_K: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs3 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs3 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__sharedp_ONS3_0) ).
thf(116,axiom,
! [V_B: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_B ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_neq__shrK_0) ).
thf(117,axiom,
! [V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__in__used_0) ).
thf(118,axiom,
! [V_A: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__in__initState_0) ).
thf(119,axiom,
! [V_x: $i,V_A: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ V_x ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Nonce__Key__image__eq_0) ).
thf(120,axiom,
! [V_N: $i,V_B: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Nonce__notin__initState_0) ).
thf(121,axiom,
! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth_OCrypt_0) ).
thf(122,axiom,
! [V_K: $i,V_H: $i,V_X: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__synth_1) ).
thf(123,axiom,
! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__synth__eq_0) ).
thf(124,axiom,
! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__synth__eq_1) ).
thf(125,axiom,
! [V_K: $i,V_X: $i,V_A: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__notin__image__Key_0) ).
thf(126,axiom,
! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_MPair__synth__analz_2) ).
thf(127,axiom,
! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_MPair__synth__analz_0) ).
thf(128,axiom,
! [V_c: $i,V_A_H: $i,V_b: $i,V_A: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__neq__privateKey_0) ).
thf(129,axiom,
! [V_b: $i,V_C: $i,V_A: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) )
!= ( hAPP @ c_Public_OshrK @ V_A ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__neq__priK_0) ).
thf(130,axiom,
! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oused @ V_evs ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_used__Gets_0) ).
thf(131,axiom,
c_in @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__shared_ONil_0) ).
thf(132,axiom,
! [V_A: $i,V_b: $i,V_C: $i] :
( ( hAPP @ c_Public_OshrK @ V_A )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_priK__neq__shrK_0) ).
thf(133,axiom,
! [V_a: $i,V_list: $i,T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( ( c_List_Olist_OCons @ V_a @ V_list @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) )
| ( V_list = V_list_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_list_Oinject_1) ).
thf(134,axiom,
! [V_a: $i,V_list: $i,T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( ( c_List_Olist_OCons @ V_a @ V_list @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) )
| ( V_a = V_a_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_list_Oinject_0) ).
thf(135,axiom,
! [V_agent_H: $i,V_msg_H: $i,V_agent: $i,V_msg: $i] :
( ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OGets @ V_agent @ V_msg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I9_J_0) ).
thf(136,axiom,
! [V_K: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ c_Message_OinvKey @ V_K ) )
= V_K ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_invKey_0) ).
thf(137,axiom,
! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_ONotes @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) )
| ( V_agent = V_agent_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I3_J_0) ).
thf(138,axiom,
! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_ONotes @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I3_J_1) ).
thf(139,axiom,
! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I8_J_0) ).
thf(140,axiom,
! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) )
| ( V_agent = V_agent_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I2_J_0) ).
thf(141,axiom,
! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I2_J_1) ).
thf(142,axiom,
! [V_K: $i,V_K_H: $i] :
( ( ( hAPP @ c_Message_OinvKey @ V_K )
!= ( hAPP @ c_Message_OinvKey @ V_K_H ) )
| ( V_K = V_K_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_invKey__eq_0) ).
thf(143,axiom,
! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_privateKey__neq__publicKey_0) ).
thf(144,axiom,
! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) )
| ( V_A = V_A_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__inject_1) ).
thf(145,axiom,
! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) )
| ( V_b = V_c ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__inject_0) ).
thf(146,axiom,
! [V_b: $i,V_A: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_priK__in__initState_0) ).
thf(147,axiom,
! [V_H: $i] :
( ( c_Message_Osynth @ ( c_Message_Osynth @ V_H ) )
= ( c_Message_Osynth @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__idem_0) ).
thf(148,axiom,
! [V_x: $i,V_t: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_t @ T_a )
!= V_t ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_not__Cons__self2_0) ).
thf(149,axiom,
! [V_xs: $i,V_x: $i,T_a: $i] :
( V_xs
!= ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_not__Cons__self_0) ).
thf(150,axiom,
! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_privateKey__into__used_0) ).
thf(151,axiom,
! [V_x: $i,V_A: $i,T_aa: $i,V_f: $i,T_a: $i] :
( ~ ( c_in @ V_x @ V_A @ T_aa )
| ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_aa @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_rev__image__eqI_0) ).
thf(152,axiom,
! [V_x: $i,V_A: $i,T_b: $i,V_f: $i,T_a: $i] :
( ~ ( c_in @ V_x @ V_A @ T_b )
| ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_image__iff_2) ).
thf(153,axiom,
! [V_f: $i,V_x: $i,V_A: $i,T_b: $i,T_a: $i] :
( ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ T_a )
| ~ ( c_in @ V_x @ V_A @ T_b ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_image__eqI_0) ).
thf(154,axiom,
! [V_f: $i,V_x: $i,V_A: $i,T_a: $i,T_b: $i] :
( ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ T_b )
| ~ ( c_in @ V_x @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_imageI_0) ).
thf(155,axiom,
! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ V_H @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth_OInj_0) ).
thf(156,axiom,
! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Osynth @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__synthD_0) ).
thf(157,axiom,
! [T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_list_Osimps_I2_J_0) ).
thf(158,axiom,
! [V_x: $i,V_xa: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_xa @ T_a )
!= ( c_List_Olist_ONil @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_neq__Nil__conv_1) ).
thf(159,axiom,
! [V_a_H: $i,V_list_H: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a )
!= ( c_List_Olist_ONil @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_list_Osimps_I3_J_0) ).
thf(160,axiom,
! [V_X: $i,V_evs: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_initState__into__used_0) ).
thf(161,axiom,
! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__into__used_0) ).
thf(162,axiom,
! [V_b: $i,V_A: $i,V_B: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Event_OinitState @ V_B ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__in__initState_0) ).
thf(163,axiom,
! [V_A: $i,V_B: $i,V_NA: $i,V_evs1: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ V_evs1 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Event_Oused @ V_evs1 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs1 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__shared_ONS1_0) ).
thf(164,axiom,
c_Message_Oagent_OServer != c_Message_Oagent_OSpy,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_agent_Osimps_I4_J_0) ).
thf(165,axiom,
c_Message_Oagent_OSpy != c_Message_Oagent_OServer,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_agent_Osimps_I5_J_0) ).
thf(166,axiom,
! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Spy__Gets_0) ).
thf(167,axiom,
! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I4_J_0) ).
thf(168,axiom,
! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I6_J_0) ).
thf(169,axiom,
! [V_agent_H: $i,V_msg_H: $i,V_agent1: $i,V_agent2: $i,V_msg: $i] :
( ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I5_J_0) ).
thf(170,axiom,
! [V_agent_H: $i,V_msg_H: $i,V_agent1: $i,V_agent2: $i,V_msg: $i] :
( ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_event_Osimps_I7_J_0) ).
thf(171,axiom,
! [V_A: $i,V_b: $i,V_C: $i] :
( ( hAPP @ c_Public_OshrK @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pubK__neq__shrK_0) ).
thf(172,axiom,
! [V_b: $i,V_C: $i,V_A: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C )
!= ( hAPP @ c_Public_OshrK @ V_A ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__neq__pubK_0) ).
thf(173,axiom,
! [V_A: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ c_Public_OshrK @ V_A ) )
= ( hAPP @ c_Public_OshrK @ V_A ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_invKey__shrK_0) ).
thf(174,axiom,
! [V_A: $i,V_B: $i,V_NA: $i,V_evs1: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ V_evs1 @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Event_Oused @ V_evs1 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs1 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__sharedp_ONS1_0) ).
thf(175,axiom,
! [V_B: $i,V_X: $i,V_evsf: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ V_B @ V_X ) @ V_evsf @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evsf ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evsf @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__shared_OFake_0) ).
thf(176,axiom,
c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_ONil @ tc_Event_Oevent ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__sharedp_ONil_0) ).
thf(177,axiom,
! [V_X: $i,V_evs: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Notes__imp__used_0) ).
thf(178,axiom,
! [V_B: $i,V_X: $i,V_evsf: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ V_B @ V_X ) @ V_evsf @ tc_Event_Oevent ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evsf ) ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evsf ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__sharedp_OFake_0) ).
thf(179,axiom,
! [V_y: $i,V_xs: $i,T_a: $i,V_x: $i] :
( ( c_in @ V_y @ ( c_List_Oset @ V_xs @ T_a ) @ T_a )
| ( V_y = V_x )
| ~ ( c_in @ V_y @ ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__ConsD_0) ).
thf(180,axiom,
! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_MPair__used_1) ).
thf(181,axiom,
! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_MPair__used_0) ).
thf(182,axiom,
! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth_OMPair_0) ).
thf(183,axiom,
! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_MPair__synth_1) ).
thf(184,axiom,
! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_MPair__synth_0) ).
thf(185,axiom,
! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__synth_0) ).
thf(186,axiom,
! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Key__synth__eq_1) ).
thf(187,axiom,
! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Key__synth_0) ).
thf(188,axiom,
! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__synth__analz_1) ).
thf(189,axiom,
! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__synth__analz_0) ).
thf(190,axiom,
! [V_N: $i] :
( ( c_Message_Oparts @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) )
= ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__image__Key_0) ).
thf(191,axiom,
! [V_agt: $i,V_H: $i] : ( c_in @ ( c_Message_Omsg_OAgent @ V_agt ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth_OAgent_0) ).
thf(192,axiom,
! [V_A: $i,V_H: $i] : ( c_in @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Agent__synth_0) ).
thf(193,axiom,
! [V_N: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Nonce__synth__eq_1) ).
thf(194,axiom,
! [V_N: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Nonce__synth__eq_0) ).
thf(195,axiom,
! [V_n: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ V_n ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ V_n ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Nonce__synth_0) ).
thf(196,axiom,
! [V_N: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) )
= ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__Key_0) ).
thf(197,axiom,
! [V_c: $i,V_evs: $i,V_A: $i,V_X: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__mono__contra_I2_J_0) ).
thf(198,axiom,
! [V_c: $i,V_evs: $i,V_A: $i,V_X: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__mono__contra_I3_J_0) ).
thf(199,axiom,
! [V_NA: $i,V_NB: $i,V_K: $i,V_evso: $i,V_A: $i,V_B: $i,V_X: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ V_evso @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evso @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__shared_OOops_0) ).
thf(200,axiom,
! [V_A: $i,V_X: $i,V_evs: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Spy__Notes_1) ).
thf(201,axiom,
~ ( c_in @ c_Message_Oagent_OServer @ c_Event_Obad @ tc_Message_Oagent ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Server__not__bad_0) ).
thf(202,axiom,
! [V_A: $i,V_B: $i,V_X: $i,V_evs3: $i,V_NA: $i,V_S: $i,V_K: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs3 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OServer )
| ~ ( c_in @ V_evs3 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__shared_ONS3_0) ).
thf(203,axiom,
! [V_A: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_ONil @ tc_Event_Oevent ) )
= ( c_Event_OinitState @ V_A ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Nil_0) ).
thf(204,axiom,
! [V_NA: $i,V_NB: $i,V_K: $i,V_evso: $i,V_A: $i,V_B: $i,V_X: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ V_evso @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evso ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__sharedp_OOops_0) ).
thf(205,axiom,
! [V_K_H: $i,V_A: $i,V_evs: $i,V_N: $i,V_B: $i,V_K: $i,V_X: $i] :
( ( V_K_H
= ( hAPP @ c_Public_OshrK @ V_A ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__Server__message__form_2) ).
thf(206,axiom,
! [V_A: $i,V_A_H: $i,V_evs: $i,V_NA_H: $i,V_B_H: $i,V_K: $i,V_X_H: $i,V_NA: $i,V_B: $i,V_X: $i] :
( ( V_A = V_A_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_unique__session__keys_0) ).
thf(207,axiom,
! [V_NA: $i,V_NA_H: $i,V_evs: $i,V_A_H: $i,V_B_H: $i,V_K: $i,V_X_H: $i,V_A: $i,V_B: $i,V_X: $i] :
( ( V_NA = V_NA_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_unique__session__keys_1) ).
thf(208,axiom,
! [V_B: $i,V_B_H: $i,V_evs: $i,V_A_H: $i,V_NA_H: $i,V_K: $i,V_X_H: $i,V_A: $i,V_NA: $i,V_X: $i] :
( ( V_B = V_B_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_unique__session__keys_2) ).
thf(209,axiom,
! [V_X: $i,V_X_H: $i,V_evs: $i,V_A_H: $i,V_NA_H: $i,V_B_H: $i,V_K: $i,V_A: $i,V_NA: $i,V_B: $i] :
( ( V_X = V_X_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_unique__session__keys_3) ).
thf(210,axiom,
! [V_X: $i,V_B: $i,V_K: $i,V_A: $i,V_evs: $i,V_K_H: $i,V_N: $i] :
( ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__Server__message__form_1) ).
thf(211,axiom,
! [V_K: $i,V_X: $i,V_B: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__notin__initState_0) ).
thf(212,axiom,
! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_MPair__synth__analz_1) ).
thf(213,axiom,
! [V_K: $i,V_evs: $i,V_NA: $i,V_B: $i,V_A: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_secrecy__lemma_0) ).
thf(214,axiom,
! [V_K: $i,V_evs: $i,V_B: $i,V_A: $i,V_NA: $i,V_K_H: $i,V_X: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Spy__not__see__encrypted__key_0) ).
thf(215,axiom,
! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ V_A @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ V_A @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OSpy )
| ~ ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__imp__Says__Gets__Notes__initState_0) ).
thf(216,axiom,
! [V_A: $i,V_NA: $i,V_B: $i,V_KAB: $i,V_evs2: $i,V_A_H: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ V_evs2 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs2 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_KAB @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oused @ V_evs2 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs2 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__shared_ONS2_0) ).
thf(217,axiom,
! [V_evs: $i,V_A: $i,V_X: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_spies__Notes__rev_1) ).
thf(218,axiom,
! [V_A: $i,V_NA: $i,V_B: $i,V_KAB: $i,V_evs2: $i,V_A_H: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ V_evs2 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs2 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_KAB @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oused @ V_evs2 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs2 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__sharedp_ONS2_0) ).
thf(219,axiom,
! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs4: $i,V_A_H: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ V_evs4 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) @ ( c_List_Oset @ V_evs4 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Event_Oused @ V_evs4 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs4 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__shared_ONS4_0) ).
thf(220,axiom,
! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs4: $i,V_A_H: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ V_evs4 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) @ ( c_List_Oset @ V_evs4 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Event_Oused @ V_evs4 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs4 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__sharedp_ONS4_0) ).
thf(221,axiom,
! [V_A: $i,V_X: $i,V_evs: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Spy__Notes_0) ).
thf(222,axiom,
! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs5: $i,V_S: $i,V_NA: $i,V_X: $i,V_B_H: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ V_evs5 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B_H @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ V_evs5 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__shared_ONS5_0) ).
thf(223,axiom,
! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs5: $i,V_S: $i,V_NA: $i,V_X: $i,V_B_H: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ V_evs5 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B_H @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs5 ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ns__sharedp_ONS5_0) ).
thf(224,axiom,
! [V_evs: $i,V_A: $i,V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_spies__Gets__rev_0) ).
thf(225,axiom,
! [V_X: $i,V_evs: $i,V_K: $i,V_S: $i,V_A: $i,V_NA: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__S__message__form_0) ).
thf(226,axiom,
! [V_K: $i,V_X: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__Crypt__if_0) ).
thf(227,axiom,
! [V_K: $i,V_X: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__Crypt__if_1) ).
thf(228,axiom,
! [V_x: $i,V_AA: $i] :
( ( c_in @ V_x @ V_AA @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__image__eq_0) ).
thf(229,axiom,
! [V_x: $i,V_AA: $i] :
( ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_x @ V_AA @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__image__eq_1) ).
thf(230,axiom,
! [V_H: $i,V_H_H: $i,V_X: $i] :
( ( ( c_Message_Oanalz @ V_H )
!= ( c_Message_Oanalz @ V_H_H ) )
| ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H_H @ tc_Message_Omsg ) ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__cong_0) ).
thf(231,axiom,
! [T_a: $i] :
( ( c_List_Olist_ONil @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_ONil @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Nil__is__append__conv_2) ).
thf(232,axiom,
! [V_xs: $i,T_a: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Olist_ONil @ T_a ) @ T_a )
= V_xs ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__Nil2_0) ).
thf(233,axiom,
! [V_x: $i,T_a: $i] :
( V_x
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_eq__Nil__appendI_0) ).
thf(234,axiom,
! [V_xs: $i,T_a: $i] :
( V_xs
= ( c_List_Oappend @ V_xs @ ( c_List_Olist_ONil @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_self__append__conv_1) ).
thf(235,axiom,
! [T_a: $i,V_ys: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ V_ys @ T_a )
= V_ys ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__Nil_0) ).
thf(236,axiom,
! [V_ys: $i,T_a: $i] :
( V_ys
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ V_ys @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_self__append__conv2_1) ).
thf(237,axiom,
! [T_a: $i,V_xs: $i,V_ys: $i] :
( ( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Nil__is__append__conv_0) ).
thf(238,axiom,
! [T_a: $i,V_xs: $i,V_ys: $i] :
( ( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Nil__is__append__conv_1) ).
thf(239,axiom,
! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Olist_ONil @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__is__Nil__conv_0) ).
thf(240,axiom,
! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Olist_ONil @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__is__Nil__conv_1) ).
thf(241,axiom,
! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= V_xs )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__self__conv_0) ).
thf(242,axiom,
! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( V_xs
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_self__append__conv_0) ).
thf(243,axiom,
! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= V_ys )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__self__conv2_0) ).
thf(244,axiom,
! [V_ys: $i,V_xs: $i,T_a: $i] :
( ( V_ys
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_self__append__conv2_0) ).
thf(245,axiom,
! [T_a: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_ONil @ T_a ) @ T_a )
= ( c_List_Olist_ONil @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__is__Nil__conv_2) ).
thf(246,axiom,
! [V_a: $i,V_A: $i,T_a: $i] :
( ( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
= V_A )
| ~ ( c_in @ V_a @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__absorb_0) ).
thf(247,axiom,
! [V_x: $i,V_A: $i,T_a: $i,V_B: $i] :
( ( ( c_Set_Oinsert @ V_x @ V_A @ T_a )
!= ( c_Set_Oinsert @ V_x @ V_B @ T_a ) )
| ( c_in @ V_x @ V_B @ T_a )
| ( c_in @ V_x @ V_A @ T_a )
| ( V_A = V_B ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__ident_0) ).
thf(248,axiom,
! [V_x: $i,V_B: $i,T_a: $i] : ( c_in @ V_x @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insertCI_1) ).
thf(249,axiom,
! [V_a: $i,V_B: $i,T_a: $i] : ( c_in @ V_a @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insertI1_0) ).
thf(250,axiom,
! [V_x: $i,V_A: $i,T_a: $i] : ( c_in @ V_x @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__iff_1) ).
thf(251,axiom,
! [V_x: $i,T_a: $i] : ( c_in @ V_x @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_UNIV__I_0) ).
thf(252,axiom,
! [V_a: $i,V_A: $i,T_a: $i,V_b: $i] :
( ( c_in @ V_a @ V_A @ T_a )
| ( V_a = V_b )
| ~ ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_A @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insertE_0) ).
thf(253,axiom,
! [V_a: $i,V_b: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_B @ T_a ) @ T_a )
| ~ ( c_in @ V_a @ V_B @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insertCI_0) ).
thf(254,axiom,
! [V_a: $i,V_b: $i,V_A: $i,T_a: $i] :
( ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_A @ T_a ) @ T_a )
| ~ ( c_in @ V_a @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__iff_2) ).
thf(255,axiom,
! [V_K: $i,V_evs: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Key__not__used_0) ).
thf(256,axiom,
! [V_x: $i,V_b: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_b ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__notin__image__publicKey_0) ).
thf(257,axiom,
! [V_f: $i,V_a: $i,V_B: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oinsert @ ( hAPP @ V_f @ V_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ T_a )
= ( c_Set_Oimage @ V_f @ ( c_Set_Oinsert @ V_a @ V_B @ T_b ) @ T_b @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__simps_I56_J_0) ).
thf(258,axiom,
! [V_b: $i,V_A: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) @ c_Message_OsymKeys @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_not__symKeys__pubK_0) ).
thf(259,axiom,
! [V_x: $i,V_xs1: $i,V_zs: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xs1 @ V_zs @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xs1 @ T_a ) @ V_zs @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Cons__eq__appendI_0) ).
thf(260,axiom,
! [V_x: $i,V_xa: $i,V_zs: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xa @ V_zs @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xa @ T_a ) @ V_zs @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Cons__eq__append__conv_5) ).
thf(261,axiom,
! [V_y: $i,V_A: $i,T_a: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_A @ V_x ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__code_2) ).
thf(262,axiom,
! [V_x: $i,V_xs: $i,T_a: $i,V_ys: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ V_ys @ T_a )
= ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xs @ V_ys @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__Cons_0) ).
thf(263,axiom,
! [V_x: $i,V_xa: $i,T_a: $i,V_zs: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xa @ T_a ) @ V_zs @ T_a )
= ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xa @ V_zs @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__eq__Cons__conv_5) ).
thf(264,axiom,
! [V_x: $i,V_y: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_x @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_y @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__commute_0) ).
thf(265,axiom,
! [V_b: $i,V_x: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__notin__image__shrK_0) ).
thf(266,axiom,
! [V_ys: $i,V_xs: $i,T_a: $i,V_zs: $i] :
( ( ( c_List_Oappend @ V_ys @ V_xs @ T_a )
!= ( c_List_Oappend @ V_zs @ V_xs @ T_a ) )
| ( V_ys = V_zs ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__same__eq_0) ).
thf(267,axiom,
! [V_xs: $i,V_ys: $i,T_a: $i,V_zs: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Oappend @ V_xs @ V_zs @ T_a ) )
| ( V_ys = V_zs ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_same__append__eq_0) ).
thf(268,axiom,
! [V_b: $i,V_c: $i,V_x: $i,V_AA: $i] :
( ( V_b = V_c )
| ~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__image__eq_0) ).
thf(269,axiom,
! [V_x: $i,V_AA: $i,V_b: $i,V_c: $i] :
( ( c_in @ V_x @ V_AA @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__image__eq_1) ).
thf(270,axiom,
! [V_x: $i,V_xa: $i,V_AA: $i] :
( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_x ) @ V_xa ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_x ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_xa @ V_AA @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__image__eq_2) ).
thf(271,axiom,
! [V_b: $i,V_x: $i,V_c: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_privateKey__notin__image__publicKey_0) ).
thf(272,axiom,
! [V_x: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_x @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_x @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__absorb2_0) ).
thf(273,axiom,
! [V_A: $i,V_x: $i,V_y: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_A @ V_x ) )
| ( V_y = V_x )
| ~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ V_x ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__code_0) ).
thf(274,axiom,
! [V_K: $i] :
( ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ c_Message_OsymKeys @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_symKeys__invKey__iff_0) ).
thf(275,axiom,
! [V_K: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_symKeys__invKey__iff_1) ).
thf(276,axiom,
! [V_K: $i] :
( ( ( hAPP @ c_Message_OinvKey @ V_K )
= V_K )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_invKey__K_0) ).
thf(277,axiom,
! [T_a: $i,V_x: $i] : ( hBOOL @ ( hAPP @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_top1I_0) ).
thf(278,axiom,
! [V_f: $i,V_a: $i,V_B: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oimage @ V_f @ ( c_Set_Oinsert @ V_a @ V_B @ T_b ) @ T_b @ T_a )
= ( c_Set_Oinsert @ ( hAPP @ V_f @ V_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_image__insert_0) ).
thf(279,axiom,
! [V_x: $i,V_A: $i,T_a: $i] : ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_x ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__code_1) ).
thf(280,axiom,
! [V_b: $i,V_A: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ c_Message_OsymKeys @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_not__symKeys__priK_0) ).
thf(281,axiom,
! [V_xs: $i,V_ys: $i,T_a: $i,V_zs: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ V_xs @ V_ys @ T_a ) @ V_zs @ T_a )
= ( c_List_Oappend @ V_xs @ ( c_List_Oappend @ V_ys @ V_zs @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__assoc_0) ).
thf(282,axiom,
! [V_xs: $i,V_xs1: $i,V_us: $i,T_a: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Oappend @ V_xs1 @ V_us @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Oappend @ V_xs @ V_xs1 @ T_a ) @ V_us @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__eq__appendI_0) ).
thf(283,axiom,
! [V_zs: $i,V_x: $i,T_a: $i,V_ys: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ V_zs @ V_x @ T_a ) @ V_ys @ T_a )
= ( c_List_Oappend @ V_zs @ ( c_List_Oappend @ V_x @ V_ys @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__eq__append__conv2_4) ).
thf(284,axiom,
! [V_xs: $i,V_x: $i,V_ts: $i,T_a: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Oappend @ V_x @ V_ts @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Oappend @ V_xs @ V_x @ T_a ) @ V_ts @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__eq__append__conv2_5) ).
thf(285,axiom,
! [V_X: $i] : ( c_in @ ( hAPP @ c_Public_OshrK @ V_X ) @ c_Message_OsymKeys @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sym__shrK_0) ).
thf(286,axiom,
! [V_b: $i,V_x: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_privateKey__notin__image__shrK_0) ).
thf(287,axiom,
! [V_f: $i,V_x: $i,V_A: $i,T_a: $i,T_b: $i] :
( ( ( c_Set_Oinsert @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ T_b )
= ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) )
| ~ ( c_in @ V_x @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__image_0) ).
thf(288,axiom,
! [V_f: $i,V_x: $i,T_b: $i,T_a: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_rangeI_0) ).
thf(289,axiom,
! [V_x: $i,V_xs: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_xs @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Cons__eq__append__conv_4) ).
thf(290,axiom,
! [T_a: $i,V_x: $i,V_xs: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a )
= ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append__eq__Cons__conv_4) ).
thf(291,axiom,
! [V_xs: $i,V_x: $i,T_a: $i,V_ys: $i,V_y: $i] :
( ( ( c_List_Oappend @ V_xs @ ( c_List_Olist_OCons @ V_x @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a )
!= ( c_List_Oappend @ V_ys @ ( c_List_Olist_OCons @ V_y @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a ) )
| ( V_xs = V_ys ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append1__eq__conv_0) ).
thf(292,axiom,
! [V_xs: $i,V_x: $i,T_a: $i,V_ys: $i,V_y: $i] :
( ( ( c_List_Oappend @ V_xs @ ( c_List_Olist_OCons @ V_x @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a )
!= ( c_List_Oappend @ V_ys @ ( c_List_Olist_OCons @ V_y @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a ) )
| ( V_x = V_y ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_append1__eq__conv_1) ).
thf(293,axiom,
! [V_x: $i,V_xs: $i,T_a: $i] :
( ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_x @ ( c_List_Oset @ V_xs @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_List_Oset_Osimps_I2_J_0) ).
thf(294,axiom,
! [V_X: $i,V_H: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oparts @ V_H ) )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__cut__eq_0) ).
thf(295,axiom,
! [V_c: $i,V_a: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_a @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insertI_0) ).
thf(296,axiom,
! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Set_Oinsert @ V_Y @ V_H @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__MPair_0) ).
thf(297,axiom,
! [V_X: $i,V_K: $i,V_X_H: $i,V_Y: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X_H @ V_Y ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X_H @ V_Y ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pushes_I12_J_0) ).
thf(298,axiom,
! [V_c: $i,V_a: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_a @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insertI_0) ).
thf(299,axiom,
! [V_X: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ V_H ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__eq_0) ).
thf(300,axiom,
! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__cut_0) ).
thf(301,axiom,
! [V_K: $i,V_X: $i,V_Y: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pushes_I5_J_0) ).
thf(302,axiom,
! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__Crypt_0) ).
thf(303,axiom,
! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ ( c_Set_Oinsert @ V_Y @ V_H @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__MPair_0) ).
thf(304,axiom,
! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__Decrypt_H_0) ).
thf(305,axiom,
! [V_K: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__Key_0) ).
thf(306,axiom,
! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__cut_0) ).
thf(307,axiom,
! [V_K: $i,V_X: $i,V_K_H: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K_H ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K_H ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pushes_I6_J_0) ).
thf(308,axiom,
! [V_agt: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__Agent_0) ).
thf(309,axiom,
! [V_X: $i,V_K: $i,V_C: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pushes_I8_J_0) ).
thf(310,axiom,
! [V_N: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__Nonce_0) ).
thf(311,axiom,
! [V_K: $i,V_C: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pushes_I1_J_0) ).
thf(312,axiom,
! [V_agt: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__Agent_0) ).
thf(313,axiom,
! [V_X: $i,V_K: $i,V_N: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pushes_I9_J_0) ).
thf(314,axiom,
! [V_K: $i,V_N: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pushes_I2_J_0) ).
thf(315,axiom,
! [V_N: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__Nonce_0) ).
thf(316,axiom,
! [V_x: $i,V_evs: $i] :
( ( c_in @ V_x @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__freshK_1) ).
thf(317,axiom,
! [V_K: $i,V_evs: $i,V_KAB: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( V_K = V_KAB )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ( c_in @ V_KAB @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__freshK_0) ).
thf(318,axiom,
! [V_K: $i,V_KAB: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_KAB @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__freshK_2) ).
thf(319,axiom,
! [V_evs: $i,V_A: $i,V_B: $i,V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_spies__Says__rev_0) ).
thf(320,axiom,
! [V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] : ( c_in @ V_x @ ( c_List_Oset @ ( c_List_Oappend @ V_xa @ ( c_List_Olist_OCons @ V_x @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_in__set__conv__decomp_1) ).
thf(321,axiom,
! [V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ V_x @ ( c_List_Oset @ ( c_List_Oappend @ V_xa @ ( c_List_Olist_OCons @ V_x @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ V_x @ ( c_List_Oset @ V_xb @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_in__set__conv__decomp__last_2) ).
thf(322,axiom,
! [V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ V_x @ ( c_List_Oset @ ( c_List_Oappend @ V_xa @ ( c_List_Olist_OCons @ V_x @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ V_x @ ( c_List_Oset @ V_xa @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_in__set__conv__decomp__first_2) ).
thf(323,axiom,
! [V_X: $i,V_H: $i] :
( ( ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) )
= ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Fake__analz__eq_0) ).
thf(324,axiom,
! [V_x: $i,V_A: $i] :
( ( c_in @ V_x @ V_A @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Key__image__eq_0) ).
thf(325,axiom,
! [V_x: $i,V_A: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
| ~ ( c_in @ V_x @ V_A @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Key__image__eq_1) ).
thf(326,axiom,
! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Says_0) ).
thf(327,axiom,
! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Notes_0) ).
thf(328,axiom,
! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) @ ( c_List_Oset @ V_xb @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_split__list__last__prop__iff_3) ).
thf(329,axiom,
! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_split__list__first__prop__iff_5) ).
thf(330,axiom,
! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) @ ( c_List_Oset @ V_xb @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_split__list__last__prop__iff_4) ).
thf(331,axiom,
! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) @ ( c_List_Oset @ V_x @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_split__list__first__prop__iff_3) ).
thf(332,axiom,
! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_split__list__last__prop__iff_5) ).
thf(333,axiom,
! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) @ ( c_List_Oset @ V_x @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_split__list__first__prop__iff_4) ).
thf(334,axiom,
! [V_K: $i,V_KK: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK_2) ).
thf(335,axiom,
! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Hash__synth__analz_1) ).
thf(336,axiom,
! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Hash__synth__analz_0) ).
thf(337,axiom,
! [V_K: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) )
| ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oanalz @ V_H ) ) @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__Key_0) ).
thf(338,axiom,
! [V_K: $i,V_H: $i,V_G: $i,V_X: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) ) @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keysFor__parts__insert_0) ).
thf(339,axiom,
! [V_K: $i,V_H: $i,V_X: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ ( c_Message_OkeysFor @ V_H ) @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__imp__invKey__keysFor_0) ).
thf(340,axiom,
! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__lemma_1) ).
thf(341,axiom,
! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__lemma_5) ).
thf(342,axiom,
! [V_evs: $i] : ( c_lessequals @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__knows__Spy__subset__used_0) ).
thf(343,axiom,
! [V_K: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_K @ ( c_Message_OkeysFor @ V_H ) @ tc_nat )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Crypt__imp__keysFor_0) ).
thf(344,axiom,
! [V_evs: $i,V_A: $i,V_B: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Spy__subset__knows__Spy__Says_0) ).
thf(345,axiom,
! [V_K: $i,V_KK: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_KK @ tc_nat )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK_1) ).
thf(346,axiom,
! [V_K: $i,V_evs: $i,V_KK: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_K @ V_KK @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK_0) ).
thf(347,axiom,
! [V_evs: $i,V_A: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Spy__subset__knows__Spy__Notes_0) ).
thf(348,axiom,
! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ V_X @ V_evs ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Spy__imp__Says__Notes__initState_0) ).
thf(349,axiom,
! [V_evs: $i,V_A: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Spy__subset__knows__Spy__Gets_0) ).
thf(350,axiom,
! [V_b: $i,V_A: $i,V_c: $i,V_AS: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_publicKey__notin__image__privateKey_0) ).
thf(351,axiom,
! [V_b: $i,V_c: $i,V_A: $i,V_AS: $i] :
( ( V_b = V_c )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_privateKey__image__eq_0) ).
thf(352,axiom,
! [V_A: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ V_A ) ) @ c_Message_OsymKeys @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_symKey__neq__priEK_0) ).
thf(353,axiom,
! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ V_A @ V_B @ V_X @ V_evs ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ V_A @ V_B @ V_X @ V_evs ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Issues__def_0) ).
thf(354,axiom,
! [V_Z: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Z @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Z @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Fake__parts__insert__in__Un_0) ).
thf(355,axiom,
! [V_K: $i,V_X: $i,V_G: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__analz__insert__eq_1) ).
thf(356,axiom,
! [V_K: $i,V_G: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__analz__insert__eq_0) ).
thf(357,axiom,
! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ~ ( c_in @ V_K @ V_nE @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__lemma_2) ).
thf(358,axiom,
! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__lemma_0) ).
thf(359,axiom,
! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__lemma_4) ).
thf(360,axiom,
! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__lemma_3) ).
thf(361,axiom,
! [V_x: $i,V_b: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_b ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_shrK__notin__image__privateKey_0) ).
thf(362,axiom,
! [V_x: $i,V_A: $i,V_AS: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_x ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_x ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_A @ V_AS @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_privateKey__image__eq_2) ).
thf(363,axiom,
! [V_A: $i,V_AS: $i,V_b: $i,V_c: $i] :
( ( c_in @ V_A @ V_AS @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_privateKey__image__eq_1) ).
thf(364,axiom,
! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_lemma1_0) ).
thf(365,axiom,
! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_lemma2_0) ).
thf(366,axiom,
! [V_K: $i,V_evs: $i] :
( ~ ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_new__keys__not__used_0) ).
thf(367,axiom,
! [V_K: $i,V_evs: $i,V_A: $i,V_NA: $i,V_B: $i,V_X: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_cert__A__form_0) ).
thf(368,axiom,
! [V_A: $i,V_X: $i,V_evs: $i] :
( ( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) )
| ( V_A = c_Message_Oagent_OSpy ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Gets_0) ).
thf(369,axiom,
! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__Spy__Says_0) ).
thf(370,axiom,
! [V_evs: $i,V_A: $i,V_X: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_spies__Notes__rev_0) ).
thf(371,axiom,
! [V_K: $i,V_evs: $i,V_A: $i,V_K_H: $i,V_N: $i,V_B: $i,V_X: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Says__Server__message__form_0) ).
thf(372,axiom,
! [V_A: $i,V_evs: $i,V_A_H: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A_H @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__subset__knows__Gets_0) ).
thf(373,axiom,
! [V_A: $i,V_evs: $i,V_A_H: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A_H @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__subset__knows__Notes_0) ).
thf(374,axiom,
! [V_A: $i,V_B: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ V_A ) )
!= ( hAPP @ c_Public_OshrK @ V_B ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_priEK__noteq__shrK_0) ).
thf(375,axiom,
! [V_A: $i,V_evs: $i,V_A_H: $i,V_B: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__subset__knows__Says_0) ).
thf(376,axiom,
! [V_X: $i,V_A: $i] :
~ ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Hash__notin__image__Key_0) ).
thf(377,axiom,
! [V_K: $i,V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__Crypt__subset_0) ).
thf(378,axiom,
! [V_X: $i,V_G: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ V_G ) )
| ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_gen__analz__insert__eq_0) ).
thf(379,axiom,
! [V_Y: $i,V_G: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__cut_0) ).
thf(380,axiom,
! [V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Fake__parts__insert_0) ).
thf(381,axiom,
! [V_evs: $i] : ( c_lessequals @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_used__nil__subset_0) ).
thf(382,axiom,
! [V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I33_J_0) ).
thf(383,axiom,
! [V_nat: $i,V_msg_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I32_J_0) ).
thf(384,axiom,
! [V_agent: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I14_J_0) ).
thf(385,axiom,
! [V_msg_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I15_J_0) ).
thf(386,axiom,
! [V_H: $i,V_H_H: $i,V_G: $i,V_G_H: $i] :
( ( ( c_Message_Oanalz @ V_H )
!= ( c_Message_Oanalz @ V_H_H ) )
| ( ( c_Message_Oanalz @ V_G )
!= ( c_Message_Oanalz @ V_G_H ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G_H @ V_H_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__cong_0) ).
thf(387,axiom,
! [V_G: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ V_G ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__analz__Un_0) ).
thf(388,axiom,
! [V_H: $i] : ( c_lessequals @ V_H @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__increasing_0) ).
thf(389,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__subset__iff_0) ).
thf(390,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__subset__iff_1) ).
thf(391,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__mono_0) ).
thf(392,axiom,
! [V_nat: $i,V_msg_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I38_J_0) ).
thf(393,axiom,
! [V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I39_J_0) ).
thf(394,axiom,
! [V_nat_H: $i,V_msg_H: $i,V_msg: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OHash @ V_msg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I47_J_0) ).
thf(395,axiom,
! [V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I46_J_0) ).
thf(396,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__subset__iff_0) ).
thf(397,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__subset__iff_1) ).
thf(398,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__mono_0) ).
thf(399,axiom,
! [V_H: $i] : ( c_lessequals @ V_H @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__increasing_0) ).
thf(400,axiom,
! [V_G: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__Un_0) ).
thf(401,axiom,
! [V_msg: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I44_J_0) ).
thf(402,axiom,
! [V_msg1_H: $i,V_msg2_H: $i,V_msg: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_OHash @ V_msg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I45_J_0) ).
thf(403,axiom,
! [V_c: $i,V_A: $i,T_a: $i] :
( ~ ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_in @ V_c @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ComplD_0) ).
thf(404,axiom,
! [V_c: $i,V_A: $i,T_a: $i] :
( ( c_in @ V_c @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
| ( c_in @ V_c @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ComplI_0) ).
thf(405,axiom,
! [V_c: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_c @ V_B @ T_a )
| ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_UnE_0) ).
thf(406,axiom,
! [V_c: $i,V_A: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
| ~ ( c_in @ V_c @ V_B @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_UnCI_0) ).
thf(407,axiom,
! [V_c: $i,V_A: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
| ~ ( c_in @ V_c @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_UnCI_1) ).
thf(408,axiom,
! [V_x: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ~ ( c_in @ V_x @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__mp_0) ).
thf(409,axiom,
! [V_c: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_c @ V_B @ T_a )
| ~ ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subsetD_0) ).
thf(410,axiom,
! [V_x: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_in @ V_x @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__rev__mp_0) ).
thf(411,axiom,
! [V_t: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_t @ V_B @ T_a )
| ~ ( c_in @ V_t @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__iff_0) ).
thf(412,axiom,
! [T_a: $i,V_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ V_b @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ V_a @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_minus__le__iff_1) ).
thf(413,axiom,
! [T_a: $i,V_b: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ V_a @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ V_b @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_minus__le__iff_0) ).
thf(414,axiom,
! [T_a: $i,V_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ V_a @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_b @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__minus__iff_1) ).
thf(415,axiom,
! [T_a: $i,V_b: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ V_b @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_a @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__minus__iff_0) ).
thf(416,axiom,
! [T_b: $i,V_f: $i,V_x: $i,V_g: $i,T_a: $i] :
( ~ ( class_HOL_Oord @ T_b )
| ( c_lessequals @ ( hAPP @ V_f @ V_x ) @ ( hAPP @ V_g @ V_x ) @ T_b )
| ~ ( c_lessequals @ V_f @ V_g @ ( tc_fun @ T_a @ T_b ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__funD_0) ).
thf(417,axiom,
! [T_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a )
= V_b ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_minus__equation__iff_1) ).
thf(418,axiom,
! [T_a: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( V_a
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_equation__minus__iff_1) ).
thf(419,axiom,
! [T_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( V_b
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_equation__minus__iff_0) ).
thf(420,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ T_a )
= V_x ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_double__compl_0) ).
thf(421,axiom,
! [T_a: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
= V_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_minus__minus_0) ).
thf(422,axiom,
! [V_A: $i,T_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= V_A ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_double__complement_0) ).
thf(423,axiom,
! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keysFor__insert__MPair_0) ).
thf(424,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_OkeysFor @ V_G ) @ ( c_Message_OkeysFor @ V_H ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keysFor__mono_0) ).
thf(425,axiom,
! [V_X: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert__Hash_0) ).
thf(426,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_inf__sup__aci_I8_J_0) ).
thf(427,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__left__idem_0) ).
thf(428,axiom,
! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__left__absorb_0) ).
thf(429,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_x @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_inf__sup__aci_I5_J_0) ).
thf(430,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_x @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__commute_0) ).
thf(431,axiom,
! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__commute_0) ).
thf(432,axiom,
! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__insert_0) ).
thf(433,axiom,
! [V_A: $i,V_x: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__insert_1) ).
thf(434,axiom,
! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__insert__iff_1) ).
thf(435,axiom,
! [V_A: $i,V_x: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__insert__iff_2) ).
thf(436,axiom,
! [V_x: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ~ ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__subset_0) ).
thf(437,axiom,
! [V_A: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_A ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keysFor__insert__Agent_0) ).
thf(438,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__compl__top_0) ).
thf(439,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ V_x @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_compl__sup__top_0) ).
thf(440,axiom,
! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Compl__partition_0) ).
thf(441,axiom,
! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Compl__partition2_0) ).
thf(442,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_inf__sup__ord_I3_J_0) ).
thf(443,axiom,
! [T_a: $i,V_y: $i,V_x: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( c_lessequals @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_inf__sup__ord_I4_J_0) ).
thf(444,axiom,
! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
| ~ ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ V_x @ V_z @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__sup__iff_2) ).
thf(445,axiom,
! [T_a: $i,V_y: $i,V_z: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ V_x @ T_a )
| ~ ( c_lessequals @ V_z @ V_x @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__least_0) ).
thf(446,axiom,
! [T_a: $i,V_y: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__ge2_0) ).
thf(447,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__ge1_0) ).
thf(448,axiom,
! [T_a: $i,V_a: $i,V_b: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a )
| ~ ( c_lessequals @ V_b @ V_x @ T_a )
| ~ ( c_lessequals @ V_a @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__supI_0) ).
thf(449,axiom,
! [V_A: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__least_0) ).
thf(450,axiom,
! [V_A: $i,V_B: $i,T_a: $i] : ( c_lessequals @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__upper1_0) ).
thf(451,axiom,
! [V_B: $i,V_A: $i,T_a: $i] : ( c_lessequals @ V_B @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__upper2_0) ).
thf(452,axiom,
! [V_A: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__subset__iff_2) ).
thf(453,axiom,
! [V_x: $i,V_A: $i] :
( ( c_in @ V_x @ V_A @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ V_x ) @ ( c_Set_Oimage @ c_Message_OinvKey @ V_A @ tc_nat @ tc_nat ) @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_invKey__image__eq_0) ).
thf(454,axiom,
! [V_x: $i,V_A: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_x ) @ ( c_Set_Oimage @ c_Message_OinvKey @ V_A @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_x @ V_A @ tc_nat ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_invKey__image__eq_1) ).
thf(455,axiom,
! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_inf__sup__aci_I6_J_0) ).
thf(456,axiom,
! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_z @ T_a ) @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_inf__sup__aci_I7_J_0) ).
thf(457,axiom,
! [V_A: $i,V_B: $i,V_C: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__simps_I65_J_0) ).
thf(458,axiom,
! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_z @ T_a ) @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__left__commute_0) ).
thf(459,axiom,
! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__assoc_0) ).
thf(460,axiom,
! [V_A: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__assoc_0) ).
thf(461,axiom,
! [V_A: $i,V_B: $i,V_C: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__left__commute_0) ).
thf(462,axiom,
! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_G ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_G ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Fake__analz__insert_0) ).
thf(463,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__subset__iff_0) ).
thf(464,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__subset__iff_1) ).
thf(465,axiom,
! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__Un__subset1_0) ).
thf(466,axiom,
! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__Un_0) ).
thf(467,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_x @ T_a )
= V_x ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__idem_0) ).
thf(468,axiom,
! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
= V_A ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__absorb_0) ).
thf(469,axiom,
! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__subset_1) ).
thf(470,axiom,
! [V_A: $i,V_b: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_b @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__insertI2_0) ).
thf(471,axiom,
! [V_N: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keysFor__insert__Nonce_0) ).
thf(472,axiom,
( ( c_Event_OinitState @ c_Message_Oagent_OSpy )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ c_Event_Obad @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ c_Event_Obad @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Public_OshrK @ c_Event_Obad @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_initState__Spy_0) ).
thf(473,axiom,
! [V_A: $i,V_evs: $i] : ( c_lessequals @ ( c_Event_OinitState @ V_A ) @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_initState__subset__knows_0) ).
thf(474,axiom,
! [V_A: $i,V_evs: $i,V_e: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ V_e @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_knows__subset__knows__Cons_0) ).
thf(475,axiom,
! [V_G: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ V_G ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Osynth @ V_G ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__synth__Un_0) ).
thf(476,axiom,
! [V_H: $i] :
( ( c_Message_Oanalz @ ( c_Message_Osynth @ V_H ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ V_H ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__synth_0) ).
thf(477,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_G ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__analz__mono_0) ).
thf(478,axiom,
! [V_H: $i] :
( ( c_Message_Oparts @ ( c_Message_Osynth @ V_H ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_H ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__synth_0) ).
thf(479,axiom,
! [V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth_OHash_0) ).
thf(480,axiom,
! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_G ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__trans_0) ).
thf(481,axiom,
! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Hash__synth_0) ).
thf(482,axiom,
! [V_H: $i] : ( c_lessequals @ ( c_Message_Oanalz @ V_H ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__subset__parts_0) ).
thf(483,axiom,
! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__trans_0) ).
thf(484,axiom,
! [V_c: $i,V_A: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__simps_I61_J_0) ).
thf(485,axiom,
! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__trans_0) ).
thf(486,axiom,
! [V_c: $i,V_H: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_in__parts__UnE_0) ).
thf(487,axiom,
! [V_xs: $i,T_a: $i,V_x: $i] : ( c_lessequals @ ( c_List_Oset @ V_xs @ T_a ) @ ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__subset__Cons_0) ).
thf(488,axiom,
! [V_f: $i,V_x: $i,V_B: $i,T_a: $i,V_A: $i,T_b: $i] :
( ( c_in @ ( hAPP @ V_f @ V_x ) @ V_B @ T_a )
| ~ ( c_in @ V_x @ V_A @ T_b )
| ~ ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_image__subset__iff_0) ).
thf(489,axiom,
! [T_a: $i,V_y: $i,V_x: $i] :
( ~ ( class_Orderings_Olinorder @ T_a )
| ( c_lessequals @ V_y @ V_x @ T_a )
| ( c_lessequals @ V_x @ V_y @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_linorder__linear_0) ).
thf(490,axiom,
! [V_G: $i,V_H: $i,V_G_H: $i,V_H_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G_H @ V_H_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ V_H ) @ ( c_Message_Oanalz @ V_H_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_G_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__subset__cong_0) ).
thf(491,axiom,
! [V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Set_Oinsert @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__insert_0) ).
thf(492,axiom,
! [V_f: $i,V_A: $i,V_B: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oimage @ V_f @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_image__Un_0) ).
thf(493,axiom,
! [V_a: $i,V_C: $i,T_a: $i,V_D: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ V_a @ V_C @ T_a ) @ ( c_Set_Oinsert @ V_a @ V_D @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_C @ V_D @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__mono_0) ).
thf(494,axiom,
! [V_x: $i,V_A: $i,T_b: $i,V_f: $i,T_a: $i] :
( ~ ( c_lessequals @ V_x @ V_A @ ( tc_fun @ T_b @ tc_bool ) )
| ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_x @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__image__iff_2) ).
thf(495,axiom,
! [V_f: $i,V_A: $i,T_a: $i,T_b: $i,V_B: $i] :
( ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ ( c_Set_Oimage @ V_f @ V_B @ T_a @ T_b ) @ ( tc_fun @ T_b @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_image__mono_0) ).
thf(496,axiom,
! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ V_G @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__subset__Un_0) ).
thf(497,axiom,
! [V_X: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keysFor__insert__Hash_0) ).
thf(498,axiom,
! [V_Q: $i,V_x: $i,V_P: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_Q @ V_x ) )
| ~ ( c_lessequals @ V_P @ V_Q @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_rev__predicate1D_0) ).
thf(499,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Opreorder @ T_a )
| ( c_lessequals @ V_x @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_order__eq__refl_0) ).
thf(500,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( c_lessequals @ V_x @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_order__eq__iff_0) ).
thf(501,axiom,
! [V_Q: $i,V_x: $i,V_P: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_Q @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ~ ( c_lessequals @ V_P @ V_Q @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_predicate1D_0) ).
thf(502,axiom,
! [V_A: $i,V_C: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__trans_0) ).
thf(503,axiom,
! [V_A: $i,T_a: $i] : ( c_lessequals @ V_A @ V_A @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__refl_0) ).
thf(504,axiom,
! [V_x: $i,T_a: $i] : ( c_lessequals @ V_x @ V_x @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_equalityE_0) ).
thf(505,axiom,
! [T_a: $i,V_x: $i,V_z: $i,V_y: $i] :
( ~ ( class_Orderings_Opreorder @ T_a )
| ( c_lessequals @ V_x @ V_z @ T_a )
| ~ ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_order__trans_0) ).
thf(506,axiom,
! [T_a: $i,V_z: $i,V_x: $i,V_y: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( c_lessequals @ V_z @ V_x @ T_a )
| ~ ( c_lessequals @ V_z @ V_y @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_xt1_I6_J_0) ).
thf(507,axiom,
! [V_B: $i,V_C: $i,T_a: $i,V_A: $i] :
( ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__subset__iff_1) ).
thf(508,axiom,
! [V_A: $i,V_C: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__subset__iff_0) ).
thf(509,axiom,
! [T_a: $i,V_a: $i,V_x: $i,V_b: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_a @ V_x @ T_a )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__supE_0) ).
thf(510,axiom,
! [T_a: $i,V_b: $i,V_x: $i,V_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_b @ V_x @ T_a )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__supE_1) ).
thf(511,axiom,
! [T_a: $i,V_x: $i,V_a: $i,V_b: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_x @ V_a @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__supI1_0) ).
thf(512,axiom,
! [T_a: $i,V_x: $i,V_a: $i,V_b: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_x @ V_b @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__supI2_0) ).
thf(513,axiom,
! [T_a: $i,V_x: $i,V_z: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_x @ V_z @ T_a )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__sup__iff_0) ).
thf(514,axiom,
! [T_a: $i,V_y: $i,V_z: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__sup__iff_1) ).
thf(515,axiom,
! [V_H: $i] : ( c_lessequals @ V_H @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__increasing_0) ).
thf(516,axiom,
! [V_x: $i,V_A: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_in @ V_x @ V_B @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__subset_2) ).
thf(517,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Otop @ T_a )
| ( c_lessequals @ V_x @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_top__greatest_0) ).
thf(518,axiom,
! [V_A: $i,T_a: $i] : ( c_lessequals @ V_A @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__UNIV_0) ).
thf(519,axiom,
! [V_A: $i,V_B: $i,T_a: $i,V_C: $i,V_D: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_C @ V_D @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_D @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__mono_0) ).
thf(520,axiom,
! [V_f: $i,V_A: $i,T_b: $i,T_a: $i,V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oimage @ V_f @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__image__freshK__simps_I57_J_0) ).
thf(521,axiom,
! [V_msg: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OHash @ V_msg_H ) )
| ( V_msg = V_msg_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_msg_Osimps_I5_J_0) ).
thf(522,axiom,
! [V_K: $i,V_X: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pushes_I4_J_0) ).
thf(523,axiom,
! [V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Set_Oinsert @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__subset_0) ).
thf(524,axiom,
! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( c_List_Oset @ ( c_List_Oappend @ V_xs @ V_ys @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_List_Oset @ V_xs @ T_a ) @ ( c_List_Oset @ V_ys @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__append_0) ).
thf(525,axiom,
! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= V_B )
| ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__Un__eq_1) ).
thf(526,axiom,
! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= V_A )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__absorb2_0) ).
thf(527,axiom,
! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= V_B )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__absorb1_0) ).
thf(528,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= V_y )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__iff__sup_0) ).
thf(529,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
!= V_y )
| ( c_lessequals @ V_x @ V_y @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__iff__sup_1) ).
thf(530,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= V_x )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__absorb1_0) ).
thf(531,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( V_x = V_y )
| ~ ( c_lessequals @ V_x @ V_y @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_order__antisym__conv_0) ).
thf(532,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( V_x = V_y )
| ~ ( c_lessequals @ V_y @ V_x @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_order__antisym_0) ).
thf(533,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( V_x = V_y )
| ~ ( c_lessequals @ V_y @ V_x @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_order__eq__iff_2) ).
thf(534,axiom,
! [V_A: $i,V_B: $i,T_a: $i] :
( ( V_A = V_B )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__eq__subset_2) ).
thf(535,axiom,
! [V_A: $i,V_B: $i,T_a: $i] :
( ( V_A = V_B )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_equalityI_0) ).
thf(536,axiom,
! [V_A: $i,T_a: $i,V_B: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A = V_B ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Compl__eq__Compl__iff_0) ).
thf(537,axiom,
! [T_a: $i,V_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a )
!= ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) )
| ( V_a = V_b ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_neg__equal__iff__equal_0) ).
thf(538,axiom,
! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a )
!= ( c_HOL_Ouminus__class_Ouminus @ V_y @ T_a ) )
| ( V_x = V_y ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_compl__eq__compl__iff_0) ).
thf(539,axiom,
! [V_X: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__Hash_0) ).
thf(540,axiom,
! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Osynth @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__Un_0) ).
thf(541,axiom,
! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_A @ V_x ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup1CI_1) ).
thf(542,axiom,
! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_B @ V_x ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup1CI_0) ).
thf(543,axiom,
! [V_B: $i,V_x: $i,V_A: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_B @ V_x ) )
| ( hBOOL @ ( hAPP @ V_A @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup1E_0) ).
thf(544,axiom,
! [V_K: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keysFor__insert__Key_0) ).
thf(545,axiom,
! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_split__list__first__prop__iff_6) ).
thf(546,axiom,
! [V_X: $i,V_K: $i,V_X_H: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X_H ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X_H ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_pushes_I11_J_0) ).
thf(547,axiom,
! [V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Set_Oinsert @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) @ ( c_Message_Osynth @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__insert_0) ).
thf(548,axiom,
! [V_B: $i,V_a: $i,T_a: $i] : ( c_lessequals @ V_B @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__insertI_0) ).
thf(549,axiom,
! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__Un__subset2_0) ).
thf(550,axiom,
! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__UNIV__right_0) ).
thf(551,axiom,
! [T_a: $i,V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__UNIV__left_0) ).
thf(552,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ T_a ) @ V_x @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__top__left_0) ).
thf(553,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__top__right_0) ).
thf(554,axiom,
! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_split__list__last__prop__iff_6) ).
thf(555,axiom,
! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_synth__mono_0) ).
thf(556,axiom,
! [V_A: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Compl__subset__Compl__iff_1) ).
thf(557,axiom,
! [V_B: $i,V_A: $i,T_a: $i] :
( ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Compl__subset__Compl__iff_0) ).
thf(558,axiom,
! [V_B: $i,T_a: $i,V_A: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Compl__anti__mono_0) ).
thf(559,axiom,
! [T_a: $i,V_b: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_a @ V_b @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_le__imp__neg__le_0) ).
thf(560,axiom,
! [T_a: $i,V_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ V_a @ V_b @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_neg__le__iff__le_0) ).
thf(561,axiom,
! [V_A: $i,V_a: $i,V_B: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oinsert @ V_a @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__insert__right_0) ).
thf(562,axiom,
! [V_a: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oinsert @ V_a @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__insert__left_0) ).
thf(563,axiom,
( ( c_Event_OinitState @ c_Message_Oagent_OServer )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ c_Message_Oagent_OServer ) ) ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ c_Message_Oagent_OServer ) ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) @ tc_Message_Omsg ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_initState__Server_0) ).
thf(564,axiom,
c_Public_Okeymode_OSignature != c_Public_Okeymode_OEncryption,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keymode_Osimps_I1_J_0) ).
thf(565,axiom,
! [V_P: $i,V_keymode: $i] :
( ( hBOOL @ ( hAPP @ V_P @ V_keymode ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ c_Public_Okeymode_OEncryption ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ c_Public_Okeymode_OSignature ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keymode_Oinduct_0) ).
thf(566,axiom,
c_Public_Okeymode_OEncryption != c_Public_Okeymode_OSignature,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_keymode_Osimps_I2_J_0) ).
thf(567,axiom,
! [V_X: $i] :
~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__emptyE_0) ).
thf(568,axiom,
! [V_xs: $i,T_a: $i] :
( ( ( c_List_Oset @ V_xs @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__empty_0) ).
thf(569,axiom,
! [T_a: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_List_Oset @ ( c_List_Olist_ONil @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__empty2_1) ).
thf(570,axiom,
! [T_a: $i,V_xs: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_List_Oset @ V_xs @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__empty2_0) ).
thf(571,axiom,
! [T_a: $i] :
( ( c_List_Oset @ ( c_List_Olist_ONil @ T_a ) @ T_a )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_set__empty_1) ).
thf(572,axiom,
! [T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__empty_2) ).
thf(573,axiom,
! [V_A: $i,V_x: $i,T_a: $i] :
( ( V_A
= ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__singletonD_0) ).
thf(574,axiom,
! [V_A: $i,T_a: $i] :
( ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ~ ( c_lessequals @ V_A @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__Compl__self__eq_0) ).
thf(575,axiom,
! [V_x: $i,T_a: $i] : ( c_in @ V_x @ ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_singleton__iff_1) ).
thf(576,axiom,
! [V_X: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert_0) ).
thf(577,axiom,
! [V_f: $i,V_A: $i,T_b: $i,T_a: $i] :
( ( ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_image__is__empty_0) ).
thf(578,axiom,
! [T_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Compl__empty__eq_0) ).
thf(579,axiom,
! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_compl__bot__eq_0) ).
thf(580,axiom,
! [T_a: $i,V_a: $i,V_A: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Set_Oinsert @ V_a @ V_A @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_empty__not__insert_0) ).
thf(581,axiom,
! [T_a: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__empty_1) ).
thf(582,axiom,
! [V_A: $i,T_a: $i] :
( ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ~ ( c_lessequals @ V_A @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__empty_0) ).
thf(583,axiom,
! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_b = V_c )
| ( V_b = V_d ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_doubleton__eq__iff_3) ).
thf(584,axiom,
! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_a = V_d )
| ( V_b = V_d ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_doubleton__eq__iff_2) ).
thf(585,axiom,
! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_b = V_c )
| ( V_a = V_c ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_doubleton__eq__iff_1) ).
thf(586,axiom,
! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_a = V_d )
| ( V_a = V_c ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_doubleton__eq__iff_0) ).
thf(587,axiom,
! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ V_A @ V_evs ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__knows__A_0) ).
thf(588,axiom,
! [T_a: $i] :
( ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_UNIV__not__empty_0) ).
thf(589,axiom,
! [T_a: $i,V_x: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_bot1E_0) ).
thf(590,axiom,
! [T_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Compl__UNIV__eq_0) ).
thf(591,axiom,
! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a )
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_compl__top__eq_0) ).
thf(592,axiom,
! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= V_A ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__empty__right_0) ).
thf(593,axiom,
! [T_a: $i,V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= V_B ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__empty__left_0) ).
thf(594,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ T_a ) @ V_x @ T_a )
= V_x ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__bot__left_0) ).
thf(595,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Orderings_Obot__class_Obot @ T_a ) @ T_a )
= V_x ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__bot__right_0) ).
thf(596,axiom,
! [T_a: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_subset__Compl__self__eq_1) ).
thf(597,axiom,
! [V_a: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__not__empty_0) ).
thf(598,axiom,
! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Obot @ T_a )
| ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ T_a ) @ V_x @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_bot__least_0) ).
thf(599,axiom,
! [T_a: $i,V_A: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ V_A @ ( tc_fun @ T_a @ tc_bool ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_empty__subsetI_0) ).
thf(600,axiom,
! [T_a: $i,V_f: $i,V_A: $i,T_b: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_empty__is__image_0) ).
thf(601,axiom,
! [V_X: $i,V_evs: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_used__parts__subset__parts_0) ).
thf(602,axiom,
! [V_b: $i,V_a: $i,T_a: $i] :
( ( V_b = V_a )
| ~ ( c_in @ V_b @ ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_singletonE_0) ).
thf(603,axiom,
! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Set_Oinsert @ V_Y @ V_H @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_Y @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert2_0) ).
thf(604,axiom,
! [V_xa: $i,V_x: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_xa @ ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_x @ ( c_Set_Oinsert @ V_xa @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_doubleton__eq__iff_4) ).
thf(605,axiom,
! [V_f: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oimage @ V_f @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_image__empty_0) ).
thf(606,axiom,
! [V_a: $i,T_a: $i,V_b: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
!= ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
| ( V_a = V_b ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_singleton__inject_0) ).
thf(607,axiom,
! [V_x: $i,V_xa: $i,T_a: $i] :
( ( ( c_Set_Oinsert @ V_x @ V_xa @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( c_in @ V_x @ V_xa @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_comm__monoid__add_Ononempty__iff_2) ).
thf(608,axiom,
! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_B
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__empty_1) ).
thf(609,axiom,
! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Un__empty_0) ).
thf(610,axiom,
! [T_a: $i,V_A: $i,V_B: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ T_a )
!= ( c_Orderings_Obot__class_Obot @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__eq__bot__eq1_0) ).
thf(611,axiom,
! [T_a: $i,V_A: $i,V_B: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ T_a )
!= ( c_Orderings_Obot__class_Obot @ T_a ) )
| ( V_B
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_sup__eq__bot__eq2_0) ).
thf(612,axiom,
! [V_a: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_insert__is__Un_0) ).
thf(613,axiom,
! [T_a: $i,V_f: $i,T_b: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oimage @ V_f @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_empty__is__image_1) ).
thf(614,axiom,
! [V_x: $i,T_a: $i] :
~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ex__in__conv_0) ).
thf(615,axiom,
! [V_P: $i,V_x: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_ball__empty_0) ).
thf(616,axiom,
! [V_c: $i,T_a: $i] :
~ ( c_in @ V_c @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_empty__iff_0) ).
thf(617,axiom,
! [V_a: $i,T_a: $i] :
~ ( c_in @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_emptyE_0) ).
thf(618,axiom,
! [V_P: $i,V_x: $i,T_a: $i] :
( ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_bex__empty_0) ).
thf(619,axiom,
( ( c_Message_Oparts @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__empty_0) ).
thf(620,axiom,
( ( c_Message_Oanalz @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_analz__empty_0) ).
thf(621,axiom,
! [V_X: $i,V_evs: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_parts__insert__spies_0) ).
thf(622,axiom,
! [V_c: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Fake__parts__sing__imp__Un_0) ).
thf(623,axiom,
! [V_X: $i,V_A: $i,V_B: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Set_Oinsert @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ V_A @ V_B @ V_X @ V_evs ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ V_A @ V_B @ V_X @ V_evs ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Issues__def_1) ).
thf(624,axiom,
! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_used__Says_0) ).
thf(625,axiom,
! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_used__Notes_0) ).
thf(626,axiom,
! [V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_Fake__parts__sing_0) ).
thf(627,conjecture,
$false,
file('no conjecture given, we try to refute the axioms',dummy_conjecture) ).
thf(628,negated_conjecture,
$false = $false,
inference(negate_conjecture,[status(cth)],[627]) ).
thf(629,negated_conjecture,
~ ( c_in @ ( c_Event_Oevent_OSays @ v_A @ v_B @ ( c_Message_Omsg_OCrypt @ v_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NB ) @ ( c_Message_Omsg_ONonce @ v_NB ) ) ) ) @ ( c_List_Oset @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_5) ).
thf(630,negated_conjecture,
c_in @ ( c_Message_Omsg_OCrypt @ v_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NB ) @ ( c_Message_Omsg_ONonce @ v_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_4) ).
thf(631,negated_conjecture,
c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ v_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ v_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ v_K ) @ v_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg,
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_3) ).
thf(632,negated_conjecture,
~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ v_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_2) ).
thf(633,negated_conjecture,
~ ( c_in @ v_B @ c_Event_Obad @ tc_Message_Oagent ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_1) ).
thf(634,negated_conjecture,
~ ( c_in @ v_A @ c_Event_Obad @ tc_Message_Oagent ),
file('/export/starexec/sandbox2/benchmark/theBenchmark.p',cls_conjecture_0) ).
thf(635,plain,
$false = $false,
inference(unfold_def,[status(thm)],[628]) ).
thf(636,plain,
( ( ! [V_X: $i,V_Y: $i,T_a: $i] :
( ( V_X = V_Y )
| ~ ( c_fequal @ V_X @ V_Y @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[1]) ).
thf(637,plain,
( ( ! [V_x: $i,T_a: $i] : ( c_fequal @ V_x @ V_x @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[2]) ).
thf(638,plain,
( ( class_HOL_Oord @ tc_bool )
= $true ),
inference(unfold_def,[status(thm)],[3]) ).
thf(639,plain,
( ( class_Orderings_Obot @ tc_bool )
= $true ),
inference(unfold_def,[status(thm)],[4]) ).
thf(640,plain,
( ( class_Orderings_Otop @ tc_bool )
= $true ),
inference(unfold_def,[status(thm)],[5]) ).
thf(641,plain,
( ( class_Orderings_Oorder @ tc_bool )
= $true ),
inference(unfold_def,[status(thm)],[6]) ).
thf(642,plain,
( ( class_Lattices_Olattice @ tc_bool )
= $true ),
inference(unfold_def,[status(thm)],[7]) ).
thf(643,plain,
( ( class_Orderings_Opreorder @ tc_bool )
= $true ),
inference(unfold_def,[status(thm)],[8]) ).
thf(644,plain,
( ( class_Lattices_Oboolean__algebra @ tc_bool )
= $true ),
inference(unfold_def,[status(thm)],[9]) ).
thf(645,plain,
( ( class_Lattices_Obounded__lattice @ tc_bool )
= $true ),
inference(unfold_def,[status(thm)],[10]) ).
thf(646,plain,
( ( class_Lattices_Oupper__semilattice @ tc_bool )
= $true ),
inference(unfold_def,[status(thm)],[11]) ).
thf(647,plain,
( ( class_HOL_Oord @ tc_nat )
= $true ),
inference(unfold_def,[status(thm)],[12]) ).
thf(648,plain,
( ( class_Orderings_Obot @ tc_nat )
= $true ),
inference(unfold_def,[status(thm)],[13]) ).
thf(649,plain,
( ( class_Orderings_Oorder @ tc_nat )
= $true ),
inference(unfold_def,[status(thm)],[14]) ).
thf(650,plain,
( ( class_Lattices_Olattice @ tc_nat )
= $true ),
inference(unfold_def,[status(thm)],[15]) ).
thf(651,plain,
( ( class_Orderings_Olinorder @ tc_nat )
= $true ),
inference(unfold_def,[status(thm)],[16]) ).
thf(652,plain,
( ( class_Orderings_Opreorder @ tc_nat )
= $true ),
inference(unfold_def,[status(thm)],[17]) ).
thf(653,plain,
( ( class_Lattices_Oupper__semilattice @ tc_nat )
= $true ),
inference(unfold_def,[status(thm)],[18]) ).
thf(654,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_HOL_Oord @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_HOL_Oord @ T_1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[19]) ).
thf(655,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Orderings_Obot @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Obot @ T_1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[20]) ).
thf(656,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Orderings_Otop @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Otop @ T_1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[21]) ).
thf(657,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Orderings_Oorder @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Oorder @ T_1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[22]) ).
thf(658,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Lattices_Olattice @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Olattice @ T_1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[23]) ).
thf(659,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Orderings_Opreorder @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Opreorder @ T_1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[24]) ).
thf(660,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Lattices_Oboolean__algebra @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Oboolean__algebra @ T_1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[25]) ).
thf(661,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Lattices_Obounded__lattice @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Obounded__lattice @ T_1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[26]) ).
thf(662,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Lattices_Oupper__semilattice @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Olattice @ T_1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[27]) ).
thf(663,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[28]) ).
thf(664,plain,
( ( ! [V_c: $i,V_H: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[29]) ).
thf(665,plain,
( ( ! [V_c: $i,V_H: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[30]) ).
thf(666,plain,
( ( ! [V_x: $i,V_y: $i] :
( ( ( hAPP @ c_Public_OshrK @ V_x )
!= ( hAPP @ c_Public_OshrK @ V_y ) )
| ( V_x = V_y ) ) )
= $true ),
inference(unfold_def,[status(thm)],[31]) ).
thf(667,plain,
( ( ! [V_nat: $i,V_nat_H: $i,V_msg_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[32]) ).
thf(668,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[33]) ).
thf(669,plain,
( ( ! [V_nat: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[34]) ).
thf(670,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_msg1: $i,V_msg2: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[35]) ).
thf(671,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[36]) ).
thf(672,plain,
( ( ! [V_X: $i,V_evs: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ V_X ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[37]) ).
thf(673,plain,
( ( ! [V_msg1: $i,V_msg2: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) )
| ( V_msg2 = V_msg2_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[38]) ).
thf(674,plain,
( ( ! [V_msg1: $i,V_msg2: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) )
| ( V_msg1 = V_msg1_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[39]) ).
thf(675,plain,
( ( ! [V_agent: $i,V_nat_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_ONonce @ V_nat_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[40]) ).
thf(676,plain,
( ( ! [V_nat: $i,V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OCrypt @ V_nat @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[41]) ).
thf(677,plain,
( ( ! [V_nat: $i,V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OCrypt @ V_nat @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) )
| ( V_nat = V_nat_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[42]) ).
thf(678,plain,
( ( ! [V_nat: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[43]) ).
thf(679,plain,
( ( ! [V_S: $i,V_x: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_S @ V_x ) )
| ~ ( c_in @ V_x @ V_S @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[44]) ).
thf(680,plain,
( ( ! [V_x: $i,V_S: $i,T_a: $i] :
( ( c_in @ V_x @ V_S @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_S @ V_x ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[45]) ).
thf(681,plain,
( ( ! [V_nat: $i,V_nat_H: $i] :
( ( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_ONonce @ V_nat_H ) )
| ( V_nat = V_nat_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[46]) ).
thf(682,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[47]) ).
thf(683,plain,
( ( ! [V_nat_H: $i,V_agent: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[48]) ).
thf(684,plain,
( ( ! [V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[49]) ).
thf(685,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[50]) ).
thf(686,plain,
( ( ! [V_msg1: $i,V_msg2: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[51]) ).
thf(687,plain,
( ( ! [V_nat: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[52]) ).
thf(688,plain,
( ( ! [V_agent: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[53]) ).
thf(689,plain,
( ( ! [V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[54]) ).
thf(690,plain,
( ( ! [V_agent: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[55]) ).
thf(691,plain,
( ( ! [V_nat: $i,V_nat_H: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) )
| ( V_nat = V_nat_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[56]) ).
thf(692,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Message_Oparts @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[57]) ).
thf(693,plain,
( ( ! [V_X: $i,V_evs: $i,V_A: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[58]) ).
thf(694,plain,
( ( ! [V_X: $i,V_H: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[59]) ).
thf(695,plain,
( ( ! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[60]) ).
thf(696,plain,
( ( ! [V_nat_H: $i,V_agent: $i] :
( ( c_Message_Omsg_ONonce @ V_nat_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[61]) ).
thf(697,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[62]) ).
thf(698,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oanalz @ ( c_Message_Oparts @ V_H ) )
= ( c_Message_Oparts @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[63]) ).
thf(699,plain,
( ( ! [V_nat: $i,V_nat_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[64]) ).
thf(700,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oparts @ ( c_Message_Oparts @ V_H ) )
= ( c_Message_Oparts @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[65]) ).
thf(701,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[66]) ).
thf(702,plain,
( ( ! [V_X: $i,V_evs: $i,V_S: $i,V_A: $i,V_KA: $i,V_N: $i,V_B: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ V_KA @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ V_B @ ( c_Message_Omsg_OMPair @ V_K @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[67]) ).
thf(703,plain,
( ( c_in @ c_Message_Oagent_OSpy @ c_Event_Obad @ tc_Message_Oagent )
= $true ),
inference(unfold_def,[status(thm)],[68]) ).
thf(704,plain,
( ( ! [V_X: $i,V_evs: $i,V_A: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[69]) ).
thf(705,plain,
( ( ! [V_X: $i,V_evs: $i,V_A: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[70]) ).
thf(706,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[71]) ).
thf(707,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[72]) ).
thf(708,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[73]) ).
thf(709,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_agent2 = V_agent2_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[74]) ).
thf(710,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_agent1 = V_agent1_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[75]) ).
thf(711,plain,
( ( ! [V_nat_H: $i,V_nat: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[76]) ).
thf(712,plain,
( ( ! [V_agent: $i,V_nat_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[77]) ).
thf(713,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[78]) ).
thf(714,plain,
( ( ! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[79]) ).
thf(715,plain,
( ( ! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[80]) ).
thf(716,plain,
( ( ! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[81]) ).
thf(717,plain,
( ( ! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[82]) ).
thf(718,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oanalz @ ( c_Message_Oanalz @ V_H ) )
= ( c_Message_Oanalz @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[83]) ).
thf(719,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[84]) ).
thf(720,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oparts @ ( c_Message_Oanalz @ V_H ) )
= ( c_Message_Oparts @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[85]) ).
thf(721,plain,
( ( ! [V_agent: $i,V_agent_H: $i] :
( ( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OAgent @ V_agent_H ) )
| ( V_agent = V_agent_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[86]) ).
thf(722,plain,
( ( ! [V_K: $i,V_evs: $i,V_A: $i,V_NA: $i,V_B: $i,V_X: $i] :
( ( c_in @ V_K @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ V_B @ ( c_Message_Omsg_OMPair @ V_K @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[87]) ).
thf(723,plain,
( ( ! [V_X: $i,V_evs: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[88]) ).
thf(724,plain,
( ( ! [V_X: $i,V_evs: $i,V_B: $i,V_K: $i,V_A: $i,V_S: $i,V_NA: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[89]) ).
thf(725,plain,
( ( ! [V_X: $i,V_B: $i,V_K: $i,V_A: $i,V_evs: $i,V_NA: $i] :
( ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[90]) ).
thf(726,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs: $i,V_NA: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[91]) ).
thf(727,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OSpy ) ) )
= $true ),
inference(unfold_def,[status(thm)],[92]) ).
thf(728,plain,
( ( ! [V_c: $i,V_evs: $i,V_A: $i,V_B: $i,V_X: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[93]) ).
thf(729,plain,
( ( ! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[94]) ).
thf(730,plain,
( ( ! [V_A: $i,V_NA: $i,V_B: $i,V_K: $i,V_X: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[95]) ).
thf(731,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i,V_NA: $i,V_X: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[96]) ).
thf(732,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i,V_NA: $i,V_X: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ V_evs )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[97]) ).
thf(733,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_Nb: $i,V_evs: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_Nb ) ) @ V_evs )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_Nb ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[98]) ).
thf(734,plain,
( ( ! [V_X: $i,V_evs: $i,V_A: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[99]) ).
thf(735,plain,
( ( ! [V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[100]) ).
thf(736,plain,
( ( ! [V_A: $i,V_evs: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[101]) ).
thf(737,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[102]) ).
thf(738,plain,
( ( ! [V_A: $i,V_evs: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[103]) ).
thf(739,plain,
( ( ! [V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[104]) ).
thf(740,plain,
( ( ! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[105]) ).
thf(741,plain,
( ( ! [V_c: $i,V_evs: $i] :
( ( c_in @ V_c @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[106]) ).
thf(742,plain,
( ( ! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[107]) ).
thf(743,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i,V_NA: $i,V_X: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[108]) ).
thf(744,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ V_A @ V_B @ V_K @ V_evs ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[109]) ).
thf(745,plain,
( ( ! [V_B: $i,V_X: $i,V_evs: $i,V_K: $i,V_NB: $i,V_A: $i,V_NA: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ V_B @ V_X @ V_evs ) @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[110]) ).
thf(746,plain,
( ( ! [V_N: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[111]) ).
thf(747,plain,
( ( ! [V_K: $i,V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[112]) ).
thf(748,plain,
( ( ! [V_b: $i,V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[113]) ).
thf(749,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ V_K @ V_evs ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ V_K @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[114]) ).
thf(750,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs3: $i,V_NA: $i,V_S: $i,V_K: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs3 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs3 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[115]) ).
thf(751,plain,
( ( ! [V_B: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_B ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[116]) ).
thf(752,plain,
( ( ! [V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[117]) ).
thf(753,plain,
( ( ! [V_A: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[118]) ).
thf(754,plain,
( ( ! [V_x: $i,V_A: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ V_x ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[119]) ).
thf(755,plain,
( ( ! [V_N: $i,V_B: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[120]) ).
thf(756,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[121]) ).
thf(757,plain,
( ( ! [V_K: $i,V_H: $i,V_X: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[122]) ).
thf(758,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[123]) ).
thf(759,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[124]) ).
thf(760,plain,
( ( ! [V_K: $i,V_X: $i,V_A: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[125]) ).
thf(761,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[126]) ).
thf(762,plain,
( ( ! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[127]) ).
thf(763,plain,
( ( ! [V_c: $i,V_A_H: $i,V_b: $i,V_A: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[128]) ).
thf(764,plain,
( ( ! [V_b: $i,V_C: $i,V_A: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) )
!= ( hAPP @ c_Public_OshrK @ V_A ) ) )
= $true ),
inference(unfold_def,[status(thm)],[129]) ).
thf(765,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oused @ V_evs ) ) )
= $true ),
inference(unfold_def,[status(thm)],[130]) ).
thf(766,plain,
( ( c_in @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ),
inference(unfold_def,[status(thm)],[131]) ).
thf(767,plain,
( ( ! [V_A: $i,V_b: $i,V_C: $i] :
( ( hAPP @ c_Public_OshrK @ V_A )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[132]) ).
thf(768,plain,
( ( ! [V_a: $i,V_list: $i,T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( ( c_List_Olist_OCons @ V_a @ V_list @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) )
| ( V_list = V_list_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[133]) ).
thf(769,plain,
( ( ! [V_a: $i,V_list: $i,T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( ( c_List_Olist_OCons @ V_a @ V_list @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) )
| ( V_a = V_a_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[134]) ).
thf(770,plain,
( ( ! [V_agent_H: $i,V_msg_H: $i,V_agent: $i,V_msg: $i] :
( ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OGets @ V_agent @ V_msg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[135]) ).
thf(771,plain,
( ( ! [V_K: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ c_Message_OinvKey @ V_K ) )
= V_K ) )
= $true ),
inference(unfold_def,[status(thm)],[136]) ).
thf(772,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_ONotes @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) )
| ( V_agent = V_agent_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[137]) ).
thf(773,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_ONotes @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[138]) ).
thf(774,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[139]) ).
thf(775,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) )
| ( V_agent = V_agent_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[140]) ).
thf(776,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[141]) ).
thf(777,plain,
( ( ! [V_K: $i,V_K_H: $i] :
( ( ( hAPP @ c_Message_OinvKey @ V_K )
!= ( hAPP @ c_Message_OinvKey @ V_K_H ) )
| ( V_K = V_K_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[142]) ).
thf(778,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[143]) ).
thf(779,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) )
| ( V_A = V_A_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[144]) ).
thf(780,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) )
| ( V_b = V_c ) ) )
= $true ),
inference(unfold_def,[status(thm)],[145]) ).
thf(781,plain,
( ( ! [V_b: $i,V_A: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[146]) ).
thf(782,plain,
( ( ! [V_H: $i] :
( ( c_Message_Osynth @ ( c_Message_Osynth @ V_H ) )
= ( c_Message_Osynth @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[147]) ).
thf(783,plain,
( ( ! [V_x: $i,V_t: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_t @ T_a )
!= V_t ) )
= $true ),
inference(unfold_def,[status(thm)],[148]) ).
thf(784,plain,
( ( ! [V_xs: $i,V_x: $i,T_a: $i] :
( V_xs
!= ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[149]) ).
thf(785,plain,
( ( ! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[150]) ).
thf(786,plain,
( ( ! [V_x: $i,V_A: $i,T_aa: $i,V_f: $i,T_a: $i] :
( ~ ( c_in @ V_x @ V_A @ T_aa )
| ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_aa @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[151]) ).
thf(787,plain,
( ( ! [V_x: $i,V_A: $i,T_b: $i,V_f: $i,T_a: $i] :
( ~ ( c_in @ V_x @ V_A @ T_b )
| ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[152]) ).
thf(788,plain,
( ( ! [V_f: $i,V_x: $i,V_A: $i,T_b: $i,T_a: $i] :
( ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ T_a )
| ~ ( c_in @ V_x @ V_A @ T_b ) ) )
= $true ),
inference(unfold_def,[status(thm)],[153]) ).
thf(789,plain,
( ( ! [V_f: $i,V_x: $i,V_A: $i,T_a: $i,T_b: $i] :
( ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ T_b )
| ~ ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[154]) ).
thf(790,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[155]) ).
thf(791,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Osynth @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[156]) ).
thf(792,plain,
( ( ! [T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[157]) ).
thf(793,plain,
( ( ! [V_x: $i,V_xa: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_xa @ T_a )
!= ( c_List_Olist_ONil @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[158]) ).
thf(794,plain,
( ( ! [V_a_H: $i,V_list_H: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a )
!= ( c_List_Olist_ONil @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[159]) ).
thf(795,plain,
( ( ! [V_X: $i,V_evs: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[160]) ).
thf(796,plain,
( ( ! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[161]) ).
thf(797,plain,
( ( ! [V_b: $i,V_A: $i,V_B: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Event_OinitState @ V_B ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[162]) ).
thf(798,plain,
( ( ! [V_A: $i,V_B: $i,V_NA: $i,V_evs1: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ V_evs1 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Event_Oused @ V_evs1 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs1 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[163]) ).
thf(799,plain,
( ( c_Message_Oagent_OServer != c_Message_Oagent_OSpy )
= $true ),
inference(unfold_def,[status(thm)],[164]) ).
thf(800,plain,
( ( c_Message_Oagent_OSpy != c_Message_Oagent_OServer )
= $true ),
inference(unfold_def,[status(thm)],[165]) ).
thf(801,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) )
= $true ),
inference(unfold_def,[status(thm)],[166]) ).
thf(802,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[167]) ).
thf(803,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[168]) ).
thf(804,plain,
( ( ! [V_agent_H: $i,V_msg_H: $i,V_agent1: $i,V_agent2: $i,V_msg: $i] :
( ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[169]) ).
thf(805,plain,
( ( ! [V_agent_H: $i,V_msg_H: $i,V_agent1: $i,V_agent2: $i,V_msg: $i] :
( ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[170]) ).
thf(806,plain,
( ( ! [V_A: $i,V_b: $i,V_C: $i] :
( ( hAPP @ c_Public_OshrK @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) ) )
= $true ),
inference(unfold_def,[status(thm)],[171]) ).
thf(807,plain,
( ( ! [V_b: $i,V_C: $i,V_A: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C )
!= ( hAPP @ c_Public_OshrK @ V_A ) ) )
= $true ),
inference(unfold_def,[status(thm)],[172]) ).
thf(808,plain,
( ( ! [V_A: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ c_Public_OshrK @ V_A ) )
= ( hAPP @ c_Public_OshrK @ V_A ) ) )
= $true ),
inference(unfold_def,[status(thm)],[173]) ).
thf(809,plain,
( ( ! [V_A: $i,V_B: $i,V_NA: $i,V_evs1: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ V_evs1 @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Event_Oused @ V_evs1 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs1 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[174]) ).
thf(810,plain,
( ( ! [V_B: $i,V_X: $i,V_evsf: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ V_B @ V_X ) @ V_evsf @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evsf ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evsf @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[175]) ).
thf(811,plain,
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_ONil @ tc_Event_Oevent ) )
= $true ),
inference(unfold_def,[status(thm)],[176]) ).
thf(812,plain,
( ( ! [V_X: $i,V_evs: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[177]) ).
thf(813,plain,
( ( ! [V_B: $i,V_X: $i,V_evsf: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ V_B @ V_X ) @ V_evsf @ tc_Event_Oevent ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evsf ) ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evsf ) ) )
= $true ),
inference(unfold_def,[status(thm)],[178]) ).
thf(814,plain,
( ( ! [V_y: $i,V_xs: $i,T_a: $i,V_x: $i] :
( ( c_in @ V_y @ ( c_List_Oset @ V_xs @ T_a ) @ T_a )
| ( V_y = V_x )
| ~ ( c_in @ V_y @ ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[179]) ).
thf(815,plain,
( ( ! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[180]) ).
thf(816,plain,
( ( ! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[181]) ).
thf(817,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[182]) ).
thf(818,plain,
( ( ! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[183]) ).
thf(819,plain,
( ( ! [V_X: $i,V_H: $i,V_Y: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[184]) ).
thf(820,plain,
( ( ! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[185]) ).
thf(821,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[186]) ).
thf(822,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[187]) ).
thf(823,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[188]) ).
thf(824,plain,
( ( ! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[189]) ).
thf(825,plain,
( ( ! [V_N: $i] :
( ( c_Message_Oparts @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) )
= ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[190]) ).
thf(826,plain,
( ( ! [V_agt: $i,V_H: $i] : ( c_in @ ( c_Message_Omsg_OAgent @ V_agt ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[191]) ).
thf(827,plain,
( ( ! [V_A: $i,V_H: $i] : ( c_in @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[192]) ).
thf(828,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[193]) ).
thf(829,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[194]) ).
thf(830,plain,
( ( ! [V_n: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ V_n ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ V_n ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[195]) ).
thf(831,plain,
( ( ! [V_N: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) )
= ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[196]) ).
thf(832,plain,
( ( ! [V_c: $i,V_evs: $i,V_A: $i,V_X: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[197]) ).
thf(833,plain,
( ( ! [V_c: $i,V_evs: $i,V_A: $i,V_X: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[198]) ).
thf(834,plain,
( ( ! [V_NA: $i,V_NB: $i,V_K: $i,V_evso: $i,V_A: $i,V_B: $i,V_X: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ V_evso @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evso @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[199]) ).
thf(835,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[200]) ).
thf(836,plain,
( ( ~ ( c_in @ c_Message_Oagent_OServer @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(unfold_def,[status(thm)],[201]) ).
thf(837,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs3: $i,V_NA: $i,V_S: $i,V_K: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs3 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OServer )
| ~ ( c_in @ V_evs3 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[202]) ).
thf(838,plain,
( ( ! [V_A: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_ONil @ tc_Event_Oevent ) )
= ( c_Event_OinitState @ V_A ) ) )
= $true ),
inference(unfold_def,[status(thm)],[203]) ).
thf(839,plain,
( ( ! [V_NA: $i,V_NB: $i,V_K: $i,V_evso: $i,V_A: $i,V_B: $i,V_X: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ V_evso @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evso ) ) )
= $true ),
inference(unfold_def,[status(thm)],[204]) ).
thf(840,plain,
( ( ! [V_K_H: $i,V_A: $i,V_evs: $i,V_N: $i,V_B: $i,V_K: $i,V_X: $i] :
( ( V_K_H
= ( hAPP @ c_Public_OshrK @ V_A ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[205]) ).
thf(841,plain,
( ( ! [V_A: $i,V_A_H: $i,V_evs: $i,V_NA_H: $i,V_B_H: $i,V_K: $i,V_X_H: $i,V_NA: $i,V_B: $i,V_X: $i] :
( ( V_A = V_A_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[206]) ).
thf(842,plain,
( ( ! [V_NA: $i,V_NA_H: $i,V_evs: $i,V_A_H: $i,V_B_H: $i,V_K: $i,V_X_H: $i,V_A: $i,V_B: $i,V_X: $i] :
( ( V_NA = V_NA_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[207]) ).
thf(843,plain,
( ( ! [V_B: $i,V_B_H: $i,V_evs: $i,V_A_H: $i,V_NA_H: $i,V_K: $i,V_X_H: $i,V_A: $i,V_NA: $i,V_X: $i] :
( ( V_B = V_B_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[208]) ).
thf(844,plain,
( ( ! [V_X: $i,V_X_H: $i,V_evs: $i,V_A_H: $i,V_NA_H: $i,V_B_H: $i,V_K: $i,V_A: $i,V_NA: $i,V_B: $i] :
( ( V_X = V_X_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[209]) ).
thf(845,plain,
( ( ! [V_X: $i,V_B: $i,V_K: $i,V_A: $i,V_evs: $i,V_K_H: $i,V_N: $i] :
( ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[210]) ).
thf(846,plain,
( ( ! [V_K: $i,V_X: $i,V_B: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[211]) ).
thf(847,plain,
( ( ! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[212]) ).
thf(848,plain,
( ( ! [V_K: $i,V_evs: $i,V_NA: $i,V_B: $i,V_A: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[213]) ).
thf(849,plain,
( ( ! [V_K: $i,V_evs: $i,V_B: $i,V_A: $i,V_NA: $i,V_K_H: $i,V_X: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[214]) ).
thf(850,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ V_A @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ V_A @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OSpy )
| ~ ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[215]) ).
thf(851,plain,
( ( ! [V_A: $i,V_NA: $i,V_B: $i,V_KAB: $i,V_evs2: $i,V_A_H: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ V_evs2 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs2 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_KAB @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oused @ V_evs2 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs2 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[216]) ).
thf(852,plain,
( ( ! [V_evs: $i,V_A: $i,V_X: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[217]) ).
thf(853,plain,
( ( ! [V_A: $i,V_NA: $i,V_B: $i,V_KAB: $i,V_evs2: $i,V_A_H: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ V_evs2 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs2 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_KAB @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oused @ V_evs2 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs2 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[218]) ).
thf(854,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs4: $i,V_A_H: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ V_evs4 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) @ ( c_List_Oset @ V_evs4 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Event_Oused @ V_evs4 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs4 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[219]) ).
thf(855,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs4: $i,V_A_H: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ V_evs4 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) @ ( c_List_Oset @ V_evs4 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Event_Oused @ V_evs4 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs4 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[220]) ).
thf(856,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[221]) ).
thf(857,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs5: $i,V_S: $i,V_NA: $i,V_X: $i,V_B_H: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ V_evs5 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B_H @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ V_evs5 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[222]) ).
thf(858,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs5: $i,V_S: $i,V_NA: $i,V_X: $i,V_B_H: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ V_evs5 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B_H @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs5 ) ) )
= $true ),
inference(unfold_def,[status(thm)],[223]) ).
thf(859,plain,
( ( ! [V_evs: $i,V_A: $i,V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) )
= $true ),
inference(unfold_def,[status(thm)],[224]) ).
thf(860,plain,
( ( ! [V_X: $i,V_evs: $i,V_K: $i,V_S: $i,V_A: $i,V_NA: $i,V_B: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[225]) ).
thf(861,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[226]) ).
thf(862,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[227]) ).
thf(863,plain,
( ( ! [V_x: $i,V_AA: $i] :
( ( c_in @ V_x @ V_AA @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[228]) ).
thf(864,plain,
( ( ! [V_x: $i,V_AA: $i] :
( ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_x @ V_AA @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[229]) ).
thf(865,plain,
( ( ! [V_H: $i,V_H_H: $i,V_X: $i] :
( ( ( c_Message_Oanalz @ V_H )
!= ( c_Message_Oanalz @ V_H_H ) )
| ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H_H @ tc_Message_Omsg ) ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[230]) ).
thf(866,plain,
( ( ! [T_a: $i] :
( ( c_List_Olist_ONil @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_ONil @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[231]) ).
thf(867,plain,
( ( ! [V_xs: $i,T_a: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Olist_ONil @ T_a ) @ T_a )
= V_xs ) )
= $true ),
inference(unfold_def,[status(thm)],[232]) ).
thf(868,plain,
( ( ! [V_x: $i,T_a: $i] :
( V_x
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[233]) ).
thf(869,plain,
( ( ! [V_xs: $i,T_a: $i] :
( V_xs
= ( c_List_Oappend @ V_xs @ ( c_List_Olist_ONil @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[234]) ).
thf(870,plain,
( ( ! [T_a: $i,V_ys: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ V_ys @ T_a )
= V_ys ) )
= $true ),
inference(unfold_def,[status(thm)],[235]) ).
thf(871,plain,
( ( ! [V_ys: $i,T_a: $i] :
( V_ys
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ V_ys @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[236]) ).
thf(872,plain,
( ( ! [T_a: $i,V_xs: $i,V_ys: $i] :
( ( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[237]) ).
thf(873,plain,
( ( ! [T_a: $i,V_xs: $i,V_ys: $i] :
( ( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[238]) ).
thf(874,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Olist_ONil @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[239]) ).
thf(875,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Olist_ONil @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[240]) ).
thf(876,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= V_xs )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[241]) ).
thf(877,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( V_xs
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[242]) ).
thf(878,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= V_ys )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[243]) ).
thf(879,plain,
( ( ! [V_ys: $i,V_xs: $i,T_a: $i] :
( ( V_ys
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[244]) ).
thf(880,plain,
( ( ! [T_a: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_ONil @ T_a ) @ T_a )
= ( c_List_Olist_ONil @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[245]) ).
thf(881,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i] :
( ( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
= V_A )
| ~ ( c_in @ V_a @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[246]) ).
thf(882,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i,V_B: $i] :
( ( ( c_Set_Oinsert @ V_x @ V_A @ T_a )
!= ( c_Set_Oinsert @ V_x @ V_B @ T_a ) )
| ( c_in @ V_x @ V_B @ T_a )
| ( c_in @ V_x @ V_A @ T_a )
| ( V_A = V_B ) ) )
= $true ),
inference(unfold_def,[status(thm)],[247]) ).
thf(883,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i] : ( c_in @ V_x @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[248]) ).
thf(884,plain,
( ( ! [V_a: $i,V_B: $i,T_a: $i] : ( c_in @ V_a @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[249]) ).
thf(885,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i] : ( c_in @ V_x @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[250]) ).
thf(886,plain,
( ( ! [V_x: $i,T_a: $i] : ( c_in @ V_x @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[251]) ).
thf(887,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i,V_b: $i] :
( ( c_in @ V_a @ V_A @ T_a )
| ( V_a = V_b )
| ~ ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_A @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[252]) ).
thf(888,plain,
( ( ! [V_a: $i,V_b: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_B @ T_a ) @ T_a )
| ~ ( c_in @ V_a @ V_B @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[253]) ).
thf(889,plain,
( ( ! [V_a: $i,V_b: $i,V_A: $i,T_a: $i] :
( ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_A @ T_a ) @ T_a )
| ~ ( c_in @ V_a @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[254]) ).
thf(890,plain,
( ( ! [V_K: $i,V_evs: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[255]) ).
thf(891,plain,
( ( ! [V_x: $i,V_b: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_b ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[256]) ).
thf(892,plain,
( ( ! [V_f: $i,V_a: $i,V_B: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oinsert @ ( hAPP @ V_f @ V_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ T_a )
= ( c_Set_Oimage @ V_f @ ( c_Set_Oinsert @ V_a @ V_B @ T_b ) @ T_b @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[257]) ).
thf(893,plain,
( ( ! [V_b: $i,V_A: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[258]) ).
thf(894,plain,
( ( ! [V_x: $i,V_xs1: $i,V_zs: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xs1 @ V_zs @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xs1 @ T_a ) @ V_zs @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[259]) ).
thf(895,plain,
( ( ! [V_x: $i,V_xa: $i,V_zs: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xa @ V_zs @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xa @ T_a ) @ V_zs @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[260]) ).
thf(896,plain,
( ( ! [V_y: $i,V_A: $i,T_a: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_A @ V_x ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[261]) ).
thf(897,plain,
( ( ! [V_x: $i,V_xs: $i,T_a: $i,V_ys: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ V_ys @ T_a )
= ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xs @ V_ys @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[262]) ).
thf(898,plain,
( ( ! [V_x: $i,V_xa: $i,T_a: $i,V_zs: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xa @ T_a ) @ V_zs @ T_a )
= ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xa @ V_zs @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[263]) ).
thf(899,plain,
( ( ! [V_x: $i,V_y: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_x @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_y @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[264]) ).
thf(900,plain,
( ( ! [V_b: $i,V_x: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[265]) ).
thf(901,plain,
( ( ! [V_ys: $i,V_xs: $i,T_a: $i,V_zs: $i] :
( ( ( c_List_Oappend @ V_ys @ V_xs @ T_a )
!= ( c_List_Oappend @ V_zs @ V_xs @ T_a ) )
| ( V_ys = V_zs ) ) )
= $true ),
inference(unfold_def,[status(thm)],[266]) ).
thf(902,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i,V_zs: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Oappend @ V_xs @ V_zs @ T_a ) )
| ( V_ys = V_zs ) ) )
= $true ),
inference(unfold_def,[status(thm)],[267]) ).
thf(903,plain,
( ( ! [V_b: $i,V_c: $i,V_x: $i,V_AA: $i] :
( ( V_b = V_c )
| ~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[268]) ).
thf(904,plain,
( ( ! [V_x: $i,V_AA: $i,V_b: $i,V_c: $i] :
( ( c_in @ V_x @ V_AA @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[269]) ).
thf(905,plain,
( ( ! [V_x: $i,V_xa: $i,V_AA: $i] :
( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_x ) @ V_xa ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_x ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_xa @ V_AA @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[270]) ).
thf(906,plain,
( ( ! [V_b: $i,V_x: $i,V_c: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[271]) ).
thf(907,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_x @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[272]) ).
thf(908,plain,
( ( ! [V_A: $i,V_x: $i,V_y: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_A @ V_x ) )
| ( V_y = V_x )
| ~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ V_x ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[273]) ).
thf(909,plain,
( ( ! [V_K: $i] :
( ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ c_Message_OsymKeys @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[274]) ).
thf(910,plain,
( ( ! [V_K: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[275]) ).
thf(911,plain,
( ( ! [V_K: $i] :
( ( ( hAPP @ c_Message_OinvKey @ V_K )
= V_K )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[276]) ).
thf(912,plain,
( ( ! [T_a: $i,V_x: $i] : ( hBOOL @ ( hAPP @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ) )
= $true ),
inference(unfold_def,[status(thm)],[277]) ).
thf(913,plain,
( ( ! [V_f: $i,V_a: $i,V_B: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oimage @ V_f @ ( c_Set_Oinsert @ V_a @ V_B @ T_b ) @ T_b @ T_a )
= ( c_Set_Oinsert @ ( hAPP @ V_f @ V_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[278]) ).
thf(914,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i] : ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_x ) ) )
= $true ),
inference(unfold_def,[status(thm)],[279]) ).
thf(915,plain,
( ( ! [V_b: $i,V_A: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[280]) ).
thf(916,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i,V_zs: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ V_xs @ V_ys @ T_a ) @ V_zs @ T_a )
= ( c_List_Oappend @ V_xs @ ( c_List_Oappend @ V_ys @ V_zs @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[281]) ).
thf(917,plain,
( ( ! [V_xs: $i,V_xs1: $i,V_us: $i,T_a: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Oappend @ V_xs1 @ V_us @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Oappend @ V_xs @ V_xs1 @ T_a ) @ V_us @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[282]) ).
thf(918,plain,
( ( ! [V_zs: $i,V_x: $i,T_a: $i,V_ys: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ V_zs @ V_x @ T_a ) @ V_ys @ T_a )
= ( c_List_Oappend @ V_zs @ ( c_List_Oappend @ V_x @ V_ys @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[283]) ).
thf(919,plain,
( ( ! [V_xs: $i,V_x: $i,V_ts: $i,T_a: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Oappend @ V_x @ V_ts @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Oappend @ V_xs @ V_x @ T_a ) @ V_ts @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[284]) ).
thf(920,plain,
( ( ! [V_X: $i] : ( c_in @ ( hAPP @ c_Public_OshrK @ V_X ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[285]) ).
thf(921,plain,
( ( ! [V_b: $i,V_x: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[286]) ).
thf(922,plain,
( ( ! [V_f: $i,V_x: $i,V_A: $i,T_a: $i,T_b: $i] :
( ( ( c_Set_Oinsert @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ T_b )
= ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) )
| ~ ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[287]) ).
thf(923,plain,
( ( ! [V_f: $i,V_x: $i,T_b: $i,T_a: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[288]) ).
thf(924,plain,
( ( ! [V_x: $i,V_xs: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_xs @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[289]) ).
thf(925,plain,
( ( ! [T_a: $i,V_x: $i,V_xs: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a )
= ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[290]) ).
thf(926,plain,
( ( ! [V_xs: $i,V_x: $i,T_a: $i,V_ys: $i,V_y: $i] :
( ( ( c_List_Oappend @ V_xs @ ( c_List_Olist_OCons @ V_x @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a )
!= ( c_List_Oappend @ V_ys @ ( c_List_Olist_OCons @ V_y @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a ) )
| ( V_xs = V_ys ) ) )
= $true ),
inference(unfold_def,[status(thm)],[291]) ).
thf(927,plain,
( ( ! [V_xs: $i,V_x: $i,T_a: $i,V_ys: $i,V_y: $i] :
( ( ( c_List_Oappend @ V_xs @ ( c_List_Olist_OCons @ V_x @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a )
!= ( c_List_Oappend @ V_ys @ ( c_List_Olist_OCons @ V_y @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a ) )
| ( V_x = V_y ) ) )
= $true ),
inference(unfold_def,[status(thm)],[292]) ).
thf(928,plain,
( ( ! [V_x: $i,V_xs: $i,T_a: $i] :
( ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_x @ ( c_List_Oset @ V_xs @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[293]) ).
thf(929,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oparts @ V_H ) )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[294]) ).
thf(930,plain,
( ( ! [V_c: $i,V_a: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_a @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[295]) ).
thf(931,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Set_Oinsert @ V_Y @ V_H @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[296]) ).
thf(932,plain,
( ( ! [V_X: $i,V_K: $i,V_X_H: $i,V_Y: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X_H @ V_Y ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X_H @ V_Y ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[297]) ).
thf(933,plain,
( ( ! [V_c: $i,V_a: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_a @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[298]) ).
thf(934,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ V_H ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[299]) ).
thf(935,plain,
( ( ! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[300]) ).
thf(936,plain,
( ( ! [V_K: $i,V_X: $i,V_Y: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[301]) ).
thf(937,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[302]) ).
thf(938,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ ( c_Set_Oinsert @ V_Y @ V_H @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[303]) ).
thf(939,plain,
( ( ! [V_X: $i,V_H: $i,V_K: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[304]) ).
thf(940,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[305]) ).
thf(941,plain,
( ( ! [V_Y: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[306]) ).
thf(942,plain,
( ( ! [V_K: $i,V_X: $i,V_K_H: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K_H ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K_H ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[307]) ).
thf(943,plain,
( ( ! [V_agt: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[308]) ).
thf(944,plain,
( ( ! [V_X: $i,V_K: $i,V_C: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[309]) ).
thf(945,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[310]) ).
thf(946,plain,
( ( ! [V_K: $i,V_C: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[311]) ).
thf(947,plain,
( ( ! [V_agt: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[312]) ).
thf(948,plain,
( ( ! [V_X: $i,V_K: $i,V_N: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[313]) ).
thf(949,plain,
( ( ! [V_K: $i,V_N: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[314]) ).
thf(950,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[315]) ).
thf(951,plain,
( ( ! [V_x: $i,V_evs: $i] :
( ( c_in @ V_x @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[316]) ).
thf(952,plain,
( ( ! [V_K: $i,V_evs: $i,V_KAB: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( V_K = V_KAB )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ( c_in @ V_KAB @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[317]) ).
thf(953,plain,
( ( ! [V_K: $i,V_KAB: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_KAB @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[318]) ).
thf(954,plain,
( ( ! [V_evs: $i,V_A: $i,V_B: $i,V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[319]) ).
thf(955,plain,
( ( ! [V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] : ( c_in @ V_x @ ( c_List_Oset @ ( c_List_Oappend @ V_xa @ ( c_List_Olist_OCons @ V_x @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[320]) ).
thf(956,plain,
( ( ! [V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ V_x @ ( c_List_Oset @ ( c_List_Oappend @ V_xa @ ( c_List_Olist_OCons @ V_x @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ V_x @ ( c_List_Oset @ V_xb @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[321]) ).
thf(957,plain,
( ( ! [V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ V_x @ ( c_List_Oset @ ( c_List_Oappend @ V_xa @ ( c_List_Olist_OCons @ V_x @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ V_x @ ( c_List_Oset @ V_xa @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[322]) ).
thf(958,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) )
= ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[323]) ).
thf(959,plain,
( ( ! [V_x: $i,V_A: $i] :
( ( c_in @ V_x @ V_A @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[324]) ).
thf(960,plain,
( ( ! [V_x: $i,V_A: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
| ~ ( c_in @ V_x @ V_A @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[325]) ).
thf(961,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[326]) ).
thf(962,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[327]) ).
thf(963,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) @ ( c_List_Oset @ V_xb @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[328]) ).
thf(964,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[329]) ).
thf(965,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) @ ( c_List_Oset @ V_xb @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[330]) ).
thf(966,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) @ ( c_List_Oset @ V_x @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[331]) ).
thf(967,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[332]) ).
thf(968,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) @ ( c_List_Oset @ V_x @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[333]) ).
thf(969,plain,
( ( ! [V_K: $i,V_KK: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[334]) ).
thf(970,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[335]) ).
thf(971,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[336]) ).
thf(972,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) )
| ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oanalz @ V_H ) ) @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[337]) ).
thf(973,plain,
( ( ! [V_K: $i,V_H: $i,V_G: $i,V_X: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) ) @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[338]) ).
thf(974,plain,
( ( ! [V_K: $i,V_H: $i,V_X: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ ( c_Message_OkeysFor @ V_H ) @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[339]) ).
thf(975,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[340]) ).
thf(976,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[341]) ).
thf(977,plain,
( ( ! [V_evs: $i] : ( c_lessequals @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[342]) ).
thf(978,plain,
( ( ! [V_K: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_K @ ( c_Message_OkeysFor @ V_H ) @ tc_nat )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[343]) ).
thf(979,plain,
( ( ! [V_evs: $i,V_A: $i,V_B: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[344]) ).
thf(980,plain,
( ( ! [V_K: $i,V_KK: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_KK @ tc_nat )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[345]) ).
thf(981,plain,
( ( ! [V_K: $i,V_evs: $i,V_KK: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_K @ V_KK @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[346]) ).
thf(982,plain,
( ( ! [V_evs: $i,V_A: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[347]) ).
thf(983,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ V_X @ V_evs ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[348]) ).
thf(984,plain,
( ( ! [V_evs: $i,V_A: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[349]) ).
thf(985,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i,V_AS: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[350]) ).
thf(986,plain,
( ( ! [V_b: $i,V_c: $i,V_A: $i,V_AS: $i] :
( ( V_b = V_c )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[351]) ).
thf(987,plain,
( ( ! [V_A: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ V_A ) ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[352]) ).
thf(988,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ V_A @ V_B @ V_X @ V_evs ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ V_A @ V_B @ V_X @ V_evs ) ) )
= $true ),
inference(unfold_def,[status(thm)],[353]) ).
thf(989,plain,
( ( ! [V_Z: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Z @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Z @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[354]) ).
thf(990,plain,
( ( ! [V_K: $i,V_X: $i,V_G: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[355]) ).
thf(991,plain,
( ( ! [V_K: $i,V_G: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[356]) ).
thf(992,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ~ ( c_in @ V_K @ V_nE @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[357]) ).
thf(993,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[358]) ).
thf(994,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[359]) ).
thf(995,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[360]) ).
thf(996,plain,
( ( ! [V_x: $i,V_b: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_b ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(unfold_def,[status(thm)],[361]) ).
thf(997,plain,
( ( ! [V_x: $i,V_A: $i,V_AS: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_x ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_x ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_A @ V_AS @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[362]) ).
thf(998,plain,
( ( ! [V_A: $i,V_AS: $i,V_b: $i,V_c: $i] :
( ( c_in @ V_A @ V_AS @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[363]) ).
thf(999,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[364]) ).
thf(1000,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[365]) ).
thf(1001,plain,
( ( ! [V_K: $i,V_evs: $i] :
( ~ ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[366]) ).
thf(1002,plain,
( ( ! [V_K: $i,V_evs: $i,V_A: $i,V_NA: $i,V_B: $i,V_X: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[367]) ).
thf(1003,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) )
| ( V_A = c_Message_Oagent_OSpy ) ) )
= $true ),
inference(unfold_def,[status(thm)],[368]) ).
thf(1004,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[369]) ).
thf(1005,plain,
( ( ! [V_evs: $i,V_A: $i,V_X: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[370]) ).
thf(1006,plain,
( ( ! [V_K: $i,V_evs: $i,V_A: $i,V_K_H: $i,V_N: $i,V_B: $i,V_X: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[371]) ).
thf(1007,plain,
( ( ! [V_A: $i,V_evs: $i,V_A_H: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A_H @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[372]) ).
thf(1008,plain,
( ( ! [V_A: $i,V_evs: $i,V_A_H: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A_H @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[373]) ).
thf(1009,plain,
( ( ! [V_A: $i,V_B: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ V_A ) )
!= ( hAPP @ c_Public_OshrK @ V_B ) ) )
= $true ),
inference(unfold_def,[status(thm)],[374]) ).
thf(1010,plain,
( ( ! [V_A: $i,V_evs: $i,V_A_H: $i,V_B: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[375]) ).
thf(1011,plain,
( ( ! [V_X: $i,V_A: $i] :
~ ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[376]) ).
thf(1012,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[377]) ).
thf(1013,plain,
( ( ! [V_X: $i,V_G: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ V_G ) )
| ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[378]) ).
thf(1014,plain,
( ( ! [V_Y: $i,V_G: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_Y @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[379]) ).
thf(1015,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[380]) ).
thf(1016,plain,
( ( ! [V_evs: $i] : ( c_lessequals @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[381]) ).
thf(1017,plain,
( ( ! [V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[382]) ).
thf(1018,plain,
( ( ! [V_nat: $i,V_msg_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[383]) ).
thf(1019,plain,
( ( ! [V_agent: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[384]) ).
thf(1020,plain,
( ( ! [V_msg_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(unfold_def,[status(thm)],[385]) ).
thf(1021,plain,
( ( ! [V_H: $i,V_H_H: $i,V_G: $i,V_G_H: $i] :
( ( ( c_Message_Oanalz @ V_H )
!= ( c_Message_Oanalz @ V_H_H ) )
| ( ( c_Message_Oanalz @ V_G )
!= ( c_Message_Oanalz @ V_G_H ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G_H @ V_H_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[386]) ).
thf(1022,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ V_G ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[387]) ).
thf(1023,plain,
( ( ! [V_H: $i] : ( c_lessequals @ V_H @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[388]) ).
thf(1024,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[389]) ).
thf(1025,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[390]) ).
thf(1026,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[391]) ).
thf(1027,plain,
( ( ! [V_nat: $i,V_msg_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[392]) ).
thf(1028,plain,
( ( ! [V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[393]) ).
thf(1029,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_msg: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OHash @ V_msg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[394]) ).
thf(1030,plain,
( ( ! [V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[395]) ).
thf(1031,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[396]) ).
thf(1032,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[397]) ).
thf(1033,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[398]) ).
thf(1034,plain,
( ( ! [V_H: $i] : ( c_lessequals @ V_H @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[399]) ).
thf(1035,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[400]) ).
thf(1036,plain,
( ( ! [V_msg: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[401]) ).
thf(1037,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_msg: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_OHash @ V_msg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[402]) ).
thf(1038,plain,
( ( ! [V_c: $i,V_A: $i,T_a: $i] :
( ~ ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_in @ V_c @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[403]) ).
thf(1039,plain,
( ( ! [V_c: $i,V_A: $i,T_a: $i] :
( ( c_in @ V_c @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
| ( c_in @ V_c @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[404]) ).
thf(1040,plain,
( ( ! [V_c: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_c @ V_B @ T_a )
| ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[405]) ).
thf(1041,plain,
( ( ! [V_c: $i,V_A: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
| ~ ( c_in @ V_c @ V_B @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[406]) ).
thf(1042,plain,
( ( ! [V_c: $i,V_A: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
| ~ ( c_in @ V_c @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[407]) ).
thf(1043,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ~ ( c_in @ V_x @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[408]) ).
thf(1044,plain,
( ( ! [V_c: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_c @ V_B @ T_a )
| ~ ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[409]) ).
thf(1045,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[410]) ).
thf(1046,plain,
( ( ! [V_t: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_t @ V_B @ T_a )
| ~ ( c_in @ V_t @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[411]) ).
thf(1047,plain,
( ( ! [T_a: $i,V_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ V_b @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ V_a @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[412]) ).
thf(1048,plain,
( ( ! [T_a: $i,V_b: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ V_a @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ V_b @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[413]) ).
thf(1049,plain,
( ( ! [T_a: $i,V_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ V_a @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_b @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[414]) ).
thf(1050,plain,
( ( ! [T_a: $i,V_b: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ V_b @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_a @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[415]) ).
thf(1051,plain,
( ( ! [T_b: $i,V_f: $i,V_x: $i,V_g: $i,T_a: $i] :
( ~ ( class_HOL_Oord @ T_b )
| ( c_lessequals @ ( hAPP @ V_f @ V_x ) @ ( hAPP @ V_g @ V_x ) @ T_b )
| ~ ( c_lessequals @ V_f @ V_g @ ( tc_fun @ T_a @ T_b ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[416]) ).
thf(1052,plain,
( ( ! [T_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a )
= V_b ) ) )
= $true ),
inference(unfold_def,[status(thm)],[417]) ).
thf(1053,plain,
( ( ! [T_a: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( V_a
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[418]) ).
thf(1054,plain,
( ( ! [T_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( V_b
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[419]) ).
thf(1055,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ T_a )
= V_x ) ) )
= $true ),
inference(unfold_def,[status(thm)],[420]) ).
thf(1056,plain,
( ( ! [T_a: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
= V_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[421]) ).
thf(1057,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= V_A ) )
= $true ),
inference(unfold_def,[status(thm)],[422]) ).
thf(1058,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[423]) ).
thf(1059,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_OkeysFor @ V_G ) @ ( c_Message_OkeysFor @ V_H ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[424]) ).
thf(1060,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[425]) ).
thf(1061,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[426]) ).
thf(1062,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[427]) ).
thf(1063,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[428]) ).
thf(1064,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[429]) ).
thf(1065,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[430]) ).
thf(1066,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[431]) ).
thf(1067,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[432]) ).
thf(1068,plain,
( ( ! [V_A: $i,V_x: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[433]) ).
thf(1069,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[434]) ).
thf(1070,plain,
( ( ! [V_A: $i,V_x: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[435]) ).
thf(1071,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i,V_A: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ~ ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[436]) ).
thf(1072,plain,
( ( ! [V_A: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_A ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[437]) ).
thf(1073,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[438]) ).
thf(1074,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ V_x @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[439]) ).
thf(1075,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[440]) ).
thf(1076,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[441]) ).
thf(1077,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[442]) ).
thf(1078,plain,
( ( ! [T_a: $i,V_y: $i,V_x: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( c_lessequals @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[443]) ).
thf(1079,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
| ~ ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ V_x @ V_z @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[444]) ).
thf(1080,plain,
( ( ! [T_a: $i,V_y: $i,V_z: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ V_x @ T_a )
| ~ ( c_lessequals @ V_z @ V_x @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[445]) ).
thf(1081,plain,
( ( ! [T_a: $i,V_y: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[446]) ).
thf(1082,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[447]) ).
thf(1083,plain,
( ( ! [T_a: $i,V_a: $i,V_b: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a )
| ~ ( c_lessequals @ V_b @ V_x @ T_a )
| ~ ( c_lessequals @ V_a @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[448]) ).
thf(1084,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[449]) ).
thf(1085,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] : ( c_lessequals @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[450]) ).
thf(1086,plain,
( ( ! [V_B: $i,V_A: $i,T_a: $i] : ( c_lessequals @ V_B @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[451]) ).
thf(1087,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[452]) ).
thf(1088,plain,
( ( ! [V_x: $i,V_A: $i] :
( ( c_in @ V_x @ V_A @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ V_x ) @ ( c_Set_Oimage @ c_Message_OinvKey @ V_A @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[453]) ).
thf(1089,plain,
( ( ! [V_x: $i,V_A: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_x ) @ ( c_Set_Oimage @ c_Message_OinvKey @ V_A @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_x @ V_A @ tc_nat ) ) )
= $true ),
inference(unfold_def,[status(thm)],[454]) ).
thf(1090,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[455]) ).
thf(1091,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[456]) ).
thf(1092,plain,
( ( ! [V_A: $i,V_B: $i,V_C: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[457]) ).
thf(1093,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[458]) ).
thf(1094,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i,V_z: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[459]) ).
thf(1095,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[460]) ).
thf(1096,plain,
( ( ! [V_A: $i,V_B: $i,V_C: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[461]) ).
thf(1097,plain,
( ( ! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_G ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_G ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[462]) ).
thf(1098,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[463]) ).
thf(1099,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[464]) ).
thf(1100,plain,
( ( ! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[465]) ).
thf(1101,plain,
( ( ! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[466]) ).
thf(1102,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_x @ T_a )
= V_x ) ) )
= $true ),
inference(unfold_def,[status(thm)],[467]) ).
thf(1103,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
= V_A ) )
= $true ),
inference(unfold_def,[status(thm)],[468]) ).
thf(1104,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[469]) ).
thf(1105,plain,
( ( ! [V_A: $i,V_b: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_b @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[470]) ).
thf(1106,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[471]) ).
thf(1107,plain,
( ( ( c_Event_OinitState @ c_Message_Oagent_OSpy )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ c_Event_Obad @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ c_Event_Obad @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Public_OshrK @ c_Event_Obad @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[472]) ).
thf(1108,plain,
( ( ! [V_A: $i,V_evs: $i] : ( c_lessequals @ ( c_Event_OinitState @ V_A ) @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[473]) ).
thf(1109,plain,
( ( ! [V_A: $i,V_evs: $i,V_e: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ V_e @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[474]) ).
thf(1110,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ V_G ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Osynth @ V_G ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[475]) ).
thf(1111,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oanalz @ ( c_Message_Osynth @ V_H ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ V_H ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[476]) ).
thf(1112,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_G ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[477]) ).
thf(1113,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oparts @ ( c_Message_Osynth @ V_H ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_H ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[478]) ).
thf(1114,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[479]) ).
thf(1115,plain,
( ( ! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_G ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[480]) ).
thf(1116,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[481]) ).
thf(1117,plain,
( ( ! [V_H: $i] : ( c_lessequals @ ( c_Message_Oanalz @ V_H ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[482]) ).
thf(1118,plain,
( ( ! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[483]) ).
thf(1119,plain,
( ( ! [V_c: $i,V_A: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[484]) ).
thf(1120,plain,
( ( ! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[485]) ).
thf(1121,plain,
( ( ! [V_c: $i,V_H: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[486]) ).
thf(1122,plain,
( ( ! [V_xs: $i,T_a: $i,V_x: $i] : ( c_lessequals @ ( c_List_Oset @ V_xs @ T_a ) @ ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[487]) ).
thf(1123,plain,
( ( ! [V_f: $i,V_x: $i,V_B: $i,T_a: $i,V_A: $i,T_b: $i] :
( ( c_in @ ( hAPP @ V_f @ V_x ) @ V_B @ T_a )
| ~ ( c_in @ V_x @ V_A @ T_b )
| ~ ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[488]) ).
thf(1124,plain,
( ( ! [T_a: $i,V_y: $i,V_x: $i] :
( ~ ( class_Orderings_Olinorder @ T_a )
| ( c_lessequals @ V_y @ V_x @ T_a )
| ( c_lessequals @ V_x @ V_y @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[489]) ).
thf(1125,plain,
( ( ! [V_G: $i,V_H: $i,V_G_H: $i,V_H_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G_H @ V_H_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ V_H ) @ ( c_Message_Oanalz @ V_H_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_G_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[490]) ).
thf(1126,plain,
( ( ! [V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Set_Oinsert @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[491]) ).
thf(1127,plain,
( ( ! [V_f: $i,V_A: $i,V_B: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oimage @ V_f @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[492]) ).
thf(1128,plain,
( ( ! [V_a: $i,V_C: $i,T_a: $i,V_D: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ V_a @ V_C @ T_a ) @ ( c_Set_Oinsert @ V_a @ V_D @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_C @ V_D @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[493]) ).
thf(1129,plain,
( ( ! [V_x: $i,V_A: $i,T_b: $i,V_f: $i,T_a: $i] :
( ~ ( c_lessequals @ V_x @ V_A @ ( tc_fun @ T_b @ tc_bool ) )
| ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_x @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[494]) ).
thf(1130,plain,
( ( ! [V_f: $i,V_A: $i,T_a: $i,T_b: $i,V_B: $i] :
( ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ ( c_Set_Oimage @ V_f @ V_B @ T_a @ T_b ) @ ( tc_fun @ T_b @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[495]) ).
thf(1131,plain,
( ( ! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ V_G @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[496]) ).
thf(1132,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[497]) ).
thf(1133,plain,
( ( ! [V_Q: $i,V_x: $i,V_P: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_Q @ V_x ) )
| ~ ( c_lessequals @ V_P @ V_Q @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[498]) ).
thf(1134,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Opreorder @ T_a )
| ( c_lessequals @ V_x @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[499]) ).
thf(1135,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( c_lessequals @ V_x @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[500]) ).
thf(1136,plain,
( ( ! [V_Q: $i,V_x: $i,V_P: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_Q @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ~ ( c_lessequals @ V_P @ V_Q @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[501]) ).
thf(1137,plain,
( ( ! [V_A: $i,V_C: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[502]) ).
thf(1138,plain,
( ( ! [V_A: $i,T_a: $i] : ( c_lessequals @ V_A @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[503]) ).
thf(1139,plain,
( ( ! [V_x: $i,T_a: $i] : ( c_lessequals @ V_x @ V_x @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[504]) ).
thf(1140,plain,
( ( ! [T_a: $i,V_x: $i,V_z: $i,V_y: $i] :
( ~ ( class_Orderings_Opreorder @ T_a )
| ( c_lessequals @ V_x @ V_z @ T_a )
| ~ ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[505]) ).
thf(1141,plain,
( ( ! [T_a: $i,V_z: $i,V_x: $i,V_y: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( c_lessequals @ V_z @ V_x @ T_a )
| ~ ( c_lessequals @ V_z @ V_y @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[506]) ).
thf(1142,plain,
( ( ! [V_B: $i,V_C: $i,T_a: $i,V_A: $i] :
( ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[507]) ).
thf(1143,plain,
( ( ! [V_A: $i,V_C: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[508]) ).
thf(1144,plain,
( ( ! [T_a: $i,V_a: $i,V_x: $i,V_b: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_a @ V_x @ T_a )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[509]) ).
thf(1145,plain,
( ( ! [T_a: $i,V_b: $i,V_x: $i,V_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_b @ V_x @ T_a )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[510]) ).
thf(1146,plain,
( ( ! [T_a: $i,V_x: $i,V_a: $i,V_b: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_x @ V_a @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[511]) ).
thf(1147,plain,
( ( ! [T_a: $i,V_x: $i,V_a: $i,V_b: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_x @ V_b @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[512]) ).
thf(1148,plain,
( ( ! [T_a: $i,V_x: $i,V_z: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_x @ V_z @ T_a )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[513]) ).
thf(1149,plain,
( ( ! [T_a: $i,V_y: $i,V_z: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[514]) ).
thf(1150,plain,
( ( ! [V_H: $i] : ( c_lessequals @ V_H @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[515]) ).
thf(1151,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_in @ V_x @ V_B @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[516]) ).
thf(1152,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Otop @ T_a )
| ( c_lessequals @ V_x @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[517]) ).
thf(1153,plain,
( ( ! [V_A: $i,T_a: $i] : ( c_lessequals @ V_A @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[518]) ).
thf(1154,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_C: $i,V_D: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_C @ V_D @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_D @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[519]) ).
thf(1155,plain,
( ( ! [V_f: $i,V_A: $i,T_b: $i,T_a: $i,V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oimage @ V_f @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[520]) ).
thf(1156,plain,
( ( ! [V_msg: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OHash @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[521]) ).
thf(1157,plain,
( ( ! [V_K: $i,V_X: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[522]) ).
thf(1158,plain,
( ( ! [V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Set_Oinsert @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[523]) ).
thf(1159,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( c_List_Oset @ ( c_List_Oappend @ V_xs @ V_ys @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_List_Oset @ V_xs @ T_a ) @ ( c_List_Oset @ V_ys @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[524]) ).
thf(1160,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= V_B )
| ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[525]) ).
thf(1161,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= V_A )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[526]) ).
thf(1162,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= V_B )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[527]) ).
thf(1163,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= V_y )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[528]) ).
thf(1164,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
!= V_y )
| ( c_lessequals @ V_x @ V_y @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[529]) ).
thf(1165,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= V_x )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[530]) ).
thf(1166,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( V_x = V_y )
| ~ ( c_lessequals @ V_x @ V_y @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[531]) ).
thf(1167,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( V_x = V_y )
| ~ ( c_lessequals @ V_y @ V_x @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[532]) ).
thf(1168,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ( V_x = V_y )
| ~ ( c_lessequals @ V_y @ V_x @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[533]) ).
thf(1169,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( V_A = V_B )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[534]) ).
thf(1170,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( V_A = V_B )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[535]) ).
thf(1171,plain,
( ( ! [V_A: $i,T_a: $i,V_B: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A = V_B ) ) )
= $true ),
inference(unfold_def,[status(thm)],[536]) ).
thf(1172,plain,
( ( ! [T_a: $i,V_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a )
!= ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) )
| ( V_a = V_b ) ) )
= $true ),
inference(unfold_def,[status(thm)],[537]) ).
thf(1173,plain,
( ( ! [T_a: $i,V_x: $i,V_y: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a )
!= ( c_HOL_Ouminus__class_Ouminus @ V_y @ T_a ) )
| ( V_x = V_y ) ) )
= $true ),
inference(unfold_def,[status(thm)],[538]) ).
thf(1174,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[539]) ).
thf(1175,plain,
( ( ! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Osynth @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[540]) ).
thf(1176,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_A @ V_x ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[541]) ).
thf(1177,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_B @ V_x ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[542]) ).
thf(1178,plain,
( ( ! [V_B: $i,V_x: $i,V_A: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_B @ V_x ) )
| ( hBOOL @ ( hAPP @ V_A @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[543]) ).
thf(1179,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(unfold_def,[status(thm)],[544]) ).
thf(1180,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[545]) ).
thf(1181,plain,
( ( ! [V_X: $i,V_K: $i,V_X_H: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X_H ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X_H ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[546]) ).
thf(1182,plain,
( ( ! [V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Set_Oinsert @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) @ ( c_Message_Osynth @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[547]) ).
thf(1183,plain,
( ( ! [V_B: $i,V_a: $i,T_a: $i] : ( c_lessequals @ V_B @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[548]) ).
thf(1184,plain,
( ( ! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[549]) ).
thf(1185,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[550]) ).
thf(1186,plain,
( ( ! [T_a: $i,V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[551]) ).
thf(1187,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ T_a ) @ V_x @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[552]) ).
thf(1188,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[553]) ).
thf(1189,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[554]) ).
thf(1190,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[555]) ).
thf(1191,plain,
( ( ! [V_A: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[556]) ).
thf(1192,plain,
( ( ! [V_B: $i,V_A: $i,T_a: $i] :
( ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[557]) ).
thf(1193,plain,
( ( ! [V_B: $i,T_a: $i,V_A: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[558]) ).
thf(1194,plain,
( ( ! [T_a: $i,V_b: $i,V_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_a @ V_b @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[559]) ).
thf(1195,plain,
( ( ! [T_a: $i,V_a: $i,V_b: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ( c_lessequals @ V_a @ V_b @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[560]) ).
thf(1196,plain,
( ( ! [V_A: $i,V_a: $i,V_B: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oinsert @ V_a @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[561]) ).
thf(1197,plain,
( ( ! [V_a: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oinsert @ V_a @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[562]) ).
thf(1198,plain,
( ( ( c_Event_OinitState @ c_Message_Oagent_OServer )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ c_Message_Oagent_OServer ) ) ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ c_Message_Oagent_OServer ) ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) @ tc_Message_Omsg ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[563]) ).
thf(1199,plain,
( ( c_Public_Okeymode_OSignature != c_Public_Okeymode_OEncryption )
= $true ),
inference(unfold_def,[status(thm)],[564]) ).
thf(1200,plain,
( ( ! [V_P: $i,V_keymode: $i] :
( ( hBOOL @ ( hAPP @ V_P @ V_keymode ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ c_Public_Okeymode_OEncryption ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ c_Public_Okeymode_OSignature ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[565]) ).
thf(1201,plain,
( ( c_Public_Okeymode_OEncryption != c_Public_Okeymode_OSignature )
= $true ),
inference(unfold_def,[status(thm)],[566]) ).
thf(1202,plain,
( ( ! [V_X: $i] :
~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[567]) ).
thf(1203,plain,
( ( ! [V_xs: $i,T_a: $i] :
( ( ( c_List_Oset @ V_xs @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[568]) ).
thf(1204,plain,
( ( ! [T_a: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_List_Oset @ ( c_List_Olist_ONil @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[569]) ).
thf(1205,plain,
( ( ! [T_a: $i,V_xs: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_List_Oset @ V_xs @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[570]) ).
thf(1206,plain,
( ( ! [T_a: $i] :
( ( c_List_Oset @ ( c_List_Olist_ONil @ T_a ) @ T_a )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[571]) ).
thf(1207,plain,
( ( ! [T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[572]) ).
thf(1208,plain,
( ( ! [V_A: $i,V_x: $i,T_a: $i] :
( ( V_A
= ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[573]) ).
thf(1209,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ~ ( c_lessequals @ V_A @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[574]) ).
thf(1210,plain,
( ( ! [V_x: $i,T_a: $i] : ( c_in @ V_x @ ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[575]) ).
thf(1211,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[576]) ).
thf(1212,plain,
( ( ! [V_f: $i,V_A: $i,T_b: $i,T_a: $i] :
( ( ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[577]) ).
thf(1213,plain,
( ( ! [T_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[578]) ).
thf(1214,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[579]) ).
thf(1215,plain,
( ( ! [T_a: $i,V_a: $i,V_A: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Set_Oinsert @ V_a @ V_A @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[580]) ).
thf(1216,plain,
( ( ! [T_a: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[581]) ).
thf(1217,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ~ ( c_lessequals @ V_A @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[582]) ).
thf(1218,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_b = V_c )
| ( V_b = V_d ) ) )
= $true ),
inference(unfold_def,[status(thm)],[583]) ).
thf(1219,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_a = V_d )
| ( V_b = V_d ) ) )
= $true ),
inference(unfold_def,[status(thm)],[584]) ).
thf(1220,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_b = V_c )
| ( V_a = V_c ) ) )
= $true ),
inference(unfold_def,[status(thm)],[585]) ).
thf(1221,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_a = V_d )
| ( V_a = V_c ) ) )
= $true ),
inference(unfold_def,[status(thm)],[586]) ).
thf(1222,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ V_A @ V_evs ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[587]) ).
thf(1223,plain,
( ( ! [T_a: $i] :
( ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[588]) ).
thf(1224,plain,
( ( ! [T_a: $i,V_x: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ) )
= $true ),
inference(unfold_def,[status(thm)],[589]) ).
thf(1225,plain,
( ( ! [T_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[590]) ).
thf(1226,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a )
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[591]) ).
thf(1227,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= V_A ) )
= $true ),
inference(unfold_def,[status(thm)],[592]) ).
thf(1228,plain,
( ( ! [T_a: $i,V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= V_B ) )
= $true ),
inference(unfold_def,[status(thm)],[593]) ).
thf(1229,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ T_a ) @ V_x @ T_a )
= V_x ) ) )
= $true ),
inference(unfold_def,[status(thm)],[594]) ).
thf(1230,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Orderings_Obot__class_Obot @ T_a ) @ T_a )
= V_x ) ) )
= $true ),
inference(unfold_def,[status(thm)],[595]) ).
thf(1231,plain,
( ( ! [T_a: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[596]) ).
thf(1232,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[597]) ).
thf(1233,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Obot @ T_a )
| ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ T_a ) @ V_x @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[598]) ).
thf(1234,plain,
( ( ! [T_a: $i,V_A: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[599]) ).
thf(1235,plain,
( ( ! [T_a: $i,V_f: $i,V_A: $i,T_b: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[600]) ).
thf(1236,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[601]) ).
thf(1237,plain,
( ( ! [V_b: $i,V_a: $i,T_a: $i] :
( ( V_b = V_a )
| ~ ( c_in @ V_b @ ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[602]) ).
thf(1238,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Set_Oinsert @ V_Y @ V_H @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_Y @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[603]) ).
thf(1239,plain,
( ( ! [V_xa: $i,V_x: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_xa @ ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_x @ ( c_Set_Oinsert @ V_xa @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[604]) ).
thf(1240,plain,
( ( ! [V_f: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oimage @ V_f @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[605]) ).
thf(1241,plain,
( ( ! [V_a: $i,T_a: $i,V_b: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
!= ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
| ( V_a = V_b ) ) )
= $true ),
inference(unfold_def,[status(thm)],[606]) ).
thf(1242,plain,
( ( ! [V_x: $i,V_xa: $i,T_a: $i] :
( ( ( c_Set_Oinsert @ V_x @ V_xa @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( c_in @ V_x @ V_xa @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[607]) ).
thf(1243,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_B
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[608]) ).
thf(1244,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[609]) ).
thf(1245,plain,
( ( ! [T_a: $i,V_A: $i,V_B: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ T_a )
!= ( c_Orderings_Obot__class_Obot @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[610]) ).
thf(1246,plain,
( ( ! [T_a: $i,V_A: $i,V_B: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ T_a )
!= ( c_Orderings_Obot__class_Obot @ T_a ) )
| ( V_B
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[611]) ).
thf(1247,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[612]) ).
thf(1248,plain,
( ( ! [T_a: $i,V_f: $i,T_b: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oimage @ V_f @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[613]) ).
thf(1249,plain,
( ( ! [V_x: $i,T_a: $i] :
~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[614]) ).
thf(1250,plain,
( ( ! [V_P: $i,V_x: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[615]) ).
thf(1251,plain,
( ( ! [V_c: $i,T_a: $i] :
~ ( c_in @ V_c @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[616]) ).
thf(1252,plain,
( ( ! [V_a: $i,T_a: $i] :
~ ( c_in @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
= $true ),
inference(unfold_def,[status(thm)],[617]) ).
thf(1253,plain,
( ( ! [V_P: $i,V_x: $i,T_a: $i] :
( ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(unfold_def,[status(thm)],[618]) ).
thf(1254,plain,
( ( ( c_Message_Oparts @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[619]) ).
thf(1255,plain,
( ( ( c_Message_Oanalz @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(unfold_def,[status(thm)],[620]) ).
thf(1256,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[621]) ).
thf(1257,plain,
( ( ! [V_c: $i,V_H: $i,V_X: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[622]) ).
thf(1258,plain,
( ( ! [V_X: $i,V_A: $i,V_B: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Set_Oinsert @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ V_A @ V_B @ V_X @ V_evs ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ V_A @ V_B @ V_X @ V_evs ) ) )
= $true ),
inference(unfold_def,[status(thm)],[623]) ).
thf(1259,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[624]) ).
thf(1260,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(unfold_def,[status(thm)],[625]) ).
thf(1261,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(unfold_def,[status(thm)],[626]) ).
thf(1262,plain,
( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ v_A @ v_B @ ( c_Message_Omsg_OCrypt @ v_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NB ) @ ( c_Message_Omsg_ONonce @ v_NB ) ) ) ) @ ( c_List_Oset @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(unfold_def,[status(thm)],[629]) ).
thf(1263,plain,
( ( c_in @ ( c_Message_Omsg_OCrypt @ v_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NB ) @ ( c_Message_Omsg_ONonce @ v_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg )
= $true ),
inference(unfold_def,[status(thm)],[630]) ).
thf(1264,plain,
( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ v_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ v_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ v_K ) @ v_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg )
= $true ),
inference(unfold_def,[status(thm)],[631]) ).
thf(1265,plain,
( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ v_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(unfold_def,[status(thm)],[632]) ).
thf(1266,plain,
( ( ~ ( c_in @ v_B @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(unfold_def,[status(thm)],[633]) ).
thf(1267,plain,
( ( ~ ( c_in @ v_A @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(unfold_def,[status(thm)],[634]) ).
thf(1268,plain,
( ( ~ $false ) = $true ),
inference(polarity_switch,[status(thm)],[635]) ).
thf(1269,plain,
( ( ! [V_X: $i,V_Y: $i] :
( ( V_X = V_Y )
| ! [T_a: $i] :
~ ( c_fequal @ V_X @ V_Y @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[636]) ).
thf(1270,plain,
( ( ! [V_x: $i,V_y: $i] :
( ( ( hAPP @ c_Public_OshrK @ V_x )
!= ( hAPP @ c_Public_OshrK @ V_y ) )
| ( V_x = V_y ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[666]) ).
thf(1271,plain,
( ( ! [V_nat: $i,V_nat_H: $i,V_msg_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[667]) ).
thf(1272,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[668]) ).
thf(1273,plain,
( ( ! [V_nat: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[669]) ).
thf(1274,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_msg1: $i,V_msg2: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[670]) ).
thf(1275,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[671]) ).
thf(1276,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i] :
( ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ V_X ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[672]) ).
thf(1277,plain,
( ( ! [V_msg1: $i,V_msg2: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) )
| ( V_msg2 = V_msg2_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[673]) ).
thf(1278,plain,
( ( ! [V_msg1: $i,V_msg2: $i,V_msg1_H: $i] :
( ! [V_msg2_H: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) )
| ( V_msg1 = V_msg1_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[674]) ).
thf(1279,plain,
( ( ! [V_agent: $i,V_nat_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_ONonce @ V_nat_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[675]) ).
thf(1280,plain,
( ( ! [V_nat: $i,V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OCrypt @ V_nat @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[676]) ).
thf(1281,plain,
( ( ! [V_nat: $i,V_msg: $i,V_nat_H: $i] :
( ! [V_msg_H: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) )
| ( V_nat = V_nat_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[677]) ).
thf(1282,plain,
( ( ! [V_nat: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[678]) ).
thf(1283,plain,
( ( ! [V_S: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_S @ V_x ) )
| ! [T_a: $i] :
~ ( c_in @ V_x @ V_S @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[679]) ).
thf(1284,plain,
( ( ! [V_x: $i,V_S: $i] :
( ! [T_a: $i] : ( c_in @ V_x @ V_S @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_S @ V_x ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[680]) ).
thf(1285,plain,
( ( ! [V_nat: $i,V_nat_H: $i] :
( ( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_ONonce @ V_nat_H ) )
| ( V_nat = V_nat_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[681]) ).
thf(1286,plain,
( ( ! [V_nat_H: $i,V_agent: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[683]) ).
thf(1287,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[685]) ).
thf(1288,plain,
( ( ! [V_msg1: $i,V_msg2: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[686]) ).
thf(1289,plain,
( ( ! [V_nat: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[687]) ).
thf(1290,plain,
( ( ! [V_agent: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[688]) ).
thf(1291,plain,
( ( ! [V_A: $i] :
( ! [V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[689]) ).
thf(1292,plain,
( ( ! [V_agent: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[690]) ).
thf(1293,plain,
( ( ! [V_nat: $i,V_nat_H: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) )
| ( V_nat = V_nat_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[691]) ).
thf(1294,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[693]) ).
thf(1295,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_A: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[694]) ).
thf(1296,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_K: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[695]) ).
thf(1297,plain,
( ( ! [V_nat_H: $i,V_agent: $i] :
( ( c_Message_Omsg_ONonce @ V_nat_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[696]) ).
thf(1298,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[697]) ).
thf(1299,plain,
( ( ! [V_nat: $i,V_nat_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[699]) ).
thf(1300,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[701]) ).
thf(1301,plain,
( ( ! [V_X: $i,V_evs: $i,V_S: $i,V_A: $i,V_KA: $i,V_N: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_B: $i,V_K: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ V_KA @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ V_B @ ( c_Message_Omsg_OMPair @ V_K @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[702]) ).
thf(1302,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ! [V_A: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[704]) ).
thf(1303,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[705]) ).
thf(1304,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[708]) ).
thf(1305,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i] :
( ! [V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_agent2 = V_agent2_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[709]) ).
thf(1306,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i] :
( ! [V_agent2_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_agent1 = V_agent1_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[710]) ).
thf(1307,plain,
( ( ! [V_nat_H: $i,V_nat: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[711]) ).
thf(1308,plain,
( ( ! [V_agent: $i,V_nat_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[712]) ).
thf(1309,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[713]) ).
thf(1310,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[714]) ).
thf(1311,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[715]) ).
thf(1312,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[716]) ).
thf(1313,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[717]) ).
thf(1314,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ! [V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[719]) ).
thf(1315,plain,
( ( ! [V_agent: $i,V_agent_H: $i] :
( ( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OAgent @ V_agent_H ) )
| ( V_agent = V_agent_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[721]) ).
thf(1316,plain,
( ( ! [V_K: $i,V_evs: $i,V_A: $i,V_NA: $i] :
( ( c_in @ V_K @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ V_B @ ( c_Message_Omsg_OMPair @ V_K @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[722]) ).
thf(1317,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ! [V_A: $i] :
( ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[723]) ).
thf(1318,plain,
( ( ! [V_X: $i,V_evs: $i,V_B: $i,V_K: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_S: $i,V_NA: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[724]) ).
thf(1319,plain,
( ( ! [V_X: $i,V_B: $i,V_K: $i,V_A: $i] :
( ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ! [V_evs: $i] :
( ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_NA: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[725]) ).
thf(1320,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_NA: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[726]) ).
thf(1321,plain,
( ( ! [V_c: $i,V_evs: $i,V_A: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_B: $i,V_X: $i] : ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[728]) ).
thf(1322,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_NA: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[731]) ).
thf(1323,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ V_evs )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_NA: $i,V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[732]) ).
thf(1324,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ! [V_A: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[734]) ).
thf(1325,plain,
( ( ! [V_A: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_evs: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[736]) ).
thf(1326,plain,
( ( ! [V_A: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_evs: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[738]) ).
thf(1327,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_K: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[742]) ).
thf(1328,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_NA: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[743]) ).
thf(1329,plain,
( ( ! [V_B: $i,V_X: $i,V_evs: $i,V_K: $i,V_NB: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ V_B @ V_X @ V_evs ) @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_NA: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[745]) ).
thf(1330,plain,
( ( ! [V_b: $i,V_A: $i] :
( ! [V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[748]) ).
thf(1331,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs3: $i,V_NA: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs3 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_S: $i,V_K: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs3 ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[750]) ).
thf(1332,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ! [V_X: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[757]) ).
thf(1333,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[762]) ).
thf(1334,plain,
( ( ! [V_c: $i,V_A_H: $i,V_b: $i,V_A: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[763]) ).
thf(1335,plain,
( ( ! [V_b: $i,V_C: $i,V_A: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) )
!= ( hAPP @ c_Public_OshrK @ V_A ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[764]) ).
thf(1336,plain,
( ( ! [V_A: $i,V_b: $i,V_C: $i] :
( ( hAPP @ c_Public_OshrK @ V_A )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[767]) ).
thf(1337,plain,
( ( ! [V_a: $i,V_list: $i,T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( ( c_List_Olist_OCons @ V_a @ V_list @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) )
| ( V_list = V_list_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[768]) ).
thf(1338,plain,
( ( ! [V_a: $i,V_list: $i,T_a: $i,V_a_H: $i] :
( ! [V_list_H: $i] :
( ( c_List_Olist_OCons @ V_a @ V_list @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) )
| ( V_a = V_a_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[769]) ).
thf(1339,plain,
( ( ! [V_agent_H: $i,V_msg_H: $i,V_agent: $i,V_msg: $i] :
( ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OGets @ V_agent @ V_msg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[770]) ).
thf(1340,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i] :
( ! [V_msg_H: $i] :
( ( c_Event_Oevent_ONotes @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) )
| ( V_agent = V_agent_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[772]) ).
thf(1341,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_ONotes @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[773]) ).
thf(1342,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[774]) ).
thf(1343,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i] :
( ! [V_msg_H: $i] :
( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) )
| ( V_agent = V_agent_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[775]) ).
thf(1344,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[776]) ).
thf(1345,plain,
( ( ! [V_K: $i,V_K_H: $i] :
( ( ( hAPP @ c_Message_OinvKey @ V_K )
!= ( hAPP @ c_Message_OinvKey @ V_K_H ) )
| ( V_K = V_K_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[777]) ).
thf(1346,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[778]) ).
thf(1347,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) )
| ( V_A = V_A_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[779]) ).
thf(1348,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i] :
( ! [V_A_H: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) )
| ( V_b = V_c ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[780]) ).
thf(1349,plain,
( ( ! [V_x: $i,V_t: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_t @ T_a )
!= V_t ) )
= $true ),
inference(extcnf_combined,[status(esa)],[783]) ).
thf(1350,plain,
( ( ! [V_xs: $i,V_x: $i,T_a: $i] :
( V_xs
!= ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[784]) ).
thf(1351,plain,
( ( ! [V_x: $i,V_A: $i,T_aa: $i] :
( ~ ( c_in @ V_x @ V_A @ T_aa )
| ! [V_f: $i,T_a: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_aa @ T_a ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[786]) ).
thf(1352,plain,
( ( ! [V_x: $i,V_A: $i,T_b: $i] :
( ~ ( c_in @ V_x @ V_A @ T_b )
| ! [V_f: $i,T_a: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[787]) ).
thf(1353,plain,
( ( ! [V_f: $i,V_x: $i,V_A: $i,T_b: $i] :
( ! [T_a: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ T_a )
| ~ ( c_in @ V_x @ V_A @ T_b ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[788]) ).
thf(1354,plain,
( ( ! [V_f: $i,V_x: $i,V_A: $i,T_a: $i] :
( ! [T_b: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ T_b )
| ~ ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[789]) ).
thf(1355,plain,
( ( ! [T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[792]) ).
thf(1356,plain,
( ( ! [V_x: $i,V_xa: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_xa @ T_a )
!= ( c_List_Olist_ONil @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[793]) ).
thf(1357,plain,
( ( ! [V_a_H: $i,V_list_H: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a )
!= ( c_List_Olist_ONil @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[794]) ).
thf(1358,plain,
( ( ! [V_X: $i] :
( ! [V_evs: $i] : ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ! [V_B: $i] :
~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[795]) ).
thf(1359,plain,
( ( c_Message_Oagent_OServer != c_Message_Oagent_OSpy )
= $true ),
inference(extcnf_combined,[status(esa)],[799]) ).
thf(1360,plain,
( ( c_Message_Oagent_OSpy != c_Message_Oagent_OServer )
= $true ),
inference(extcnf_combined,[status(esa)],[800]) ).
thf(1361,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[802]) ).
thf(1362,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[803]) ).
thf(1363,plain,
( ( ! [V_agent_H: $i,V_msg_H: $i,V_agent1: $i,V_agent2: $i,V_msg: $i] :
( ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[804]) ).
thf(1364,plain,
( ( ! [V_agent_H: $i,V_msg_H: $i,V_agent1: $i,V_agent2: $i,V_msg: $i] :
( ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[805]) ).
thf(1365,plain,
( ( ! [V_A: $i,V_b: $i,V_C: $i] :
( ( hAPP @ c_Public_OshrK @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[806]) ).
thf(1366,plain,
( ( ! [V_b: $i,V_C: $i,V_A: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C )
!= ( hAPP @ c_Public_OshrK @ V_A ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[807]) ).
thf(1367,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ! [V_A: $i] :
~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[812]) ).
thf(1368,plain,
( ( ! [V_y: $i,V_xs: $i,T_a: $i] :
( ( c_in @ V_y @ ( c_List_Oset @ V_xs @ T_a ) @ T_a )
| ! [V_x: $i] :
( ( V_y = V_x )
| ~ ( c_in @ V_y @ ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[814]) ).
thf(1369,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[815]) ).
thf(1370,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[816]) ).
thf(1371,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[818]) ).
thf(1372,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[819]) ).
thf(1373,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_K: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[820]) ).
thf(1374,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ! [V_K: $i] :
( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[824]) ).
thf(1375,plain,
( ( ! [V_c: $i,V_evs: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_X: $i] : ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[832]) ).
thf(1376,plain,
( ( ! [V_c: $i,V_evs: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_X: $i] : ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[833]) ).
thf(1377,plain,
( ( ! [V_NA: $i,V_NB: $i,V_K: $i,V_evso: $i,V_A: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ V_evso @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_B: $i] :
( ! [V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evso @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[834]) ).
thf(1378,plain,
( ( ! [V_A: $i] :
( ! [V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[835]) ).
thf(1379,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs3: $i,V_NA: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs3 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_S: $i,V_K: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OServer )
| ~ ( c_in @ V_evs3 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[837]) ).
thf(1380,plain,
( ( ! [V_NA: $i,V_NB: $i,V_K: $i,V_evso: $i,V_A: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ V_evso @ tc_Event_Oevent ) )
| ! [V_B: $i] :
( ! [V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evso ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[839]) ).
thf(1381,plain,
( ( ! [V_K_H: $i,V_A: $i,V_evs: $i,V_N: $i,V_B: $i] :
( ( V_K_H
= ( hAPP @ c_Public_OshrK @ V_A ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_K: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[840]) ).
thf(1382,plain,
( ( ! [V_A: $i,V_A_H: $i,V_evs: $i,V_NA_H: $i,V_B_H: $i,V_K: $i,V_X_H: $i,V_NA: $i] :
( ( V_A = V_A_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[841]) ).
thf(1383,plain,
( ( ! [V_NA: $i,V_NA_H: $i,V_evs: $i,V_A_H: $i,V_B_H: $i,V_K: $i,V_X_H: $i,V_A: $i] :
( ( V_NA = V_NA_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[842]) ).
thf(1384,plain,
( ( ! [V_B: $i,V_B_H: $i,V_evs: $i,V_A_H: $i,V_NA_H: $i,V_K: $i,V_X_H: $i,V_A: $i] :
( ( V_B = V_B_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_NA: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[843]) ).
thf(1385,plain,
( ( ! [V_X: $i,V_X_H: $i,V_evs: $i,V_A_H: $i,V_NA_H: $i,V_B_H: $i,V_K: $i,V_A: $i] :
( ( V_X = V_X_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_NA: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[844]) ).
thf(1386,plain,
( ( ! [V_X: $i,V_B: $i,V_K: $i,V_A: $i,V_evs: $i] :
( ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_K_H: $i,V_N: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[845]) ).
thf(1387,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[847]) ).
thf(1388,plain,
( ( ! [V_K: $i,V_evs: $i,V_NA: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_B: $i] :
( ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_A: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[848]) ).
thf(1389,plain,
( ( ! [V_K: $i,V_evs: $i,V_B: $i,V_A: $i,V_NA: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_K_H: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[849]) ).
thf(1390,plain,
( ( ! [V_X: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg )
| ! [V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ V_A @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ V_A @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OSpy )
| ~ ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[850]) ).
thf(1391,plain,
( ( ! [V_A: $i,V_NA: $i,V_B: $i,V_KAB: $i,V_evs2: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ V_evs2 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_A_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs2 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_KAB @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oused @ V_evs2 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs2 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[851]) ).
thf(1392,plain,
( ( ! [V_evs: $i,V_A: $i] :
( ! [V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[852]) ).
thf(1393,plain,
( ( ! [V_A: $i,V_NA: $i,V_B: $i,V_KAB: $i,V_evs2: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ V_evs2 @ tc_Event_Oevent ) )
| ! [V_A_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs2 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_KAB @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oused @ V_evs2 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs2 ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[853]) ).
thf(1394,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs4: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ V_evs4 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_A_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) @ ( c_List_Oset @ V_evs4 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Event_Oused @ V_evs4 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs4 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[854]) ).
thf(1395,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs4: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ V_evs4 @ tc_Event_Oevent ) )
| ! [V_A_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) @ ( c_List_Oset @ V_evs4 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Event_Oused @ V_evs4 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs4 ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[855]) ).
thf(1396,plain,
( ( ! [V_A: $i] :
( ! [V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[856]) ).
thf(1397,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs5: $i,V_S: $i,V_NA: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ V_evs5 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_B_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_B_H @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ V_evs5 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[857]) ).
thf(1398,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs5: $i,V_S: $i,V_NA: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ V_evs5 @ tc_Event_Oevent ) )
| ! [V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_B_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_B_H @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs5 ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[858]) ).
thf(1399,plain,
( ( ! [V_X: $i,V_evs: $i,V_K: $i,V_S: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_NA: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[860]) ).
thf(1400,plain,
( ( ! [V_H: $i,V_H_H: $i] :
( ( ( c_Message_Oanalz @ V_H )
!= ( c_Message_Oanalz @ V_H_H ) )
| ! [V_X: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H_H @ tc_Message_Omsg ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[865]) ).
thf(1401,plain,
( ( ! [T_a: $i,V_xs: $i] :
( ! [V_ys: $i] :
( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[872]) ).
thf(1402,plain,
( ( ! [T_a: $i,V_xs: $i,V_ys: $i] :
( ( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[873]) ).
thf(1403,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Olist_ONil @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[874]) ).
thf(1404,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Olist_ONil @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[875]) ).
thf(1405,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= V_xs )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[876]) ).
thf(1406,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( V_xs
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[877]) ).
thf(1407,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= V_ys )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[878]) ).
thf(1408,plain,
( ( ! [V_ys: $i,V_xs: $i,T_a: $i] :
( ( V_ys
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[879]) ).
thf(1409,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i,V_B: $i] :
( ( ( c_Set_Oinsert @ V_x @ V_A @ T_a )
!= ( c_Set_Oinsert @ V_x @ V_B @ T_a ) )
| ( c_in @ V_x @ V_B @ T_a )
| ( V_A = V_B )
| ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[882]) ).
thf(1410,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i] :
( ( c_in @ V_a @ V_A @ T_a )
| ! [V_b: $i] :
( ( V_a = V_b )
| ~ ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_A @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[887]) ).
thf(1411,plain,
( ( ! [V_K: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ! [V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[890]) ).
thf(1412,plain,
( ( ! [V_ys: $i,V_xs: $i,T_a: $i,V_zs: $i] :
( ( ( c_List_Oappend @ V_ys @ V_xs @ T_a )
!= ( c_List_Oappend @ V_zs @ V_xs @ T_a ) )
| ( V_ys = V_zs ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[901]) ).
thf(1413,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i,V_zs: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Oappend @ V_xs @ V_zs @ T_a ) )
| ( V_ys = V_zs ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[902]) ).
thf(1414,plain,
( ( ! [V_b: $i,V_c: $i] :
( ( V_b = V_c )
| ! [V_x: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[903]) ).
thf(1415,plain,
( ( ! [V_x: $i,V_AA: $i] :
( ( c_in @ V_x @ V_AA @ tc_Message_Oagent )
| ! [V_b: $i,V_c: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[904]) ).
thf(1416,plain,
( ( ! [V_A: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_A @ V_x ) )
| ! [V_y: $i] :
( ( V_y = V_x )
| ! [T_a: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ V_x ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[908]) ).
thf(1417,plain,
( ( ! [V_f: $i,V_x: $i,V_A: $i,T_a: $i] :
( ! [T_b: $i] :
( ( c_Set_Oinsert @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ T_b )
= ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) )
| ~ ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[922]) ).
thf(1418,plain,
( ( ! [V_xs: $i,V_x: $i,T_a: $i,V_ys: $i] :
( ! [V_y: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Olist_OCons @ V_x @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a )
!= ( c_List_Oappend @ V_ys @ ( c_List_Olist_OCons @ V_y @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a ) )
| ( V_xs = V_ys ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[926]) ).
thf(1419,plain,
( ( ! [V_xs: $i,V_x: $i,T_a: $i,V_ys: $i,V_y: $i] :
( ( ( c_List_Oappend @ V_xs @ ( c_List_Olist_OCons @ V_x @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a )
!= ( c_List_Oappend @ V_ys @ ( c_List_Olist_OCons @ V_y @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a ) )
| ( V_x = V_y ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[927]) ).
thf(1420,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[935]) ).
thf(1421,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_K: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[939]) ).
thf(1422,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[941]) ).
thf(1423,plain,
( ( ! [V_x: $i] :
( ( c_in @ V_x @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ! [V_evs: $i] :
( ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[951]) ).
thf(1424,plain,
( ( ! [V_K: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_KAB: $i] :
( ( V_K = V_KAB )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ( c_in @ V_KAB @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[952]) ).
thf(1425,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) ) @ tc_nat ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[973]) ).
thf(1426,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ ( c_Message_OkeysFor @ V_H ) @ tc_nat )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[974]) ).
thf(1427,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ V_K @ ( c_Message_OkeysFor @ V_H ) @ tc_nat )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[978]) ).
thf(1428,plain,
( ( ! [V_K: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_KK: $i] :
( ( c_in @ V_K @ V_KK @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[981]) ).
thf(1429,plain,
( ( ! [V_X: $i] :
( ( c_in @ V_X @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
| ! [V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ V_X @ V_evs ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[983]) ).
thf(1430,plain,
( ( ! [V_b: $i,V_c: $i] :
( ( V_b = V_c )
| ! [V_A: $i,V_AS: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[986]) ).
thf(1431,plain,
( ( ! [V_Z: $i,V_H: $i] :
( ( c_in @ V_Z @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Z @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[989]) ).
thf(1432,plain,
( ( ! [V_K: $i,V_X: $i,V_G: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg )
| ! [V_H: $i] :
( ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[990]) ).
thf(1433,plain,
( ( ! [V_K: $i,V_G: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ! [V_H: $i] :
( ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[991]) ).
thf(1434,plain,
( ( ! [V_K: $i,V_nE: $i] :
( ! [V_H: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ~ ( c_in @ V_K @ V_nE @ tc_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[992]) ).
thf(1435,plain,
( ( ! [V_A: $i,V_AS: $i] :
( ( c_in @ V_A @ V_AS @ tc_Message_Oagent )
| ! [V_b: $i,V_c: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[998]) ).
thf(1436,plain,
( ( ! [V_K: $i,V_evs: $i,V_A: $i,V_NA: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1002]) ).
thf(1437,plain,
( ( ! [V_A: $i] :
( ! [V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) )
| ( V_A = c_Message_Oagent_OSpy ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1003]) ).
thf(1438,plain,
( ( ! [V_evs: $i,V_A: $i] :
( ! [V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1005]) ).
thf(1439,plain,
( ( ! [V_K: $i,V_evs: $i,V_A: $i,V_K_H: $i,V_N: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1006]) ).
thf(1440,plain,
( ( ! [V_A: $i,V_B: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ V_A ) )
!= ( hAPP @ c_Public_OshrK @ V_B ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1009]) ).
thf(1441,plain,
( ( ! [V_X: $i,V_G: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ V_G ) )
| ! [V_H: $i] :
( ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1013]) ).
thf(1442,plain,
( ( ! [V_Y: $i,V_G: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1014]) ).
thf(1443,plain,
( ( ! [V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1017]) ).
thf(1444,plain,
( ( ! [V_nat: $i,V_msg_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1018]) ).
thf(1445,plain,
( ( ! [V_agent: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1019]) ).
thf(1446,plain,
( ( ! [V_msg_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1020]) ).
thf(1447,plain,
( ( ! [V_H: $i,V_H_H: $i] :
( ( ( c_Message_Oanalz @ V_H )
!= ( c_Message_Oanalz @ V_H_H ) )
| ! [V_G: $i,V_G_H: $i] :
( ( ( c_Message_Oanalz @ V_G )
!= ( c_Message_Oanalz @ V_G_H ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G_H @ V_H_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1021]) ).
thf(1448,plain,
( ( ! [V_nat: $i,V_msg_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1027]) ).
thf(1449,plain,
( ( ! [V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1028]) ).
thf(1450,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_msg: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OHash @ V_msg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1029]) ).
thf(1451,plain,
( ( ! [V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1030]) ).
thf(1452,plain,
( ( ! [V_msg: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1036]) ).
thf(1453,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_msg: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_OHash @ V_msg ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1037]) ).
thf(1454,plain,
( ( ! [V_c: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ V_B @ T_a )
| ! [V_A: $i] :
( ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1040]) ).
thf(1455,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ! [V_A: $i] :
( ~ ( c_in @ V_x @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1043]) ).
thf(1456,plain,
( ( ! [V_c: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ V_B @ T_a )
| ! [V_A: $i] :
( ~ ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1044]) ).
thf(1457,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ! [V_A: $i] :
( ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_in @ V_x @ V_A @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1045]) ).
thf(1458,plain,
( ( ! [V_t: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_t @ V_B @ T_a )
| ! [V_A: $i] :
( ~ ( c_in @ V_t @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1046]) ).
thf(1459,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ V_b @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ V_a @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1047]) ).
thf(1460,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_b: $i,V_a: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ V_a @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ V_b @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1048]) ).
thf(1461,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( c_lessequals @ V_a @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_b @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1049]) ).
thf(1462,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_b: $i,V_a: $i] :
( ( c_lessequals @ V_b @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_a @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1050]) ).
thf(1463,plain,
( ( ! [T_b: $i,V_f: $i,V_x: $i] :
( ~ ( class_HOL_Oord @ T_b )
| ! [V_g: $i] :
( ( c_lessequals @ ( hAPP @ V_f @ V_x ) @ ( hAPP @ V_g @ V_x ) @ T_b )
| ! [T_a: $i] :
~ ( c_lessequals @ V_f @ V_g @ ( tc_fun @ T_a @ T_b ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1051]) ).
thf(1464,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_b: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a )
= V_b ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1052]) ).
thf(1465,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_a: $i] :
( V_a
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1053]) ).
thf(1466,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_b: $i] :
( V_b
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1054]) ).
thf(1467,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ! [V_x: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ T_a )
= V_x ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1055]) ).
thf(1468,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
= V_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1056]) ).
thf(1469,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1061]) ).
thf(1470,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1062]) ).
thf(1471,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1064]) ).
thf(1472,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1065]) ).
thf(1473,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_x: $i] :
( ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1067]) ).
thf(1474,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_x: $i] :
( ( c_in @ V_x @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1069]) ).
thf(1475,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ! [V_A: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1071]) ).
thf(1476,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1073]) ).
thf(1477,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ V_x @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1074]) ).
thf(1478,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_x: $i,V_y: $i] : ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1077]) ).
thf(1479,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_y: $i,V_x: $i] : ( c_lessequals @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1078]) ).
thf(1480,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
| ~ ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ V_x @ V_z @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1079]) ).
thf(1481,plain,
( ( ! [T_a: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_z: $i,V_x: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ V_x @ T_a )
| ~ ( c_lessequals @ V_z @ V_x @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1080]) ).
thf(1482,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_y: $i,V_x: $i] : ( c_lessequals @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1081]) ).
thf(1483,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] : ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1082]) ).
thf(1484,plain,
( ( ! [T_a: $i,V_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_b: $i,V_x: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a )
| ~ ( c_lessequals @ V_b @ V_x @ T_a )
| ~ ( c_lessequals @ V_a @ V_x @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1083]) ).
thf(1485,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1090]) ).
thf(1486,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1091]) ).
thf(1487,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1093]) ).
thf(1488,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1094]) ).
thf(1489,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_x @ T_a )
= V_x ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1102]) ).
thf(1490,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_x: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1104]) ).
thf(1491,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ~ ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_G ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1115]) ).
thf(1492,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ~ ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1118]) ).
thf(1493,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ~ ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1120]) ).
thf(1494,plain,
( ( ! [V_c: $i,V_H: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1121]) ).
thf(1495,plain,
( ( ! [V_f: $i,V_x: $i,V_B: $i,T_a: $i] :
( ( c_in @ ( hAPP @ V_f @ V_x ) @ V_B @ T_a )
| ! [V_A: $i,T_b: $i] :
( ~ ( c_in @ V_x @ V_A @ T_b )
| ~ ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1123]) ).
thf(1496,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Olinorder @ T_a )
| ! [V_y: $i,V_x: $i] :
( ( c_lessequals @ V_y @ V_x @ T_a )
| ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1124]) ).
thf(1497,plain,
( ( ! [V_x: $i,V_A: $i,T_b: $i] :
( ~ ( c_lessequals @ V_x @ V_A @ ( tc_fun @ T_b @ tc_bool ) )
| ! [V_f: $i,T_a: $i] : ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_x @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1129]) ).
thf(1498,plain,
( ( ! [V_Q: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_Q @ V_x ) )
| ! [V_P: $i] :
( ! [T_a: $i] :
~ ( c_lessequals @ V_P @ V_Q @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1133]) ).
thf(1499,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Opreorder @ T_a )
| ! [V_x: $i] : ( c_lessequals @ V_x @ V_x @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1134]) ).
thf(1500,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i] : ( c_lessequals @ V_x @ V_x @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1135]) ).
thf(1501,plain,
( ( ! [V_Q: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_Q @ V_x ) )
| ! [V_P: $i] :
( ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ! [T_a: $i] :
~ ( c_lessequals @ V_P @ V_Q @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1136]) ).
thf(1502,plain,
( ( ! [V_A: $i,V_C: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_B: $i] :
( ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1137]) ).
thf(1503,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Opreorder @ T_a )
| ! [V_z: $i] :
( ( c_lessequals @ V_x @ V_z @ T_a )
| ! [V_y: $i] :
( ~ ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1140]) ).
thf(1504,plain,
( ( ! [T_a: $i,V_z: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i] :
( ( c_lessequals @ V_z @ V_x @ T_a )
| ! [V_y: $i] :
( ~ ( c_lessequals @ V_z @ V_y @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1141]) ).
thf(1505,plain,
( ( ! [V_B: $i,V_C: $i,T_a: $i] :
( ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_A: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1142]) ).
thf(1506,plain,
( ( ! [V_A: $i,V_C: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_B: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1143]) ).
thf(1507,plain,
( ( ! [T_a: $i,V_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i] :
( ( c_lessequals @ V_a @ V_x @ T_a )
| ! [V_b: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1144]) ).
thf(1508,plain,
( ( ! [T_a: $i,V_b: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i] :
( ( c_lessequals @ V_b @ V_x @ T_a )
| ! [V_a: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1145]) ).
thf(1509,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_a: $i] :
( ! [V_b: $i] : ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_x @ V_a @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1146]) ).
thf(1510,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_x @ V_b @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1147]) ).
thf(1511,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_z: $i] :
( ( c_lessequals @ V_x @ V_z @ T_a )
| ! [V_y: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1148]) ).
thf(1512,plain,
( ( ! [T_a: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_z: $i] :
( ( c_lessequals @ V_y @ V_z @ T_a )
| ! [V_x: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1149]) ).
thf(1513,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Otop @ T_a )
| ! [V_x: $i] : ( c_lessequals @ V_x @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1152]) ).
thf(1514,plain,
( ( ! [V_msg: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OHash @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1156]) ).
thf(1515,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= V_B )
| ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1160]) ).
thf(1516,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= V_y )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1163]) ).
thf(1517,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
!= V_y )
| ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1164]) ).
thf(1518,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= V_x )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1165]) ).
thf(1519,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( V_x = V_y )
| ~ ( c_lessequals @ V_x @ V_y @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1166]) ).
thf(1520,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( V_x = V_y )
| ~ ( c_lessequals @ V_y @ V_x @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1167]) ).
thf(1521,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( V_x = V_y )
| ~ ( c_lessequals @ V_y @ V_x @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1168]) ).
thf(1522,plain,
( ( ! [V_A: $i,V_B: $i] :
( ( V_A = V_B )
| ! [T_a: $i] :
( ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1169]) ).
thf(1523,plain,
( ( ! [V_A: $i,V_B: $i] :
( ( V_A = V_B )
| ! [T_a: $i] :
( ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1170]) ).
thf(1524,plain,
( ( ! [V_A: $i,T_a: $i,V_B: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A = V_B ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1171]) ).
thf(1525,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a )
!= ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) )
| ( V_a = V_b ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1172]) ).
thf(1526,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a )
!= ( c_HOL_Ouminus__class_Ouminus @ V_y @ T_a ) )
| ( V_x = V_y ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1173]) ).
thf(1527,plain,
( ( ! [V_B: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_B @ V_x ) )
| ! [V_A: $i] :
( ( hBOOL @ ( hAPP @ V_A @ V_x ) )
| ! [T_a: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1178]) ).
thf(1528,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ T_a ) @ V_x @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1187]) ).
thf(1529,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1188]) ).
thf(1530,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_b: $i,V_a: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_a @ V_b @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1194]) ).
thf(1531,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( c_lessequals @ V_a @ V_b @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1195]) ).
thf(1532,plain,
( ( c_Public_Okeymode_OSignature != c_Public_Okeymode_OEncryption )
= $true ),
inference(extcnf_combined,[status(esa)],[1199]) ).
thf(1533,plain,
( ( ! [V_P: $i] :
( ! [V_keymode: $i] : ( hBOOL @ ( hAPP @ V_P @ V_keymode ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ c_Public_Okeymode_OEncryption ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ c_Public_Okeymode_OSignature ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1200]) ).
thf(1534,plain,
( ( c_Public_Okeymode_OEncryption != c_Public_Okeymode_OSignature )
= $true ),
inference(extcnf_combined,[status(esa)],[1201]) ).
thf(1535,plain,
( ( ! [V_xs: $i,T_a: $i] :
( ( ( c_List_Oset @ V_xs @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1203]) ).
thf(1536,plain,
( ( ! [T_a: $i,V_xs: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_List_Oset @ V_xs @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1205]) ).
thf(1537,plain,
( ( ! [V_f: $i,V_A: $i,T_b: $i] :
( ! [T_a: $i] :
( ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1212]) ).
thf(1538,plain,
( ( ! [T_a: $i,V_a: $i,V_A: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Set_Oinsert @ V_a @ V_A @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1215]) ).
thf(1539,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_b = V_c )
| ( V_b = V_d ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1218]) ).
thf(1540,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_a = V_d )
| ( V_b = V_d ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1219]) ).
thf(1541,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i] :
( ! [V_d: $i] :
( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_b = V_c )
| ( V_a = V_c ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1220]) ).
thf(1542,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_a = V_d )
| ( V_a = V_c ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1221]) ).
thf(1543,plain,
( ( ! [T_a: $i] :
( ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1223]) ).
thf(1544,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ T_a ) @ V_x @ T_a )
= V_x ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1229]) ).
thf(1545,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Orderings_Obot__class_Obot @ T_a ) @ T_a )
= V_x ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1230]) ).
thf(1546,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1232]) ).
thf(1547,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Obot @ T_a )
| ! [V_x: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ T_a ) @ V_x @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1233]) ).
thf(1548,plain,
( ( ! [T_a: $i,V_f: $i,V_A: $i,T_b: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1235]) ).
thf(1549,plain,
( ( ! [V_b: $i,V_a: $i] :
( ( V_b = V_a )
| ! [T_a: $i] :
~ ( c_in @ V_b @ ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1237]) ).
thf(1550,plain,
( ( ! [V_a: $i,T_a: $i,V_b: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
!= ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
| ( V_a = V_b ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1241]) ).
thf(1551,plain,
( ( ! [V_x: $i,V_xa: $i,T_a: $i] :
( ( ( c_Set_Oinsert @ V_x @ V_xa @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( c_in @ V_x @ V_xa @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1242]) ).
thf(1552,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_B
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1243]) ).
thf(1553,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1244]) ).
thf(1554,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_A: $i] :
( ! [V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ T_a )
!= ( c_Orderings_Obot__class_Obot @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1245]) ).
thf(1555,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_A: $i,V_B: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ T_a )
!= ( c_Orderings_Obot__class_Obot @ T_a ) )
| ( V_B
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1246]) ).
thf(1556,plain,
( ( ! [V_P: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ! [T_a: $i] :
~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1250]) ).
thf(1557,plain,
( ( ! [V_P: $i,V_x: $i] :
( ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ! [T_a: $i] :
~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1253]) ).
thf(1558,plain,
( ( ! [V_c: $i,V_H: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_combined,[status(esa)],[1257]) ).
thf(1559,plain,
( ( ~ ( c_in @ v_A @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(copy,[status(thm)],[1267]) ).
thf(1560,plain,
( ( ~ ( c_in @ v_B @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(copy,[status(thm)],[1266]) ).
thf(1561,plain,
( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ v_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[1265]) ).
thf(1562,plain,
( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ v_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ v_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ v_K ) @ v_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg )
= $true ),
inference(copy,[status(thm)],[1264]) ).
thf(1563,plain,
( ( c_in @ ( c_Message_Omsg_OCrypt @ v_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NB ) @ ( c_Message_Omsg_ONonce @ v_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg )
= $true ),
inference(copy,[status(thm)],[1263]) ).
thf(1564,plain,
( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ v_A @ v_B @ ( c_Message_Omsg_OCrypt @ v_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NB ) @ ( c_Message_Omsg_ONonce @ v_NB ) ) ) ) @ ( c_List_Oset @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(copy,[status(thm)],[1262]) ).
thf(1565,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1261]) ).
thf(1566,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1260]) ).
thf(1567,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1259]) ).
thf(1568,plain,
( ( ! [V_X: $i,V_A: $i,V_B: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Set_Oinsert @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ V_A @ V_B @ V_X @ V_evs ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ V_A @ V_B @ V_X @ V_evs ) ) )
= $true ),
inference(copy,[status(thm)],[1258]) ).
thf(1569,plain,
( ( ! [V_c: $i,V_H: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1558]) ).
thf(1570,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1256]) ).
thf(1571,plain,
( ( ( c_Message_Oanalz @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1255]) ).
thf(1572,plain,
( ( ( c_Message_Oparts @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1254]) ).
thf(1573,plain,
( ( ! [V_P: $i,V_x: $i] :
( ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ! [T_a: $i] :
~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1557]) ).
thf(1574,plain,
( ( ! [V_a: $i,T_a: $i] :
~ ( c_in @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[1252]) ).
thf(1575,plain,
( ( ! [V_c: $i,T_a: $i] :
~ ( c_in @ V_c @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[1251]) ).
thf(1576,plain,
( ( ! [V_P: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ! [T_a: $i] :
~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1556]) ).
thf(1577,plain,
( ( ! [V_x: $i,T_a: $i] :
~ ( c_in @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[1249]) ).
thf(1578,plain,
( ( ! [T_a: $i,V_f: $i,T_b: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oimage @ V_f @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1248]) ).
thf(1579,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1247]) ).
thf(1580,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_A: $i,V_B: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ T_a )
!= ( c_Orderings_Obot__class_Obot @ T_a ) )
| ( V_B
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1555]) ).
thf(1581,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_A: $i] :
( ! [V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ T_a )
!= ( c_Orderings_Obot__class_Obot @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1554]) ).
thf(1582,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1553]) ).
thf(1583,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_B
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1552]) ).
thf(1584,plain,
( ( ! [V_x: $i,V_xa: $i,T_a: $i] :
( ( ( c_Set_Oinsert @ V_x @ V_xa @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( c_in @ V_x @ V_xa @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1551]) ).
thf(1585,plain,
( ( ! [V_a: $i,T_a: $i,V_b: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
!= ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
| ( V_a = V_b ) ) )
= $true ),
inference(copy,[status(thm)],[1550]) ).
thf(1586,plain,
( ( ! [V_f: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oimage @ V_f @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1240]) ).
thf(1587,plain,
( ( ! [V_xa: $i,V_x: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_xa @ ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_x @ ( c_Set_Oinsert @ V_xa @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1239]) ).
thf(1588,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Set_Oinsert @ V_Y @ V_H @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_Y @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1238]) ).
thf(1589,plain,
( ( ! [V_b: $i,V_a: $i] :
( ( V_b = V_a )
| ! [T_a: $i] :
~ ( c_in @ V_b @ ( c_Set_Oinsert @ V_a @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1549]) ).
thf(1590,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1236]) ).
thf(1591,plain,
( ( ! [T_a: $i,V_f: $i,V_A: $i,T_b: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1548]) ).
thf(1592,plain,
( ( ! [T_a: $i,V_A: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1234]) ).
thf(1593,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Obot @ T_a )
| ! [V_x: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ T_a ) @ V_x @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1547]) ).
thf(1594,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1546]) ).
thf(1595,plain,
( ( ! [T_a: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1231]) ).
thf(1596,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Orderings_Obot__class_Obot @ T_a ) @ T_a )
= V_x ) ) )
= $true ),
inference(copy,[status(thm)],[1545]) ).
thf(1597,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ T_a ) @ V_x @ T_a )
= V_x ) ) )
= $true ),
inference(copy,[status(thm)],[1544]) ).
thf(1598,plain,
( ( ! [T_a: $i,V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= V_B ) )
= $true ),
inference(copy,[status(thm)],[1228]) ).
thf(1599,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= V_A ) )
= $true ),
inference(copy,[status(thm)],[1227]) ).
thf(1600,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a )
= ( c_Orderings_Obot__class_Obot @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1226]) ).
thf(1601,plain,
( ( ! [T_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1225]) ).
thf(1602,plain,
( ( ! [T_a: $i,V_x: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ) )
= $true ),
inference(copy,[status(thm)],[1224]) ).
thf(1603,plain,
( ( ! [T_a: $i] :
( ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1543]) ).
thf(1604,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ V_A @ V_evs ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1222]) ).
thf(1605,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_a = V_d )
| ( V_a = V_c ) ) )
= $true ),
inference(copy,[status(thm)],[1542]) ).
thf(1606,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i] :
( ! [V_d: $i] :
( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_b = V_c )
| ( V_a = V_c ) ) )
= $true ),
inference(copy,[status(thm)],[1541]) ).
thf(1607,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_a = V_d )
| ( V_b = V_d ) ) )
= $true ),
inference(copy,[status(thm)],[1540]) ).
thf(1608,plain,
( ( ! [V_a: $i,V_b: $i,T_a: $i,V_c: $i,V_d: $i] :
( ( ( c_Set_Oinsert @ V_a @ ( c_Set_Oinsert @ V_b @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a )
!= ( c_Set_Oinsert @ V_c @ ( c_Set_Oinsert @ V_d @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
| ( V_b = V_c )
| ( V_b = V_d ) ) )
= $true ),
inference(copy,[status(thm)],[1539]) ).
thf(1609,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ~ ( c_lessequals @ V_A @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1217]) ).
thf(1610,plain,
( ( ! [T_a: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1216]) ).
thf(1611,plain,
( ( ! [T_a: $i,V_a: $i,V_A: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_Set_Oinsert @ V_a @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1538]) ).
thf(1612,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1214]) ).
thf(1613,plain,
( ( ! [T_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1213]) ).
thf(1614,plain,
( ( ! [V_f: $i,V_A: $i,T_b: $i] :
( ! [T_a: $i] :
( ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_b @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1537]) ).
thf(1615,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1211]) ).
thf(1616,plain,
( ( ! [V_x: $i,T_a: $i] : ( c_in @ V_x @ ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[1210]) ).
thf(1617,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ~ ( c_lessequals @ V_A @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1209]) ).
thf(1618,plain,
( ( ! [V_A: $i,V_x: $i,T_a: $i] :
( ( V_A
= ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
| ( V_A
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1208]) ).
thf(1619,plain,
( ( ! [T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1207]) ).
thf(1620,plain,
( ( ! [T_a: $i] :
( ( c_List_Oset @ ( c_List_Olist_ONil @ T_a ) @ T_a )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1206]) ).
thf(1621,plain,
( ( ! [T_a: $i,V_xs: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_List_Oset @ V_xs @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1536]) ).
thf(1622,plain,
( ( ! [T_a: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_List_Oset @ ( c_List_Olist_ONil @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1204]) ).
thf(1623,plain,
( ( ! [V_xs: $i,T_a: $i] :
( ( ( c_List_Oset @ V_xs @ T_a )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1535]) ).
thf(1624,plain,
( ( ! [V_X: $i] :
~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[1202]) ).
thf(1625,plain,
( ( c_Public_Okeymode_OEncryption != c_Public_Okeymode_OSignature )
= $true ),
inference(copy,[status(thm)],[1534]) ).
thf(1626,plain,
( ( ! [V_P: $i] :
( ! [V_keymode: $i] : ( hBOOL @ ( hAPP @ V_P @ V_keymode ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ c_Public_Okeymode_OEncryption ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ c_Public_Okeymode_OSignature ) ) ) )
= $true ),
inference(copy,[status(thm)],[1533]) ).
thf(1627,plain,
( ( c_Public_Okeymode_OSignature != c_Public_Okeymode_OEncryption )
= $true ),
inference(copy,[status(thm)],[1532]) ).
thf(1628,plain,
( ( ( c_Event_OinitState @ c_Message_Oagent_OServer )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ c_Message_Oagent_OServer ) ) ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ c_Message_Oagent_OServer ) ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) @ tc_Message_Omsg ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1198]) ).
thf(1629,plain,
( ( ! [V_a: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oinsert @ V_a @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1197]) ).
thf(1630,plain,
( ( ! [V_A: $i,V_a: $i,V_B: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oinsert @ V_a @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1196]) ).
thf(1631,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( c_lessequals @ V_a @ V_b @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1531]) ).
thf(1632,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_b: $i,V_a: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_a @ V_b @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1530]) ).
thf(1633,plain,
( ( ! [V_B: $i,T_a: $i,V_A: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1193]) ).
thf(1634,plain,
( ( ! [V_B: $i,V_A: $i,T_a: $i] :
( ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1192]) ).
thf(1635,plain,
( ( ! [V_A: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1191]) ).
thf(1636,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1190]) ).
thf(1637,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(copy,[status(thm)],[1189]) ).
thf(1638,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1529]) ).
thf(1639,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Obounded__lattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ T_a ) @ V_x @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1528]) ).
thf(1640,plain,
( ( ! [T_a: $i,V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1186]) ).
thf(1641,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1185]) ).
thf(1642,plain,
( ( ! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1184]) ).
thf(1643,plain,
( ( ! [V_B: $i,V_a: $i,T_a: $i] : ( c_lessequals @ V_B @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1183]) ).
thf(1644,plain,
( ( ! [V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Set_Oinsert @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) @ ( c_Message_Osynth @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1182]) ).
thf(1645,plain,
( ( ! [V_X: $i,V_K: $i,V_X_H: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X_H ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X_H ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1181]) ).
thf(1646,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(copy,[status(thm)],[1180]) ).
thf(1647,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[1179]) ).
thf(1648,plain,
( ( ! [V_B: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_B @ V_x ) )
| ! [V_A: $i] :
( ( hBOOL @ ( hAPP @ V_A @ V_x ) )
| ! [T_a: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1527]) ).
thf(1649,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_B @ V_x ) ) ) )
= $true ),
inference(copy,[status(thm)],[1177]) ).
thf(1650,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_A @ V_x ) ) ) )
= $true ),
inference(copy,[status(thm)],[1176]) ).
thf(1651,plain,
( ( ! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Osynth @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1175]) ).
thf(1652,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1174]) ).
thf(1653,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a )
!= ( c_HOL_Ouminus__class_Ouminus @ V_y @ T_a ) )
| ( V_x = V_y ) ) ) )
= $true ),
inference(copy,[status(thm)],[1526]) ).
thf(1654,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a )
!= ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) )
| ( V_a = V_b ) ) ) )
= $true ),
inference(copy,[status(thm)],[1525]) ).
thf(1655,plain,
( ( ! [V_A: $i,T_a: $i,V_B: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
!= ( c_HOL_Ouminus__class_Ouminus @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) )
| ( V_A = V_B ) ) )
= $true ),
inference(copy,[status(thm)],[1524]) ).
thf(1656,plain,
( ( ! [V_A: $i,V_B: $i] :
( ( V_A = V_B )
| ! [T_a: $i] :
( ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1523]) ).
thf(1657,plain,
( ( ! [V_A: $i,V_B: $i] :
( ( V_A = V_B )
| ! [T_a: $i] :
( ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1522]) ).
thf(1658,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( V_x = V_y )
| ~ ( c_lessequals @ V_y @ V_x @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1521]) ).
thf(1659,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( V_x = V_y )
| ~ ( c_lessequals @ V_y @ V_x @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1520]) ).
thf(1660,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( V_x = V_y )
| ~ ( c_lessequals @ V_x @ V_y @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1519]) ).
thf(1661,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= V_x )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1518]) ).
thf(1662,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
!= V_y )
| ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1517]) ).
thf(1663,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= V_y )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1516]) ).
thf(1664,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= V_B )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1162]) ).
thf(1665,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= V_A )
| ~ ( c_lessequals @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1161]) ).
thf(1666,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
!= V_B )
| ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1515]) ).
thf(1667,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( c_List_Oset @ ( c_List_Oappend @ V_xs @ V_ys @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_List_Oset @ V_xs @ T_a ) @ ( c_List_Oset @ V_ys @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1159]) ).
thf(1668,plain,
( ( ! [V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Set_Oinsert @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1158]) ).
thf(1669,plain,
( ( ! [V_K: $i,V_X: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1157]) ).
thf(1670,plain,
( ( ! [V_msg: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OHash @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1514]) ).
thf(1671,plain,
( ( ! [V_f: $i,V_A: $i,T_b: $i,T_a: $i,V_B: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Set_Oimage @ V_f @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1155]) ).
thf(1672,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_C: $i,V_D: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_C @ V_D @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_D @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1154]) ).
thf(1673,plain,
( ( ! [V_A: $i,T_a: $i] : ( c_lessequals @ V_A @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1153]) ).
thf(1674,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Otop @ T_a )
| ! [V_x: $i] : ( c_lessequals @ V_x @ ( c_Orderings_Otop__class_Otop @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1513]) ).
thf(1675,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i,V_B: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_in @ V_x @ V_B @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1151]) ).
thf(1676,plain,
( ( ! [V_H: $i] : ( c_lessequals @ V_H @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1150]) ).
thf(1677,plain,
( ( ! [T_a: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_z: $i] :
( ( c_lessequals @ V_y @ V_z @ T_a )
| ! [V_x: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1512]) ).
thf(1678,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_z: $i] :
( ( c_lessequals @ V_x @ V_z @ T_a )
| ! [V_y: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1511]) ).
thf(1679,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_x @ V_b @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1510]) ).
thf(1680,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_a: $i] :
( ! [V_b: $i] : ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_x @ V_a @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1509]) ).
thf(1681,plain,
( ( ! [T_a: $i,V_b: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i] :
( ( c_lessequals @ V_b @ V_x @ T_a )
| ! [V_a: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1508]) ).
thf(1682,plain,
( ( ! [T_a: $i,V_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i] :
( ( c_lessequals @ V_a @ V_x @ T_a )
| ! [V_b: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1507]) ).
thf(1683,plain,
( ( ! [V_A: $i,V_C: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_B: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1506]) ).
thf(1684,plain,
( ( ! [V_B: $i,V_C: $i,T_a: $i] :
( ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_A: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1505]) ).
thf(1685,plain,
( ( ! [T_a: $i,V_z: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i] :
( ( c_lessequals @ V_z @ V_x @ T_a )
| ! [V_y: $i] :
( ~ ( c_lessequals @ V_z @ V_y @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1504]) ).
thf(1686,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Orderings_Opreorder @ T_a )
| ! [V_z: $i] :
( ( c_lessequals @ V_x @ V_z @ T_a )
| ! [V_y: $i] :
( ~ ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ V_x @ V_y @ T_a ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1503]) ).
thf(1687,plain,
( ( ! [V_x: $i,T_a: $i] : ( c_lessequals @ V_x @ V_x @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1139]) ).
thf(1688,plain,
( ( ! [V_A: $i,T_a: $i] : ( c_lessequals @ V_A @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1138]) ).
thf(1689,plain,
( ( ! [V_A: $i,V_C: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_B: $i] :
( ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1502]) ).
thf(1690,plain,
( ( ! [V_Q: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_Q @ V_x ) )
| ! [V_P: $i] :
( ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) )
| ! [T_a: $i] :
~ ( c_lessequals @ V_P @ V_Q @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1501]) ).
thf(1691,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Oorder @ T_a )
| ! [V_x: $i] : ( c_lessequals @ V_x @ V_x @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1500]) ).
thf(1692,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Opreorder @ T_a )
| ! [V_x: $i] : ( c_lessequals @ V_x @ V_x @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1499]) ).
thf(1693,plain,
( ( ! [V_Q: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_Q @ V_x ) )
| ! [V_P: $i] :
( ! [T_a: $i] :
~ ( c_lessequals @ V_P @ V_Q @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_x ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1498]) ).
thf(1694,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[1132]) ).
thf(1695,plain,
( ( ! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ V_G @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1131]) ).
thf(1696,plain,
( ( ! [V_f: $i,V_A: $i,T_a: $i,T_b: $i,V_B: $i] :
( ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ ( c_Set_Oimage @ V_f @ V_B @ T_a @ T_b ) @ ( tc_fun @ T_b @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1130]) ).
thf(1697,plain,
( ( ! [V_x: $i,V_A: $i,T_b: $i] :
( ~ ( c_lessequals @ V_x @ V_A @ ( tc_fun @ T_b @ tc_bool ) )
| ! [V_f: $i,T_a: $i] : ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_x @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1497]) ).
thf(1698,plain,
( ( ! [V_a: $i,V_C: $i,T_a: $i,V_D: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ V_a @ V_C @ T_a ) @ ( c_Set_Oinsert @ V_a @ V_D @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_C @ V_D @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1128]) ).
thf(1699,plain,
( ( ! [V_f: $i,V_A: $i,V_B: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oimage @ V_f @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1127]) ).
thf(1700,plain,
( ( ! [V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Set_Oinsert @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1126]) ).
thf(1701,plain,
( ( ! [V_G: $i,V_H: $i,V_G_H: $i,V_H_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G_H @ V_H_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ V_H ) @ ( c_Message_Oanalz @ V_H_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_G_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1125]) ).
thf(1702,plain,
( ( ! [T_a: $i] :
( ~ ( class_Orderings_Olinorder @ T_a )
| ! [V_y: $i,V_x: $i] :
( ( c_lessequals @ V_y @ V_x @ T_a )
| ( c_lessequals @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1496]) ).
thf(1703,plain,
( ( ! [V_f: $i,V_x: $i,V_B: $i,T_a: $i] :
( ( c_in @ ( hAPP @ V_f @ V_x ) @ V_B @ T_a )
| ! [V_A: $i,T_b: $i] :
( ~ ( c_in @ V_x @ V_A @ T_b )
| ~ ( c_lessequals @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1495]) ).
thf(1704,plain,
( ( ! [V_xs: $i,T_a: $i,V_x: $i] : ( c_lessequals @ ( c_List_Oset @ V_xs @ T_a ) @ ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1122]) ).
thf(1705,plain,
( ( ! [V_c: $i,V_H: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1494]) ).
thf(1706,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ~ ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1493]) ).
thf(1707,plain,
( ( ! [V_c: $i,V_A: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1119]) ).
thf(1708,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ~ ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1492]) ).
thf(1709,plain,
( ( ! [V_H: $i] : ( c_lessequals @ ( c_Message_Oanalz @ V_H ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1117]) ).
thf(1710,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1116]) ).
thf(1711,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ~ ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_G ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1491]) ).
thf(1712,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1114]) ).
thf(1713,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oparts @ ( c_Message_Osynth @ V_H ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_H ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1113]) ).
thf(1714,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_G ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1112]) ).
thf(1715,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oanalz @ ( c_Message_Osynth @ V_H ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ V_H ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1111]) ).
thf(1716,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ V_G ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Osynth @ V_G ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1110]) ).
thf(1717,plain,
( ( ! [V_A: $i,V_evs: $i,V_e: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ V_e @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1109]) ).
thf(1718,plain,
( ( ! [V_A: $i,V_evs: $i] : ( c_lessequals @ ( c_Event_OinitState @ V_A ) @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1108]) ).
thf(1719,plain,
( ( ( c_Event_OinitState @ c_Message_Oagent_OSpy )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ c_Event_Obad @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ c_Event_Obad @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ c_Public_OshrK @ c_Event_Obad @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ c_Public_Okeymode_OSignature ) @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1107]) ).
thf(1720,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[1106]) ).
thf(1721,plain,
( ( ! [V_A: $i,V_b: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_b @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1105]) ).
thf(1722,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_x: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1490]) ).
thf(1723,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
= V_A ) )
= $true ),
inference(copy,[status(thm)],[1103]) ).
thf(1724,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_x @ T_a )
= V_x ) ) )
= $true ),
inference(copy,[status(thm)],[1489]) ).
thf(1725,plain,
( ( ! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1101]) ).
thf(1726,plain,
( ( ! [V_G: $i,V_H: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1100]) ).
thf(1727,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1099]) ).
thf(1728,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ V_G @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Osynth @ V_G ) @ ( c_Message_Osynth @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1098]) ).
thf(1729,plain,
( ( ! [V_X: $i,V_H: $i,V_G: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_G ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_G ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1097]) ).
thf(1730,plain,
( ( ! [V_A: $i,V_B: $i,V_C: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1096]) ).
thf(1731,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1095]) ).
thf(1732,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1488]) ).
thf(1733,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1487]) ).
thf(1734,plain,
( ( ! [V_A: $i,V_B: $i,V_C: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1092]) ).
thf(1735,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1486]) ).
thf(1736,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1485]) ).
thf(1737,plain,
( ( ! [V_x: $i,V_A: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_x ) @ ( c_Set_Oimage @ c_Message_OinvKey @ V_A @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_x @ V_A @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1089]) ).
thf(1738,plain,
( ( ! [V_x: $i,V_A: $i] :
( ( c_in @ V_x @ V_A @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ V_x ) @ ( c_Set_Oimage @ c_Message_OinvKey @ V_A @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1088]) ).
thf(1739,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1087]) ).
thf(1740,plain,
( ( ! [V_B: $i,V_A: $i,T_a: $i] : ( c_lessequals @ V_B @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1086]) ).
thf(1741,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] : ( c_lessequals @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1085]) ).
thf(1742,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i,V_C: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_B @ V_C @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_C @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1084]) ).
thf(1743,plain,
( ( ! [T_a: $i,V_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_b: $i,V_x: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_a @ V_b @ T_a ) @ V_x @ T_a )
| ~ ( c_lessequals @ V_b @ V_x @ T_a )
| ~ ( c_lessequals @ V_a @ V_x @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1484]) ).
thf(1744,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] : ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1483]) ).
thf(1745,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_y: $i,V_x: $i] : ( c_lessequals @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1482]) ).
thf(1746,plain,
( ( ! [T_a: $i,V_y: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_z: $i,V_x: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_z @ T_a ) @ V_x @ T_a )
| ~ ( c_lessequals @ V_z @ V_x @ T_a )
| ~ ( c_lessequals @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1481]) ).
thf(1747,plain,
( ( ! [T_a: $i,V_x: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_y: $i,V_z: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ V_z @ T_a )
| ~ ( c_lessequals @ V_y @ V_z @ T_a )
| ~ ( c_lessequals @ V_x @ V_z @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1480]) ).
thf(1748,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_y: $i,V_x: $i] : ( c_lessequals @ V_y @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1479]) ).
thf(1749,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_x: $i,V_y: $i] : ( c_lessequals @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1478]) ).
thf(1750,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ V_A @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1076]) ).
thf(1751,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1075]) ).
thf(1752,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ V_x @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1477]) ).
thf(1753,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ! [V_x: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ T_a )
= ( c_Orderings_Otop__class_Otop @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1476]) ).
thf(1754,plain,
( ( ! [V_A: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_A ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[1072]) ).
thf(1755,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ! [V_A: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1475]) ).
thf(1756,plain,
( ( ! [V_A: $i,V_x: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1070]) ).
thf(1757,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_x: $i] :
( ( c_in @ V_x @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1474]) ).
thf(1758,plain,
( ( ! [V_A: $i,V_x: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1068]) ).
thf(1759,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ! [V_x: $i] :
( ~ ( c_lessequals @ V_A @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ ( tc_fun @ T_a @ tc_bool ) )
| ( c_in @ V_x @ V_A @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1473]) ).
thf(1760,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_B @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1066]) ).
thf(1761,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1472]) ).
thf(1762,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_y @ V_x @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1471]) ).
thf(1763,plain,
( ( ! [V_A: $i,V_B: $i,T_a: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1063]) ).
thf(1764,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1470]) ).
thf(1765,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Olattice @ T_a )
| ! [V_x: $i,V_y: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) @ T_a )
= ( c_Lattices_Oupper__semilattice__class_Osup @ V_x @ V_y @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1469]) ).
thf(1766,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1060]) ).
thf(1767,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_OkeysFor @ V_G ) @ ( c_Message_OkeysFor @ V_H ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1059]) ).
thf(1768,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[1058]) ).
thf(1769,plain,
( ( ! [V_A: $i,T_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ ( tc_fun @ T_a @ tc_bool ) )
= V_A ) )
= $true ),
inference(copy,[status(thm)],[1057]) ).
thf(1770,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_a: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
= V_a ) ) )
= $true ),
inference(copy,[status(thm)],[1468]) ).
thf(1771,plain,
( ( ! [T_a: $i] :
( ~ ( class_Lattices_Oboolean__algebra @ T_a )
| ! [V_x: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_x @ T_a ) @ T_a )
= V_x ) ) )
= $true ),
inference(copy,[status(thm)],[1467]) ).
thf(1772,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_b: $i] :
( V_b
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1466]) ).
thf(1773,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_a: $i] :
( V_a
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1465]) ).
thf(1774,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Ogroup__add @ T_a )
| ! [V_b: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a )
= V_b ) ) )
= $true ),
inference(copy,[status(thm)],[1464]) ).
thf(1775,plain,
( ( ! [T_b: $i,V_f: $i,V_x: $i] :
( ~ ( class_HOL_Oord @ T_b )
| ! [V_g: $i] :
( ( c_lessequals @ ( hAPP @ V_f @ V_x ) @ ( hAPP @ V_g @ V_x ) @ T_b )
| ! [T_a: $i] :
~ ( c_lessequals @ V_f @ V_g @ ( tc_fun @ T_a @ T_b ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1463]) ).
thf(1776,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_b: $i,V_a: $i] :
( ( c_lessequals @ V_b @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_a @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1462]) ).
thf(1777,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( c_lessequals @ V_a @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ T_a )
| ~ ( c_lessequals @ V_b @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1461]) ).
thf(1778,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_b: $i,V_a: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ V_a @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ V_b @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1460]) ).
thf(1779,plain,
( ( ! [T_a: $i] :
( ~ ( class_OrderedGroup_Opordered__ab__group__add @ T_a )
| ! [V_a: $i,V_b: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_a @ T_a ) @ V_b @ T_a )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ V_b @ T_a ) @ V_a @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1459]) ).
thf(1780,plain,
( ( ! [V_t: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_t @ V_B @ T_a )
| ! [V_A: $i] :
( ~ ( c_in @ V_t @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1458]) ).
thf(1781,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ! [V_A: $i] :
( ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) )
| ~ ( c_in @ V_x @ V_A @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1457]) ).
thf(1782,plain,
( ( ! [V_c: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ V_B @ T_a )
| ! [V_A: $i] :
( ~ ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1456]) ).
thf(1783,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_x @ V_B @ T_a )
| ! [V_A: $i] :
( ~ ( c_in @ V_x @ V_A @ T_a )
| ~ ( c_lessequals @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1455]) ).
thf(1784,plain,
( ( ! [V_c: $i,V_A: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
| ~ ( c_in @ V_c @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1042]) ).
thf(1785,plain,
( ( ! [V_c: $i,V_A: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
| ~ ( c_in @ V_c @ V_B @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1041]) ).
thf(1786,plain,
( ( ! [V_c: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_c @ V_B @ T_a )
| ! [V_A: $i] :
( ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_in @ V_c @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_A @ V_B @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1454]) ).
thf(1787,plain,
( ( ! [V_c: $i,V_A: $i,T_a: $i] :
( ( c_in @ V_c @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a )
| ( c_in @ V_c @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1039]) ).
thf(1788,plain,
( ( ! [V_c: $i,V_A: $i,T_a: $i] :
( ~ ( c_in @ V_c @ V_A @ T_a )
| ~ ( c_in @ V_c @ ( c_HOL_Ouminus__class_Ouminus @ V_A @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1038]) ).
thf(1789,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_msg: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_OHash @ V_msg ) ) )
= $true ),
inference(copy,[status(thm)],[1453]) ).
thf(1790,plain,
( ( ! [V_msg: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(copy,[status(thm)],[1452]) ).
thf(1791,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1035]) ).
thf(1792,plain,
( ( ! [V_H: $i] : ( c_lessequals @ V_H @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1034]) ).
thf(1793,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1033]) ).
thf(1794,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1032]) ).
thf(1795,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ V_G @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oparts @ V_G ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1031]) ).
thf(1796,plain,
( ( ! [V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OHash @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1451]) ).
thf(1797,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_msg: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OHash @ V_msg ) ) )
= $true ),
inference(copy,[status(thm)],[1450]) ).
thf(1798,plain,
( ( ! [V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1449]) ).
thf(1799,plain,
( ( ! [V_nat: $i,V_msg_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1448]) ).
thf(1800,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1026]) ).
thf(1801,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1025]) ).
thf(1802,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_lessequals @ V_G @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ V_G ) @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(copy,[status(thm)],[1024]) ).
thf(1803,plain,
( ( ! [V_H: $i] : ( c_lessequals @ V_H @ ( c_Message_Oanalz @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1023]) ).
thf(1804,plain,
( ( ! [V_G: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ V_G ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1022]) ).
thf(1805,plain,
( ( ! [V_H: $i,V_H_H: $i] :
( ( ( c_Message_Oanalz @ V_H )
!= ( c_Message_Oanalz @ V_H_H ) )
| ! [V_G: $i,V_G_H: $i] :
( ( ( c_Message_Oanalz @ V_G )
!= ( c_Message_Oanalz @ V_G_H ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G_H @ V_H_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1447]) ).
thf(1806,plain,
( ( ! [V_msg_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(copy,[status(thm)],[1446]) ).
thf(1807,plain,
( ( ! [V_agent: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1445]) ).
thf(1808,plain,
( ( ! [V_nat: $i,V_msg_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OHash @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1444]) ).
thf(1809,plain,
( ( ! [V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OHash @ V_msg_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1443]) ).
thf(1810,plain,
( ( ! [V_evs: $i] : ( c_lessequals @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1016]) ).
thf(1811,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1015]) ).
thf(1812,plain,
( ( ! [V_Y: $i,V_G: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1442]) ).
thf(1813,plain,
( ( ! [V_X: $i,V_G: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ V_G ) )
| ! [V_H: $i] :
( ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1441]) ).
thf(1814,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] : ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1012]) ).
thf(1815,plain,
( ( ! [V_X: $i,V_A: $i] :
~ ( c_in @ ( c_Message_Omsg_OHash @ V_X ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[1011]) ).
thf(1816,plain,
( ( ! [V_A: $i,V_evs: $i,V_A_H: $i,V_B: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1010]) ).
thf(1817,plain,
( ( ! [V_A: $i,V_B: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ V_A ) )
!= ( hAPP @ c_Public_OshrK @ V_B ) ) )
= $true ),
inference(copy,[status(thm)],[1440]) ).
thf(1818,plain,
( ( ! [V_A: $i,V_evs: $i,V_A_H: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A_H @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1008]) ).
thf(1819,plain,
( ( ! [V_A: $i,V_evs: $i,V_A_H: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ V_A @ V_evs ) @ ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A_H @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[1007]) ).
thf(1820,plain,
( ( ! [V_K: $i,V_evs: $i,V_A: $i,V_K_H: $i,V_N: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1439]) ).
thf(1821,plain,
( ( ! [V_evs: $i,V_A: $i] :
( ! [V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[1438]) ).
thf(1822,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1004]) ).
thf(1823,plain,
( ( ! [V_A: $i] :
( ! [V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) )
| ( V_A = c_Message_Oagent_OSpy ) ) )
= $true ),
inference(copy,[status(thm)],[1437]) ).
thf(1824,plain,
( ( ! [V_K: $i,V_evs: $i,V_A: $i,V_NA: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1436]) ).
thf(1825,plain,
( ( ! [V_K: $i,V_evs: $i] :
( ~ ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1001]) ).
thf(1826,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1000]) ).
thf(1827,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[999]) ).
thf(1828,plain,
( ( ! [V_A: $i,V_AS: $i] :
( ( c_in @ V_A @ V_AS @ tc_Message_Oagent )
| ! [V_b: $i,V_c: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1435]) ).
thf(1829,plain,
( ( ! [V_x: $i,V_A: $i,V_AS: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_x ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_x ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_A @ V_AS @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[997]) ).
thf(1830,plain,
( ( ! [V_x: $i,V_b: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_b ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[996]) ).
thf(1831,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[995]) ).
thf(1832,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[994]) ).
thf(1833,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[993]) ).
thf(1834,plain,
( ( ! [V_K: $i,V_nE: $i] :
( ! [V_H: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_nE @ tc_nat )
| ~ ( c_in @ V_K @ V_nE @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1434]) ).
thf(1835,plain,
( ( ! [V_K: $i,V_G: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ! [V_H: $i] :
( ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1433]) ).
thf(1836,plain,
( ( ! [V_K: $i,V_X: $i,V_G: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg )
| ! [V_H: $i] :
( ~ ( c_lessequals @ V_H @ V_G @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1432]) ).
thf(1837,plain,
( ( ! [V_Z: $i,V_H: $i] :
( ( c_in @ V_Z @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ ( c_Message_Oparts @ V_H ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Z @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1431]) ).
thf(1838,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ V_A @ V_B @ V_X @ V_evs ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ V_A @ V_B @ V_X @ V_evs ) ) )
= $true ),
inference(copy,[status(thm)],[988]) ).
thf(1839,plain,
( ( ! [V_A: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ V_A ) ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[987]) ).
thf(1840,plain,
( ( ! [V_b: $i,V_c: $i] :
( ( V_b = V_c )
| ! [V_A: $i,V_AS: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1430]) ).
thf(1841,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i,V_AS: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AS @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[985]) ).
thf(1842,plain,
( ( ! [V_evs: $i,V_A: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[984]) ).
thf(1843,plain,
( ( ! [V_X: $i] :
( ( c_in @ V_X @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
| ! [V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ V_X @ V_evs ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1429]) ).
thf(1844,plain,
( ( ! [V_evs: $i,V_A: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[982]) ).
thf(1845,plain,
( ( ! [V_K: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_KK: $i] :
( ( c_in @ V_K @ V_KK @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1428]) ).
thf(1846,plain,
( ( ! [V_K: $i,V_KK: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ V_KK @ tc_nat )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[980]) ).
thf(1847,plain,
( ( ! [V_evs: $i,V_A: $i,V_B: $i,V_X: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[979]) ).
thf(1848,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ V_K @ ( c_Message_OkeysFor @ V_H ) @ tc_nat )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1427]) ).
thf(1849,plain,
( ( ! [V_evs: $i] : ( c_lessequals @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ ( c_Event_Oused @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(copy,[status(thm)],[977]) ).
thf(1850,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[976]) ).
thf(1851,plain,
( ( ! [V_K: $i,V_nE: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_nE @ tc_nat @ tc_Message_Omsg ) @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[975]) ).
thf(1852,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ ( c_Message_OkeysFor @ V_H ) @ tc_nat )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1426]) ).
thf(1853,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_G: $i] :
( ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ V_G @ V_H @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_G @ tc_Message_Omsg ) ) ) @ tc_nat ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1425]) ).
thf(1854,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) )
| ( c_in @ V_K @ ( c_Message_OkeysFor @ ( c_Message_Oanalz @ V_H ) ) @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[972]) ).
thf(1855,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[971]) ).
thf(1856,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[970]) ).
thf(1857,plain,
( ( ! [V_K: $i,V_KK: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_KK @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ V_KK @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[969]) ).
thf(1858,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) @ ( c_List_Oset @ V_x @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(copy,[status(thm)],[968]) ).
thf(1859,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(copy,[status(thm)],[967]) ).
thf(1860,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) @ ( c_List_Oset @ V_x @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(copy,[status(thm)],[966]) ).
thf(1861,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) @ ( c_List_Oset @ V_xb @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(copy,[status(thm)],[965]) ).
thf(1862,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( hBOOL @ ( hAPP @ V_P @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ V_P @ V_x @ T_a ) ) )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(copy,[status(thm)],[964]) ).
thf(1863,plain,
( ( ! [V_P: $i,V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ ( c_List_Oset @ ( c_List_Oappend @ V_x @ ( c_List_Olist_OCons @ V_xa @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ V_P @ V_xb @ T_a ) @ ( c_List_Oset @ V_xb @ T_a ) @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_P @ V_xa ) ) ) )
= $true ),
inference(copy,[status(thm)],[963]) ).
thf(1864,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[962]) ).
thf(1865,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[961]) ).
thf(1866,plain,
( ( ! [V_x: $i,V_A: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
| ~ ( c_in @ V_x @ V_A @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[960]) ).
thf(1867,plain,
( ( ! [V_x: $i,V_A: $i] :
( ( c_in @ V_x @ V_A @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[959]) ).
thf(1868,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) )
= ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[958]) ).
thf(1869,plain,
( ( ! [V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ V_x @ ( c_List_Oset @ ( c_List_Oappend @ V_xa @ ( c_List_Olist_OCons @ V_x @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ V_x @ ( c_List_Oset @ V_xa @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[957]) ).
thf(1870,plain,
( ( ! [V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] :
( ( c_in @ V_x @ ( c_List_Oset @ ( c_List_Oappend @ V_xa @ ( c_List_Olist_OCons @ V_x @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a )
| ( c_in @ V_x @ ( c_List_Oset @ V_xb @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[956]) ).
thf(1871,plain,
( ( ! [V_x: $i,V_xa: $i,V_xb: $i,T_a: $i] : ( c_in @ V_x @ ( c_List_Oset @ ( c_List_Oappend @ V_xa @ ( c_List_Olist_OCons @ V_x @ V_xb @ T_a ) @ T_a ) @ T_a ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[955]) ).
thf(1872,plain,
( ( ! [V_evs: $i,V_A: $i,V_B: $i,V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[954]) ).
thf(1873,plain,
( ( ! [V_K: $i,V_KAB: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ V_KAB @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[953]) ).
thf(1874,plain,
( ( ! [V_K: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_KAB: $i] :
( ( V_K = V_KAB )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ( c_in @ V_KAB @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1424]) ).
thf(1875,plain,
( ( ! [V_x: $i] :
( ( c_in @ V_x @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ! [V_evs: $i] :
( ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_x ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1423]) ).
thf(1876,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[950]) ).
thf(1877,plain,
( ( ! [V_K: $i,V_N: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[949]) ).
thf(1878,plain,
( ( ! [V_X: $i,V_K: $i,V_N: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[948]) ).
thf(1879,plain,
( ( ! [V_agt: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[947]) ).
thf(1880,plain,
( ( ! [V_K: $i,V_C: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[946]) ).
thf(1881,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[945]) ).
thf(1882,plain,
( ( ! [V_X: $i,V_K: $i,V_C: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_C ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[944]) ).
thf(1883,plain,
( ( ! [V_agt: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ V_agt ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[943]) ).
thf(1884,plain,
( ( ! [V_K: $i,V_X: $i,V_K_H: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K_H ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K_H ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[942]) ).
thf(1885,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1422]) ).
thf(1886,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[940]) ).
thf(1887,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_K: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1421]) ).
thf(1888,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ ( c_Set_Oinsert @ V_Y @ V_H @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[938]) ).
thf(1889,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[937]) ).
thf(1890,plain,
( ( ! [V_K: $i,V_X: $i,V_Y: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[936]) ).
thf(1891,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1420]) ).
thf(1892,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ V_H ) )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[934]) ).
thf(1893,plain,
( ( ! [V_c: $i,V_a: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_a @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_G ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[933]) ).
thf(1894,plain,
( ( ! [V_X: $i,V_K: $i,V_X_H: $i,V_Y: $i,V_A: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X_H @ V_Y ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X_H @ V_Y ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_X @ V_K ) @ V_A @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[932]) ).
thf(1895,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ ( c_Set_Oinsert @ V_Y @ V_H @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[931]) ).
thf(1896,plain,
( ( ! [V_c: $i,V_a: $i,V_G: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Set_Oinsert @ V_a @ V_G @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ V_G ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[930]) ).
thf(1897,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oparts @ V_H ) )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[929]) ).
thf(1898,plain,
( ( ! [V_x: $i,V_xs: $i,T_a: $i] :
( ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_x @ ( c_List_Oset @ V_xs @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[928]) ).
thf(1899,plain,
( ( ! [V_xs: $i,V_x: $i,T_a: $i,V_ys: $i,V_y: $i] :
( ( ( c_List_Oappend @ V_xs @ ( c_List_Olist_OCons @ V_x @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a )
!= ( c_List_Oappend @ V_ys @ ( c_List_Olist_OCons @ V_y @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a ) )
| ( V_x = V_y ) ) )
= $true ),
inference(copy,[status(thm)],[1419]) ).
thf(1900,plain,
( ( ! [V_xs: $i,V_x: $i,T_a: $i,V_ys: $i] :
( ! [V_y: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Olist_OCons @ V_x @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a )
!= ( c_List_Oappend @ V_ys @ ( c_List_Olist_OCons @ V_y @ ( c_List_Olist_ONil @ T_a ) @ T_a ) @ T_a ) )
| ( V_xs = V_ys ) ) )
= $true ),
inference(copy,[status(thm)],[1418]) ).
thf(1901,plain,
( ( ! [T_a: $i,V_x: $i,V_xs: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a )
= ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[925]) ).
thf(1902,plain,
( ( ! [V_x: $i,V_xs: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_xs @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[924]) ).
thf(1903,plain,
( ( ! [V_f: $i,V_x: $i,T_b: $i,T_a: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_b @ tc_bool ) ) @ T_b @ T_a ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[923]) ).
thf(1904,plain,
( ( ! [V_f: $i,V_x: $i,V_A: $i,T_a: $i] :
( ! [T_b: $i] :
( ( c_Set_Oinsert @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ T_b )
= ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) )
| ~ ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1417]) ).
thf(1905,plain,
( ( ! [V_b: $i,V_x: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[921]) ).
thf(1906,plain,
( ( ! [V_X: $i] : ( c_in @ ( hAPP @ c_Public_OshrK @ V_X ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[920]) ).
thf(1907,plain,
( ( ! [V_xs: $i,V_x: $i,V_ts: $i,T_a: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Oappend @ V_x @ V_ts @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Oappend @ V_xs @ V_x @ T_a ) @ V_ts @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[919]) ).
thf(1908,plain,
( ( ! [V_zs: $i,V_x: $i,T_a: $i,V_ys: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ V_zs @ V_x @ T_a ) @ V_ys @ T_a )
= ( c_List_Oappend @ V_zs @ ( c_List_Oappend @ V_x @ V_ys @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[918]) ).
thf(1909,plain,
( ( ! [V_xs: $i,V_xs1: $i,V_us: $i,T_a: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Oappend @ V_xs1 @ V_us @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Oappend @ V_xs @ V_xs1 @ T_a ) @ V_us @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[917]) ).
thf(1910,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i,V_zs: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ V_xs @ V_ys @ T_a ) @ V_zs @ T_a )
= ( c_List_Oappend @ V_xs @ ( c_List_Oappend @ V_ys @ V_zs @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[916]) ).
thf(1911,plain,
( ( ! [V_b: $i,V_A: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[915]) ).
thf(1912,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i] : ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ V_x ) ) )
= $true ),
inference(copy,[status(thm)],[914]) ).
thf(1913,plain,
( ( ! [V_f: $i,V_a: $i,V_B: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oimage @ V_f @ ( c_Set_Oinsert @ V_a @ V_B @ T_b ) @ T_b @ T_a )
= ( c_Set_Oinsert @ ( hAPP @ V_f @ V_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[913]) ).
thf(1914,plain,
( ( ! [T_a: $i,V_x: $i] : ( hBOOL @ ( hAPP @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ V_x ) ) )
= $true ),
inference(copy,[status(thm)],[912]) ).
thf(1915,plain,
( ( ! [V_K: $i] :
( ( ( hAPP @ c_Message_OinvKey @ V_K )
= V_K )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[911]) ).
thf(1916,plain,
( ( ! [V_K: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[910]) ).
thf(1917,plain,
( ( ! [V_K: $i] :
( ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ V_K ) @ c_Message_OsymKeys @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[909]) ).
thf(1918,plain,
( ( ! [V_A: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_A @ V_x ) )
| ! [V_y: $i] :
( ( V_y = V_x )
| ! [T_a: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ V_x ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1416]) ).
thf(1919,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_x @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[907]) ).
thf(1920,plain,
( ( ! [V_b: $i,V_x: $i,V_c: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[906]) ).
thf(1921,plain,
( ( ! [V_x: $i,V_xa: $i,V_AA: $i] :
( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_x ) @ V_xa ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_x ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_xa @ V_AA @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[905]) ).
thf(1922,plain,
( ( ! [V_x: $i,V_AA: $i] :
( ( c_in @ V_x @ V_AA @ tc_Message_Oagent )
| ! [V_b: $i,V_c: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1415]) ).
thf(1923,plain,
( ( ! [V_b: $i,V_c: $i] :
( ( V_b = V_c )
| ! [V_x: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_c ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1414]) ).
thf(1924,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i,V_zs: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Oappend @ V_xs @ V_zs @ T_a ) )
| ( V_ys = V_zs ) ) )
= $true ),
inference(copy,[status(thm)],[1413]) ).
thf(1925,plain,
( ( ! [V_ys: $i,V_xs: $i,T_a: $i,V_zs: $i] :
( ( ( c_List_Oappend @ V_ys @ V_xs @ T_a )
!= ( c_List_Oappend @ V_zs @ V_xs @ T_a ) )
| ( V_ys = V_zs ) ) )
= $true ),
inference(copy,[status(thm)],[1412]) ).
thf(1926,plain,
( ( ! [V_b: $i,V_x: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_x ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[900]) ).
thf(1927,plain,
( ( ! [V_x: $i,V_y: $i,V_A: $i,T_a: $i] :
( ( c_Set_Oinsert @ V_x @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ T_a )
= ( c_Set_Oinsert @ V_y @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[899]) ).
thf(1928,plain,
( ( ! [V_x: $i,V_xa: $i,T_a: $i,V_zs: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xa @ T_a ) @ V_zs @ T_a )
= ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xa @ V_zs @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[898]) ).
thf(1929,plain,
( ( ! [V_x: $i,V_xs: $i,T_a: $i,V_ys: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ V_ys @ T_a )
= ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xs @ V_ys @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[897]) ).
thf(1930,plain,
( ( ! [V_y: $i,V_A: $i,T_a: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ V_y @ V_A @ T_a ) @ V_x ) )
| ~ ( hBOOL @ ( hAPP @ V_A @ V_x ) ) ) )
= $true ),
inference(copy,[status(thm)],[896]) ).
thf(1931,plain,
( ( ! [V_x: $i,V_xa: $i,V_zs: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xa @ V_zs @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xa @ T_a ) @ V_zs @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[895]) ).
thf(1932,plain,
( ( ! [V_x: $i,V_xs1: $i,V_zs: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ ( c_List_Oappend @ V_xs1 @ V_zs @ T_a ) @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ V_x @ V_xs1 @ T_a ) @ V_zs @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[894]) ).
thf(1933,plain,
( ( ! [V_b: $i,V_A: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[893]) ).
thf(1934,plain,
( ( ! [V_f: $i,V_a: $i,V_B: $i,T_b: $i,T_a: $i] :
( ( c_Set_Oinsert @ ( hAPP @ V_f @ V_a ) @ ( c_Set_Oimage @ V_f @ V_B @ T_b @ T_a ) @ T_a )
= ( c_Set_Oimage @ V_f @ ( c_Set_Oinsert @ V_a @ V_B @ T_b ) @ T_b @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[892]) ).
thf(1935,plain,
( ( ! [V_x: $i,V_b: $i,V_AA: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ V_b ) @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(copy,[status(thm)],[891]) ).
thf(1936,plain,
( ( ! [V_K: $i] :
( ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ! [V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1411]) ).
thf(1937,plain,
( ( ! [V_a: $i,V_b: $i,V_A: $i,T_a: $i] :
( ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_A @ T_a ) @ T_a )
| ~ ( c_in @ V_a @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[889]) ).
thf(1938,plain,
( ( ! [V_a: $i,V_b: $i,V_B: $i,T_a: $i] :
( ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_B @ T_a ) @ T_a )
| ~ ( c_in @ V_a @ V_B @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[888]) ).
thf(1939,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i] :
( ( c_in @ V_a @ V_A @ T_a )
| ! [V_b: $i] :
( ( V_a = V_b )
| ~ ( c_in @ V_a @ ( c_Set_Oinsert @ V_b @ V_A @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1410]) ).
thf(1940,plain,
( ( ! [V_x: $i,T_a: $i] : ( c_in @ V_x @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[886]) ).
thf(1941,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i] : ( c_in @ V_x @ ( c_Set_Oinsert @ V_x @ V_A @ T_a ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[885]) ).
thf(1942,plain,
( ( ! [V_a: $i,V_B: $i,T_a: $i] : ( c_in @ V_a @ ( c_Set_Oinsert @ V_a @ V_B @ T_a ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[884]) ).
thf(1943,plain,
( ( ! [V_x: $i,V_B: $i,T_a: $i] : ( c_in @ V_x @ ( c_Set_Oinsert @ V_x @ V_B @ T_a ) @ T_a ) )
= $true ),
inference(copy,[status(thm)],[883]) ).
thf(1944,plain,
( ( ! [V_x: $i,V_A: $i,T_a: $i,V_B: $i] :
( ( ( c_Set_Oinsert @ V_x @ V_A @ T_a )
!= ( c_Set_Oinsert @ V_x @ V_B @ T_a ) )
| ( c_in @ V_x @ V_B @ T_a )
| ( V_A = V_B )
| ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1409]) ).
thf(1945,plain,
( ( ! [V_a: $i,V_A: $i,T_a: $i] :
( ( ( c_Set_Oinsert @ V_a @ V_A @ T_a )
= V_A )
| ~ ( c_in @ V_a @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[881]) ).
thf(1946,plain,
( ( ! [T_a: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_ONil @ T_a ) @ T_a )
= ( c_List_Olist_ONil @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[880]) ).
thf(1947,plain,
( ( ! [V_ys: $i,V_xs: $i,T_a: $i] :
( ( V_ys
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1408]) ).
thf(1948,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= V_ys )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1407]) ).
thf(1949,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( V_xs
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1406]) ).
thf(1950,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= V_xs )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1405]) ).
thf(1951,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Olist_ONil @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1404]) ).
thf(1952,plain,
( ( ! [V_xs: $i,V_ys: $i,T_a: $i] :
( ( ( c_List_Oappend @ V_xs @ V_ys @ T_a )
!= ( c_List_Olist_ONil @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1403]) ).
thf(1953,plain,
( ( ! [T_a: $i,V_xs: $i,V_ys: $i] :
( ( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_ys
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1402]) ).
thf(1954,plain,
( ( ! [T_a: $i,V_xs: $i] :
( ! [V_ys: $i] :
( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Oappend @ V_xs @ V_ys @ T_a ) )
| ( V_xs
= ( c_List_Olist_ONil @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1401]) ).
thf(1955,plain,
( ( ! [V_ys: $i,T_a: $i] :
( V_ys
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ V_ys @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[871]) ).
thf(1956,plain,
( ( ! [T_a: $i,V_ys: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ V_ys @ T_a )
= V_ys ) )
= $true ),
inference(copy,[status(thm)],[870]) ).
thf(1957,plain,
( ( ! [V_xs: $i,T_a: $i] :
( V_xs
= ( c_List_Oappend @ V_xs @ ( c_List_Olist_ONil @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[869]) ).
thf(1958,plain,
( ( ! [V_x: $i,T_a: $i] :
( V_x
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ V_x @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[868]) ).
thf(1959,plain,
( ( ! [V_xs: $i,T_a: $i] :
( ( c_List_Oappend @ V_xs @ ( c_List_Olist_ONil @ T_a ) @ T_a )
= V_xs ) )
= $true ),
inference(copy,[status(thm)],[867]) ).
thf(1960,plain,
( ( ! [T_a: $i] :
( ( c_List_Olist_ONil @ T_a )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ T_a ) @ ( c_List_Olist_ONil @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[866]) ).
thf(1961,plain,
( ( ! [V_H: $i,V_H_H: $i] :
( ( ( c_Message_Oanalz @ V_H )
!= ( c_Message_Oanalz @ V_H_H ) )
| ! [V_X: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H_H @ tc_Message_Omsg ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1400]) ).
thf(1962,plain,
( ( ! [V_x: $i,V_AA: $i] :
( ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_x @ V_AA @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[864]) ).
thf(1963,plain,
( ( ! [V_x: $i,V_AA: $i] :
( ( c_in @ V_x @ V_AA @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Public_OshrK @ V_x ) @ ( c_Set_Oimage @ c_Public_OshrK @ V_AA @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(copy,[status(thm)],[863]) ).
thf(1964,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[862]) ).
thf(1965,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ V_X @ V_H @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[861]) ).
thf(1966,plain,
( ( ! [V_X: $i,V_evs: $i,V_K: $i,V_S: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_K @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_NA: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1399]) ).
thf(1967,plain,
( ( ! [V_evs: $i,V_A: $i,V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) )
= $true ),
inference(copy,[status(thm)],[859]) ).
thf(1968,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs5: $i,V_S: $i,V_NA: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ V_evs5 @ tc_Event_Oevent ) )
| ! [V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_B_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_B_H @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs5 ) ) )
= $true ),
inference(copy,[status(thm)],[1398]) ).
thf(1969,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs5: $i,V_S: $i,V_NA: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ V_evs5 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_B_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_B_H @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs5 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ V_evs5 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[1397]) ).
thf(1970,plain,
( ( ! [V_A: $i] :
( ! [V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[1396]) ).
thf(1971,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs4: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ V_evs4 @ tc_Event_Oevent ) )
| ! [V_A_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) @ ( c_List_Oset @ V_evs4 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Event_Oused @ V_evs4 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs4 ) ) )
= $true ),
inference(copy,[status(thm)],[1395]) ).
thf(1972,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs4: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ V_evs4 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_A_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ V_B @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) @ ( c_List_Oset @ V_evs4 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_K @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Event_Oused @ V_evs4 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs4 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[1394]) ).
thf(1973,plain,
( ( ! [V_A: $i,V_NA: $i,V_B: $i,V_KAB: $i,V_evs2: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ V_evs2 @ tc_Event_Oevent ) )
| ! [V_A_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs2 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_KAB @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oused @ V_evs2 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs2 ) ) )
= $true ),
inference(copy,[status(thm)],[1393]) ).
thf(1974,plain,
( ( ! [V_evs: $i,V_A: $i] :
( ! [V_X: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ V_evs @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[1392]) ).
thf(1975,plain,
( ( ! [V_A: $i,V_NA: $i,V_B: $i,V_KAB: $i,V_evs2: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ V_evs2 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_A_H: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A_H @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs2 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_KAB @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_KAB ) @ ( c_Event_Oused @ V_evs2 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs2 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[1391]) ).
thf(1976,plain,
( ( ! [V_X: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg )
| ! [V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ V_A @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ V_A @ V_X @ V_evs ) @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OSpy )
| ~ ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1390]) ).
thf(1977,plain,
( ( ! [V_K: $i,V_evs: $i,V_B: $i,V_A: $i,V_NA: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_K_H: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1389]) ).
thf(1978,plain,
( ( ! [V_K: $i,V_evs: $i,V_NA: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_B: $i] :
( ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_A: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1388]) ).
thf(1979,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1387]) ).
thf(1980,plain,
( ( ! [V_K: $i,V_X: $i,V_B: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[846]) ).
thf(1981,plain,
( ( ! [V_X: $i,V_B: $i,V_K: $i,V_A: $i,V_evs: $i] :
( ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_K_H: $i,V_N: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1386]) ).
thf(1982,plain,
( ( ! [V_X: $i,V_X_H: $i,V_evs: $i,V_A_H: $i,V_NA_H: $i,V_B_H: $i,V_K: $i,V_A: $i] :
( ( V_X = V_X_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_NA: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1385]) ).
thf(1983,plain,
( ( ! [V_B: $i,V_B_H: $i,V_evs: $i,V_A_H: $i,V_NA_H: $i,V_K: $i,V_X_H: $i,V_A: $i] :
( ( V_B = V_B_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_NA: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1384]) ).
thf(1984,plain,
( ( ! [V_NA: $i,V_NA_H: $i,V_evs: $i,V_A_H: $i,V_B_H: $i,V_K: $i,V_X_H: $i,V_A: $i] :
( ( V_NA = V_NA_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1383]) ).
thf(1985,plain,
( ( ! [V_A: $i,V_A_H: $i,V_evs: $i,V_NA_H: $i,V_B_H: $i,V_K: $i,V_X_H: $i,V_NA: $i] :
( ( V_A = V_A_H )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A_H @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A_H ) @ ( c_Message_Omsg_OMPair @ V_NA_H @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B_H ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X_H ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1382]) ).
thf(1986,plain,
( ( ! [V_K_H: $i,V_A: $i,V_evs: $i,V_N: $i,V_B: $i] :
( ( V_K_H
= ( hAPP @ c_Public_OshrK @ V_A ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_K: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ V_K_H @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1381]) ).
thf(1987,plain,
( ( ! [V_NA: $i,V_NB: $i,V_K: $i,V_evso: $i,V_A: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ V_evso @ tc_Event_Oevent ) )
| ! [V_B: $i] :
( ! [V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evso ) ) ) )
= $true ),
inference(copy,[status(thm)],[1380]) ).
thf(1988,plain,
( ( ! [V_A: $i] :
( ( c_Event_Oknows @ V_A @ ( c_List_Olist_ONil @ tc_Event_Oevent ) )
= ( c_Event_OinitState @ V_A ) ) )
= $true ),
inference(copy,[status(thm)],[838]) ).
thf(1989,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs3: $i,V_NA: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs3 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_S: $i,V_K: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OServer )
| ~ ( c_in @ V_evs3 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[1379]) ).
thf(1990,plain,
( ( ~ ( c_in @ c_Message_Oagent_OServer @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(copy,[status(thm)],[836]) ).
thf(1991,plain,
( ( ! [V_A: $i] :
( ! [V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[1378]) ).
thf(1992,plain,
( ( ! [V_NA: $i,V_NB: $i,V_K: $i,V_evso: $i,V_A: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ V_evso @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_B: $i] :
( ! [V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evso @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evso @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1377]) ).
thf(1993,plain,
( ( ! [V_c: $i,V_evs: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_X: $i] : ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1376]) ).
thf(1994,plain,
( ( ! [V_c: $i,V_evs: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_X: $i] : ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1375]) ).
thf(1995,plain,
( ( ! [V_N: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) )
= ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[831]) ).
thf(1996,plain,
( ( ! [V_n: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ V_n ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ V_n ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[830]) ).
thf(1997,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[829]) ).
thf(1998,plain,
( ( ! [V_N: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[828]) ).
thf(1999,plain,
( ( ! [V_A: $i,V_H: $i] : ( c_in @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[827]) ).
thf(2000,plain,
( ( ! [V_agt: $i,V_H: $i] : ( c_in @ ( c_Message_Omsg_OAgent @ V_agt ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[826]) ).
thf(2001,plain,
( ( ! [V_N: $i] :
( ( c_Message_Oparts @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) )
= ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_N @ tc_nat @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[825]) ).
thf(2002,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ! [V_K: $i] :
( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1374]) ).
thf(2003,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[823]) ).
thf(2004,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[822]) ).
thf(2005,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[821]) ).
thf(2006,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_K: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1373]) ).
thf(2007,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1372]) ).
thf(2008,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1371]) ).
thf(2009,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[817]) ).
thf(2010,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1370]) ).
thf(2011,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Event_Oused @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1369]) ).
thf(2012,plain,
( ( ! [V_y: $i,V_xs: $i,T_a: $i] :
( ( c_in @ V_y @ ( c_List_Oset @ V_xs @ T_a ) @ T_a )
| ! [V_x: $i] :
( ( V_y = V_x )
| ~ ( c_in @ V_y @ ( c_List_Oset @ ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) @ T_a ) @ T_a ) ) ) )
= $true ),
inference(copy,[status(thm)],[1368]) ).
thf(2013,plain,
( ( ! [V_B: $i,V_X: $i,V_evsf: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ V_B @ V_X ) @ V_evsf @ tc_Event_Oevent ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evsf ) ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evsf ) ) )
= $true ),
inference(copy,[status(thm)],[813]) ).
thf(2014,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ! [V_A: $i] :
~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1367]) ).
thf(2015,plain,
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_ONil @ tc_Event_Oevent ) )
= $true ),
inference(copy,[status(thm)],[811]) ).
thf(2016,plain,
( ( ! [V_B: $i,V_X: $i,V_evsf: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ V_B @ V_X ) @ V_evsf @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evsf ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evsf @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[810]) ).
thf(2017,plain,
( ( ! [V_A: $i,V_B: $i,V_NA: $i,V_evs1: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ V_evs1 @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Event_Oused @ V_evs1 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs1 ) ) )
= $true ),
inference(copy,[status(thm)],[809]) ).
thf(2018,plain,
( ( ! [V_A: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ c_Public_OshrK @ V_A ) )
= ( hAPP @ c_Public_OshrK @ V_A ) ) )
= $true ),
inference(copy,[status(thm)],[808]) ).
thf(2019,plain,
( ( ! [V_b: $i,V_C: $i,V_A: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C )
!= ( hAPP @ c_Public_OshrK @ V_A ) ) )
= $true ),
inference(copy,[status(thm)],[1366]) ).
thf(2020,plain,
( ( ! [V_A: $i,V_b: $i,V_C: $i] :
( ( hAPP @ c_Public_OshrK @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) ) )
= $true ),
inference(copy,[status(thm)],[1365]) ).
thf(2021,plain,
( ( ! [V_agent_H: $i,V_msg_H: $i,V_agent1: $i,V_agent2: $i,V_msg: $i] :
( ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg ) ) )
= $true ),
inference(copy,[status(thm)],[1364]) ).
thf(2022,plain,
( ( ! [V_agent_H: $i,V_msg_H: $i,V_agent1: $i,V_agent2: $i,V_msg: $i] :
( ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg ) ) )
= $true ),
inference(copy,[status(thm)],[1363]) ).
thf(2023,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1362]) ).
thf(2024,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1361]) ).
thf(2025,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) )
= $true ),
inference(copy,[status(thm)],[801]) ).
thf(2026,plain,
( ( c_Message_Oagent_OSpy != c_Message_Oagent_OServer )
= $true ),
inference(copy,[status(thm)],[1360]) ).
thf(2027,plain,
( ( c_Message_Oagent_OServer != c_Message_Oagent_OSpy )
= $true ),
inference(copy,[status(thm)],[1359]) ).
thf(2028,plain,
( ( ! [V_A: $i,V_B: $i,V_NA: $i,V_evs1: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ V_evs1 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Event_Oused @ V_evs1 ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs1 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[798]) ).
thf(2029,plain,
( ( ! [V_b: $i,V_A: $i,V_B: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Event_OinitState @ V_B ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[797]) ).
thf(2030,plain,
( ( ! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[796]) ).
thf(2031,plain,
( ( ! [V_X: $i] :
( ! [V_evs: $i] : ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ! [V_B: $i] :
~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1358]) ).
thf(2032,plain,
( ( ! [V_a_H: $i,V_list_H: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a )
!= ( c_List_Olist_ONil @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1357]) ).
thf(2033,plain,
( ( ! [V_x: $i,V_xa: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_xa @ T_a )
!= ( c_List_Olist_ONil @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1356]) ).
thf(2034,plain,
( ( ! [T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( c_List_Olist_ONil @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1355]) ).
thf(2035,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Osynth @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[791]) ).
thf(2036,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[790]) ).
thf(2037,plain,
( ( ! [V_f: $i,V_x: $i,V_A: $i,T_a: $i] :
( ! [T_b: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_a @ T_b ) @ T_b )
| ~ ( c_in @ V_x @ V_A @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1354]) ).
thf(2038,plain,
( ( ! [V_f: $i,V_x: $i,V_A: $i,T_b: $i] :
( ! [T_a: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ T_a )
| ~ ( c_in @ V_x @ V_A @ T_b ) ) )
= $true ),
inference(copy,[status(thm)],[1353]) ).
thf(2039,plain,
( ( ! [V_x: $i,V_A: $i,T_b: $i] :
( ~ ( c_in @ V_x @ V_A @ T_b )
| ! [V_f: $i,T_a: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_b @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1352]) ).
thf(2040,plain,
( ( ! [V_x: $i,V_A: $i,T_aa: $i] :
( ~ ( c_in @ V_x @ V_A @ T_aa )
| ! [V_f: $i,T_a: $i] : ( c_in @ ( hAPP @ V_f @ V_x ) @ ( c_Set_Oimage @ V_f @ V_A @ T_aa @ T_a ) @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1351]) ).
thf(2041,plain,
( ( ! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[785]) ).
thf(2042,plain,
( ( ! [V_xs: $i,V_x: $i,T_a: $i] :
( V_xs
!= ( c_List_Olist_OCons @ V_x @ V_xs @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1350]) ).
thf(2043,plain,
( ( ! [V_x: $i,V_t: $i,T_a: $i] :
( ( c_List_Olist_OCons @ V_x @ V_t @ T_a )
!= V_t ) )
= $true ),
inference(copy,[status(thm)],[1349]) ).
thf(2044,plain,
( ( ! [V_H: $i] :
( ( c_Message_Osynth @ ( c_Message_Osynth @ V_H ) )
= ( c_Message_Osynth @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[782]) ).
thf(2045,plain,
( ( ! [V_b: $i,V_A: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[781]) ).
thf(2046,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i] :
( ! [V_A_H: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) )
| ( V_b = V_c ) ) )
= $true ),
inference(copy,[status(thm)],[1348]) ).
thf(2047,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) )
| ( V_A = V_A_H ) ) )
= $true ),
inference(copy,[status(thm)],[1347]) ).
thf(2048,plain,
( ( ! [V_b: $i,V_A: $i,V_c: $i,V_A_H: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) )
!= ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H ) ) )
= $true ),
inference(copy,[status(thm)],[1346]) ).
thf(2049,plain,
( ( ! [V_K: $i,V_K_H: $i] :
( ( ( hAPP @ c_Message_OinvKey @ V_K )
!= ( hAPP @ c_Message_OinvKey @ V_K_H ) )
| ( V_K = V_K_H ) ) )
= $true ),
inference(copy,[status(thm)],[1345]) ).
thf(2050,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1344]) ).
thf(2051,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i] :
( ! [V_msg_H: $i] :
( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_OGets @ V_agent_H @ V_msg_H ) )
| ( V_agent = V_agent_H ) ) )
= $true ),
inference(copy,[status(thm)],[1343]) ).
thf(2052,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OGets @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1342]) ).
thf(2053,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_ONotes @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1341]) ).
thf(2054,plain,
( ( ! [V_agent: $i,V_msg: $i,V_agent_H: $i] :
( ! [V_msg_H: $i] :
( ( c_Event_Oevent_ONotes @ V_agent @ V_msg )
!= ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H ) )
| ( V_agent = V_agent_H ) ) )
= $true ),
inference(copy,[status(thm)],[1340]) ).
thf(2055,plain,
( ( ! [V_K: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ c_Message_OinvKey @ V_K ) )
= V_K ) )
= $true ),
inference(copy,[status(thm)],[771]) ).
thf(2056,plain,
( ( ! [V_agent_H: $i,V_msg_H: $i,V_agent: $i,V_msg: $i] :
( ( c_Event_Oevent_ONotes @ V_agent_H @ V_msg_H )
!= ( c_Event_Oevent_OGets @ V_agent @ V_msg ) ) )
= $true ),
inference(copy,[status(thm)],[1339]) ).
thf(2057,plain,
( ( ! [V_a: $i,V_list: $i,T_a: $i,V_a_H: $i] :
( ! [V_list_H: $i] :
( ( c_List_Olist_OCons @ V_a @ V_list @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) )
| ( V_a = V_a_H ) ) )
= $true ),
inference(copy,[status(thm)],[1338]) ).
thf(2058,plain,
( ( ! [V_a: $i,V_list: $i,T_a: $i,V_a_H: $i,V_list_H: $i] :
( ( ( c_List_Olist_OCons @ V_a @ V_list @ T_a )
!= ( c_List_Olist_OCons @ V_a_H @ V_list_H @ T_a ) )
| ( V_list = V_list_H ) ) )
= $true ),
inference(copy,[status(thm)],[1337]) ).
thf(2059,plain,
( ( ! [V_A: $i,V_b: $i,V_C: $i] :
( ( hAPP @ c_Public_OshrK @ V_A )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) ) ) )
= $true ),
inference(copy,[status(thm)],[1336]) ).
thf(2060,plain,
( ( c_in @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ),
inference(copy,[status(thm)],[766]) ).
thf(2061,plain,
( ( ! [V_A: $i,V_X: $i,V_evs: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ V_evs @ tc_Event_Oevent ) )
= ( c_Event_Oused @ V_evs ) ) )
= $true ),
inference(copy,[status(thm)],[765]) ).
thf(2062,plain,
( ( ! [V_b: $i,V_C: $i,V_A: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_C ) )
!= ( hAPP @ c_Public_OshrK @ V_A ) ) )
= $true ),
inference(copy,[status(thm)],[1335]) ).
thf(2063,plain,
( ( ! [V_c: $i,V_A_H: $i,V_b: $i,V_A: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ V_c ) @ V_A_H )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) )
= $true ),
inference(copy,[status(thm)],[1334]) ).
thf(2064,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1333]) ).
thf(2065,plain,
( ( ! [V_X: $i,V_Y: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_Y @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[761]) ).
thf(2066,plain,
( ( ! [V_K: $i,V_X: $i,V_A: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[760]) ).
thf(2067,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[759]) ).
thf(2068,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[758]) ).
thf(2069,plain,
( ( ! [V_K: $i,V_H: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ! [V_X: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1332]) ).
thf(2070,plain,
( ( ! [V_K: $i,V_X: $i,V_H: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_H @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Osynth @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[756]) ).
thf(2071,plain,
( ( ! [V_N: $i,V_B: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ V_B ) ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[755]) ).
thf(2072,plain,
( ( ! [V_x: $i,V_A: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ V_x ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ V_A @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[754]) ).
thf(2073,plain,
( ( ! [V_A: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_OinitState @ V_A ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[753]) ).
thf(2074,plain,
( ( ! [V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[752]) ).
thf(2075,plain,
( ( ! [V_B: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_B ) ) @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[751]) ).
thf(2076,plain,
( ( ! [V_A: $i,V_B: $i,V_X: $i,V_evs3: $i,V_NA: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs3 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_ONonce @ V_NA ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_S: $i,V_K: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs3 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ V_evs3 ) ) )
= $true ),
inference(copy,[status(thm)],[1331]) ).
thf(2077,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ V_K @ V_evs ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ V_K @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[749]) ).
thf(2078,plain,
( ( ! [V_b: $i,V_A: $i] :
( ! [V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[1330]) ).
thf(2079,plain,
( ( ! [V_K: $i,V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[747]) ).
thf(2080,plain,
( ( ! [V_N: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ V_N ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[746]) ).
thf(2081,plain,
( ( ! [V_B: $i,V_X: $i,V_evs: $i,V_K: $i,V_NB: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ V_B @ V_X @ V_evs ) @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_NA: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[1329]) ).
thf(2082,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ V_A @ V_B @ V_K @ V_evs ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[744]) ).
thf(2083,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_NA: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ V_K @ V_NA @ V_evs ) @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1328]) ).
thf(2084,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_K: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ V_K ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1327]) ).
thf(2085,plain,
( ( ! [V_c: $i,V_evs: $i] :
( ( c_in @ V_c @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[741]) ).
thf(2086,plain,
( ( ! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[740]) ).
thf(2087,plain,
( ( ! [V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[739]) ).
thf(2088,plain,
( ( ! [V_A: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_evs: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1326]) ).
thf(2089,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[737]) ).
thf(2090,plain,
( ( ! [V_A: $i] :
( ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_evs: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(copy,[status(thm)],[1325]) ).
thf(2091,plain,
( ( ! [V_A: $i,V_evs: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[735]) ).
thf(2092,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oused @ V_evs ) @ tc_Message_Omsg )
| ! [V_A: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1324]) ).
thf(2093,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_Nb: $i,V_evs: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_Nb ) ) @ V_evs )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_Nb ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[733]) ).
thf(2094,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ V_evs )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_NA: $i,V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1323]) ).
thf(2095,plain,
( ( ! [V_B: $i,V_A: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_B @ V_A @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_ONonce @ V_NB ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_NA: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[1322]) ).
thf(2096,plain,
( ( ! [V_A: $i,V_NA: $i,V_B: $i,V_K: $i,V_X: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[730]) ).
thf(2097,plain,
( ( ! [V_b: $i,V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ V_b ) @ V_A ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[729]) ).
thf(2098,plain,
( ( ! [V_c: $i,V_evs: $i,V_A: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_B: $i,V_X: $i] : ( c_in @ V_c @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ V_evs @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1321]) ).
thf(2099,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OGets @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( V_A = c_Message_Oagent_OSpy ) ) )
= $true ),
inference(copy,[status(thm)],[727]) ).
thf(2100,plain,
( ( ! [V_A: $i,V_B: $i,V_K: $i,V_NB: $i,V_evs: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NB ) @ ( c_Message_Omsg_ONonce @ V_NB ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_NA: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_B @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[1320]) ).
thf(2101,plain,
( ( ! [V_X: $i,V_B: $i,V_K: $i,V_A: $i] :
( ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ! [V_evs: $i] :
( ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ! [V_NA: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1319]) ).
thf(2102,plain,
( ( ! [V_X: $i,V_evs: $i,V_B: $i,V_K: $i,V_A: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ( V_X
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ ( c_Message_Omsg_OAgent @ V_A ) ) ) )
| ~ ( c_in @ V_evs @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [V_S: $i,V_NA: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ V_NA ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ V_B ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ V_K ) @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1318]) ).
thf(2103,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ! [V_A: $i] :
( ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ V_A @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) )
= $true ),
inference(copy,[status(thm)],[1317]) ).
thf(2104,plain,
( ( ! [V_K: $i,V_evs: $i,V_A: $i,V_NA: $i] :
( ( c_in @ V_K @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_B: $i,V_X: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ V_A @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ ( c_Message_Omsg_OMPair @ V_NA @ ( c_Message_Omsg_OMPair @ V_B @ ( c_Message_Omsg_OMPair @ V_K @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1316]) ).
thf(2105,plain,
( ( ! [V_agent: $i,V_agent_H: $i] :
( ( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OAgent @ V_agent_H ) )
| ( V_agent = V_agent_H ) ) )
= $true ),
inference(copy,[status(thm)],[1315]) ).
thf(2106,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oparts @ ( c_Message_Oanalz @ V_H ) )
= ( c_Message_Oparts @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[720]) ).
thf(2107,plain,
( ( ! [V_X: $i,V_A: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg )
| ! [V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1314]) ).
thf(2108,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oanalz @ ( c_Message_Oanalz @ V_H ) )
= ( c_Message_Oanalz @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[718]) ).
thf(2109,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1313]) ).
thf(2110,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1312]) ).
thf(2111,plain,
( ( ! [V_Y: $i,V_H: $i] :
( ( c_in @ V_Y @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_X: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1311]) ).
thf(2112,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_Y: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ V_X @ V_Y ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1310]) ).
thf(2113,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1309]) ).
thf(2114,plain,
( ( ! [V_agent: $i,V_nat_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) ) )
= $true ),
inference(copy,[status(thm)],[1308]) ).
thf(2115,plain,
( ( ! [V_nat_H: $i,V_nat: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1307]) ).
thf(2116,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i] :
( ! [V_agent2_H: $i,V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_agent1 = V_agent1_H ) ) )
= $true ),
inference(copy,[status(thm)],[1306]) ).
thf(2117,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i] :
( ! [V_msg_H: $i] :
( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_agent2 = V_agent2_H ) ) )
= $true ),
inference(copy,[status(thm)],[1305]) ).
thf(2118,plain,
( ( ! [V_agent1: $i,V_agent2: $i,V_msg: $i,V_agent1_H: $i,V_agent2_H: $i,V_msg_H: $i] :
( ( ( c_Event_Oevent_OSays @ V_agent1 @ V_agent2 @ V_msg )
!= ( c_Event_Oevent_OSays @ V_agent1_H @ V_agent2_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1304]) ).
thf(2119,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[707]) ).
thf(2120,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ V_H @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[706]) ).
thf(2121,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1303]) ).
thf(2122,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ! [V_A: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1302]) ).
thf(2123,plain,
( ( c_in @ c_Message_Oagent_OSpy @ c_Event_Obad @ tc_Message_Oagent )
= $true ),
inference(copy,[status(thm)],[703]) ).
thf(2124,plain,
( ( ! [V_X: $i,V_evs: $i,V_S: $i,V_A: $i,V_KA: $i,V_N: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_B: $i,V_K: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_S @ V_A @ ( c_Message_Omsg_OCrypt @ V_KA @ ( c_Message_Omsg_OMPair @ V_N @ ( c_Message_Omsg_OMPair @ V_B @ ( c_Message_Omsg_OMPair @ V_K @ V_X ) ) ) ) ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1301]) ).
thf(2125,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1300]) ).
thf(2126,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oparts @ ( c_Message_Oparts @ V_H ) )
= ( c_Message_Oparts @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[700]) ).
thf(2127,plain,
( ( ! [V_nat: $i,V_nat_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) ) )
= $true ),
inference(copy,[status(thm)],[1299]) ).
thf(2128,plain,
( ( ! [V_H: $i] :
( ( c_Message_Oanalz @ ( c_Message_Oparts @ V_H ) )
= ( c_Message_Oparts @ V_H ) ) )
= $true ),
inference(copy,[status(thm)],[698]) ).
thf(2129,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(copy,[status(thm)],[1298]) ).
thf(2130,plain,
( ( ! [V_nat_H: $i,V_agent: $i] :
( ( c_Message_Omsg_ONonce @ V_nat_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(copy,[status(thm)],[1297]) ).
thf(2131,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ! [V_K: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ V_K @ V_X ) @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[1296]) ).
thf(2132,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ! [V_A: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ V_X ) @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1295]) ).
thf(2133,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i,V_B: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ V_A @ V_B @ V_X ) @ ( c_List_Oset @ V_evs @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(copy,[status(thm)],[1294]) ).
thf(2134,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oparts @ ( c_Message_Oparts @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[692]) ).
thf(2135,plain,
( ( ! [V_nat: $i,V_nat_H: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat_H ) )
| ( V_nat = V_nat_H ) ) )
= $true ),
inference(copy,[status(thm)],[1293]) ).
thf(2136,plain,
( ( ! [V_agent: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(copy,[status(thm)],[1292]) ).
thf(2137,plain,
( ( ! [V_A: $i] :
( ! [V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) @ tc_Message_Omsg )
| ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(copy,[status(thm)],[1291]) ).
thf(2138,plain,
( ( ! [V_agent: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1290]) ).
thf(2139,plain,
( ( ! [V_nat: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(copy,[status(thm)],[1289]) ).
thf(2140,plain,
( ( ! [V_msg1: $i,V_msg2: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1288]) ).
thf(2141,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_agent: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(copy,[status(thm)],[1287]) ).
thf(2142,plain,
( ( ! [V_A: $i,V_evs: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ V_A ) ) @ ( c_Event_Oknows @ V_A @ V_evs ) @ tc_Message_Omsg ) )
= $true ),
inference(copy,[status(thm)],[684]) ).
thf(2143,plain,
( ( ! [V_nat_H: $i,V_agent: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat_H )
!= ( c_Message_Omsg_OAgent @ V_agent ) ) )
= $true ),
inference(copy,[status(thm)],[1286]) ).
thf(2144,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[682]) ).
thf(2145,plain,
( ( ! [V_nat: $i,V_nat_H: $i] :
( ( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_ONonce @ V_nat_H ) )
| ( V_nat = V_nat_H ) ) )
= $true ),
inference(copy,[status(thm)],[1285]) ).
thf(2146,plain,
( ( ! [V_x: $i,V_S: $i] :
( ! [T_a: $i] : ( c_in @ V_x @ V_S @ T_a )
| ~ ( hBOOL @ ( hAPP @ V_S @ V_x ) ) ) )
= $true ),
inference(copy,[status(thm)],[1284]) ).
thf(2147,plain,
( ( ! [V_S: $i,V_x: $i] :
( ( hBOOL @ ( hAPP @ V_S @ V_x ) )
| ! [T_a: $i] :
~ ( c_in @ V_x @ V_S @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1283]) ).
thf(2148,plain,
( ( ! [V_nat: $i,V_nat_H: $i,V_msg_H: $i] :
( ( c_Message_Omsg_ONonce @ V_nat )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1282]) ).
thf(2149,plain,
( ( ! [V_nat: $i,V_msg: $i,V_nat_H: $i] :
( ! [V_msg_H: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) )
| ( V_nat = V_nat_H ) ) )
= $true ),
inference(copy,[status(thm)],[1281]) ).
thf(2150,plain,
( ( ! [V_nat: $i,V_msg: $i,V_nat_H: $i,V_msg_H: $i] :
( ( ( c_Message_Omsg_OCrypt @ V_nat @ V_msg )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) )
| ( V_msg = V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1280]) ).
thf(2151,plain,
( ( ! [V_agent: $i,V_nat_H: $i] :
( ( c_Message_Omsg_OAgent @ V_agent )
!= ( c_Message_Omsg_ONonce @ V_nat_H ) ) )
= $true ),
inference(copy,[status(thm)],[1279]) ).
thf(2152,plain,
( ( ! [V_msg1: $i,V_msg2: $i,V_msg1_H: $i] :
( ! [V_msg2_H: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) )
| ( V_msg1 = V_msg1_H ) ) )
= $true ),
inference(copy,[status(thm)],[1278]) ).
thf(2153,plain,
( ( ! [V_msg1: $i,V_msg2: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) )
| ( V_msg2 = V_msg2_H ) ) )
= $true ),
inference(copy,[status(thm)],[1277]) ).
thf(2154,plain,
( ( ! [V_X: $i,V_evs: $i] :
( ( c_in @ V_X @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg )
| ! [V_A: $i] :
( ~ ( c_in @ V_A @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ V_A ) @ V_X ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ V_evs ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(copy,[status(thm)],[1276]) ).
thf(2155,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( c_Message_Omsg_ONonce @ V_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1275]) ).
thf(2156,plain,
( ( ! [V_nat_H: $i,V_msg_H: $i,V_msg1: $i,V_msg2: $i] :
( ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H )
!= ( c_Message_Omsg_OMPair @ V_msg1 @ V_msg2 ) ) )
= $true ),
inference(copy,[status(thm)],[1274]) ).
thf(2157,plain,
( ( ! [V_nat: $i,V_msg1_H: $i,V_msg2_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H ) ) )
= $true ),
inference(copy,[status(thm)],[1273]) ).
thf(2158,plain,
( ( ! [V_msg1_H: $i,V_msg2_H: $i,V_nat: $i] :
( ( c_Message_Omsg_OMPair @ V_msg1_H @ V_msg2_H )
!= ( hAPP @ c_Message_Omsg_OKey @ V_nat ) ) )
= $true ),
inference(copy,[status(thm)],[1272]) ).
thf(2159,plain,
( ( ! [V_nat: $i,V_nat_H: $i,V_msg_H: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ V_nat )
!= ( c_Message_Omsg_OCrypt @ V_nat_H @ V_msg_H ) ) )
= $true ),
inference(copy,[status(thm)],[1271]) ).
thf(2160,plain,
( ( ! [V_x: $i,V_y: $i] :
( ( ( hAPP @ c_Public_OshrK @ V_x )
!= ( hAPP @ c_Public_OshrK @ V_y ) )
| ( V_x = V_y ) ) )
= $true ),
inference(copy,[status(thm)],[1270]) ).
thf(2161,plain,
( ( ! [V_c: $i,V_H: $i] :
( ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg )
| ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[665]) ).
thf(2162,plain,
( ( ! [V_c: $i,V_H: $i] :
( ( c_in @ V_c @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_c @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[664]) ).
thf(2163,plain,
( ( ! [V_X: $i,V_H: $i] :
( ( c_in @ V_X @ ( c_Message_Oparts @ V_H ) @ tc_Message_Omsg )
| ~ ( c_in @ V_X @ ( c_Message_Oanalz @ V_H ) @ tc_Message_Omsg ) ) )
= $true ),
inference(copy,[status(thm)],[663]) ).
thf(2164,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Lattices_Oupper__semilattice @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Olattice @ T_1 ) ) )
= $true ),
inference(copy,[status(thm)],[662]) ).
thf(2165,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Lattices_Obounded__lattice @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Obounded__lattice @ T_1 ) ) )
= $true ),
inference(copy,[status(thm)],[661]) ).
thf(2166,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Lattices_Oboolean__algebra @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Oboolean__algebra @ T_1 ) ) )
= $true ),
inference(copy,[status(thm)],[660]) ).
thf(2167,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Orderings_Opreorder @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Opreorder @ T_1 ) ) )
= $true ),
inference(copy,[status(thm)],[659]) ).
thf(2168,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Lattices_Olattice @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Lattices_Olattice @ T_1 ) ) )
= $true ),
inference(copy,[status(thm)],[658]) ).
thf(2169,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Orderings_Oorder @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Oorder @ T_1 ) ) )
= $true ),
inference(copy,[status(thm)],[657]) ).
thf(2170,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Orderings_Otop @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Otop @ T_1 ) ) )
= $true ),
inference(copy,[status(thm)],[656]) ).
thf(2171,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_Orderings_Obot @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_Orderings_Obot @ T_1 ) ) )
= $true ),
inference(copy,[status(thm)],[655]) ).
thf(2172,plain,
( ( ! [T_2: $i,T_1: $i] :
( ( class_HOL_Oord @ ( tc_fun @ T_2 @ T_1 ) )
| ~ ( class_HOL_Oord @ T_1 ) ) )
= $true ),
inference(copy,[status(thm)],[654]) ).
thf(2173,plain,
( ( class_Lattices_Oupper__semilattice @ tc_nat )
= $true ),
inference(copy,[status(thm)],[653]) ).
thf(2174,plain,
( ( class_Orderings_Opreorder @ tc_nat )
= $true ),
inference(copy,[status(thm)],[652]) ).
thf(2175,plain,
( ( class_Orderings_Olinorder @ tc_nat )
= $true ),
inference(copy,[status(thm)],[651]) ).
thf(2176,plain,
( ( class_Lattices_Olattice @ tc_nat )
= $true ),
inference(copy,[status(thm)],[650]) ).
thf(2177,plain,
( ( class_Orderings_Oorder @ tc_nat )
= $true ),
inference(copy,[status(thm)],[649]) ).
thf(2178,plain,
( ( class_Orderings_Obot @ tc_nat )
= $true ),
inference(copy,[status(thm)],[648]) ).
thf(2179,plain,
( ( class_HOL_Oord @ tc_nat )
= $true ),
inference(copy,[status(thm)],[647]) ).
thf(2180,plain,
( ( class_Lattices_Oupper__semilattice @ tc_bool )
= $true ),
inference(copy,[status(thm)],[646]) ).
thf(2181,plain,
( ( class_Lattices_Obounded__lattice @ tc_bool )
= $true ),
inference(copy,[status(thm)],[645]) ).
thf(2182,plain,
( ( class_Lattices_Oboolean__algebra @ tc_bool )
= $true ),
inference(copy,[status(thm)],[644]) ).
thf(2183,plain,
( ( class_Orderings_Opreorder @ tc_bool )
= $true ),
inference(copy,[status(thm)],[643]) ).
thf(2184,plain,
( ( class_Lattices_Olattice @ tc_bool )
= $true ),
inference(copy,[status(thm)],[642]) ).
thf(2185,plain,
( ( class_Orderings_Oorder @ tc_bool )
= $true ),
inference(copy,[status(thm)],[641]) ).
thf(2186,plain,
( ( class_Orderings_Otop @ tc_bool )
= $true ),
inference(copy,[status(thm)],[640]) ).
thf(2187,plain,
( ( class_Orderings_Obot @ tc_bool )
= $true ),
inference(copy,[status(thm)],[639]) ).
thf(2188,plain,
( ( class_HOL_Oord @ tc_bool )
= $true ),
inference(copy,[status(thm)],[638]) ).
thf(2189,plain,
( ( ! [V_x: $i,T_a: $i] : ( c_fequal @ V_x @ V_x @ T_a ) )
= $true ),
inference(copy,[status(thm)],[637]) ).
thf(2190,plain,
( ( ! [V_X: $i,V_Y: $i] :
( ( V_X = V_Y )
| ! [T_a: $i] :
~ ( c_fequal @ V_X @ V_Y @ T_a ) ) )
= $true ),
inference(copy,[status(thm)],[1269]) ).
thf(2191,plain,
( ( ~ $false ) = $true ),
inference(copy,[status(thm)],[1268]) ).
thf(2192,plain,
( ( c_in @ v_A @ c_Event_Obad @ tc_Message_Oagent )
= $false ),
inference(extcnf_not_pos,[status(thm)],[1559]) ).
thf(2193,plain,
( ( c_in @ v_B @ c_Event_Obad @ tc_Message_Oagent )
= $false ),
inference(extcnf_not_pos,[status(thm)],[1560]) ).
thf(2194,plain,
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ v_K ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg )
= $false ),
inference(extcnf_not_pos,[status(thm)],[1561]) ).
thf(2195,plain,
( ( c_in @ ( c_Event_Oevent_OSays @ v_A @ v_B @ ( c_Message_Omsg_OCrypt @ v_K @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ v_NB ) @ ( c_Message_Omsg_ONonce @ v_NB ) ) ) ) @ ( c_List_Oset @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false ),
inference(extcnf_not_pos,[status(thm)],[1564]) ).
thf(2196,plain,
! [SV1: $i] :
( ( ! [SY1898: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY1898 ) ) @ ( c_Message_Oparts @ SY1898 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV1 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY1898 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1565]) ).
thf(2197,plain,
! [SV2: $i] :
( ( ! [SY1899: $i,SY1900: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV2 @ SY1899 ) @ SY1900 @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY1899 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SY1900 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1566]) ).
thf(2198,plain,
! [SV3: $i] :
( ( ! [SY1901: $i,SY1902: $i,SY1903: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV3 @ SY1901 @ SY1902 ) @ SY1903 @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY1902 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SY1903 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1567]) ).
thf(2199,plain,
! [SV4: $i] :
( ( ! [SY1904: $i,SY1905: $i,SY1906: $i] :
( ( c_in @ SV4 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SY1904 @ SY1905 @ SV4 @ SY1906 ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ SY1904 @ SY1905 @ SV4 @ SY1906 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1568]) ).
thf(2200,plain,
! [SV5: $i] :
( ( ! [SY1907: $i] :
( ( c_in @ SV5 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY1907 ) ) @ ( c_Message_Oparts @ SY1907 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ! [SY1908: $i] :
( ~ ( c_in @ SY1908 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY1907 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV5 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY1908 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1569]) ).
thf(2201,plain,
! [SV6: $i] :
( ( ! [SY1909: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV6 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY1909 ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV6 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY1909 ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1570]) ).
thf(2202,plain,
! [SV7: $i] :
( ( ! [SY1910: $i] :
( ~ ( hBOOL @ ( hAPP @ SV7 @ SY1910 ) )
| ! [T_a: $i] :
~ ( c_in @ SY1910 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1573]) ).
thf(2203,plain,
! [SV8: $i] :
( ( ! [SY1912: $i] :
~ ( c_in @ SV8 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1912 @ tc_bool ) ) @ SY1912 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1574]) ).
thf(2204,plain,
! [SV9: $i] :
( ( ! [SY1913: $i] :
~ ( c_in @ SV9 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1913 @ tc_bool ) ) @ SY1913 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1575]) ).
thf(2205,plain,
! [SV10: $i] :
( ( ! [SY1914: $i] :
( ( hBOOL @ ( hAPP @ SV10 @ SY1914 ) )
| ! [T_a: $i] :
~ ( c_in @ SY1914 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ T_a @ tc_bool ) ) @ T_a ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1576]) ).
thf(2206,plain,
! [SV11: $i] :
( ( ! [SY1916: $i] :
~ ( c_in @ SV11 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1916 @ tc_bool ) ) @ SY1916 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1577]) ).
thf(2207,plain,
! [SV12: $i] :
( ( ! [SY1917: $i,SY1918: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV12 @ tc_bool ) )
= ( c_Set_Oimage @ SY1917 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1918 @ tc_bool ) ) @ SY1918 @ SV12 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1578]) ).
thf(2208,plain,
! [SV13: $i] :
( ( ! [SY1919: $i,SY1920: $i] :
( ( c_Set_Oinsert @ SV13 @ SY1919 @ SY1920 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ SV13 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1920 @ tc_bool ) ) @ SY1920 ) @ SY1919 @ ( tc_fun @ SY1920 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1579]) ).
thf(2209,plain,
! [SV14: $i] :
( ( ~ ( class_Lattices_Obounded__lattice @ SV14 )
| ! [SY1921: $i,SY1922: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY1921 @ SY1922 @ SV14 )
!= ( c_Orderings_Obot__class_Obot @ SV14 ) )
| ( SY1922
= ( c_Orderings_Obot__class_Obot @ SV14 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1580]) ).
thf(2210,plain,
! [SV15: $i] :
( ( ~ ( class_Lattices_Obounded__lattice @ SV15 )
| ! [SY1923: $i] :
( ! [SY1924: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY1923 @ SY1924 @ SV15 )
!= ( c_Orderings_Obot__class_Obot @ SV15 ) )
| ( SY1923
= ( c_Orderings_Obot__class_Obot @ SV15 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1581]) ).
thf(2211,plain,
! [SV16: $i] :
( ( ! [SY1925: $i,SY1926: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV16 @ SY1925 @ ( tc_fun @ SY1926 @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1926 @ tc_bool ) ) )
| ( SV16
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1926 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1582]) ).
thf(2212,plain,
! [SV17: $i] :
( ( ! [SY1927: $i,SY1928: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV17 @ SY1927 @ ( tc_fun @ SY1928 @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1928 @ tc_bool ) ) )
| ( SY1927
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1928 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1583]) ).
thf(2213,plain,
! [SV18: $i] :
( ( ! [SY1929: $i,SY1930: $i] :
( ( ( c_Set_Oinsert @ SV18 @ SY1929 @ SY1930 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1930 @ tc_bool ) ) )
| ( c_in @ SV18 @ SY1929 @ SY1930 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1584]) ).
thf(2214,plain,
! [SV19: $i] :
( ( ! [SY1931: $i,SY1932: $i] :
( ( ( c_Set_Oinsert @ SV19 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1931 @ tc_bool ) ) @ SY1931 )
!= ( c_Set_Oinsert @ SY1932 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1931 @ tc_bool ) ) @ SY1931 ) )
| ( SV19 = SY1932 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1585]) ).
thf(2215,plain,
! [SV20: $i] :
( ( ! [SY1933: $i,SY1934: $i] :
( ( c_Set_Oimage @ SV20 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1933 @ tc_bool ) ) @ SY1933 @ SY1934 )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1934 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1586]) ).
thf(2216,plain,
! [SV21: $i] :
( ( ! [SY1935: $i,SY1936: $i] :
( ( c_Set_Oinsert @ SV21 @ ( c_Set_Oinsert @ SY1935 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1936 @ tc_bool ) ) @ SY1936 ) @ SY1936 )
= ( c_Set_Oinsert @ SY1935 @ ( c_Set_Oinsert @ SV21 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1936 @ tc_bool ) ) @ SY1936 ) @ SY1936 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1587]) ).
thf(2217,plain,
! [SV22: $i] :
( ( ! [SY1937: $i,SY1938: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV22 @ ( c_Set_Oinsert @ SY1937 @ SY1938 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV22 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY1937 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ SY1938 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1588]) ).
thf(2218,plain,
! [SV23: $i] :
( ( ! [SY1939: $i] :
( ( SV23 = SY1939 )
| ! [SY1940: $i] :
~ ( c_in @ SV23 @ ( c_Set_Oinsert @ SY1939 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1940 @ tc_bool ) ) @ SY1940 ) @ SY1940 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1589]) ).
thf(2219,plain,
! [SV24: $i] :
( ( ! [SY1941: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV24 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SY1941 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV24 @ ( c_Event_Oused @ SY1941 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1590]) ).
thf(2220,plain,
! [SV25: $i] :
( ( ! [SY1942: $i,SY1943: $i,SY1944: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV25 @ tc_bool ) )
!= ( c_Set_Oimage @ SY1942 @ SY1943 @ SY1944 @ SV25 ) )
| ( SY1943
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1944 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1591]) ).
thf(2221,plain,
! [SV26: $i] :
( ( ! [SY1945: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV26 @ tc_bool ) ) @ SY1945 @ ( tc_fun @ SV26 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1592]) ).
thf(2222,plain,
! [SV27: $i] :
( ( ~ ( class_Orderings_Obot @ SV27 )
| ! [SY1946: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ SV27 ) @ SY1946 @ SV27 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1593]) ).
thf(2223,plain,
! [SV28: $i] :
( ( ! [SY1947: $i,SY1948: $i] :
( ( c_Set_Oinsert @ SV28 @ SY1947 @ SY1948 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1948 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1594]) ).
thf(2224,plain,
! [SV29: $i] :
( ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV29 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV29 @ tc_bool ) ) @ ( tc_fun @ SV29 @ tc_bool ) ) @ ( tc_fun @ SV29 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1595]) ).
thf(2225,plain,
! [SV30: $i] :
( ( ~ ( class_Lattices_Obounded__lattice @ SV30 )
| ! [SY1949: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY1949 @ ( c_Orderings_Obot__class_Obot @ SV30 ) @ SV30 )
= SY1949 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1596]) ).
thf(2226,plain,
! [SV31: $i] :
( ( ~ ( class_Lattices_Obounded__lattice @ SV31 )
| ! [SY1950: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ SV31 ) @ SY1950 @ SV31 )
= SY1950 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1597]) ).
thf(2227,plain,
! [SV32: $i] :
( ( ! [SY1951: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV32 @ tc_bool ) ) @ SY1951 @ ( tc_fun @ SV32 @ tc_bool ) )
= SY1951 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1598]) ).
thf(2228,plain,
! [SV33: $i] :
( ( ! [SY1952: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV33 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1952 @ tc_bool ) ) @ ( tc_fun @ SY1952 @ tc_bool ) )
= SV33 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1599]) ).
thf(2229,plain,
! [SV34: $i] :
( ( ~ ( class_Lattices_Oboolean__algebra @ SV34 )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ SV34 ) @ SV34 )
= ( c_Orderings_Obot__class_Obot @ SV34 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1600]) ).
thf(2230,plain,
! [SV35: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV35 @ tc_bool ) ) @ ( tc_fun @ SV35 @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV35 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1601]) ).
thf(2231,plain,
! [SV36: $i] :
( ( ! [SY1953: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV36 @ tc_bool ) ) @ SY1953 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1602]) ).
thf(2232,plain,
! [SV37: $i] :
( ( ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV37 @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV37 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1603]) ).
thf(2233,plain,
! [SV38: $i] :
( ( ! [SY1954: $i,SY1955: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV38 @ ( c_Event_Oknows @ SY1954 @ SY1955 ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV38 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ SY1954 @ SY1955 ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1604]) ).
thf(2234,plain,
! [SV39: $i] :
( ( ! [SY1956: $i,SY1957: $i,SY1958: $i,SY1959: $i] :
( ( ( c_Set_Oinsert @ SV39 @ ( c_Set_Oinsert @ SY1956 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1957 @ tc_bool ) ) @ SY1957 ) @ SY1957 )
!= ( c_Set_Oinsert @ SY1958 @ ( c_Set_Oinsert @ SY1959 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1957 @ tc_bool ) ) @ SY1957 ) @ SY1957 ) )
| ( SV39 = SY1959 )
| ( SV39 = SY1958 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1605]) ).
thf(2235,plain,
! [SV40: $i] :
( ( ! [SY1960: $i,SY1961: $i,SY1962: $i] :
( ! [SY1963: $i] :
( ( c_Set_Oinsert @ SV40 @ ( c_Set_Oinsert @ SY1960 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1961 @ tc_bool ) ) @ SY1961 ) @ SY1961 )
!= ( c_Set_Oinsert @ SY1962 @ ( c_Set_Oinsert @ SY1963 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1961 @ tc_bool ) ) @ SY1961 ) @ SY1961 ) )
| ( SY1960 = SY1962 )
| ( SV40 = SY1962 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1606]) ).
thf(2236,plain,
! [SV41: $i] :
( ( ! [SY1964: $i,SY1965: $i,SY1966: $i,SY1967: $i] :
( ( ( c_Set_Oinsert @ SV41 @ ( c_Set_Oinsert @ SY1964 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1965 @ tc_bool ) ) @ SY1965 ) @ SY1965 )
!= ( c_Set_Oinsert @ SY1966 @ ( c_Set_Oinsert @ SY1967 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1965 @ tc_bool ) ) @ SY1965 ) @ SY1965 ) )
| ( SV41 = SY1967 )
| ( SY1964 = SY1967 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1607]) ).
thf(2237,plain,
! [SV42: $i] :
( ( ! [SY1968: $i,SY1969: $i,SY1970: $i,SY1971: $i] :
( ( ( c_Set_Oinsert @ SV42 @ ( c_Set_Oinsert @ SY1968 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1969 @ tc_bool ) ) @ SY1969 ) @ SY1969 )
!= ( c_Set_Oinsert @ SY1970 @ ( c_Set_Oinsert @ SY1971 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1969 @ tc_bool ) ) @ SY1969 ) @ SY1969 ) )
| ( SY1968 = SY1970 )
| ( SY1968 = SY1971 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1608]) ).
thf(2238,plain,
! [SV43: $i] :
( ( ! [SY1972: $i] :
( ( SV43
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1972 @ tc_bool ) ) )
| ~ ( c_lessequals @ SV43 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1972 @ tc_bool ) ) @ ( tc_fun @ SY1972 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1609]) ).
thf(2239,plain,
! [SV44: $i] :
( ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV44 @ tc_bool ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV44 @ tc_bool ) ) @ ( tc_fun @ SV44 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1610]) ).
thf(2240,plain,
! [SV45: $i] :
( ( ! [SY1973: $i,SY1974: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV45 @ tc_bool ) )
!= ( c_Set_Oinsert @ SY1973 @ SY1974 @ SV45 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1611]) ).
thf(2241,plain,
! [SV46: $i] :
( ( ~ ( class_Lattices_Oboolean__algebra @ SV46 )
| ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ SV46 ) @ SV46 )
= ( c_Orderings_Otop__class_Otop @ SV46 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1612]) ).
thf(2242,plain,
! [SV47: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV47 @ tc_bool ) ) @ ( tc_fun @ SV47 @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV47 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1613]) ).
thf(2243,plain,
! [SV48: $i] :
( ( ! [SY1975: $i,SY1976: $i] :
( ! [SY1977: $i] :
( ( c_Set_Oimage @ SV48 @ SY1975 @ SY1976 @ SY1977 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1977 @ tc_bool ) ) )
| ( SY1975
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1976 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1614]) ).
thf(2244,plain,
! [SV49: $i] :
( ( ! [SY1978: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV49 @ SY1978 @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV49 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ SY1978 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1615]) ).
thf(2245,plain,
! [SV50: $i] :
( ( ! [SY1979: $i] : ( c_in @ SV50 @ ( c_Set_Oinsert @ SV50 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1979 @ tc_bool ) ) @ SY1979 ) @ SY1979 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1616]) ).
thf(2246,plain,
! [SV51: $i] :
( ( ! [SY1980: $i] :
( ( SV51
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1980 @ tc_bool ) ) )
| ~ ( c_lessequals @ SV51 @ ( c_HOL_Ouminus__class_Ouminus @ SV51 @ ( tc_fun @ SY1980 @ tc_bool ) ) @ ( tc_fun @ SY1980 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1617]) ).
thf(2247,plain,
! [SV52: $i] :
( ( ! [SY1981: $i,SY1982: $i] :
( ( SV52
= ( c_Set_Oinsert @ SY1981 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1982 @ tc_bool ) ) @ SY1982 ) )
| ( SV52
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1982 @ tc_bool ) ) )
| ~ ( c_lessequals @ SV52 @ ( c_Set_Oinsert @ SY1981 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1982 @ tc_bool ) ) @ SY1982 ) @ ( tc_fun @ SY1982 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1618]) ).
thf(2248,plain,
! [SV53: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV53 @ tc_bool ) ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV53 @ tc_bool ) ) @ ( tc_fun @ SV53 @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV53 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1619]) ).
thf(2249,plain,
! [SV54: $i] :
( ( ( c_List_Oset @ ( c_List_Olist_ONil @ SV54 ) @ SV54 )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV54 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1620]) ).
thf(2250,plain,
! [SV55: $i] :
( ( ! [SY1983: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV55 @ tc_bool ) )
!= ( c_List_Oset @ SY1983 @ SV55 ) )
| ( SY1983
= ( c_List_Olist_ONil @ SV55 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1621]) ).
thf(2251,plain,
! [SV56: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV56 @ tc_bool ) )
= ( c_List_Oset @ ( c_List_Olist_ONil @ SV56 ) @ SV56 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1622]) ).
thf(2252,plain,
! [SV57: $i] :
( ( ! [SY1984: $i] :
( ( ( c_List_Oset @ SV57 @ SY1984 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY1984 @ tc_bool ) ) )
| ( SV57
= ( c_List_Olist_ONil @ SY1984 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1623]) ).
thf(2253,plain,
! [SV58: $i] :
( ( ~ ( c_in @ SV58 @ ( c_Message_Oparts @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1624]) ).
thf(2254,plain,
( ( c_Public_Okeymode_OEncryption = c_Public_Okeymode_OSignature )
= $false ),
inference(extcnf_not_pos,[status(thm)],[1625]) ).
thf(2255,plain,
! [SV59: $i] :
( ( ! [SY1985: $i] : ( hBOOL @ ( hAPP @ SV59 @ SY1985 ) )
| ~ ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OEncryption ) )
| ~ ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OSignature ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1626]) ).
thf(2256,plain,
( ( c_Public_Okeymode_OSignature = c_Public_Okeymode_OEncryption )
= $false ),
inference(extcnf_not_pos,[status(thm)],[1627]) ).
thf(2257,plain,
! [SV60: $i] :
( ( ! [SY1986: $i,SY1987: $i,SY1988: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ SV60 @ SY1986 @ SY1987 ) @ SY1988 @ ( tc_fun @ SY1987 @ tc_bool ) )
= ( c_Set_Oinsert @ SV60 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY1986 @ SY1988 @ ( tc_fun @ SY1987 @ tc_bool ) ) @ SY1987 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1629]) ).
thf(2258,plain,
! [SV61: $i] :
( ( ! [SY1989: $i,SY1990: $i,SY1991: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV61 @ ( c_Set_Oinsert @ SY1989 @ SY1990 @ SY1991 ) @ ( tc_fun @ SY1991 @ tc_bool ) )
= ( c_Set_Oinsert @ SY1989 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV61 @ SY1990 @ ( tc_fun @ SY1991 @ tc_bool ) ) @ SY1991 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1630]) ).
thf(2259,plain,
! [SV62: $i] :
( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV62 )
| ! [SY1992: $i,SY1993: $i] :
( ( c_lessequals @ SY1992 @ SY1993 @ SV62 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY1993 @ SV62 ) @ ( c_HOL_Ouminus__class_Ouminus @ SY1992 @ SV62 ) @ SV62 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1631]) ).
thf(2260,plain,
! [SV63: $i] :
( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV63 )
| ! [SY1994: $i,SY1995: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY1994 @ SV63 ) @ ( c_HOL_Ouminus__class_Ouminus @ SY1995 @ SV63 ) @ SV63 )
| ~ ( c_lessequals @ SY1995 @ SY1994 @ SV63 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1632]) ).
thf(2261,plain,
! [SV64: $i] :
( ( ! [SY1996: $i,SY1997: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV64 @ ( tc_fun @ SY1996 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SY1997 @ ( tc_fun @ SY1996 @ tc_bool ) ) @ ( tc_fun @ SY1996 @ tc_bool ) )
| ~ ( c_lessequals @ SY1997 @ SV64 @ ( tc_fun @ SY1996 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1633]) ).
thf(2262,plain,
! [SV65: $i] :
( ( ! [SY1998: $i,SY1999: $i] :
( ( c_lessequals @ SV65 @ SY1998 @ ( tc_fun @ SY1999 @ tc_bool ) )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY1998 @ ( tc_fun @ SY1999 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV65 @ ( tc_fun @ SY1999 @ tc_bool ) ) @ ( tc_fun @ SY1999 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1634]) ).
thf(2263,plain,
! [SV66: $i] :
( ( ! [SY2000: $i,SY2001: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV66 @ ( tc_fun @ SY2000 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SY2001 @ ( tc_fun @ SY2000 @ tc_bool ) ) @ ( tc_fun @ SY2000 @ tc_bool ) )
| ~ ( c_lessequals @ SY2001 @ SV66 @ ( tc_fun @ SY2000 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1635]) ).
thf(2264,plain,
! [SV67: $i] :
( ( ! [SY2002: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ SV67 ) @ ( c_Message_Osynth @ SY2002 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV67 @ SY2002 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1636]) ).
thf(2265,plain,
! [SV68: $i] :
( ( ! [SY2003: $i,SY2004: $i,SY2005: $i,SY2006: $i] :
( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ ( c_List_Oappend @ SY2003 @ ( c_List_Olist_OCons @ SY2004 @ SY2005 @ SY2006 ) @ SY2006 ) @ SY2006 ) ) )
| ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ SY2005 @ SY2006 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV68 @ SY2004 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1637]) ).
thf(2266,plain,
! [SV69: $i] :
( ( ~ ( class_Lattices_Obounded__lattice @ SV69 )
| ! [SY2007: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2007 @ ( c_Orderings_Otop__class_Otop @ SV69 ) @ SV69 )
= ( c_Orderings_Otop__class_Otop @ SV69 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1638]) ).
thf(2267,plain,
! [SV70: $i] :
( ( ~ ( class_Lattices_Obounded__lattice @ SV70 )
| ! [SY2008: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ SV70 ) @ SY2008 @ SV70 )
= ( c_Orderings_Otop__class_Otop @ SV70 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1639]) ).
thf(2268,plain,
! [SV71: $i] :
( ( ! [SY2009: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV71 @ tc_bool ) ) @ SY2009 @ ( tc_fun @ SV71 @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV71 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1640]) ).
thf(2269,plain,
! [SV72: $i] :
( ( ! [SY2010: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV72 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SY2010 @ tc_bool ) ) @ ( tc_fun @ SY2010 @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SY2010 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1641]) ).
thf(2270,plain,
! [SV73: $i] :
( ( ! [SY2011: $i] : ( c_lessequals @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV73 @ SY2011 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV73 ) @ ( c_Message_Oparts @ SY2011 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1642]) ).
thf(2271,plain,
! [SV74: $i] :
( ( ! [SY2012: $i,SY2013: $i] : ( c_lessequals @ SV74 @ ( c_Set_Oinsert @ SY2012 @ SV74 @ SY2013 ) @ ( tc_fun @ SY2013 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1643]) ).
thf(2272,plain,
! [SV75: $i] :
( ( ! [SY2014: $i] : ( c_lessequals @ ( c_Set_Oinsert @ SV75 @ ( c_Message_Osynth @ SY2014 ) @ tc_Message_Omsg ) @ ( c_Message_Osynth @ ( c_Set_Oinsert @ SV75 @ SY2014 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1644]) ).
thf(2273,plain,
! [SV76: $i] :
( ( ! [SY2015: $i,SY2016: $i,SY2017: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV76 @ SY2015 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SY2016 ) @ SY2017 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SY2016 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV76 @ SY2015 ) @ SY2017 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1645]) ).
thf(2274,plain,
! [SV77: $i] :
( ( ! [SY2018: $i,SY2019: $i,SY2020: $i,SY2021: $i] :
( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ ( c_List_Oappend @ SY2018 @ ( c_List_Olist_OCons @ SY2019 @ SY2020 @ SY2021 ) @ SY2021 ) @ SY2021 ) ) )
| ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ SY2018 @ SY2021 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV77 @ SY2019 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1646]) ).
thf(2275,plain,
! [SV78: $i] :
( ( ! [SY2022: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV78 ) @ SY2022 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SY2022 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1647]) ).
thf(2276,plain,
! [SV79: $i] :
( ( ! [SY2023: $i] :
( ( hBOOL @ ( hAPP @ SV79 @ SY2023 ) )
| ! [SY2024: $i] :
( ( hBOOL @ ( hAPP @ SY2024 @ SY2023 ) )
| ! [SY2025: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2024 @ SV79 @ ( tc_fun @ SY2025 @ tc_bool ) ) @ SY2023 ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1648]) ).
thf(2277,plain,
! [SV80: $i] :
( ( ! [SY2026: $i,SY2027: $i,SY2028: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV80 @ SY2026 @ ( tc_fun @ SY2027 @ tc_bool ) ) @ SY2028 ) )
| ~ ( hBOOL @ ( hAPP @ SY2026 @ SY2028 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1649]) ).
thf(2278,plain,
! [SV81: $i] :
( ( ! [SY2029: $i,SY2030: $i,SY2031: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV81 @ SY2029 @ ( tc_fun @ SY2030 @ tc_bool ) ) @ SY2031 ) )
| ~ ( hBOOL @ ( hAPP @ SV81 @ SY2031 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1650]) ).
thf(2279,plain,
! [SV82: $i] :
( ( ! [SY2032: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ SV82 ) @ ( c_Message_Osynth @ SY2032 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Osynth @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV82 @ SY2032 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1651]) ).
thf(2280,plain,
! [SV83: $i] :
( ( ! [SY2033: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV83 ) @ SY2033 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV83 ) @ ( c_Message_Oparts @ SY2033 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1652]) ).
thf(2281,plain,
! [SV84: $i] :
( ( ~ ( class_Lattices_Oboolean__algebra @ SV84 )
| ! [SY2034: $i,SY2035: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SY2034 @ SV84 )
!= ( c_HOL_Ouminus__class_Ouminus @ SY2035 @ SV84 ) )
| ( SY2034 = SY2035 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1653]) ).
thf(2282,plain,
! [SV85: $i] :
( ( ~ ( class_OrderedGroup_Ogroup__add @ SV85 )
| ! [SY2036: $i,SY2037: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SY2036 @ SV85 )
!= ( c_HOL_Ouminus__class_Ouminus @ SY2037 @ SV85 ) )
| ( SY2036 = SY2037 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1654]) ).
thf(2283,plain,
! [SV86: $i] :
( ( ! [SY2038: $i,SY2039: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SV86 @ ( tc_fun @ SY2038 @ tc_bool ) )
!= ( c_HOL_Ouminus__class_Ouminus @ SY2039 @ ( tc_fun @ SY2038 @ tc_bool ) ) )
| ( SV86 = SY2039 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1655]) ).
thf(2284,plain,
! [SV87: $i] :
( ( ! [SY2040: $i] :
( ( SV87 = SY2040 )
| ! [SY2041: $i] :
( ~ ( c_lessequals @ SY2040 @ SV87 @ ( tc_fun @ SY2041 @ tc_bool ) )
| ~ ( c_lessequals @ SV87 @ SY2040 @ ( tc_fun @ SY2041 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1656]) ).
thf(2285,plain,
! [SV88: $i] :
( ( ! [SY2042: $i] :
( ( SV88 = SY2042 )
| ! [SY2043: $i] :
( ~ ( c_lessequals @ SY2042 @ SV88 @ ( tc_fun @ SY2043 @ tc_bool ) )
| ~ ( c_lessequals @ SV88 @ SY2042 @ ( tc_fun @ SY2043 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1657]) ).
thf(2286,plain,
! [SV89: $i] :
( ( ~ ( class_Orderings_Oorder @ SV89 )
| ! [SY2044: $i,SY2045: $i] :
( ( SY2044 = SY2045 )
| ~ ( c_lessequals @ SY2045 @ SY2044 @ SV89 )
| ~ ( c_lessequals @ SY2044 @ SY2045 @ SV89 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1658]) ).
thf(2287,plain,
! [SV90: $i] :
( ( ~ ( class_Orderings_Oorder @ SV90 )
| ! [SY2046: $i,SY2047: $i] :
( ( SY2046 = SY2047 )
| ~ ( c_lessequals @ SY2047 @ SY2046 @ SV90 )
| ~ ( c_lessequals @ SY2046 @ SY2047 @ SV90 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1659]) ).
thf(2288,plain,
! [SV91: $i] :
( ( ~ ( class_Orderings_Oorder @ SV91 )
| ! [SY2048: $i,SY2049: $i] :
( ( SY2048 = SY2049 )
| ~ ( c_lessequals @ SY2048 @ SY2049 @ SV91 )
| ~ ( c_lessequals @ SY2049 @ SY2048 @ SV91 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1660]) ).
thf(2289,plain,
! [SV92: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV92 )
| ! [SY2050: $i,SY2051: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2050 @ SY2051 @ SV92 )
= SY2050 )
| ~ ( c_lessequals @ SY2051 @ SY2050 @ SV92 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1661]) ).
thf(2290,plain,
! [SV93: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV93 )
| ! [SY2052: $i,SY2053: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2052 @ SY2053 @ SV93 )
!= SY2053 )
| ( c_lessequals @ SY2052 @ SY2053 @ SV93 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1662]) ).
thf(2291,plain,
! [SV94: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV94 )
| ! [SY2054: $i,SY2055: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2054 @ SY2055 @ SV94 )
= SY2055 )
| ~ ( c_lessequals @ SY2054 @ SY2055 @ SV94 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1663]) ).
thf(2292,plain,
! [SV95: $i] :
( ( ! [SY2056: $i,SY2057: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV95 @ SY2056 @ ( tc_fun @ SY2057 @ tc_bool ) )
= SY2056 )
| ~ ( c_lessequals @ SV95 @ SY2056 @ ( tc_fun @ SY2057 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1664]) ).
thf(2293,plain,
! [SV96: $i] :
( ( ! [SY2058: $i,SY2059: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV96 @ SY2058 @ ( tc_fun @ SY2059 @ tc_bool ) )
= SV96 )
| ~ ( c_lessequals @ SY2058 @ SV96 @ ( tc_fun @ SY2059 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1665]) ).
thf(2294,plain,
! [SV97: $i] :
( ( ! [SY2060: $i,SY2061: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV97 @ SY2060 @ ( tc_fun @ SY2061 @ tc_bool ) )
!= SY2060 )
| ( c_lessequals @ SV97 @ SY2060 @ ( tc_fun @ SY2061 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1666]) ).
thf(2295,plain,
! [SV98: $i] :
( ( ! [SY2062: $i,SY2063: $i] :
( ( c_List_Oset @ ( c_List_Oappend @ SV98 @ SY2062 @ SY2063 ) @ SY2063 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_List_Oset @ SV98 @ SY2063 ) @ ( c_List_Oset @ SY2062 @ SY2063 ) @ ( tc_fun @ SY2063 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1667]) ).
thf(2296,plain,
! [SV99: $i] :
( ( ! [SY2064: $i] : ( c_lessequals @ ( c_Set_Oinsert @ SV99 @ ( c_Message_Oparts @ SY2064 ) @ tc_Message_Omsg ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV99 @ SY2064 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1668]) ).
thf(2297,plain,
! [SV100: $i] :
( ( ! [SY2065: $i,SY2066: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV100 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SY2065 ) @ SY2066 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SY2065 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV100 ) @ SY2066 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1669]) ).
thf(2298,plain,
! [SV101: $i] :
( ( ! [SY2067: $i] :
( ( ( c_Message_Omsg_OHash @ SV101 )
!= ( c_Message_Omsg_OHash @ SY2067 ) )
| ( SV101 = SY2067 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1670]) ).
thf(2299,plain,
! [SV102: $i] :
( ( ! [SY2068: $i,SY2069: $i,SY2070: $i,SY2071: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV102 @ SY2068 @ SY2069 @ SY2070 ) @ ( c_Set_Oimage @ SV102 @ SY2071 @ SY2069 @ SY2070 ) @ ( tc_fun @ SY2070 @ tc_bool ) )
= ( c_Set_Oimage @ SV102 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2068 @ SY2071 @ ( tc_fun @ SY2069 @ tc_bool ) ) @ SY2069 @ SY2070 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1671]) ).
thf(2300,plain,
! [SV103: $i] :
( ( ! [SY2072: $i,SY2073: $i,SY2074: $i,SY2075: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV103 @ SY2072 @ ( tc_fun @ SY2073 @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2074 @ SY2075 @ ( tc_fun @ SY2073 @ tc_bool ) ) @ ( tc_fun @ SY2073 @ tc_bool ) )
| ~ ( c_lessequals @ SY2072 @ SY2075 @ ( tc_fun @ SY2073 @ tc_bool ) )
| ~ ( c_lessequals @ SV103 @ SY2074 @ ( tc_fun @ SY2073 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1672]) ).
thf(2301,plain,
! [SV104: $i] :
( ( ! [SY2076: $i] : ( c_lessequals @ SV104 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SY2076 @ tc_bool ) ) @ ( tc_fun @ SY2076 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1673]) ).
thf(2302,plain,
! [SV105: $i] :
( ( ~ ( class_Orderings_Otop @ SV105 )
| ! [SY2077: $i] : ( c_lessequals @ SY2077 @ ( c_Orderings_Otop__class_Otop @ SV105 ) @ SV105 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1674]) ).
thf(2303,plain,
! [SV106: $i] :
( ( ! [SY2078: $i,SY2079: $i,SY2080: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ SV106 @ SY2078 @ SY2079 ) @ SY2080 @ ( tc_fun @ SY2079 @ tc_bool ) )
| ~ ( c_lessequals @ SY2078 @ SY2080 @ ( tc_fun @ SY2079 @ tc_bool ) )
| ~ ( c_in @ SV106 @ SY2080 @ SY2079 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1675]) ).
thf(2304,plain,
! [SV107: $i] :
( ( c_lessequals @ SV107 @ ( c_Message_Osynth @ SV107 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1676]) ).
thf(2305,plain,
! [SV108: $i] :
( ( ! [SY2081: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV108 )
| ! [SY2082: $i] :
( ( c_lessequals @ SY2081 @ SY2082 @ SV108 )
| ! [SY2083: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2083 @ SY2081 @ SV108 ) @ SY2082 @ SV108 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1677]) ).
thf(2306,plain,
! [SV109: $i] :
( ( ! [SY2084: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV109 )
| ! [SY2085: $i] :
( ( c_lessequals @ SY2084 @ SY2085 @ SV109 )
| ! [SY2086: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2084 @ SY2086 @ SV109 ) @ SY2085 @ SV109 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1678]) ).
thf(2307,plain,
! [SV110: $i] :
( ( ! [SY2087: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV110 )
| ! [SY2088: $i,SY2089: $i] :
( ( c_lessequals @ SY2087 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2088 @ SY2089 @ SV110 ) @ SV110 )
| ~ ( c_lessequals @ SY2087 @ SY2089 @ SV110 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1679]) ).
thf(2308,plain,
! [SV111: $i] :
( ( ! [SY2090: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV111 )
| ! [SY2091: $i] :
( ! [SY2092: $i] : ( c_lessequals @ SY2090 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2091 @ SY2092 @ SV111 ) @ SV111 )
| ~ ( c_lessequals @ SY2090 @ SY2091 @ SV111 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1680]) ).
thf(2309,plain,
! [SV112: $i] :
( ( ! [SY2093: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV112 )
| ! [SY2094: $i] :
( ( c_lessequals @ SY2093 @ SY2094 @ SV112 )
| ! [SY2095: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2095 @ SY2093 @ SV112 ) @ SY2094 @ SV112 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1681]) ).
thf(2310,plain,
! [SV113: $i] :
( ( ! [SY2096: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV113 )
| ! [SY2097: $i] :
( ( c_lessequals @ SY2096 @ SY2097 @ SV113 )
| ! [SY2098: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2096 @ SY2098 @ SV113 ) @ SY2097 @ SV113 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1682]) ).
thf(2311,plain,
! [SV114: $i] :
( ( ! [SY2099: $i,SY2100: $i] :
( ( c_lessequals @ SV114 @ SY2099 @ ( tc_fun @ SY2100 @ tc_bool ) )
| ! [SY2101: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV114 @ SY2101 @ ( tc_fun @ SY2100 @ tc_bool ) ) @ SY2099 @ ( tc_fun @ SY2100 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1683]) ).
thf(2312,plain,
! [SV115: $i] :
( ( ! [SY2102: $i,SY2103: $i] :
( ( c_lessequals @ SV115 @ SY2102 @ ( tc_fun @ SY2103 @ tc_bool ) )
| ! [SY2104: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2104 @ SV115 @ ( tc_fun @ SY2103 @ tc_bool ) ) @ SY2102 @ ( tc_fun @ SY2103 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1684]) ).
thf(2313,plain,
! [SV116: $i] :
( ( ! [SY2105: $i] :
( ~ ( class_Orderings_Oorder @ SV116 )
| ! [SY2106: $i] :
( ( c_lessequals @ SY2105 @ SY2106 @ SV116 )
| ! [SY2107: $i] :
( ~ ( c_lessequals @ SY2105 @ SY2107 @ SV116 )
| ~ ( c_lessequals @ SY2107 @ SY2106 @ SV116 ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1685]) ).
thf(2314,plain,
! [SV117: $i] :
( ( ! [SY2108: $i] :
( ~ ( class_Orderings_Opreorder @ SV117 )
| ! [SY2109: $i] :
( ( c_lessequals @ SY2108 @ SY2109 @ SV117 )
| ! [SY2110: $i] :
( ~ ( c_lessequals @ SY2110 @ SY2109 @ SV117 )
| ~ ( c_lessequals @ SY2108 @ SY2110 @ SV117 ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1686]) ).
thf(2315,plain,
! [SV118: $i] :
( ( ! [SY2111: $i] : ( c_lessequals @ SV118 @ SV118 @ ( tc_fun @ SY2111 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1687]) ).
thf(2316,plain,
! [SV119: $i] :
( ( ! [SY2112: $i] : ( c_lessequals @ SV119 @ SV119 @ ( tc_fun @ SY2112 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1688]) ).
thf(2317,plain,
! [SV120: $i] :
( ( ! [SY2113: $i,SY2114: $i] :
( ( c_lessequals @ SV120 @ SY2113 @ ( tc_fun @ SY2114 @ tc_bool ) )
| ! [SY2115: $i] :
( ~ ( c_lessequals @ SY2115 @ SY2113 @ ( tc_fun @ SY2114 @ tc_bool ) )
| ~ ( c_lessequals @ SV120 @ SY2115 @ ( tc_fun @ SY2114 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1689]) ).
thf(2318,plain,
! [SV121: $i] :
( ( ! [SY2116: $i] :
( ( hBOOL @ ( hAPP @ SV121 @ SY2116 ) )
| ! [SY2117: $i] :
( ~ ( hBOOL @ ( hAPP @ SY2117 @ SY2116 ) )
| ! [SY2118: $i] :
~ ( c_lessequals @ SY2117 @ SV121 @ ( tc_fun @ SY2118 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1690]) ).
thf(2319,plain,
! [SV122: $i] :
( ( ~ ( class_Orderings_Oorder @ SV122 )
| ! [SY2119: $i] : ( c_lessequals @ SY2119 @ SY2119 @ SV122 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1691]) ).
thf(2320,plain,
! [SV123: $i] :
( ( ~ ( class_Orderings_Opreorder @ SV123 )
| ! [SY2120: $i] : ( c_lessequals @ SY2120 @ SY2120 @ SV123 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1692]) ).
thf(2321,plain,
! [SV124: $i] :
( ( ! [SY2121: $i] :
( ( hBOOL @ ( hAPP @ SV124 @ SY2121 ) )
| ! [SY2122: $i] :
( ! [SY2123: $i] :
~ ( c_lessequals @ SY2122 @ SV124 @ ( tc_fun @ SY2123 @ tc_bool ) )
| ~ ( hBOOL @ ( hAPP @ SY2122 @ SY2121 ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1693]) ).
thf(2322,plain,
! [SV125: $i] :
( ( ! [SY2124: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV125 ) @ SY2124 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SY2124 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1694]) ).
thf(2323,plain,
! [SV126: $i] :
( ( ! [SY2125: $i,SY2126: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV126 @ SY2125 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SY2126 ) @ ( c_Message_Oparts @ SY2125 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV126 @ SY2126 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1695]) ).
thf(2324,plain,
! [SV127: $i] :
( ( ! [SY2127: $i,SY2128: $i,SY2129: $i,SY2130: $i] :
( ( c_lessequals @ ( c_Set_Oimage @ SV127 @ SY2127 @ SY2128 @ SY2129 ) @ ( c_Set_Oimage @ SV127 @ SY2130 @ SY2128 @ SY2129 ) @ ( tc_fun @ SY2129 @ tc_bool ) )
| ~ ( c_lessequals @ SY2127 @ SY2130 @ ( tc_fun @ SY2128 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1696]) ).
thf(2325,plain,
! [SV128: $i] :
( ( ! [SY2131: $i,SY2132: $i] :
( ~ ( c_lessequals @ SV128 @ SY2131 @ ( tc_fun @ SY2132 @ tc_bool ) )
| ! [SY2133: $i,SY2134: $i] : ( c_lessequals @ ( c_Set_Oimage @ SY2133 @ SV128 @ SY2132 @ SY2134 ) @ ( c_Set_Oimage @ SY2133 @ SY2131 @ SY2132 @ SY2134 ) @ ( tc_fun @ SY2134 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1697]) ).
thf(2326,plain,
! [SV129: $i] :
( ( ! [SY2135: $i,SY2136: $i,SY2137: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ SV129 @ SY2135 @ SY2136 ) @ ( c_Set_Oinsert @ SV129 @ SY2137 @ SY2136 ) @ ( tc_fun @ SY2136 @ tc_bool ) )
| ~ ( c_lessequals @ SY2135 @ SY2137 @ ( tc_fun @ SY2136 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1698]) ).
thf(2327,plain,
! [SV130: $i] :
( ( ! [SY2138: $i,SY2139: $i,SY2140: $i,SY2141: $i] :
( ( c_Set_Oimage @ SV130 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2138 @ SY2139 @ ( tc_fun @ SY2140 @ tc_bool ) ) @ SY2140 @ SY2141 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV130 @ SY2138 @ SY2140 @ SY2141 ) @ ( c_Set_Oimage @ SV130 @ SY2139 @ SY2140 @ SY2141 ) @ ( tc_fun @ SY2141 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1699]) ).
thf(2328,plain,
! [SV131: $i] :
( ( ! [SY2142: $i] : ( c_lessequals @ ( c_Set_Oinsert @ SV131 @ ( c_Message_Oanalz @ SY2142 ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV131 @ SY2142 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1700]) ).
thf(2329,plain,
! [SV132: $i] :
( ( ! [SY2143: $i,SY2144: $i,SY2145: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV132 @ SY2143 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2144 @ SY2145 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SY2143 ) @ ( c_Message_Oanalz @ SY2145 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV132 ) @ ( c_Message_Oanalz @ SY2144 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1701]) ).
thf(2330,plain,
! [SV133: $i] :
( ( ~ ( class_Orderings_Olinorder @ SV133 )
| ! [SY2146: $i,SY2147: $i] :
( ( c_lessequals @ SY2146 @ SY2147 @ SV133 )
| ( c_lessequals @ SY2147 @ SY2146 @ SV133 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1702]) ).
thf(2331,plain,
! [SV134: $i] :
( ( ! [SY2148: $i,SY2149: $i,SY2150: $i] :
( ( c_in @ ( hAPP @ SV134 @ SY2148 ) @ SY2149 @ SY2150 )
| ! [SY2151: $i,SY2152: $i] :
( ~ ( c_in @ SY2148 @ SY2151 @ SY2152 )
| ~ ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SY2151 @ SY2152 @ SY2150 ) @ SY2149 @ ( tc_fun @ SY2150 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1703]) ).
thf(2332,plain,
! [SV135: $i] :
( ( ! [SY2153: $i,SY2154: $i] : ( c_lessequals @ ( c_List_Oset @ SV135 @ SY2153 ) @ ( c_List_Oset @ ( c_List_Olist_OCons @ SY2154 @ SV135 @ SY2153 ) @ SY2153 ) @ ( tc_fun @ SY2153 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1704]) ).
thf(2333,plain,
! [SV136: $i] :
( ( ! [SY2155: $i] :
( ( c_in @ SV136 @ ( c_Message_Oparts @ SY2155 ) @ tc_Message_Omsg )
| ! [SY2156: $i] :
( ( c_in @ SV136 @ ( c_Message_Oparts @ SY2156 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV136 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2156 @ SY2155 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1705]) ).
thf(2334,plain,
! [SV137: $i] :
( ( ! [SY2157: $i] :
( ( c_in @ SV137 @ ( c_Message_Oparts @ SY2157 ) @ tc_Message_Omsg )
| ! [SY2158: $i] :
( ~ ( c_lessequals @ SY2158 @ ( c_Message_Oparts @ SY2157 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV137 @ ( c_Message_Oparts @ SY2158 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1706]) ).
thf(2335,plain,
! [SV138: $i] :
( ( ! [SY2159: $i,SY2160: $i] :
( ( c_in @ SV138 @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2159 @ SY2160 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV138 @ ( c_Message_Oanalz @ SY2160 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1707]) ).
thf(2336,plain,
! [SV139: $i] :
( ( ! [SY2161: $i] :
( ( c_in @ SV139 @ ( c_Message_Oanalz @ SY2161 ) @ tc_Message_Omsg )
| ! [SY2162: $i] :
( ~ ( c_lessequals @ SY2162 @ ( c_Message_Oanalz @ SY2161 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV139 @ ( c_Message_Oanalz @ SY2162 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1708]) ).
thf(2337,plain,
! [SV140: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ SV140 ) @ ( c_Message_Oparts @ SV140 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1709]) ).
thf(2338,plain,
! [SV141: $i] :
( ( ! [SY2163: $i] :
( ( c_in @ SV141 @ ( c_Message_Osynth @ SY2163 ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ SY2163 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ ( c_Message_Osynth @ SY2163 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1710]) ).
thf(2339,plain,
! [SV142: $i] :
( ( ! [SY2164: $i] :
( ( c_in @ SV142 @ ( c_Message_Osynth @ SY2164 ) @ tc_Message_Omsg )
| ! [SY2165: $i] :
( ~ ( c_lessequals @ SY2165 @ ( c_Message_Osynth @ SY2164 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV142 @ ( c_Message_Osynth @ SY2165 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1711]) ).
thf(2340,plain,
! [SV143: $i] :
( ( ! [SY2166: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ SV143 ) @ ( c_Message_Osynth @ SY2166 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV143 @ ( c_Message_Osynth @ SY2166 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1712]) ).
thf(2341,plain,
! [SV144: $i] :
( ( ( c_Message_Oparts @ ( c_Message_Osynth @ SV144 ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV144 ) @ ( c_Message_Osynth @ SV144 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1713]) ).
thf(2342,plain,
! [SV145: $i] :
( ( ! [SY2167: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV145 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2167 ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV145 @ SY2167 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1714]) ).
thf(2343,plain,
! [SV146: $i] :
( ( ( c_Message_Oanalz @ ( c_Message_Osynth @ SV146 ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ SV146 ) @ ( c_Message_Osynth @ SV146 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1715]) ).
thf(2344,plain,
! [SV147: $i] :
( ( ! [SY2168: $i] :
( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ SV147 ) @ SY2168 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV147 @ SY2168 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Osynth @ SV147 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1716]) ).
thf(2345,plain,
! [SV148: $i] :
( ( ! [SY2169: $i,SY2170: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV148 @ SY2169 ) @ ( c_Event_Oknows @ SV148 @ ( c_List_Olist_OCons @ SY2170 @ SY2169 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1717]) ).
thf(2346,plain,
! [SV149: $i] :
( ( ! [SY2171: $i] : ( c_lessequals @ ( c_Event_OinitState @ SV149 ) @ ( c_Event_Oknows @ SV149 @ SY2171 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1718]) ).
thf(2347,plain,
! [SV150: $i] :
( ( ! [SY2172: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV150 ) @ SY2172 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SY2172 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1720]) ).
thf(2348,plain,
! [SV151: $i] :
( ( ! [SY2173: $i,SY2174: $i,SY2175: $i] :
( ( c_lessequals @ SV151 @ ( c_Set_Oinsert @ SY2173 @ SY2174 @ SY2175 ) @ ( tc_fun @ SY2175 @ tc_bool ) )
| ~ ( c_lessequals @ SV151 @ SY2174 @ ( tc_fun @ SY2175 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1721]) ).
thf(2349,plain,
! [SV152: $i] :
( ( ! [SY2176: $i,SY2177: $i] :
( ( c_lessequals @ SV152 @ SY2176 @ ( tc_fun @ SY2177 @ tc_bool ) )
| ! [SY2178: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ SY2178 @ SV152 @ SY2177 ) @ SY2176 @ ( tc_fun @ SY2177 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1722]) ).
thf(2350,plain,
! [SV153: $i] :
( ( ! [SY2179: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV153 @ SV153 @ ( tc_fun @ SY2179 @ tc_bool ) )
= SV153 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1723]) ).
thf(2351,plain,
! [SV154: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV154 )
| ! [SY2180: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2180 @ SY2180 @ SV154 )
= SY2180 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1724]) ).
thf(2352,plain,
! [SV155: $i] :
( ( ! [SY2181: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ SV155 ) @ ( c_Message_Oanalz @ SY2181 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV155 @ SY2181 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1725]) ).
thf(2353,plain,
! [SV156: $i] :
( ( ! [SY2182: $i] : ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV156 ) @ ( c_Message_Oparts @ SY2182 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV156 @ SY2182 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1726]) ).
thf(2354,plain,
! [SV157: $i] :
( ( ! [SY2183: $i] :
( ( c_lessequals @ ( c_Message_Osynth @ SV157 ) @ ( c_Message_Osynth @ SY2183 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV157 @ ( c_Message_Osynth @ SY2183 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1727]) ).
thf(2355,plain,
! [SV158: $i] :
( ( ! [SY2184: $i] :
( ( c_lessequals @ SV158 @ ( c_Message_Osynth @ SY2184 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Osynth @ SV158 ) @ ( c_Message_Osynth @ SY2184 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1728]) ).
thf(2356,plain,
! [SV159: $i] :
( ( ! [SY2185: $i,SY2186: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV159 @ SY2185 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2186 ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2186 @ SY2185 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV159 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2186 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1729]) ).
thf(2357,plain,
! [SV160: $i] :
( ( ! [SY2187: $i,SY2188: $i,SY2189: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV160 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2187 @ SY2188 @ ( tc_fun @ SY2189 @ tc_bool ) ) @ ( tc_fun @ SY2189 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2187 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV160 @ SY2188 @ ( tc_fun @ SY2189 @ tc_bool ) ) @ ( tc_fun @ SY2189 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1730]) ).
thf(2358,plain,
! [SV161: $i] :
( ( ! [SY2190: $i,SY2191: $i,SY2192: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV161 @ SY2190 @ ( tc_fun @ SY2191 @ tc_bool ) ) @ SY2192 @ ( tc_fun @ SY2191 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV161 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2190 @ SY2192 @ ( tc_fun @ SY2191 @ tc_bool ) ) @ ( tc_fun @ SY2191 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1731]) ).
thf(2359,plain,
! [SV162: $i] :
( ( ! [SY2193: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV162 )
| ! [SY2194: $i,SY2195: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2193 @ SY2194 @ SV162 ) @ SY2195 @ SV162 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2193 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2194 @ SY2195 @ SV162 ) @ SV162 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1732]) ).
thf(2360,plain,
! [SV163: $i] :
( ( ! [SY2196: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV163 )
| ! [SY2197: $i,SY2198: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2196 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2197 @ SY2198 @ SV163 ) @ SV163 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2197 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2196 @ SY2198 @ SV163 ) @ SV163 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1733]) ).
thf(2361,plain,
! [SV164: $i] :
( ( ! [SY2199: $i,SY2200: $i,SY2201: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV164 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2199 @ SY2200 @ ( tc_fun @ SY2201 @ tc_bool ) ) @ ( tc_fun @ SY2201 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV164 @ SY2199 @ ( tc_fun @ SY2201 @ tc_bool ) ) @ SY2200 @ ( tc_fun @ SY2201 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1734]) ).
thf(2362,plain,
! [SV165: $i] :
( ( ! [SY2202: $i] :
( ~ ( class_Lattices_Olattice @ SV165 )
| ! [SY2203: $i,SY2204: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2202 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2203 @ SY2204 @ SV165 ) @ SV165 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2203 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2202 @ SY2204 @ SV165 ) @ SV165 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1735]) ).
thf(2363,plain,
! [SV166: $i] :
( ( ! [SY2205: $i] :
( ~ ( class_Lattices_Olattice @ SV166 )
| ! [SY2206: $i,SY2207: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2205 @ SY2206 @ SV166 ) @ SY2207 @ SV166 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2205 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2206 @ SY2207 @ SV166 ) @ SV166 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1736]) ).
thf(2364,plain,
! [SV167: $i] :
( ( ! [SY2208: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV167 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ SY2208 @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV167 @ SY2208 @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1737]) ).
thf(2365,plain,
! [SV168: $i] :
( ( ! [SY2209: $i] :
( ( c_in @ SV168 @ SY2209 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ SV168 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ SY2209 @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1738]) ).
thf(2366,plain,
! [SV169: $i] :
( ( ! [SY2210: $i,SY2211: $i,SY2212: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV169 @ SY2210 @ ( tc_fun @ SY2211 @ tc_bool ) ) @ SY2212 @ ( tc_fun @ SY2211 @ tc_bool ) )
| ~ ( c_lessequals @ SY2210 @ SY2212 @ ( tc_fun @ SY2211 @ tc_bool ) )
| ~ ( c_lessequals @ SV169 @ SY2212 @ ( tc_fun @ SY2211 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1739]) ).
thf(2367,plain,
! [SV170: $i] :
( ( ! [SY2213: $i,SY2214: $i] : ( c_lessequals @ SV170 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2213 @ SV170 @ ( tc_fun @ SY2214 @ tc_bool ) ) @ ( tc_fun @ SY2214 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1740]) ).
thf(2368,plain,
! [SV171: $i] :
( ( ! [SY2215: $i,SY2216: $i] : ( c_lessequals @ SV171 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV171 @ SY2215 @ ( tc_fun @ SY2216 @ tc_bool ) ) @ ( tc_fun @ SY2216 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1741]) ).
thf(2369,plain,
! [SV172: $i] :
( ( ! [SY2217: $i,SY2218: $i,SY2219: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV172 @ SY2217 @ ( tc_fun @ SY2218 @ tc_bool ) ) @ SY2219 @ ( tc_fun @ SY2218 @ tc_bool ) )
| ~ ( c_lessequals @ SY2217 @ SY2219 @ ( tc_fun @ SY2218 @ tc_bool ) )
| ~ ( c_lessequals @ SV172 @ SY2219 @ ( tc_fun @ SY2218 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1742]) ).
thf(2370,plain,
! [SV173: $i] :
( ( ! [SY2220: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV173 )
| ! [SY2221: $i,SY2222: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2220 @ SY2221 @ SV173 ) @ SY2222 @ SV173 )
| ~ ( c_lessequals @ SY2221 @ SY2222 @ SV173 )
| ~ ( c_lessequals @ SY2220 @ SY2222 @ SV173 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1743]) ).
thf(2371,plain,
! [SV174: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV174 )
| ! [SY2223: $i,SY2224: $i] : ( c_lessequals @ SY2223 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2223 @ SY2224 @ SV174 ) @ SV174 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1744]) ).
thf(2372,plain,
! [SV175: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV175 )
| ! [SY2225: $i,SY2226: $i] : ( c_lessequals @ SY2225 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2226 @ SY2225 @ SV175 ) @ SV175 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1745]) ).
thf(2373,plain,
! [SV176: $i] :
( ( ! [SY2227: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV176 )
| ! [SY2228: $i,SY2229: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2227 @ SY2228 @ SV176 ) @ SY2229 @ SV176 )
| ~ ( c_lessequals @ SY2228 @ SY2229 @ SV176 )
| ~ ( c_lessequals @ SY2227 @ SY2229 @ SV176 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1746]) ).
thf(2374,plain,
! [SV177: $i] :
( ( ! [SY2230: $i] :
( ~ ( class_Lattices_Oupper__semilattice @ SV177 )
| ! [SY2231: $i,SY2232: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2230 @ SY2231 @ SV177 ) @ SY2232 @ SV177 )
| ~ ( c_lessequals @ SY2231 @ SY2232 @ SV177 )
| ~ ( c_lessequals @ SY2230 @ SY2232 @ SV177 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1747]) ).
thf(2375,plain,
! [SV178: $i] :
( ( ~ ( class_Lattices_Olattice @ SV178 )
| ! [SY2233: $i,SY2234: $i] : ( c_lessequals @ SY2233 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2234 @ SY2233 @ SV178 ) @ SV178 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1748]) ).
thf(2376,plain,
! [SV179: $i] :
( ( ~ ( class_Lattices_Olattice @ SV179 )
| ! [SY2235: $i,SY2236: $i] : ( c_lessequals @ SY2235 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2235 @ SY2236 @ SV179 ) @ SV179 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1749]) ).
thf(2377,plain,
! [SV180: $i] :
( ( ! [SY2237: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ SV180 @ ( tc_fun @ SY2237 @ tc_bool ) ) @ SV180 @ ( tc_fun @ SY2237 @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SY2237 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1750]) ).
thf(2378,plain,
! [SV181: $i] :
( ( ! [SY2238: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV181 @ ( c_HOL_Ouminus__class_Ouminus @ SV181 @ ( tc_fun @ SY2238 @ tc_bool ) ) @ ( tc_fun @ SY2238 @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SY2238 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1751]) ).
thf(2379,plain,
! [SV182: $i] :
( ( ~ ( class_Lattices_Oboolean__algebra @ SV182 )
| ! [SY2239: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ SY2239 @ SV182 ) @ SY2239 @ SV182 )
= ( c_Orderings_Otop__class_Otop @ SV182 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1752]) ).
thf(2380,plain,
! [SV183: $i] :
( ( ~ ( class_Lattices_Oboolean__algebra @ SV183 )
| ! [SY2240: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2240 @ ( c_HOL_Ouminus__class_Ouminus @ SY2240 @ SV183 ) @ SV183 )
= ( c_Orderings_Otop__class_Otop @ SV183 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1753]) ).
thf(2381,plain,
! [SV184: $i] :
( ( ! [SY2241: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV184 ) @ SY2241 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SY2241 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1754]) ).
thf(2382,plain,
! [SV185: $i] :
( ( ! [SY2242: $i,SY2243: $i] :
( ( c_in @ SV185 @ SY2242 @ SY2243 )
| ! [SY2244: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ SV185 @ SY2244 @ SY2243 ) @ SY2242 @ ( tc_fun @ SY2243 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1755]) ).
thf(2383,plain,
! [SV186: $i] :
( ( ! [SY2245: $i,SY2246: $i,SY2247: $i] :
( ( c_lessequals @ SV186 @ ( c_Set_Oinsert @ SY2245 @ SY2246 @ SY2247 ) @ ( tc_fun @ SY2247 @ tc_bool ) )
| ~ ( c_lessequals @ SV186 @ SY2246 @ ( tc_fun @ SY2247 @ tc_bool ) )
| ( c_in @ SY2245 @ SV186 @ SY2247 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1756]) ).
thf(2384,plain,
! [SV187: $i] :
( ( ! [SY2248: $i,SY2249: $i] :
( ( c_lessequals @ SV187 @ SY2248 @ ( tc_fun @ SY2249 @ tc_bool ) )
| ! [SY2250: $i] :
( ( c_in @ SY2250 @ SV187 @ SY2249 )
| ~ ( c_lessequals @ SV187 @ ( c_Set_Oinsert @ SY2250 @ SY2248 @ SY2249 ) @ ( tc_fun @ SY2249 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1757]) ).
thf(2385,plain,
! [SV188: $i] :
( ( ! [SY2251: $i,SY2252: $i,SY2253: $i] :
( ( c_lessequals @ SV188 @ ( c_Set_Oinsert @ SY2251 @ SY2252 @ SY2253 ) @ ( tc_fun @ SY2253 @ tc_bool ) )
| ~ ( c_lessequals @ SV188 @ SY2252 @ ( tc_fun @ SY2253 @ tc_bool ) )
| ( c_in @ SY2251 @ SV188 @ SY2253 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1758]) ).
thf(2386,plain,
! [SV189: $i] :
( ( ! [SY2254: $i,SY2255: $i] :
( ( c_lessequals @ SV189 @ SY2254 @ ( tc_fun @ SY2255 @ tc_bool ) )
| ! [SY2256: $i] :
( ~ ( c_lessequals @ SV189 @ ( c_Set_Oinsert @ SY2256 @ SY2254 @ SY2255 ) @ ( tc_fun @ SY2255 @ tc_bool ) )
| ( c_in @ SY2256 @ SV189 @ SY2255 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1759]) ).
thf(2387,plain,
! [SV190: $i] :
( ( ! [SY2257: $i,SY2258: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV190 @ SY2257 @ ( tc_fun @ SY2258 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2257 @ SV190 @ ( tc_fun @ SY2258 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1760]) ).
thf(2388,plain,
! [SV191: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV191 )
| ! [SY2259: $i,SY2260: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2259 @ SY2260 @ SV191 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2260 @ SY2259 @ SV191 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1761]) ).
thf(2389,plain,
! [SV192: $i] :
( ( ~ ( class_Lattices_Olattice @ SV192 )
| ! [SY2261: $i,SY2262: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2261 @ SY2262 @ SV192 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2262 @ SY2261 @ SV192 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1762]) ).
thf(2390,plain,
! [SV193: $i] :
( ( ! [SY2263: $i,SY2264: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV193 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV193 @ SY2263 @ ( tc_fun @ SY2264 @ tc_bool ) ) @ ( tc_fun @ SY2264 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV193 @ SY2263 @ ( tc_fun @ SY2264 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1763]) ).
thf(2391,plain,
! [SV194: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV194 )
| ! [SY2265: $i,SY2266: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2265 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2265 @ SY2266 @ SV194 ) @ SV194 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2265 @ SY2266 @ SV194 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1764]) ).
thf(2392,plain,
! [SV195: $i] :
( ( ~ ( class_Lattices_Olattice @ SV195 )
| ! [SY2267: $i,SY2268: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2267 @ SY2268 @ SV195 ) @ SV195 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2267 @ SY2268 @ SV195 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1765]) ).
thf(2393,plain,
! [SV196: $i] :
( ( ! [SY2269: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV196 ) @ SY2269 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV196 ) @ ( c_Message_Oanalz @ SY2269 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1766]) ).
thf(2394,plain,
! [SV197: $i] :
( ( ! [SY2270: $i] :
( ( c_lessequals @ ( c_Message_OkeysFor @ SV197 ) @ ( c_Message_OkeysFor @ SY2270 ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_lessequals @ SV197 @ SY2270 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1767]) ).
thf(2395,plain,
! [SV198: $i] :
( ( ! [SY2271: $i,SY2272: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV198 @ SY2271 ) @ SY2272 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SY2272 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1768]) ).
thf(2396,plain,
! [SV199: $i] :
( ( ! [SY2273: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SV199 @ ( tc_fun @ SY2273 @ tc_bool ) ) @ ( tc_fun @ SY2273 @ tc_bool ) )
= SV199 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1769]) ).
thf(2397,plain,
! [SV200: $i] :
( ( ~ ( class_OrderedGroup_Ogroup__add @ SV200 )
| ! [SY2274: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2274 @ SV200 ) @ SV200 )
= SY2274 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1770]) ).
thf(2398,plain,
! [SV201: $i] :
( ( ~ ( class_Lattices_Oboolean__algebra @ SV201 )
| ! [SY2275: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2275 @ SV201 ) @ SV201 )
= SY2275 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1771]) ).
thf(2399,plain,
! [SV202: $i] :
( ( ~ ( class_OrderedGroup_Ogroup__add @ SV202 )
| ! [SY2276: $i] :
( SY2276
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2276 @ SV202 ) @ SV202 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1772]) ).
thf(2400,plain,
! [SV203: $i] :
( ( ~ ( class_OrderedGroup_Ogroup__add @ SV203 )
| ! [SY2277: $i] :
( SY2277
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2277 @ SV203 ) @ SV203 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1773]) ).
thf(2401,plain,
! [SV204: $i] :
( ( ~ ( class_OrderedGroup_Ogroup__add @ SV204 )
| ! [SY2278: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2278 @ SV204 ) @ SV204 )
= SY2278 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1774]) ).
thf(2402,plain,
! [SV205: $i] :
( ( ! [SY2279: $i,SY2280: $i] :
( ~ ( class_HOL_Oord @ SV205 )
| ! [SY2281: $i] :
( ( c_lessequals @ ( hAPP @ SY2279 @ SY2280 ) @ ( hAPP @ SY2281 @ SY2280 ) @ SV205 )
| ! [SY2282: $i] :
~ ( c_lessequals @ SY2279 @ SY2281 @ ( tc_fun @ SY2282 @ SV205 ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1775]) ).
thf(2403,plain,
! [SV206: $i] :
( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV206 )
| ! [SY2283: $i,SY2284: $i] :
( ( c_lessequals @ SY2283 @ ( c_HOL_Ouminus__class_Ouminus @ SY2284 @ SV206 ) @ SV206 )
| ~ ( c_lessequals @ SY2284 @ ( c_HOL_Ouminus__class_Ouminus @ SY2283 @ SV206 ) @ SV206 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1776]) ).
thf(2404,plain,
! [SV207: $i] :
( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV207 )
| ! [SY2285: $i,SY2286: $i] :
( ( c_lessequals @ SY2285 @ ( c_HOL_Ouminus__class_Ouminus @ SY2286 @ SV207 ) @ SV207 )
| ~ ( c_lessequals @ SY2286 @ ( c_HOL_Ouminus__class_Ouminus @ SY2285 @ SV207 ) @ SV207 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1777]) ).
thf(2405,plain,
! [SV208: $i] :
( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV208 )
| ! [SY2287: $i,SY2288: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2287 @ SV208 ) @ SY2288 @ SV208 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2288 @ SV208 ) @ SY2287 @ SV208 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1778]) ).
thf(2406,plain,
! [SV209: $i] :
( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV209 )
| ! [SY2289: $i,SY2290: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2289 @ SV209 ) @ SY2290 @ SV209 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2290 @ SV209 ) @ SY2289 @ SV209 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1779]) ).
thf(2407,plain,
! [SV210: $i] :
( ( ! [SY2291: $i,SY2292: $i] :
( ( c_in @ SV210 @ SY2291 @ SY2292 )
| ! [SY2293: $i] :
( ~ ( c_in @ SV210 @ SY2293 @ SY2292 )
| ~ ( c_lessequals @ SY2293 @ SY2291 @ ( tc_fun @ SY2292 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1780]) ).
thf(2408,plain,
! [SV211: $i] :
( ( ! [SY2294: $i,SY2295: $i] :
( ( c_in @ SV211 @ SY2294 @ SY2295 )
| ! [SY2296: $i] :
( ~ ( c_lessequals @ SY2296 @ SY2294 @ ( tc_fun @ SY2295 @ tc_bool ) )
| ~ ( c_in @ SV211 @ SY2296 @ SY2295 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1781]) ).
thf(2409,plain,
! [SV212: $i] :
( ( ! [SY2297: $i,SY2298: $i] :
( ( c_in @ SV212 @ SY2297 @ SY2298 )
| ! [SY2299: $i] :
( ~ ( c_in @ SV212 @ SY2299 @ SY2298 )
| ~ ( c_lessequals @ SY2299 @ SY2297 @ ( tc_fun @ SY2298 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1782]) ).
thf(2410,plain,
! [SV213: $i] :
( ( ! [SY2300: $i,SY2301: $i] :
( ( c_in @ SV213 @ SY2300 @ SY2301 )
| ! [SY2302: $i] :
( ~ ( c_in @ SV213 @ SY2302 @ SY2301 )
| ~ ( c_lessequals @ SY2302 @ SY2300 @ ( tc_fun @ SY2301 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1783]) ).
thf(2411,plain,
! [SV214: $i] :
( ( ! [SY2303: $i,SY2304: $i,SY2305: $i] :
( ( c_in @ SV214 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2303 @ SY2304 @ ( tc_fun @ SY2305 @ tc_bool ) ) @ SY2305 )
| ~ ( c_in @ SV214 @ SY2303 @ SY2305 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1784]) ).
thf(2412,plain,
! [SV215: $i] :
( ( ! [SY2306: $i,SY2307: $i,SY2308: $i] :
( ( c_in @ SV215 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2306 @ SY2307 @ ( tc_fun @ SY2308 @ tc_bool ) ) @ SY2308 )
| ~ ( c_in @ SV215 @ SY2307 @ SY2308 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1785]) ).
thf(2413,plain,
! [SV216: $i] :
( ( ! [SY2309: $i,SY2310: $i] :
( ( c_in @ SV216 @ SY2309 @ SY2310 )
| ! [SY2311: $i] :
( ( c_in @ SV216 @ SY2311 @ SY2310 )
| ~ ( c_in @ SV216 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2311 @ SY2309 @ ( tc_fun @ SY2310 @ tc_bool ) ) @ SY2310 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1786]) ).
thf(2414,plain,
! [SV217: $i] :
( ( ! [SY2312: $i,SY2313: $i] :
( ( c_in @ SV217 @ ( c_HOL_Ouminus__class_Ouminus @ SY2312 @ ( tc_fun @ SY2313 @ tc_bool ) ) @ SY2313 )
| ( c_in @ SV217 @ SY2312 @ SY2313 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1787]) ).
thf(2415,plain,
! [SV218: $i] :
( ( ! [SY2314: $i,SY2315: $i] :
( ~ ( c_in @ SV218 @ SY2314 @ SY2315 )
| ~ ( c_in @ SV218 @ ( c_HOL_Ouminus__class_Ouminus @ SY2314 @ ( tc_fun @ SY2315 @ tc_bool ) ) @ SY2315 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1788]) ).
thf(2416,plain,
! [SV219: $i] :
( ( ! [SY2316: $i,SY2317: $i] :
( ( c_Message_Omsg_OMPair @ SV219 @ SY2316 )
!= ( c_Message_Omsg_OHash @ SY2317 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1789]) ).
thf(2417,plain,
! [SV220: $i] :
( ( ! [SY2318: $i,SY2319: $i] :
( ( c_Message_Omsg_OHash @ SV220 )
!= ( c_Message_Omsg_OMPair @ SY2318 @ SY2319 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1790]) ).
thf(2418,plain,
! [SV221: $i] :
( ( ! [SY2320: $i] :
( ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV221 @ SY2320 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV221 ) @ ( c_Message_Oparts @ SY2320 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1791]) ).
thf(2419,plain,
! [SV222: $i] :
( ( c_lessequals @ SV222 @ ( c_Message_Oparts @ SV222 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1792]) ).
thf(2420,plain,
! [SV223: $i] :
( ( ! [SY2321: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ SV223 ) @ ( c_Message_Oparts @ SY2321 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV223 @ SY2321 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1793]) ).
thf(2421,plain,
! [SV224: $i] :
( ( ! [SY2322: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ SV224 ) @ ( c_Message_Oparts @ SY2322 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV224 @ ( c_Message_Oparts @ SY2322 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1794]) ).
thf(2422,plain,
! [SV225: $i] :
( ( ! [SY2323: $i] :
( ( c_lessequals @ SV225 @ ( c_Message_Oparts @ SY2323 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oparts @ SV225 ) @ ( c_Message_Oparts @ SY2323 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1795]) ).
thf(2423,plain,
! [SV226: $i] :
( ( ! [SY2324: $i,SY2325: $i] :
( ( c_Message_Omsg_OHash @ SV226 )
!= ( c_Message_Omsg_OCrypt @ SY2324 @ SY2325 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1796]) ).
thf(2424,plain,
! [SV227: $i] :
( ( ! [SY2326: $i,SY2327: $i] :
( ( c_Message_Omsg_OCrypt @ SV227 @ SY2326 )
!= ( c_Message_Omsg_OHash @ SY2327 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1797]) ).
thf(2425,plain,
! [SV228: $i] :
( ( ! [SY2328: $i] :
( ( c_Message_Omsg_OHash @ SV228 )
!= ( hAPP @ c_Message_Omsg_OKey @ SY2328 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1798]) ).
thf(2426,plain,
! [SV229: $i] :
( ( ! [SY2329: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ SV229 )
!= ( c_Message_Omsg_OHash @ SY2329 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1799]) ).
thf(2427,plain,
! [SV230: $i] :
( ( ! [SY2330: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ SV230 ) @ ( c_Message_Oanalz @ SY2330 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV230 @ SY2330 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1800]) ).
thf(2428,plain,
! [SV231: $i] :
( ( ! [SY2331: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ SV231 ) @ ( c_Message_Oanalz @ SY2331 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV231 @ ( c_Message_Oanalz @ SY2331 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1801]) ).
thf(2429,plain,
! [SV232: $i] :
( ( ! [SY2332: $i] :
( ( c_lessequals @ SV232 @ ( c_Message_Oanalz @ SY2332 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV232 ) @ ( c_Message_Oanalz @ SY2332 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1802]) ).
thf(2430,plain,
! [SV233: $i] :
( ( c_lessequals @ SV233 @ ( c_Message_Oanalz @ SV233 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1803]) ).
thf(2431,plain,
! [SV234: $i] :
( ( ! [SY2333: $i] :
( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ SV234 ) @ SY2333 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV234 @ SY2333 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1804]) ).
thf(2432,plain,
! [SV235: $i] :
( ( ! [SY2334: $i] :
( ( ( c_Message_Oanalz @ SV235 )
!= ( c_Message_Oanalz @ SY2334 ) )
| ! [SY2335: $i,SY2336: $i] :
( ( ( c_Message_Oanalz @ SY2335 )
!= ( c_Message_Oanalz @ SY2336 ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2335 @ SV235 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2336 @ SY2334 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1805]) ).
thf(2433,plain,
! [SV236: $i] :
( ( ! [SY2337: $i] :
( ( c_Message_Omsg_OHash @ SV236 )
!= ( c_Message_Omsg_OAgent @ SY2337 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1806]) ).
thf(2434,plain,
! [SV237: $i] :
( ( ! [SY2338: $i] :
( ( c_Message_Omsg_OAgent @ SV237 )
!= ( c_Message_Omsg_OHash @ SY2338 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1807]) ).
thf(2435,plain,
! [SV238: $i] :
( ( ! [SY2339: $i] :
( ( c_Message_Omsg_ONonce @ SV238 )
!= ( c_Message_Omsg_OHash @ SY2339 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1808]) ).
thf(2436,plain,
! [SV239: $i] :
( ( ! [SY2340: $i] :
( ( c_Message_Omsg_OHash @ SV239 )
!= ( c_Message_Omsg_ONonce @ SY2340 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1809]) ).
thf(2437,plain,
! [SV240: $i] :
( ( c_lessequals @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ ( c_Event_Oused @ SV240 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1810]) ).
thf(2438,plain,
! [SV241: $i] :
( ( ! [SY2341: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV241 @ SY2341 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2341 ) ) @ ( c_Message_Oparts @ SY2341 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV241 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2341 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1811]) ).
thf(2439,plain,
! [SV242: $i] :
( ( ! [SY2342: $i,SY2343: $i] :
( ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2342 @ SY2343 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ! [SY2344: $i] :
( ~ ( c_in @ SY2344 @ ( c_Message_Oparts @ SY2343 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY2344 @ SY2342 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1812]) ).
thf(2440,plain,
! [SV243: $i] :
( ( ! [SY2345: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV243 @ SY2345 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SY2345 ) )
| ! [SY2346: $i] :
( ~ ( c_lessequals @ SY2346 @ SY2345 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV243 @ ( c_Message_Oanalz @ SY2346 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1813]) ).
thf(2441,plain,
! [SV244: $i] :
( ( ! [SY2347: $i,SY2348: $i] : ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV244 @ SY2347 ) @ SY2348 @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV244 @ SY2347 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2347 @ SY2348 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1814]) ).
thf(2442,plain,
! [SV245: $i] :
( ( ! [SY2349: $i] :
~ ( c_in @ ( c_Message_Omsg_OHash @ SV245 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2349 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1815]) ).
thf(2443,plain,
! [SV246: $i] :
( ( ! [SY2350: $i,SY2351: $i,SY2352: $i,SY2353: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV246 @ SY2350 ) @ ( c_Event_Oknows @ SV246 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SY2351 @ SY2352 @ SY2353 ) @ SY2350 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1816]) ).
thf(2444,plain,
! [SV247: $i] :
( ( ! [SY2354: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ SV247 ) )
!= ( hAPP @ c_Public_OshrK @ SY2354 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1817]) ).
thf(2445,plain,
! [SV248: $i] :
( ( ! [SY2355: $i,SY2356: $i,SY2357: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV248 @ SY2355 ) @ ( c_Event_Oknows @ SV248 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SY2356 @ SY2357 ) @ SY2355 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1818]) ).
thf(2446,plain,
! [SV249: $i] :
( ( ! [SY2358: $i,SY2359: $i,SY2360: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV249 @ SY2358 ) @ ( c_Event_Oknows @ SV249 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SY2359 @ SY2360 ) @ SY2358 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1819]) ).
thf(2447,plain,
! [SV250: $i] :
( ( ! [SY2361: $i,SY2362: $i,SY2363: $i,SY2364: $i] :
( ~ ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SY2361 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY2365: $i,SY2366: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2362 @ ( c_Message_Omsg_OCrypt @ SY2363 @ ( c_Message_Omsg_OMPair @ SY2364 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2365 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY2366 ) ) ) ) ) @ ( c_List_Oset @ SY2361 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1820]) ).
thf(2448,plain,
! [SV251: $i] :
( ( ! [SY2367: $i] :
( ! [SY2368: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV251 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SY2367 @ SY2368 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY2368 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV251 ) @ tc_Message_Omsg ) )
| ~ ( c_in @ SY2367 @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1821]) ).
thf(2449,plain,
! [SV252: $i] :
( ( ! [SY2369: $i,SY2370: $i,SY2371: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV252 @ SY2369 @ SY2370 ) @ SY2371 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY2370 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2371 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1822]) ).
thf(2450,plain,
! [SV253: $i] :
( ( ! [SY2372: $i,SY2373: $i] :
( ( c_Event_Oknows @ SV253 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV253 @ SY2372 ) @ SY2373 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY2372 @ ( c_Event_Oknows @ SV253 @ SY2373 ) @ tc_Message_Omsg ) )
| ( SV253 = c_Message_Oagent_OSpy ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1823]) ).
thf(2451,plain,
! [SV254: $i] :
( ( ! [SY2374: $i,SY2375: $i,SY2376: $i] :
( ~ ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SY2374 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY2375 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY2377: $i,SY2378: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2375 ) @ ( c_Message_Omsg_OMPair @ SY2376 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2377 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY2378 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2374 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1824]) ).
thf(2452,plain,
! [SV255: $i] :
( ( ! [SY2379: $i] :
( ~ ( c_in @ SV255 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2379 ) ) ) @ tc_nat )
| ~ ( c_in @ SY2379 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ SV255 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV255 ) @ ( c_Event_Oused @ SY2379 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1825]) ).
thf(2453,plain,
! [SV256: $i] :
( ( ! [SY2380: $i,SY2381: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SY2380 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2380 @ SY2381 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SY2380 ) @ SY2381 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV256 ) ) @ ( c_Message_Oanalz @ SY2381 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1826]) ).
thf(2454,plain,
! [SV257: $i] :
( ( ! [SY2382: $i,SY2383: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SY2382 ) @ SY2383 @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SY2382 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2382 @ SY2383 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV257 ) ) @ ( c_Message_Oanalz @ SY2383 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1827]) ).
thf(2455,plain,
! [SV258: $i] :
( ( ! [SY2384: $i] :
( ( c_in @ SV258 @ SY2384 @ tc_Message_Oagent )
| ! [SY2385: $i,SY2386: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SY2385 ) @ SV258 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY2386 ) @ SY2384 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1828]) ).
thf(2456,plain,
! [SV259: $i] :
( ( ! [SY2387: $i,SY2388: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV259 ) @ SY2387 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV259 ) @ SY2388 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SY2387 @ SY2388 @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1829]) ).
thf(2457,plain,
! [SV260: $i] :
( ( ! [SY2389: $i,SY2390: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ SV260 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY2389 ) @ SY2390 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1830]) ).
thf(2458,plain,
! [SV261: $i] :
( ( ! [SY2391: $i,SY2392: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2391 @ tc_nat @ tc_Message_Omsg ) @ SY2392 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ SY2392 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV261 @ SY2391 @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1831]) ).
thf(2459,plain,
! [SV262: $i] :
( ( ! [SY2393: $i,SY2394: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2393 @ tc_nat @ tc_Message_Omsg ) @ SY2394 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV262 @ SY2393 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ SY2394 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1832]) ).
thf(2460,plain,
! [SV263: $i] :
( ( ! [SY2395: $i,SY2396: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2395 @ tc_nat @ tc_Message_Omsg ) @ SY2396 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV263 @ SY2395 @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2395 @ tc_nat @ tc_Message_Omsg ) @ SY2396 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1833]) ).
thf(2461,plain,
! [SV264: $i] :
( ( ! [SY2397: $i] :
( ! [SY2398: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV264 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2397 @ tc_nat @ tc_Message_Omsg ) @ SY2398 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV264 @ SY2397 @ tc_nat )
| ~ ( c_in @ SV264 @ SY2397 @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1834]) ).
thf(2462,plain,
! [SV265: $i] :
( ( ! [SY2399: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SY2399 ) @ tc_Message_Omsg )
| ! [SY2400: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2400 @ SY2399 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ! [V_H: $i] :
( ~ ( c_lessequals @ V_H @ SY2399 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SY2400 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1835]) ).
thf(2463,plain,
! [SV266: $i] :
( ( ! [SY2402: $i,SY2403: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2402 @ SY2403 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SY2403 ) @ tc_Message_Omsg )
| ! [V_H: $i] :
( ~ ( c_lessequals @ V_H @ SY2403 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SY2402 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ V_H ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1836]) ).
thf(2464,plain,
! [SV267: $i] :
( ( ! [SY2405: $i] :
( ( c_in @ SV267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2405 ) ) @ ( c_Message_Oparts @ SY2405 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ! [SY2406: $i] :
( ~ ( c_in @ SY2406 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2405 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV267 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY2406 @ SY2405 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1837]) ).
thf(2465,plain,
! [SV268: $i] :
( ( ! [SY2407: $i,SY2408: $i,SY2409: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV268 @ SY2407 @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV268 @ SY2407 @ SY2408 @ SY2409 ) ) @ ( c_List_Oset @ SY2409 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ SV268 @ SY2407 @ SY2408 @ SY2409 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1838]) ).
thf(2466,plain,
! [SV269: $i] :
( ( ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ SV269 ) ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1839]) ).
thf(2467,plain,
! [SV270: $i] :
( ( ! [SY2410: $i] :
( ( SV270 = SY2410 )
| ! [SY2411: $i,SY2412: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV270 ) @ SY2411 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY2410 ) @ SY2412 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1840]) ).
thf(2468,plain,
! [SV271: $i] :
( ( ! [SY2413: $i,SY2414: $i,SY2415: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV271 ) @ SY2413 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY2414 ) @ SY2415 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1841]) ).
thf(2469,plain,
! [SV272: $i] :
( ( ! [SY2416: $i,SY2417: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV272 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SY2416 @ SY2417 ) @ SV272 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1842]) ).
thf(2470,plain,
! [SV273: $i] :
( ( ( c_in @ SV273 @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
| ! [SY2418: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SY2418 ) @ SV273 ) @ ( c_List_Oset @ SY2418 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SY2418 ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ SV273 @ SY2418 ) @ SV273 ) @ ( c_List_Oset @ SY2418 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV273 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2418 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1843]) ).
thf(2471,plain,
! [SV274: $i] :
( ( ! [SY2419: $i,SY2420: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV274 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SY2419 @ SY2420 ) @ SV274 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1844]) ).
thf(2472,plain,
! [SV275: $i] :
( ( ! [SY2421: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2421 ) ) @ tc_Message_Omsg )
| ! [SY2422: $i] :
( ( c_in @ SV275 @ SY2422 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2422 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2421 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ SY2422 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SY2421 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1845]) ).
thf(2473,plain,
! [SV276: $i] :
( ( ! [SY2423: $i,SY2424: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV276 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2423 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2424 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV276 @ SY2423 @ tc_nat )
| ~ ( c_lessequals @ SY2423 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SY2424 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1846]) ).
thf(2474,plain,
! [SV277: $i] :
( ( ! [SY2425: $i,SY2426: $i,SY2427: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV277 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SY2425 @ SY2426 @ SY2427 ) @ SV277 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1847]) ).
thf(2475,plain,
! [SV278: $i] :
( ( ! [SY2428: $i] :
( ( c_in @ SV278 @ ( c_Message_OkeysFor @ SY2428 ) @ tc_nat )
| ~ ( c_in @ SV278 @ c_Message_OsymKeys @ tc_nat )
| ! [SY2429: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV278 @ SY2429 ) @ SY2428 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1848]) ).
thf(2476,plain,
! [SV279: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV279 ) ) @ ( c_Event_Oused @ SV279 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1849]) ).
thf(2477,plain,
! [SV280: $i] :
( ( ! [SY2430: $i,SY2431: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2430 @ tc_nat @ tc_Message_Omsg ) @ SY2431 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SY2431 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SY2431 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1850]) ).
thf(2478,plain,
! [SV281: $i] :
( ( ! [SY2432: $i,SY2433: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2432 @ tc_nat @ tc_Message_Omsg ) @ SY2433 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ SY2433 ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2432 @ tc_nat @ tc_Message_Omsg ) @ SY2433 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1851]) ).
thf(2479,plain,
! [SV282: $i] :
( ( ! [SY2434: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV282 ) @ ( c_Message_OkeysFor @ SY2434 ) @ tc_nat )
| ! [SY2435: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV282 @ SY2435 ) @ SY2434 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1852]) ).
thf(2480,plain,
! [SV283: $i] :
( ( ! [SY2436: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV283 ) ) @ ( c_Message_Oparts @ SY2436 ) @ tc_Message_Omsg )
| ! [SY2437: $i] :
( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2437 @ SY2436 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
| ! [SY2438: $i] :
( ~ ( c_in @ SY2438 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2436 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY2438 @ SY2437 @ tc_Message_Omsg ) ) ) @ tc_nat ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1853]) ).
thf(2481,plain,
! [SV284: $i] :
( ( ! [SY2439: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV284 ) @ SY2439 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV284 ) @ ( c_Message_Oanalz @ SY2439 ) @ tc_Message_Omsg ) )
| ( c_in @ SV284 @ ( c_Message_OkeysFor @ ( c_Message_Oanalz @ SY2439 ) ) @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1854]) ).
thf(2482,plain,
! [SV285: $i] :
( ( ! [SY2440: $i,SY2441: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SY2440 ) ) @ ( c_Message_Oanalz @ SY2441 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SY2440 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2441 ) ) @ tc_Message_Omsg )
| ( c_in @ SV285 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2441 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1855]) ).
thf(2483,plain,
! [SV286: $i] :
( ( ! [SY2442: $i,SY2443: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SY2442 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2443 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SY2442 ) ) @ ( c_Message_Oanalz @ SY2443 ) @ tc_Message_Omsg )
| ( c_in @ SV286 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2443 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1856]) ).
thf(2484,plain,
! [SV287: $i] :
( ( ! [SY2444: $i,SY2445: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2444 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2445 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2445 ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ SY2444 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SY2445 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1857]) ).
thf(2485,plain,
! [SV288: $i] :
( ( ! [SY2446: $i,SY2447: $i,SY2448: $i,SY2449: $i] :
( ( hBOOL @ ( hAPP @ SV288 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ ( c_List_Oappend @ SY2446 @ ( c_List_Olist_OCons @ SY2447 @ SY2448 @ SY2449 ) @ SY2449 ) @ SY2449 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ SY2446 @ SY2449 ) @ ( c_List_Oset @ SY2446 @ SY2449 ) @ SY2449 )
| ~ ( hBOOL @ ( hAPP @ SV288 @ SY2447 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1858]) ).
thf(2486,plain,
! [SV289: $i] :
( ( ! [SY2450: $i,SY2451: $i,SY2452: $i,SY2453: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ ( c_List_Oappend @ SY2450 @ ( c_List_Olist_OCons @ SY2451 @ SY2452 @ SY2453 ) @ SY2453 ) @ SY2453 ) @ ( c_List_Oset @ ( c_List_Oappend @ SY2450 @ ( c_List_Olist_OCons @ SY2451 @ SY2452 @ SY2453 ) @ SY2453 ) @ SY2453 ) @ SY2453 )
| ( hBOOL @ ( hAPP @ SV289 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ SY2452 @ SY2453 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV289 @ SY2451 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1859]) ).
thf(2487,plain,
! [SV290: $i] :
( ( ! [SY2454: $i,SY2455: $i,SY2456: $i,SY2457: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ ( c_List_Oappend @ SY2454 @ ( c_List_Olist_OCons @ SY2455 @ SY2456 @ SY2457 ) @ SY2457 ) @ SY2457 ) @ ( c_List_Oset @ ( c_List_Oappend @ SY2454 @ ( c_List_Olist_OCons @ SY2455 @ SY2456 @ SY2457 ) @ SY2457 ) @ SY2457 ) @ SY2457 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ SY2454 @ SY2457 ) @ ( c_List_Oset @ SY2454 @ SY2457 ) @ SY2457 )
| ~ ( hBOOL @ ( hAPP @ SV290 @ SY2455 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1860]) ).
thf(2488,plain,
! [SV291: $i] :
( ( ! [SY2458: $i,SY2459: $i,SY2460: $i,SY2461: $i] :
( ( hBOOL @ ( hAPP @ SV291 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ ( c_List_Oappend @ SY2458 @ ( c_List_Olist_OCons @ SY2459 @ SY2460 @ SY2461 ) @ SY2461 ) @ SY2461 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ SY2460 @ SY2461 ) @ ( c_List_Oset @ SY2460 @ SY2461 ) @ SY2461 )
| ~ ( hBOOL @ ( hAPP @ SV291 @ SY2459 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1861]) ).
thf(2489,plain,
! [SV292: $i] :
( ( ! [SY2462: $i,SY2463: $i,SY2464: $i,SY2465: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ ( c_List_Oappend @ SY2462 @ ( c_List_Olist_OCons @ SY2463 @ SY2464 @ SY2465 ) @ SY2465 ) @ SY2465 ) @ ( c_List_Oset @ ( c_List_Oappend @ SY2462 @ ( c_List_Olist_OCons @ SY2463 @ SY2464 @ SY2465 ) @ SY2465 ) @ SY2465 ) @ SY2465 )
| ( hBOOL @ ( hAPP @ SV292 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ SY2462 @ SY2465 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV292 @ SY2463 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1862]) ).
thf(2490,plain,
! [SV293: $i] :
( ( ! [SY2466: $i,SY2467: $i,SY2468: $i,SY2469: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ ( c_List_Oappend @ SY2466 @ ( c_List_Olist_OCons @ SY2467 @ SY2468 @ SY2469 ) @ SY2469 ) @ SY2469 ) @ ( c_List_Oset @ ( c_List_Oappend @ SY2466 @ ( c_List_Olist_OCons @ SY2467 @ SY2468 @ SY2469 ) @ SY2469 ) @ SY2469 ) @ SY2469 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ SY2468 @ SY2469 ) @ ( c_List_Oset @ SY2468 @ SY2469 ) @ SY2469 )
| ~ ( hBOOL @ ( hAPP @ SV293 @ SY2467 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1863]) ).
thf(2491,plain,
! [SV294: $i] :
( ( ! [SY2470: $i,SY2471: $i] :
( ( c_Event_Oknows @ SV294 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV294 @ SY2470 ) @ SY2471 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY2470 @ ( c_Event_Oknows @ SV294 @ SY2471 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1864]) ).
thf(2492,plain,
! [SV295: $i] :
( ( ! [SY2472: $i,SY2473: $i,SY2474: $i] :
( ( c_Event_Oknows @ SV295 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV295 @ SY2472 @ SY2473 ) @ SY2474 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY2473 @ ( c_Event_Oknows @ SV295 @ SY2474 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1865]) ).
thf(2493,plain,
! [SV296: $i] :
( ( ! [SY2475: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV296 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2475 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
| ~ ( c_in @ SV296 @ SY2475 @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1866]) ).
thf(2494,plain,
! [SV297: $i] :
( ( ! [SY2476: $i] :
( ( c_in @ SV297 @ SY2476 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV297 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2476 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1867]) ).
thf(2495,plain,
! [SV298: $i] :
( ( ! [SY2477: $i] :
( ( ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV298 @ SY2477 @ tc_Message_Omsg ) ) )
= ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2477 ) ) )
| ~ ( c_in @ SV298 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2477 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1868]) ).
thf(2496,plain,
! [SV299: $i] :
( ( ! [SY2478: $i,SY2479: $i,SY2480: $i] :
( ( c_in @ SV299 @ ( c_List_Oset @ ( c_List_Oappend @ SY2478 @ ( c_List_Olist_OCons @ SV299 @ SY2479 @ SY2480 ) @ SY2480 ) @ SY2480 ) @ SY2480 )
| ( c_in @ SV299 @ ( c_List_Oset @ SY2478 @ SY2480 ) @ SY2480 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1869]) ).
thf(2497,plain,
! [SV300: $i] :
( ( ! [SY2481: $i,SY2482: $i,SY2483: $i] :
( ( c_in @ SV300 @ ( c_List_Oset @ ( c_List_Oappend @ SY2481 @ ( c_List_Olist_OCons @ SV300 @ SY2482 @ SY2483 ) @ SY2483 ) @ SY2483 ) @ SY2483 )
| ( c_in @ SV300 @ ( c_List_Oset @ SY2482 @ SY2483 ) @ SY2483 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1870]) ).
thf(2498,plain,
! [SV301: $i] :
( ( ! [SY2484: $i,SY2485: $i,SY2486: $i] : ( c_in @ SV301 @ ( c_List_Oset @ ( c_List_Oappend @ SY2484 @ ( c_List_Olist_OCons @ SV301 @ SY2485 @ SY2486 ) @ SY2486 ) @ SY2486 ) @ SY2486 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1871]) ).
thf(2499,plain,
! [SV302: $i] :
( ( ! [SY2487: $i,SY2488: $i,SY2489: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV302 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SY2487 @ SY2488 @ SY2489 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY2489 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV302 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1872]) ).
thf(2500,plain,
! [SV303: $i] :
( ( ! [SY2490: $i,SY2491: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SY2490 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2491 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2491 ) ) @ tc_Message_Omsg )
| ( c_in @ SY2490 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SY2491 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1873]) ).
thf(2501,plain,
! [SV304: $i] :
( ( ! [SY2492: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2492 ) ) @ tc_Message_Omsg )
| ! [SY2493: $i] :
( ( SV304 = SY2493 )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SY2493 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2492 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ( c_in @ SY2493 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SY2492 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1874]) ).
thf(2502,plain,
! [SV305: $i] :
( ( ( c_in @ SV305 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ! [SY2494: $i] :
( ~ ( c_in @ SY2494 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2494 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1875]) ).
thf(2503,plain,
! [SV306: $i] :
( ( ! [SY2495: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV306 ) @ SY2495 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV306 ) @ ( c_Message_Oanalz @ SY2495 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1876]) ).
thf(2504,plain,
! [SV307: $i] :
( ( ! [SY2496: $i,SY2497: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV307 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SY2496 ) @ SY2497 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SY2496 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV307 ) @ SY2497 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1877]) ).
thf(2505,plain,
! [SV308: $i] :
( ( ! [SY2498: $i,SY2499: $i,SY2500: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV308 @ SY2498 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SY2499 ) @ SY2500 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SY2499 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV308 @ SY2498 ) @ SY2500 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1878]) ).
thf(2506,plain,
! [SV309: $i] :
( ( ! [SY2501: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV309 ) @ SY2501 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV309 ) @ ( c_Message_Oanalz @ SY2501 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1879]) ).
thf(2507,plain,
! [SV310: $i] :
( ( ! [SY2502: $i,SY2503: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV310 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SY2502 ) @ SY2503 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SY2502 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV310 ) @ SY2503 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1880]) ).
thf(2508,plain,
! [SV311: $i] :
( ( ! [SY2504: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV311 ) @ SY2504 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV311 ) @ ( c_Message_Oparts @ SY2504 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1881]) ).
thf(2509,plain,
! [SV312: $i] :
( ( ! [SY2505: $i,SY2506: $i,SY2507: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV312 @ SY2505 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SY2506 ) @ SY2507 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SY2506 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV312 @ SY2505 ) @ SY2507 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1882]) ).
thf(2510,plain,
! [SV313: $i] :
( ( ! [SY2508: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV313 ) @ SY2508 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV313 ) @ ( c_Message_Oparts @ SY2508 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1883]) ).
thf(2511,plain,
! [SV314: $i] :
( ( ! [SY2509: $i,SY2510: $i,SY2511: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV314 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SY2509 @ SY2510 ) @ SY2511 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SY2509 @ SY2510 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV314 ) @ SY2511 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1884]) ).
thf(2512,plain,
! [SV315: $i] :
( ( ! [SY2512: $i] :
( ( c_in @ SV315 @ ( c_Message_Osynth @ SY2512 ) @ tc_Message_Omsg )
| ! [SY2513: $i] :
( ~ ( c_in @ SY2513 @ ( c_Message_Osynth @ SY2512 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV315 @ ( c_Message_Osynth @ ( c_Set_Oinsert @ SY2513 @ SY2512 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1885]) ).
thf(2513,plain,
! [SV316: $i] :
( ( ! [SY2514: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV316 ) @ SY2514 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV316 ) @ ( c_Message_Oparts @ SY2514 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1886]) ).
thf(2514,plain,
! [SV317: $i] :
( ( ! [SY2515: $i] :
( ( c_in @ SV317 @ ( c_Message_Oanalz @ SY2515 ) @ tc_Message_Omsg )
| ! [SY2516: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY2516 ) @ ( c_Message_Oanalz @ SY2515 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2516 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY2516 @ SV317 ) @ ( c_Message_Oanalz @ SY2515 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1887]) ).
thf(2515,plain,
! [SV318: $i] :
( ( ! [SY2517: $i,SY2518: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV318 @ SY2517 ) @ SY2518 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV318 @ SY2517 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV318 @ ( c_Set_Oinsert @ SY2517 @ SY2518 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1888]) ).
thf(2516,plain,
! [SV319: $i] :
( ( ! [SY2519: $i,SY2520: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV319 @ SY2519 ) @ SY2520 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV319 @ SY2519 ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY2519 @ SY2520 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1889]) ).
thf(2517,plain,
! [SV320: $i] :
( ( ! [SY2521: $i,SY2522: $i,SY2523: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV320 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SY2521 @ SY2522 ) @ SY2523 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SY2521 @ SY2522 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV320 ) @ SY2523 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1890]) ).
thf(2518,plain,
! [SV321: $i] :
( ( ! [SY2524: $i] :
( ( c_in @ SV321 @ ( c_Message_Oanalz @ SY2524 ) @ tc_Message_Omsg )
| ! [SY2525: $i] :
( ~ ( c_in @ SY2525 @ ( c_Message_Oanalz @ SY2524 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV321 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2525 @ SY2524 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1891]) ).
thf(2519,plain,
! [SV322: $i] :
( ( ! [SY2526: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV322 @ SY2526 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SY2526 ) )
| ~ ( c_in @ SV322 @ ( c_Message_Oanalz @ SY2526 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1892]) ).
thf(2520,plain,
! [SV323: $i] :
( ( ! [SY2527: $i,SY2528: $i] :
( ( c_in @ SV323 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2527 @ SY2528 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV323 @ ( c_Message_Oanalz @ SY2528 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1893]) ).
thf(2521,plain,
! [SV324: $i] :
( ( ! [SY2529: $i,SY2530: $i,SY2531: $i,SY2532: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SY2529 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SY2530 @ SY2531 ) @ SY2532 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SY2530 @ SY2531 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SY2529 ) @ SY2532 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1894]) ).
thf(2522,plain,
! [SV325: $i] :
( ( ! [SY2533: $i,SY2534: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV325 @ SY2533 ) @ SY2534 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV325 @ SY2533 ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV325 @ ( c_Set_Oinsert @ SY2533 @ SY2534 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1895]) ).
thf(2523,plain,
! [SV326: $i] :
( ( ! [SY2535: $i,SY2536: $i] :
( ( c_in @ SV326 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY2535 @ SY2536 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV326 @ ( c_Message_Oparts @ SY2536 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1896]) ).
thf(2524,plain,
! [SV327: $i] :
( ( ! [SY2537: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV327 @ SY2537 @ tc_Message_Omsg ) )
= ( c_Message_Oparts @ SY2537 ) )
| ~ ( c_in @ SV327 @ ( c_Message_Oparts @ SY2537 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1897]) ).
thf(2525,plain,
! [SV328: $i] :
( ( ! [SY2538: $i,SY2539: $i] :
( ( c_List_Oset @ ( c_List_Olist_OCons @ SV328 @ SY2538 @ SY2539 ) @ SY2539 )
= ( c_Set_Oinsert @ SV328 @ ( c_List_Oset @ SY2538 @ SY2539 ) @ SY2539 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1898]) ).
thf(2526,plain,
! [SV329: $i] :
( ( ! [SY2540: $i,SY2541: $i,SY2542: $i,SY2543: $i] :
( ( ( c_List_Oappend @ SV329 @ ( c_List_Olist_OCons @ SY2540 @ ( c_List_Olist_ONil @ SY2541 ) @ SY2541 ) @ SY2541 )
!= ( c_List_Oappend @ SY2542 @ ( c_List_Olist_OCons @ SY2543 @ ( c_List_Olist_ONil @ SY2541 ) @ SY2541 ) @ SY2541 ) )
| ( SY2540 = SY2543 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1899]) ).
thf(2527,plain,
! [SV330: $i] :
( ( ! [SY2544: $i,SY2545: $i,SY2546: $i] :
( ! [SY2547: $i] :
( ( c_List_Oappend @ SV330 @ ( c_List_Olist_OCons @ SY2544 @ ( c_List_Olist_ONil @ SY2545 ) @ SY2545 ) @ SY2545 )
!= ( c_List_Oappend @ SY2546 @ ( c_List_Olist_OCons @ SY2547 @ ( c_List_Olist_ONil @ SY2545 ) @ SY2545 ) @ SY2545 ) )
| ( SV330 = SY2546 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1900]) ).
thf(2528,plain,
! [SV331: $i] :
( ( ! [SY2548: $i,SY2549: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ SV331 ) @ ( c_List_Olist_OCons @ SY2548 @ SY2549 @ SV331 ) @ SV331 )
= ( c_List_Olist_OCons @ SY2548 @ SY2549 @ SV331 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1901]) ).
thf(2529,plain,
! [SV332: $i] :
( ( ! [SY2550: $i,SY2551: $i] :
( ( c_List_Olist_OCons @ SV332 @ SY2550 @ SY2551 )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ SY2551 ) @ ( c_List_Olist_OCons @ SV332 @ SY2550 @ SY2551 ) @ SY2551 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1902]) ).
thf(2530,plain,
! [SV333: $i] :
( ( ! [SY2552: $i,SY2553: $i,SY2554: $i] : ( c_in @ ( hAPP @ SV333 @ SY2552 ) @ ( c_Set_Oimage @ SV333 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SY2553 @ tc_bool ) ) @ SY2553 @ SY2554 ) @ SY2554 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1903]) ).
thf(2531,plain,
! [SV334: $i] :
( ( ! [SY2555: $i,SY2556: $i,SY2557: $i] :
( ! [SY2558: $i] :
( ( c_Set_Oinsert @ ( hAPP @ SV334 @ SY2555 ) @ ( c_Set_Oimage @ SV334 @ SY2556 @ SY2557 @ SY2558 ) @ SY2558 )
= ( c_Set_Oimage @ SV334 @ SY2556 @ SY2557 @ SY2558 ) )
| ~ ( c_in @ SY2555 @ SY2556 @ SY2557 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1904]) ).
thf(2532,plain,
! [SV335: $i] :
( ( ! [SY2559: $i,SY2560: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV335 ) @ SY2559 ) ) @ ( c_Set_Oimage @ c_Public_OshrK @ SY2560 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1905]) ).
thf(2533,plain,
! [SV336: $i] :
( ( c_in @ ( hAPP @ c_Public_OshrK @ SV336 ) @ c_Message_OsymKeys @ tc_nat )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1906]) ).
thf(2534,plain,
! [SV337: $i] :
( ( ! [SY2561: $i,SY2562: $i,SY2563: $i] :
( ( c_List_Oappend @ SV337 @ ( c_List_Oappend @ SY2561 @ SY2562 @ SY2563 ) @ SY2563 )
= ( c_List_Oappend @ ( c_List_Oappend @ SV337 @ SY2561 @ SY2563 ) @ SY2562 @ SY2563 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1907]) ).
thf(2535,plain,
! [SV338: $i] :
( ( ! [SY2564: $i,SY2565: $i,SY2566: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ SV338 @ SY2564 @ SY2565 ) @ SY2566 @ SY2565 )
= ( c_List_Oappend @ SV338 @ ( c_List_Oappend @ SY2564 @ SY2566 @ SY2565 ) @ SY2565 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1908]) ).
thf(2536,plain,
! [SV339: $i] :
( ( ! [SY2567: $i,SY2568: $i,SY2569: $i] :
( ( c_List_Oappend @ SV339 @ ( c_List_Oappend @ SY2567 @ SY2568 @ SY2569 ) @ SY2569 )
= ( c_List_Oappend @ ( c_List_Oappend @ SV339 @ SY2567 @ SY2569 ) @ SY2568 @ SY2569 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1909]) ).
thf(2537,plain,
! [SV340: $i] :
( ( ! [SY2570: $i,SY2571: $i,SY2572: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ SV340 @ SY2570 @ SY2571 ) @ SY2572 @ SY2571 )
= ( c_List_Oappend @ SV340 @ ( c_List_Oappend @ SY2570 @ SY2572 @ SY2571 ) @ SY2571 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1910]) ).
thf(2538,plain,
! [SV341: $i] :
( ( ! [SY2573: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV341 ) @ SY2573 ) ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1911]) ).
thf(2539,plain,
! [SV342: $i] :
( ( ! [SY2574: $i,SY2575: $i] : ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV342 @ SY2574 @ SY2575 ) @ SV342 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1912]) ).
thf(2540,plain,
! [SV343: $i] :
( ( ! [SY2576: $i,SY2577: $i,SY2578: $i,SY2579: $i] :
( ( c_Set_Oimage @ SV343 @ ( c_Set_Oinsert @ SY2576 @ SY2577 @ SY2578 ) @ SY2578 @ SY2579 )
= ( c_Set_Oinsert @ ( hAPP @ SV343 @ SY2576 ) @ ( c_Set_Oimage @ SV343 @ SY2577 @ SY2578 @ SY2579 ) @ SY2579 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1913]) ).
thf(2541,plain,
! [SV344: $i] :
( ( ! [SY2580: $i] : ( hBOOL @ ( hAPP @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV344 @ tc_bool ) ) @ SY2580 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1914]) ).
thf(2542,plain,
! [SV345: $i] :
( ( ( ( hAPP @ c_Message_OinvKey @ SV345 )
= SV345 )
| ~ ( c_in @ SV345 @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1915]) ).
thf(2543,plain,
! [SV346: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV346 ) @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV346 @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1916]) ).
thf(2544,plain,
! [SV347: $i] :
( ( ( c_in @ SV347 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ SV347 ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1917]) ).
thf(2545,plain,
! [SV348: $i] :
( ( ! [SY2581: $i] :
( ( hBOOL @ ( hAPP @ SV348 @ SY2581 ) )
| ! [SY2582: $i] :
( ( SY2582 = SY2581 )
| ! [SY2583: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SY2582 @ SV348 @ SY2583 ) @ SY2581 ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1918]) ).
thf(2546,plain,
! [SV349: $i] :
( ( ! [SY2584: $i,SY2585: $i] :
( ( c_Set_Oinsert @ SV349 @ ( c_Set_Oinsert @ SV349 @ SY2584 @ SY2585 ) @ SY2585 )
= ( c_Set_Oinsert @ SV349 @ SY2584 @ SY2585 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1919]) ).
thf(2547,plain,
! [SV350: $i] :
( ( ! [SY2586: $i,SY2587: $i,SY2588: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV350 ) @ SY2586 ) ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY2587 ) @ SY2588 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1920]) ).
thf(2548,plain,
! [SV351: $i] :
( ( ! [SY2589: $i,SY2590: $i] :
( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV351 ) @ SY2589 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV351 ) @ SY2590 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SY2589 @ SY2590 @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1921]) ).
thf(2549,plain,
! [SV352: $i] :
( ( ! [SY2591: $i] :
( ( c_in @ SV352 @ SY2591 @ tc_Message_Oagent )
| ! [SY2592: $i,SY2593: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SY2592 ) @ SV352 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY2593 ) @ SY2591 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1922]) ).
thf(2550,plain,
! [SV353: $i] :
( ( ! [SY2594: $i] :
( ( SV353 = SY2594 )
| ! [SY2595: $i,SY2596: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV353 ) @ SY2595 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY2594 ) @ SY2596 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1923]) ).
thf(2551,plain,
! [SV354: $i] :
( ( ! [SY2597: $i,SY2598: $i,SY2599: $i] :
( ( ( c_List_Oappend @ SV354 @ SY2597 @ SY2598 )
!= ( c_List_Oappend @ SV354 @ SY2599 @ SY2598 ) )
| ( SY2597 = SY2599 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1924]) ).
thf(2552,plain,
! [SV355: $i] :
( ( ! [SY2600: $i,SY2601: $i,SY2602: $i] :
( ( ( c_List_Oappend @ SV355 @ SY2600 @ SY2601 )
!= ( c_List_Oappend @ SY2602 @ SY2600 @ SY2601 ) )
| ( SV355 = SY2602 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1925]) ).
thf(2553,plain,
! [SV356: $i] :
( ( ! [SY2603: $i,SY2604: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV356 ) @ SY2603 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SY2604 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1926]) ).
thf(2554,plain,
! [SV357: $i] :
( ( ! [SY2605: $i,SY2606: $i,SY2607: $i] :
( ( c_Set_Oinsert @ SV357 @ ( c_Set_Oinsert @ SY2605 @ SY2606 @ SY2607 ) @ SY2607 )
= ( c_Set_Oinsert @ SY2605 @ ( c_Set_Oinsert @ SV357 @ SY2606 @ SY2607 ) @ SY2607 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1927]) ).
thf(2555,plain,
! [SV358: $i] :
( ( ! [SY2608: $i,SY2609: $i,SY2610: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ SV358 @ SY2608 @ SY2609 ) @ SY2610 @ SY2609 )
= ( c_List_Olist_OCons @ SV358 @ ( c_List_Oappend @ SY2608 @ SY2610 @ SY2609 ) @ SY2609 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1928]) ).
thf(2556,plain,
! [SV359: $i] :
( ( ! [SY2611: $i,SY2612: $i,SY2613: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ SV359 @ SY2611 @ SY2612 ) @ SY2613 @ SY2612 )
= ( c_List_Olist_OCons @ SV359 @ ( c_List_Oappend @ SY2611 @ SY2613 @ SY2612 ) @ SY2612 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1929]) ).
thf(2557,plain,
! [SV360: $i] :
( ( ! [SY2614: $i,SY2615: $i,SY2616: $i] :
( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV360 @ SY2614 @ SY2615 ) @ SY2616 ) )
| ~ ( hBOOL @ ( hAPP @ SY2614 @ SY2616 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1930]) ).
thf(2558,plain,
! [SV361: $i] :
( ( ! [SY2617: $i,SY2618: $i,SY2619: $i] :
( ( c_List_Olist_OCons @ SV361 @ ( c_List_Oappend @ SY2617 @ SY2618 @ SY2619 ) @ SY2619 )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ SV361 @ SY2617 @ SY2619 ) @ SY2618 @ SY2619 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1931]) ).
thf(2559,plain,
! [SV362: $i] :
( ( ! [SY2620: $i,SY2621: $i,SY2622: $i] :
( ( c_List_Olist_OCons @ SV362 @ ( c_List_Oappend @ SY2620 @ SY2621 @ SY2622 ) @ SY2622 )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ SV362 @ SY2620 @ SY2622 ) @ SY2621 @ SY2622 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1932]) ).
thf(2560,plain,
! [SV363: $i] :
( ( ! [SY2623: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV363 ) @ SY2623 ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1933]) ).
thf(2561,plain,
! [SV364: $i] :
( ( ! [SY2624: $i,SY2625: $i,SY2626: $i,SY2627: $i] :
( ( c_Set_Oinsert @ ( hAPP @ SV364 @ SY2624 ) @ ( c_Set_Oimage @ SV364 @ SY2625 @ SY2626 @ SY2627 ) @ SY2627 )
= ( c_Set_Oimage @ SV364 @ ( c_Set_Oinsert @ SY2624 @ SY2625 @ SY2626 ) @ SY2626 @ SY2627 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1934]) ).
thf(2562,plain,
! [SV365: $i] :
( ( ! [SY2628: $i,SY2629: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ SV365 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY2628 ) @ SY2629 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1935]) ).
thf(2563,plain,
! [SV366: $i] :
( ( ~ ( c_in @ SV366 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ! [SY2630: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV366 ) @ ( c_Event_Oused @ SY2630 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1936]) ).
thf(2564,plain,
! [SV367: $i] :
( ( ! [SY2631: $i,SY2632: $i,SY2633: $i] :
( ( c_in @ SV367 @ ( c_Set_Oinsert @ SY2631 @ SY2632 @ SY2633 ) @ SY2633 )
| ~ ( c_in @ SV367 @ SY2632 @ SY2633 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1937]) ).
thf(2565,plain,
! [SV368: $i] :
( ( ! [SY2634: $i,SY2635: $i,SY2636: $i] :
( ( c_in @ SV368 @ ( c_Set_Oinsert @ SY2634 @ SY2635 @ SY2636 ) @ SY2636 )
| ~ ( c_in @ SV368 @ SY2635 @ SY2636 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1938]) ).
thf(2566,plain,
! [SV369: $i] :
( ( ! [SY2637: $i,SY2638: $i] :
( ( c_in @ SV369 @ SY2637 @ SY2638 )
| ! [SY2639: $i] :
( ( SV369 = SY2639 )
| ~ ( c_in @ SV369 @ ( c_Set_Oinsert @ SY2639 @ SY2637 @ SY2638 ) @ SY2638 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1939]) ).
thf(2567,plain,
! [SV370: $i] :
( ( ! [SY2640: $i] : ( c_in @ SV370 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SY2640 @ tc_bool ) ) @ SY2640 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1940]) ).
thf(2568,plain,
! [SV371: $i] :
( ( ! [SY2641: $i,SY2642: $i] : ( c_in @ SV371 @ ( c_Set_Oinsert @ SV371 @ SY2641 @ SY2642 ) @ SY2642 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1941]) ).
thf(2569,plain,
! [SV372: $i] :
( ( ! [SY2643: $i,SY2644: $i] : ( c_in @ SV372 @ ( c_Set_Oinsert @ SV372 @ SY2643 @ SY2644 ) @ SY2644 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1942]) ).
thf(2570,plain,
! [SV373: $i] :
( ( ! [SY2645: $i,SY2646: $i] : ( c_in @ SV373 @ ( c_Set_Oinsert @ SV373 @ SY2645 @ SY2646 ) @ SY2646 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1943]) ).
thf(2571,plain,
! [SV374: $i] :
( ( ! [SY2647: $i,SY2648: $i,SY2649: $i] :
( ( ( c_Set_Oinsert @ SV374 @ SY2647 @ SY2648 )
!= ( c_Set_Oinsert @ SV374 @ SY2649 @ SY2648 ) )
| ( c_in @ SV374 @ SY2649 @ SY2648 )
| ( SY2647 = SY2649 )
| ( c_in @ SV374 @ SY2647 @ SY2648 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1944]) ).
thf(2572,plain,
! [SV375: $i] :
( ( ! [SY2650: $i,SY2651: $i] :
( ( ( c_Set_Oinsert @ SV375 @ SY2650 @ SY2651 )
= SY2650 )
| ~ ( c_in @ SV375 @ SY2650 @ SY2651 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1945]) ).
thf(2573,plain,
! [SV376: $i] :
( ( ( c_List_Oappend @ ( c_List_Olist_ONil @ SV376 ) @ ( c_List_Olist_ONil @ SV376 ) @ SV376 )
= ( c_List_Olist_ONil @ SV376 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1946]) ).
thf(2574,plain,
! [SV377: $i] :
( ( ! [SY2652: $i,SY2653: $i] :
( ( SV377
!= ( c_List_Oappend @ SY2652 @ SV377 @ SY2653 ) )
| ( SY2652
= ( c_List_Olist_ONil @ SY2653 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1947]) ).
thf(2575,plain,
! [SV378: $i] :
( ( ! [SY2654: $i,SY2655: $i] :
( ( ( c_List_Oappend @ SV378 @ SY2654 @ SY2655 )
!= SY2654 )
| ( SV378
= ( c_List_Olist_ONil @ SY2655 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1948]) ).
thf(2576,plain,
! [SV379: $i] :
( ( ! [SY2656: $i,SY2657: $i] :
( ( SV379
!= ( c_List_Oappend @ SV379 @ SY2656 @ SY2657 ) )
| ( SY2656
= ( c_List_Olist_ONil @ SY2657 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1949]) ).
thf(2577,plain,
! [SV380: $i] :
( ( ! [SY2658: $i,SY2659: $i] :
( ( ( c_List_Oappend @ SV380 @ SY2658 @ SY2659 )
!= SV380 )
| ( SY2658
= ( c_List_Olist_ONil @ SY2659 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1950]) ).
thf(2578,plain,
! [SV381: $i] :
( ( ! [SY2660: $i,SY2661: $i] :
( ( ( c_List_Oappend @ SV381 @ SY2660 @ SY2661 )
!= ( c_List_Olist_ONil @ SY2661 ) )
| ( SY2660
= ( c_List_Olist_ONil @ SY2661 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1951]) ).
thf(2579,plain,
! [SV382: $i] :
( ( ! [SY2662: $i,SY2663: $i] :
( ( ( c_List_Oappend @ SV382 @ SY2662 @ SY2663 )
!= ( c_List_Olist_ONil @ SY2663 ) )
| ( SV382
= ( c_List_Olist_ONil @ SY2663 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1952]) ).
thf(2580,plain,
! [SV383: $i] :
( ( ! [SY2664: $i,SY2665: $i] :
( ( ( c_List_Olist_ONil @ SV383 )
!= ( c_List_Oappend @ SY2664 @ SY2665 @ SV383 ) )
| ( SY2665
= ( c_List_Olist_ONil @ SV383 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1953]) ).
thf(2581,plain,
! [SV384: $i] :
( ( ! [SY2666: $i] :
( ! [SY2667: $i] :
( ( c_List_Olist_ONil @ SV384 )
!= ( c_List_Oappend @ SY2666 @ SY2667 @ SV384 ) )
| ( SY2666
= ( c_List_Olist_ONil @ SV384 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1954]) ).
thf(2582,plain,
! [SV385: $i] :
( ( ! [SY2668: $i] :
( SV385
= ( c_List_Oappend @ ( c_List_Olist_ONil @ SY2668 ) @ SV385 @ SY2668 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1955]) ).
thf(2583,plain,
! [SV386: $i] :
( ( ! [SY2669: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ SV386 ) @ SY2669 @ SV386 )
= SY2669 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1956]) ).
thf(2584,plain,
! [SV387: $i] :
( ( ! [SY2670: $i] :
( SV387
= ( c_List_Oappend @ SV387 @ ( c_List_Olist_ONil @ SY2670 ) @ SY2670 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1957]) ).
thf(2585,plain,
! [SV388: $i] :
( ( ! [SY2671: $i] :
( SV388
= ( c_List_Oappend @ ( c_List_Olist_ONil @ SY2671 ) @ SV388 @ SY2671 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1958]) ).
thf(2586,plain,
! [SV389: $i] :
( ( ! [SY2672: $i] :
( ( c_List_Oappend @ SV389 @ ( c_List_Olist_ONil @ SY2672 ) @ SY2672 )
= SV389 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1959]) ).
thf(2587,plain,
! [SV390: $i] :
( ( ( c_List_Olist_ONil @ SV390 )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ SV390 ) @ ( c_List_Olist_ONil @ SV390 ) @ SV390 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1960]) ).
thf(2588,plain,
! [SV391: $i] :
( ( ! [SY2673: $i] :
( ( ( c_Message_Oanalz @ SV391 )
!= ( c_Message_Oanalz @ SY2673 ) )
| ! [SY2674: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2674 @ SV391 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2674 @ SY2673 @ tc_Message_Omsg ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1961]) ).
thf(2589,plain,
! [SV392: $i] :
( ( ! [SY2675: $i] :
( ( c_in @ ( hAPP @ c_Public_OshrK @ SV392 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SY2675 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV392 @ SY2675 @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1962]) ).
thf(2590,plain,
! [SV393: $i] :
( ( ! [SY2676: $i] :
( ( c_in @ SV393 @ SY2676 @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Public_OshrK @ SV393 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SY2676 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1963]) ).
thf(2591,plain,
! [SV394: $i] :
( ( ! [SY2677: $i,SY2678: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV394 @ SY2677 ) @ SY2678 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV394 @ SY2677 ) @ ( c_Message_Oanalz @ SY2678 ) @ tc_Message_Omsg ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV394 ) ) @ ( c_Message_Oanalz @ SY2678 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1964]) ).
thf(2592,plain,
! [SV395: $i] :
( ( ! [SY2679: $i,SY2680: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SY2679 ) @ SY2680 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SY2679 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY2679 @ SY2680 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV395 ) ) @ ( c_Message_Oanalz @ SY2680 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1965]) ).
thf(2593,plain,
! [SV396: $i] :
( ( ! [SY2681: $i,SY2682: $i,SY2683: $i,SY2684: $i] :
( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2681 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2682 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SY2681 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY2685: $i,SY2686: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2683 @ SY2684 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2684 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2685 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2686 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2682 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SY2681 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1966]) ).
thf(2594,plain,
! [SV397: $i] :
( ( ! [SY2687: $i,SY2688: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV397 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SY2687 @ SY2688 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV397 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1967]) ).
thf(2595,plain,
! [SV398: $i] :
( ( ! [SY2689: $i,SY2690: $i,SY2691: $i,SY2692: $i,SY2693: $i,SY2694: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SY2689 @ ( c_Message_Omsg_OCrypt @ SY2690 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2691 ) @ ( c_Message_Omsg_ONonce @ SY2691 ) ) ) ) @ SY2692 @ tc_Event_Oevent ) )
| ! [SY2695: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2693 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2694 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2689 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2690 ) @ SY2695 ) ) ) ) ) @ ( c_List_Oset @ SY2692 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2696: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2696 @ SV398 @ ( c_Message_Omsg_OCrypt @ SY2690 @ ( c_Message_Omsg_ONonce @ SY2691 ) ) ) @ ( c_List_Oset @ SY2692 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY2690 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY2692 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1968]) ).
thf(2596,plain,
! [SV399: $i] :
( ( ! [SY2697: $i,SY2698: $i,SY2699: $i,SY2700: $i,SY2701: $i,SY2702: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SY2697 @ ( c_Message_Omsg_OCrypt @ SY2698 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2699 ) @ ( c_Message_Omsg_ONonce @ SY2699 ) ) ) ) @ SY2700 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY2703: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2701 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2702 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2697 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2698 ) @ SY2703 ) ) ) ) ) @ ( c_List_Oset @ SY2700 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2704: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2704 @ SV399 @ ( c_Message_Omsg_OCrypt @ SY2698 @ ( c_Message_Omsg_ONonce @ SY2699 ) ) ) @ ( c_List_Oset @ SY2700 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY2698 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SY2700 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1969]) ).
thf(2597,plain,
! [SV400: $i] :
( ( ! [SY2705: $i,SY2706: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV400 @ SY2705 ) @ SY2706 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY2705 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2706 ) @ tc_Message_Omsg ) )
| ~ ( c_in @ SV400 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1970]) ).
thf(2598,plain,
! [SV401: $i] :
( ( ! [SY2707: $i,SY2708: $i,SY2709: $i,SY2710: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SY2707 @ ( c_Message_Omsg_OCrypt @ SY2708 @ ( c_Message_Omsg_ONonce @ SY2709 ) ) ) @ SY2710 @ tc_Event_Oevent ) )
| ! [SY2711: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2711 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2708 ) @ ( c_Message_Omsg_OAgent @ SY2707 ) ) ) ) @ ( c_List_Oset @ SY2710 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY2708 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY2709 ) @ ( c_Event_Oused @ SY2710 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY2710 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1971]) ).
thf(2599,plain,
! [SV402: $i] :
( ( ! [SY2712: $i,SY2713: $i,SY2714: $i,SY2715: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SY2712 @ ( c_Message_Omsg_OCrypt @ SY2713 @ ( c_Message_Omsg_ONonce @ SY2714 ) ) ) @ SY2715 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY2716: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2716 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2713 ) @ ( c_Message_Omsg_OAgent @ SY2712 ) ) ) ) @ ( c_List_Oset @ SY2715 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY2713 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY2714 ) @ ( c_Event_Oused @ SY2715 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2715 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1972]) ).
thf(2600,plain,
! [SV403: $i] :
( ( ! [SY2717: $i,SY2718: $i,SY2719: $i,SY2720: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2717 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2718 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2719 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2718 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2719 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SY2720 @ tc_Event_Oevent ) )
| ! [SY2721: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2721 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2718 ) @ ( c_Message_Omsg_ONonce @ SY2717 ) ) ) ) @ ( c_List_Oset @ SY2720 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY2719 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY2719 ) @ ( c_Event_Oused @ SY2720 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY2720 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1973]) ).
thf(2601,plain,
! [SV404: $i] :
( ( ! [SY2722: $i] :
( ! [SY2723: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV404 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SY2722 @ SY2723 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV404 ) )
| ( c_in @ SY2722 @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1974]) ).
thf(2602,plain,
! [SV405: $i] :
( ( ! [SY2724: $i,SY2725: $i,SY2726: $i,SY2727: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2724 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2725 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2726 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2725 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2726 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SY2727 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY2728: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2728 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2725 ) @ ( c_Message_Omsg_ONonce @ SY2724 ) ) ) ) @ ( c_List_Oset @ SY2727 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY2726 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY2726 ) @ ( c_Event_Oused @ SY2727 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2727 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1975]) ).
thf(2603,plain,
! [SV406: $i] :
( ( ! [SY2729: $i] :
( ( c_in @ SV406 @ ( c_Event_OinitState @ SY2729 ) @ tc_Message_Omsg )
| ! [SY2730: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ SY2729 @ SV406 ) @ ( c_List_Oset @ SY2730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OGets @ SY2729 @ SV406 ) @ ( c_List_Oset @ SY2730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ SY2729 @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ SY2729 @ SV406 @ SY2730 ) @ SV406 ) @ ( c_List_Oset @ SY2730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SY2729 = c_Message_Oagent_OSpy )
| ~ ( c_in @ SV406 @ ( c_Event_Oknows @ SY2729 @ SY2730 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1976]) ).
thf(2604,plain,
! [SV407: $i] :
( ( ! [SY2731: $i,SY2732: $i,SY2733: $i,SY2734: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2731 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY2732 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SY2733 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY2734 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SY2734 @ SY2731 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SY2731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2735: $i,SY2736: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2733 @ ( c_Message_Omsg_OCrypt @ SY2735 @ ( c_Message_Omsg_OMPair @ SY2734 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2732 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY2736 ) ) ) ) ) @ ( c_List_Oset @ SY2731 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1977]) ).
thf(2605,plain,
! [SV408: $i] :
( ( ! [SY2737: $i,SY2738: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2737 ) ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY2738 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SY2738 @ SY2737 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SY2737 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY2737 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY2739: $i] :
( ( c_in @ SY2739 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY2740: $i] :
( ( c_in @ SY2740 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2740 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2740 ) @ ( c_Message_Omsg_OMPair @ SY2738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2739 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2739 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY2740 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SY2737 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1978]) ).
thf(2606,plain,
! [SV409: $i] :
( ( ! [SY2741: $i] :
( ( c_in @ SV409 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2741 ) ) @ tc_Message_Omsg )
| ! [SY2742: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY2742 @ SV409 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2741 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1979]) ).
thf(2607,plain,
! [SV410: $i] :
( ( ! [SY2743: $i,SY2744: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV410 @ SY2743 ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ SY2744 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1980]) ).
thf(2608,plain,
! [SV411: $i] :
( ( ! [SY2745: $i,SY2746: $i,SY2747: $i,SY2748: $i] :
( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2745 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2746 ) @ ( c_Message_Omsg_OAgent @ SY2747 ) ) ) )
| ~ ( c_in @ SY2748 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY2749: $i,SY2750: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2747 @ ( c_Message_Omsg_OCrypt @ SY2749 @ ( c_Message_Omsg_OMPair @ SY2750 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2745 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2746 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SY2748 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1981]) ).
thf(2609,plain,
! [SV412: $i] :
( ( ! [SY2751: $i,SY2752: $i,SY2753: $i,SY2754: $i,SY2755: $i,SY2756: $i,SY2757: $i] :
( ( SV412 = SY2751 )
| ~ ( c_in @ SY2752 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2753 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2753 ) @ ( c_Message_Omsg_OMPair @ SY2754 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2755 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2756 ) @ SY2751 ) ) ) ) ) @ ( c_List_Oset @ SY2752 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2758: $i,SY2759: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2757 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2757 ) @ ( c_Message_Omsg_OMPair @ SY2758 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2759 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2756 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SY2752 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1982]) ).
thf(2610,plain,
! [SV413: $i] :
( ( ! [SY2760: $i,SY2761: $i,SY2762: $i,SY2763: $i,SY2764: $i,SY2765: $i,SY2766: $i] :
( ( SV413 = SY2760 )
| ~ ( c_in @ SY2761 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2762 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2762 ) @ ( c_Message_Omsg_OMPair @ SY2763 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2760 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2764 ) @ SY2765 ) ) ) ) ) @ ( c_List_Oset @ SY2761 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2767: $i,SY2768: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2766 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2766 ) @ ( c_Message_Omsg_OMPair @ SY2767 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2764 ) @ SY2768 ) ) ) ) ) @ ( c_List_Oset @ SY2761 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1983]) ).
thf(2611,plain,
! [SV414: $i] :
( ( ! [SY2769: $i,SY2770: $i,SY2771: $i,SY2772: $i,SY2773: $i,SY2774: $i,SY2775: $i] :
( ( SV414 = SY2769 )
| ~ ( c_in @ SY2770 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2771 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2771 ) @ ( c_Message_Omsg_OMPair @ SY2769 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2772 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2773 ) @ SY2774 ) ) ) ) ) @ ( c_List_Oset @ SY2770 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2776: $i,SY2777: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2775 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2775 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2776 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2773 ) @ SY2777 ) ) ) ) ) @ ( c_List_Oset @ SY2770 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1984]) ).
thf(2612,plain,
! [SV415: $i] :
( ( ! [SY2778: $i,SY2779: $i,SY2780: $i,SY2781: $i,SY2782: $i,SY2783: $i,SY2784: $i] :
( ( SV415 = SY2778 )
| ~ ( c_in @ SY2779 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2778 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2778 ) @ ( c_Message_Omsg_OMPair @ SY2780 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2781 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2782 ) @ SY2783 ) ) ) ) ) @ ( c_List_Oset @ SY2779 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2785: $i,SY2786: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SY2784 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2785 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2782 ) @ SY2786 ) ) ) ) ) @ ( c_List_Oset @ SY2779 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1985]) ).
thf(2613,plain,
! [SV416: $i] :
( ( ! [SY2787: $i,SY2788: $i,SY2789: $i,SY2790: $i] :
( ( SV416
= ( hAPP @ c_Public_OshrK @ SY2787 ) )
| ~ ( c_in @ SY2788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY2791: $i,SY2792: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2787 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SY2789 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2790 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2791 ) @ SY2792 ) ) ) ) ) @ ( c_List_Oset @ SY2788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1986]) ).
thf(2614,plain,
! [SV417: $i] :
( ( ! [SY2793: $i,SY2794: $i,SY2795: $i,SY2796: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2793 ) @ ( hAPP @ c_Message_Omsg_OKey @ SY2794 ) ) ) ) @ SY2795 @ tc_Event_Oevent ) )
| ! [SY2797: $i] :
( ! [SY2798: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2796 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2796 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2797 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2794 ) @ SY2798 ) ) ) ) ) @ ( c_List_Oset @ SY2795 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY2797 @ SY2796 @ ( c_Message_Omsg_OCrypt @ SY2794 @ ( c_Message_Omsg_ONonce @ SY2793 ) ) ) @ ( c_List_Oset @ SY2795 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY2795 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1987]) ).
thf(2615,plain,
! [SV418: $i] :
( ( ( c_Event_Oknows @ SV418 @ ( c_List_Olist_ONil @ tc_Event_Oevent ) )
= ( c_Event_OinitState @ SV418 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1988]) ).
thf(2616,plain,
! [SV419: $i] :
( ( ! [SY2799: $i,SY2800: $i,SY2801: $i,SY2802: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SY2799 @ SY2800 ) @ SY2801 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2799 ) @ ( c_Message_Omsg_ONonce @ SY2802 ) ) ) ) @ ( c_List_Oset @ SY2801 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2803: $i,SY2804: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2803 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2802 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2799 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2804 ) @ SY2800 ) ) ) ) ) @ ( c_List_Oset @ SY2801 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SY2801 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1989]) ).
thf(2617,plain,
( ( c_in @ c_Message_Oagent_OServer @ c_Event_Obad @ tc_Message_Oagent )
= $false ),
inference(extcnf_not_pos,[status(thm)],[1990]) ).
thf(2618,plain,
! [SV420: $i] :
( ( ! [SY2805: $i,SY2806: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV420 @ SY2805 ) @ SY2806 @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2806 ) )
| ( c_in @ SV420 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1991]) ).
thf(2619,plain,
! [SV421: $i] :
( ( ! [SY2807: $i,SY2808: $i,SY2809: $i,SY2810: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2807 ) @ ( hAPP @ c_Message_Omsg_OKey @ SY2808 ) ) ) ) @ SY2809 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY2811: $i] :
( ! [SY2812: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2810 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2810 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2811 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2808 ) @ SY2812 ) ) ) ) ) @ ( c_List_Oset @ SY2809 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY2811 @ SY2810 @ ( c_Message_Omsg_OCrypt @ SY2808 @ ( c_Message_Omsg_ONonce @ SY2807 ) ) ) @ ( c_List_Oset @ SY2809 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY2809 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1992]) ).
thf(2620,plain,
! [SV422: $i] :
( ( ! [SY2813: $i] :
( ~ ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2813 ) ) @ tc_Message_Omsg )
| ! [SY2814: $i,SY2815: $i] : ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SY2814 @ SY2815 ) @ SY2813 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1993]) ).
thf(2621,plain,
! [SV423: $i] :
( ( ! [SY2816: $i] :
( ~ ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2816 ) ) @ tc_Message_Omsg )
| ! [SY2817: $i,SY2818: $i] : ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SY2817 @ SY2818 ) @ SY2816 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1994]) ).
thf(2622,plain,
! [SV424: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV424 @ tc_nat @ tc_Message_Omsg ) )
= ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV424 @ tc_nat @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1995]) ).
thf(2623,plain,
! [SV425: $i] :
( ( ! [SY2819: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ SV425 ) @ SY2819 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV425 ) @ ( c_Message_Osynth @ SY2819 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1996]) ).
thf(2624,plain,
! [SV426: $i] :
( ( ! [SY2820: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ SV426 ) @ SY2820 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV426 ) @ ( c_Message_Osynth @ SY2820 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1997]) ).
thf(2625,plain,
! [SV427: $i] :
( ( ! [SY2821: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ SV427 ) @ ( c_Message_Osynth @ SY2821 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV427 ) @ SY2821 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1998]) ).
thf(2626,plain,
! [SV428: $i] :
( ( ! [SY2822: $i] : ( c_in @ ( c_Message_Omsg_OAgent @ SV428 ) @ ( c_Message_Osynth @ SY2822 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[1999]) ).
thf(2627,plain,
! [SV429: $i] :
( ( ! [SY2823: $i] : ( c_in @ ( c_Message_Omsg_OAgent @ SV429 ) @ ( c_Message_Osynth @ SY2823 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2000]) ).
thf(2628,plain,
! [SV430: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV430 @ tc_nat @ tc_Message_Omsg ) )
= ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV430 @ tc_nat @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2001]) ).
thf(2629,plain,
! [SV431: $i] :
( ( ! [SY2824: $i] :
( ( c_in @ SV431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2824 ) ) @ tc_Message_Omsg )
| ! [SY2825: $i] :
( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY2825 @ SV431 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2824 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SY2825 ) ) @ ( c_Message_Oanalz @ SY2824 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY2825 ) @ ( c_Message_Oanalz @ SY2824 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2002]) ).
thf(2630,plain,
! [SV432: $i] :
( ( ! [SY2826: $i,SY2827: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV432 @ SY2826 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2827 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2826 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2827 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV432 ) ) @ ( c_Message_Oanalz @ SY2827 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV432 ) @ ( c_Message_Oanalz @ SY2827 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2003]) ).
thf(2631,plain,
! [SV433: $i] :
( ( ! [SY2828: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV433 ) @ SY2828 @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV433 ) @ ( c_Message_Osynth @ SY2828 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2004]) ).
thf(2632,plain,
! [SV434: $i] :
( ( ! [SY2829: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV434 ) @ ( c_Message_Osynth @ SY2829 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV434 ) @ SY2829 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2005]) ).
thf(2633,plain,
! [SV435: $i] :
( ( ! [SY2830: $i] :
( ( c_in @ SV435 @ ( c_Message_Osynth @ SY2830 ) @ tc_Message_Omsg )
| ! [SY2831: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SY2831 @ SV435 ) @ SY2830 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY2831 @ SV435 ) @ ( c_Message_Osynth @ SY2830 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2006]) ).
thf(2634,plain,
! [SV436: $i] :
( ( ! [SY2832: $i] :
( ( c_in @ SV436 @ ( c_Message_Osynth @ SY2832 ) @ tc_Message_Omsg )
| ! [SY2833: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SY2833 ) @ SY2832 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SY2833 ) @ ( c_Message_Osynth @ SY2832 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2007]) ).
thf(2635,plain,
! [SV437: $i] :
( ( ! [SY2834: $i] :
( ( c_in @ SV437 @ ( c_Message_Osynth @ SY2834 ) @ tc_Message_Omsg )
| ! [SY2835: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SY2835 @ SV437 ) @ SY2834 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ SY2835 @ SV437 ) @ ( c_Message_Osynth @ SY2834 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2008]) ).
thf(2636,plain,
! [SV438: $i] :
( ( ! [SY2836: $i,SY2837: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SV438 @ SY2836 ) @ ( c_Message_Osynth @ SY2837 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2836 @ ( c_Message_Osynth @ SY2837 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV438 @ ( c_Message_Osynth @ SY2837 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2009]) ).
thf(2637,plain,
! [SV439: $i] :
( ( ! [SY2838: $i] :
( ( c_in @ SV439 @ ( c_Event_Oused @ SY2838 ) @ tc_Message_Omsg )
| ! [SY2839: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV439 @ SY2839 ) @ ( c_Event_Oused @ SY2838 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2010]) ).
thf(2638,plain,
! [SV440: $i] :
( ( ! [SY2840: $i] :
( ( c_in @ SV440 @ ( c_Event_Oused @ SY2840 ) @ tc_Message_Omsg )
| ! [SY2841: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY2841 @ SV440 ) @ ( c_Event_Oused @ SY2840 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2011]) ).
thf(2639,plain,
! [SV441: $i] :
( ( ! [SY2842: $i,SY2843: $i] :
( ( c_in @ SV441 @ ( c_List_Oset @ SY2842 @ SY2843 ) @ SY2843 )
| ! [SY2844: $i] :
( ( SV441 = SY2844 )
| ~ ( c_in @ SV441 @ ( c_List_Oset @ ( c_List_Olist_OCons @ SY2844 @ SY2842 @ SY2843 ) @ SY2843 ) @ SY2843 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2012]) ).
thf(2640,plain,
! [SV442: $i] :
( ( ! [SY2845: $i,SY2846: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV442 @ SY2845 ) @ SY2846 @ tc_Event_Oevent ) )
| ~ ( c_in @ SY2845 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2846 ) ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY2846 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2013]) ).
thf(2641,plain,
! [SV443: $i] :
( ( ! [SY2847: $i] :
( ( c_in @ SV443 @ ( c_Event_Oused @ SY2847 ) @ tc_Message_Omsg )
| ! [SY2848: $i] :
~ ( c_in @ ( c_Event_Oevent_ONotes @ SY2848 @ SV443 ) @ ( c_List_Oset @ SY2847 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2014]) ).
thf(2642,plain,
! [SV444: $i] :
( ( ! [SY2849: $i,SY2850: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV444 @ SY2849 ) @ SY2850 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ SY2849 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2850 ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2850 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2016]) ).
thf(2643,plain,
! [SV445: $i] :
( ( ! [SY2851: $i,SY2852: $i,SY2853: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV445 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV445 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2851 ) @ ( c_Message_Omsg_ONonce @ SY2852 ) ) ) ) @ SY2853 @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY2852 ) @ ( c_Event_Oused @ SY2853 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY2853 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2017]) ).
thf(2644,plain,
! [SV446: $i] :
( ( ( hAPP @ c_Message_OinvKey @ ( hAPP @ c_Public_OshrK @ SV446 ) )
= ( hAPP @ c_Public_OshrK @ SV446 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2018]) ).
thf(2645,plain,
! [SV447: $i] :
( ( ! [SY2854: $i,SY2855: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ SV447 ) @ SY2854 )
!= ( hAPP @ c_Public_OshrK @ SY2855 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2019]) ).
thf(2646,plain,
! [SV448: $i] :
( ( ! [SY2856: $i,SY2857: $i] :
( ( hAPP @ c_Public_OshrK @ SV448 )
!= ( hAPP @ ( c_Public_OpublicKey @ SY2856 ) @ SY2857 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2020]) ).
thf(2647,plain,
! [SV449: $i] :
( ( ! [SY2858: $i,SY2859: $i,SY2860: $i,SY2861: $i] :
( ( c_Event_Oevent_ONotes @ SV449 @ SY2858 )
!= ( c_Event_Oevent_OSays @ SY2859 @ SY2860 @ SY2861 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2021]) ).
thf(2648,plain,
! [SV450: $i] :
( ( ! [SY2862: $i,SY2863: $i,SY2864: $i,SY2865: $i] :
( ( c_Event_Oevent_OGets @ SV450 @ SY2862 )
!= ( c_Event_Oevent_OSays @ SY2863 @ SY2864 @ SY2865 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2022]) ).
thf(2649,plain,
! [SV451: $i] :
( ( ! [SY2866: $i,SY2867: $i,SY2868: $i,SY2869: $i] :
( ( c_Event_Oevent_OSays @ SV451 @ SY2866 @ SY2867 )
!= ( c_Event_Oevent_ONotes @ SY2868 @ SY2869 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2023]) ).
thf(2650,plain,
! [SV452: $i] :
( ( ! [SY2870: $i,SY2871: $i,SY2872: $i,SY2873: $i] :
( ( c_Event_Oevent_OSays @ SV452 @ SY2870 @ SY2871 )
!= ( c_Event_Oevent_OGets @ SY2872 @ SY2873 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2024]) ).
thf(2651,plain,
! [SV453: $i] :
( ( ! [SY2874: $i,SY2875: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV453 @ SY2874 ) @ SY2875 @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2875 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2025]) ).
thf(2652,plain,
( ( c_Message_Oagent_OSpy = c_Message_Oagent_OServer )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2026]) ).
thf(2653,plain,
( ( c_Message_Oagent_OServer = c_Message_Oagent_OSpy )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2027]) ).
thf(2654,plain,
! [SV454: $i] :
( ( ! [SY2876: $i,SY2877: $i,SY2878: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV454 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV454 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2876 ) @ ( c_Message_Omsg_ONonce @ SY2877 ) ) ) ) @ SY2878 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY2877 ) @ ( c_Event_Oused @ SY2878 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2878 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2028]) ).
thf(2655,plain,
! [SV455: $i] :
( ( ! [SY2879: $i,SY2880: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV455 ) @ SY2879 ) ) @ ( c_Event_OinitState @ SY2880 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2029]) ).
thf(2656,plain,
! [SV456: $i] :
( ( ! [SY2881: $i,SY2882: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV456 ) @ SY2881 ) ) @ ( c_Event_Oused @ SY2882 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2030]) ).
thf(2657,plain,
! [SV457: $i] :
( ( ! [SY2883: $i] : ( c_in @ SV457 @ ( c_Event_Oused @ SY2883 ) @ tc_Message_Omsg )
| ! [SY2884: $i] :
~ ( c_in @ SV457 @ ( c_Message_Oparts @ ( c_Event_OinitState @ SY2884 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2031]) ).
thf(2658,plain,
! [SV458: $i] :
( ( ! [SY2885: $i,SY2886: $i] :
( ( c_List_Olist_OCons @ SV458 @ SY2885 @ SY2886 )
!= ( c_List_Olist_ONil @ SY2886 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2032]) ).
thf(2659,plain,
! [SV459: $i] :
( ( ! [SY2887: $i,SY2888: $i] :
( ( c_List_Olist_OCons @ SV459 @ SY2887 @ SY2888 )
!= ( c_List_Olist_ONil @ SY2888 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2033]) ).
thf(2660,plain,
! [SV460: $i] :
( ( ! [SY2889: $i,SY2890: $i] :
( ( c_List_Olist_ONil @ SV460 )
!= ( c_List_Olist_OCons @ SY2889 @ SY2890 @ SV460 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2034]) ).
thf(2661,plain,
! [SV461: $i] :
( ( ! [SY2891: $i] :
( ( c_in @ SV461 @ ( c_Message_Osynth @ SY2891 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV461 @ ( c_Message_Osynth @ ( c_Message_Osynth @ SY2891 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2035]) ).
thf(2662,plain,
! [SV462: $i] :
( ( ! [SY2892: $i] :
( ( c_in @ SV462 @ ( c_Message_Osynth @ SY2892 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV462 @ SY2892 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2036]) ).
thf(2663,plain,
! [SV463: $i] :
( ( ! [SY2893: $i,SY2894: $i,SY2895: $i] :
( ! [SY2896: $i] : ( c_in @ ( hAPP @ SV463 @ SY2893 ) @ ( c_Set_Oimage @ SV463 @ SY2894 @ SY2895 @ SY2896 ) @ SY2896 )
| ~ ( c_in @ SY2893 @ SY2894 @ SY2895 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2037]) ).
thf(2664,plain,
! [SV464: $i] :
( ( ! [SY2897: $i,SY2898: $i,SY2899: $i] :
( ! [SY2900: $i] : ( c_in @ ( hAPP @ SV464 @ SY2897 ) @ ( c_Set_Oimage @ SV464 @ SY2898 @ SY2899 @ SY2900 ) @ SY2900 )
| ~ ( c_in @ SY2897 @ SY2898 @ SY2899 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2038]) ).
thf(2665,plain,
! [SV465: $i] :
( ( ! [SY2901: $i,SY2902: $i] :
( ~ ( c_in @ SV465 @ SY2901 @ SY2902 )
| ! [SY2903: $i,SY2904: $i] : ( c_in @ ( hAPP @ SY2903 @ SV465 ) @ ( c_Set_Oimage @ SY2903 @ SY2901 @ SY2902 @ SY2904 ) @ SY2904 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2039]) ).
thf(2666,plain,
! [SV466: $i] :
( ( ! [SY2905: $i,SY2906: $i] :
( ~ ( c_in @ SV466 @ SY2905 @ SY2906 )
| ! [SY2907: $i,SY2908: $i] : ( c_in @ ( hAPP @ SY2907 @ SV466 ) @ ( c_Set_Oimage @ SY2907 @ SY2905 @ SY2906 @ SY2908 ) @ SY2908 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2040]) ).
thf(2667,plain,
! [SV467: $i] :
( ( ! [SY2909: $i,SY2910: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV467 ) @ SY2909 ) ) ) @ ( c_Event_Oused @ SY2910 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2041]) ).
thf(2668,plain,
! [SV468: $i] :
( ( ! [SY2911: $i,SY2912: $i] :
( SV468
!= ( c_List_Olist_OCons @ SY2911 @ SV468 @ SY2912 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2042]) ).
thf(2669,plain,
! [SV469: $i] :
( ( ! [SY2913: $i,SY2914: $i] :
( ( c_List_Olist_OCons @ SV469 @ SY2913 @ SY2914 )
!= SY2913 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2043]) ).
thf(2670,plain,
! [SV470: $i] :
( ( ( c_Message_Osynth @ ( c_Message_Osynth @ SV470 ) )
= ( c_Message_Osynth @ SV470 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2044]) ).
thf(2671,plain,
! [SV471: $i] :
( ( ! [SY2915: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV471 ) @ SY2915 ) ) ) @ ( c_Event_OinitState @ SY2915 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2045]) ).
thf(2672,plain,
! [SV472: $i] :
( ( ! [SY2916: $i,SY2917: $i] :
( ! [SY2918: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ SV472 ) @ SY2916 )
!= ( hAPP @ ( c_Public_OpublicKey @ SY2917 ) @ SY2918 ) )
| ( SV472 = SY2917 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2046]) ).
thf(2673,plain,
! [SV473: $i] :
( ( ! [SY2919: $i,SY2920: $i,SY2921: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ SV473 ) @ SY2919 )
!= ( hAPP @ ( c_Public_OpublicKey @ SY2920 ) @ SY2921 ) )
| ( SY2919 = SY2921 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2047]) ).
thf(2674,plain,
! [SV474: $i] :
( ( ! [SY2922: $i,SY2923: $i,SY2924: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV474 ) @ SY2922 ) )
!= ( hAPP @ ( c_Public_OpublicKey @ SY2923 ) @ SY2924 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2048]) ).
thf(2675,plain,
! [SV475: $i] :
( ( ! [SY2925: $i] :
( ( ( hAPP @ c_Message_OinvKey @ SV475 )
!= ( hAPP @ c_Message_OinvKey @ SY2925 ) )
| ( SV475 = SY2925 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2049]) ).
thf(2676,plain,
! [SV476: $i] :
( ( ! [SY2926: $i,SY2927: $i,SY2928: $i] :
( ( ( c_Event_Oevent_OGets @ SV476 @ SY2926 )
!= ( c_Event_Oevent_OGets @ SY2927 @ SY2928 ) )
| ( SY2926 = SY2928 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2050]) ).
thf(2677,plain,
! [SV477: $i] :
( ( ! [SY2929: $i,SY2930: $i] :
( ! [SY2931: $i] :
( ( c_Event_Oevent_OGets @ SV477 @ SY2929 )
!= ( c_Event_Oevent_OGets @ SY2930 @ SY2931 ) )
| ( SV477 = SY2930 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2051]) ).
thf(2678,plain,
! [SV478: $i] :
( ( ! [SY2932: $i,SY2933: $i,SY2934: $i] :
( ( c_Event_Oevent_OGets @ SV478 @ SY2932 )
!= ( c_Event_Oevent_ONotes @ SY2933 @ SY2934 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2052]) ).
thf(2679,plain,
! [SV479: $i] :
( ( ! [SY2935: $i,SY2936: $i,SY2937: $i] :
( ( ( c_Event_Oevent_ONotes @ SV479 @ SY2935 )
!= ( c_Event_Oevent_ONotes @ SY2936 @ SY2937 ) )
| ( SY2935 = SY2937 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2053]) ).
thf(2680,plain,
! [SV480: $i] :
( ( ! [SY2938: $i,SY2939: $i] :
( ! [SY2940: $i] :
( ( c_Event_Oevent_ONotes @ SV480 @ SY2938 )
!= ( c_Event_Oevent_ONotes @ SY2939 @ SY2940 ) )
| ( SV480 = SY2939 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2054]) ).
thf(2681,plain,
! [SV481: $i] :
( ( ( hAPP @ c_Message_OinvKey @ ( hAPP @ c_Message_OinvKey @ SV481 ) )
= SV481 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2055]) ).
thf(2682,plain,
! [SV482: $i] :
( ( ! [SY2941: $i,SY2942: $i,SY2943: $i] :
( ( c_Event_Oevent_ONotes @ SV482 @ SY2941 )
!= ( c_Event_Oevent_OGets @ SY2942 @ SY2943 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2056]) ).
thf(2683,plain,
! [SV483: $i] :
( ( ! [SY2944: $i,SY2945: $i,SY2946: $i] :
( ! [SY2947: $i] :
( ( c_List_Olist_OCons @ SV483 @ SY2944 @ SY2945 )
!= ( c_List_Olist_OCons @ SY2946 @ SY2947 @ SY2945 ) )
| ( SV483 = SY2946 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2057]) ).
thf(2684,plain,
! [SV484: $i] :
( ( ! [SY2948: $i,SY2949: $i,SY2950: $i,SY2951: $i] :
( ( ( c_List_Olist_OCons @ SV484 @ SY2948 @ SY2949 )
!= ( c_List_Olist_OCons @ SY2950 @ SY2951 @ SY2949 ) )
| ( SY2948 = SY2951 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2058]) ).
thf(2685,plain,
! [SV485: $i] :
( ( ! [SY2952: $i,SY2953: $i] :
( ( hAPP @ c_Public_OshrK @ SV485 )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SY2952 ) @ SY2953 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2059]) ).
thf(2686,plain,
! [SV486: $i] :
( ( ! [SY2954: $i,SY2955: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV486 @ SY2954 ) @ SY2955 @ tc_Event_Oevent ) )
= ( c_Event_Oused @ SY2955 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2061]) ).
thf(2687,plain,
! [SV487: $i] :
( ( ! [SY2956: $i,SY2957: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV487 ) @ SY2956 ) )
!= ( hAPP @ c_Public_OshrK @ SY2957 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2062]) ).
thf(2688,plain,
! [SV488: $i] :
( ( ! [SY2958: $i,SY2959: $i,SY2960: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ SV488 ) @ SY2958 )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SY2959 ) @ SY2960 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2063]) ).
thf(2689,plain,
! [SV489: $i] :
( ( ! [SY2961: $i] :
( ( c_in @ SV489 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2961 ) ) @ tc_Message_Omsg )
| ! [SY2962: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV489 @ SY2962 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2961 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2064]) ).
thf(2690,plain,
! [SV490: $i] :
( ( ! [SY2963: $i,SY2964: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SV490 @ SY2963 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2964 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2963 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2964 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV490 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY2964 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2065]) ).
thf(2691,plain,
! [SV491: $i] :
( ( ! [SY2965: $i,SY2966: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV491 @ SY2965 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2966 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2066]) ).
thf(2692,plain,
! [SV492: $i] :
( ( ! [SY2967: $i,SY2968: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SY2967 ) @ ( c_Message_Osynth @ SY2968 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SY2967 ) @ SY2968 @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV492 ) @ SY2968 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2067]) ).
thf(2693,plain,
! [SV493: $i] :
( ( ! [SY2969: $i,SY2970: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SY2969 ) @ SY2970 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SY2969 ) @ ( c_Message_Osynth @ SY2970 ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV493 ) @ SY2970 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2068]) ).
thf(2694,plain,
! [SV494: $i] :
( ( ! [SY2971: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV494 ) @ SY2971 @ tc_Message_Omsg )
| ! [SY2972: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SY2972 ) @ SY2971 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SY2972 ) @ ( c_Message_Osynth @ SY2971 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2069]) ).
thf(2695,plain,
! [SV495: $i] :
( ( ! [SY2973: $i,SY2974: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV495 @ SY2973 ) @ ( c_Message_Osynth @ SY2974 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV495 ) @ SY2974 @ tc_Message_Omsg )
| ~ ( c_in @ SY2973 @ ( c_Message_Osynth @ SY2974 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2070]) ).
thf(2696,plain,
! [SV496: $i] :
( ( ! [SY2975: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ SV496 ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ SY2975 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2071]) ).
thf(2697,plain,
! [SV497: $i] :
( ( ! [SY2976: $i] :
~ ( c_in @ ( c_Message_Omsg_ONonce @ SV497 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY2976 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2072]) ).
thf(2698,plain,
! [SV498: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV498 ) ) @ ( c_Event_OinitState @ SV498 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2073]) ).
thf(2699,plain,
! [SV499: $i] :
( ( ! [SY2977: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV499 ) ) @ ( c_Event_Oused @ SY2977 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2074]) ).
thf(2700,plain,
! [SV500: $i] :
( ( ! [SY2978: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV500 ) ) @ ( c_Event_Oused @ SY2978 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2075]) ).
thf(2701,plain,
! [SV501: $i] :
( ( ! [SY2979: $i,SY2980: $i,SY2981: $i,SY2982: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SY2979 @ SY2980 ) @ SY2981 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2979 ) @ ( c_Message_Omsg_ONonce @ SY2982 ) ) ) ) @ ( c_List_Oset @ SY2981 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2983: $i,SY2984: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2983 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2982 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2979 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2984 ) @ SY2980 ) ) ) ) ) @ ( c_List_Oset @ SY2981 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY2981 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2076]) ).
thf(2702,plain,
! [SV502: $i] :
( ( ! [SY2985: $i,SY2986: $i,SY2987: $i,SY2988: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SY2985 @ ( c_Message_Omsg_OCrypt @ SY2986 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2987 ) @ ( c_Message_Omsg_ONonce @ SY2987 ) ) ) ) @ ( c_List_Oset @ SY2988 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY2988 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY2985 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SY2986 @ SY2988 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SY2986 @ SY2988 ) @ ( hAPP @ c_Message_Omsg_OKey @ SY2986 ) ) ) ) @ ( c_List_Oset @ SY2988 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2985 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2986 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2988 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY2986 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY2987 ) @ ( c_Message_Omsg_ONonce @ SY2987 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2988 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2077]) ).
thf(2703,plain,
! [SV503: $i] :
( ( ! [SY2989: $i] :
( ! [SY2990: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV503 ) @ SY2989 ) ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2990 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2989 @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2078]) ).
thf(2704,plain,
! [SV504: $i] :
( ( ! [SY2991: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV504 @ SY2991 ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2079]) ).
thf(2705,plain,
! [SV505: $i] :
( ( ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV505 ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2080]) ).
thf(2706,plain,
! [SV506: $i] :
( ( ! [SY2992: $i,SY2993: $i,SY2994: $i,SY2995: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SY2992 @ SY2993 ) @ SV506 @ SY2992 ) @ ( c_List_Oset @ SY2993 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY2994 @ ( c_Message_Omsg_ONonce @ SY2995 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2993 ) ) @ tc_Message_Omsg )
| ! [SY2996: $i,SY2997: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY2996 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2996 ) @ ( c_Message_Omsg_OMPair @ SY2997 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2994 ) @ SY2992 ) ) ) ) ) @ ( c_List_Oset @ SY2993 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY2994 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2993 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY2993 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2081]) ).
thf(2707,plain,
! [SV507: $i] :
( ( ! [SY2998: $i,SY2999: $i,SY3000: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV507 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV507 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ SV507 @ SY2998 @ SY2999 @ SY3000 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2998 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2999 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2998 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2999 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SY3000 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3000 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY2998 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY2998 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY2999 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3000 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2082]) ).
thf(2708,plain,
! [SV508: $i] :
( ( ! [SY3001: $i,SY3002: $i,SY3003: $i,SY3004: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SY3001 @ ( c_Message_Omsg_OCrypt @ SY3002 @ ( c_Message_Omsg_ONonce @ SY3003 ) ) ) @ ( c_List_Oset @ SY3004 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3004 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SY3001 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY3005: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY3005 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SY3002 @ SY3005 @ SY3004 ) @ ( hAPP @ c_Message_Omsg_OKey @ SY3002 ) ) ) ) @ ( c_List_Oset @ SY3004 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY3006: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3001 ) @ ( c_Message_Omsg_OMPair @ SY3005 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3002 ) @ SY3006 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3004 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3002 @ ( c_Message_Omsg_ONonce @ SY3003 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3004 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2083]) ).
thf(2709,plain,
! [SV509: $i] :
( ( ! [SY3007: $i] :
( ( c_in @ SV509 @ ( c_Message_Oanalz @ SY3007 ) @ tc_Message_Omsg )
| ! [SY3008: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SY3008 ) ) @ ( c_Message_Oanalz @ SY3007 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3008 @ SV509 ) @ ( c_Message_Oanalz @ SY3007 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2084]) ).
thf(2710,plain,
! [SV510: $i] :
( ( ! [SY3009: $i] :
( ( c_in @ SV510 @ ( c_Event_Oused @ SY3009 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV510 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3009 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2085]) ).
thf(2711,plain,
! [SV511: $i] :
( ( ! [SY3010: $i,SY3011: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV511 ) @ SY3010 ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3011 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2086]) ).
thf(2712,plain,
! [SV512: $i] :
( ( ! [SY3012: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV512 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3012 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV512 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ SY3012 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2087]) ).
thf(2713,plain,
! [SV513: $i] :
( ( ( c_in @ SV513 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY3013: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV513 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3013 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3013 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2088]) ).
thf(2714,plain,
! [SV514: $i] :
( ( ! [SY3014: $i,SY3015: $i] :
( ( c_in @ SV514 @ ( c_Event_Oknows @ SY3014 @ SY3015 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ SY3014 @ SV514 ) @ ( c_List_Oset @ SY3015 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2089]) ).
thf(2715,plain,
! [SV515: $i] :
( ( ( c_in @ SV515 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY3016: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV515 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3016 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3016 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2090]) ).
thf(2716,plain,
! [SV516: $i] :
( ( ! [SY3017: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV516 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3017 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV516 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ SY3017 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2091]) ).
thf(2717,plain,
! [SV517: $i] :
( ( ! [SY3018: $i] :
( ( c_in @ SV517 @ ( c_Event_Oused @ SY3018 ) @ tc_Message_Omsg )
| ! [SY3019: $i,SY3020: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3019 @ SY3020 @ SV517 ) @ ( c_List_Oset @ SY3018 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2092]) ).
thf(2718,plain,
! [SV518: $i] :
( ( ! [SY3021: $i,SY3022: $i,SY3023: $i,SY3024: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SY3021 @ ( c_Message_Omsg_OCrypt @ SY3022 @ ( c_Message_Omsg_ONonce @ SY3023 ) ) @ SY3024 )
| ~ ( c_in @ SY3024 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SY3021 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3022 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3024 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SY3021 @ ( c_Message_Omsg_OCrypt @ SY3022 @ ( c_Message_Omsg_ONonce @ SY3023 ) ) ) @ ( c_List_Oset @ SY3024 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2093]) ).
thf(2719,plain,
! [SV519: $i] :
( ( ! [SY3025: $i,SY3026: $i,SY3027: $i,SY3028: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SY3025 @ ( c_Message_Omsg_OCrypt @ SY3026 @ ( c_Message_Omsg_ONonce @ SY3027 ) ) @ SY3028 )
| ~ ( c_in @ SY3028 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SY3025 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3026 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3028 ) ) @ tc_Message_Omsg )
| ! [SY3029: $i,SY3030: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3025 ) @ ( c_Message_Omsg_OMPair @ SY3029 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3026 ) @ SY3030 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3028 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3026 @ ( c_Message_Omsg_ONonce @ SY3027 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3028 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2094]) ).
thf(2720,plain,
! [SV520: $i] :
( ( ! [SY3031: $i,SY3032: $i,SY3033: $i,SY3034: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SY3031 @ ( c_Message_Omsg_OCrypt @ SY3032 @ ( c_Message_Omsg_ONonce @ SY3033 ) ) ) @ ( c_List_Oset @ SY3034 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3032 @ ( c_Message_Omsg_ONonce @ SY3033 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3034 ) ) @ tc_Message_Omsg )
| ! [SY3035: $i,SY3036: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3031 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3031 ) @ ( c_Message_Omsg_OMPair @ SY3035 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3032 ) @ SY3036 ) ) ) ) ) @ ( c_List_Oset @ SY3034 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3032 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3034 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3034 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2095]) ).
thf(2721,plain,
! [SV521: $i] :
( ( ! [SY3037: $i,SY3038: $i,SY3039: $i,SY3040: $i,SY3041: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SY3037 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3039 ) @ SY3040 ) ) ) ) ) @ ( c_List_Oset @ SY3041 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3041 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SY3037 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3039 ) @ SY3040 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3041 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2096]) ).
thf(2722,plain,
! [SV522: $i] :
( ( ! [SY3042: $i,SY3043: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV522 ) @ SY3042 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3043 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2097]) ).
thf(2723,plain,
! [SV523: $i] :
( ( ! [SY3044: $i,SY3045: $i] :
( ~ ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3044 ) ) @ tc_Message_Omsg )
| ! [SY3046: $i,SY3047: $i] : ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SY3045 @ SY3046 @ SY3047 ) @ SY3044 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2098]) ).
thf(2724,plain,
! [SV524: $i] :
( ( ! [SY3048: $i,SY3049: $i] :
( ( c_in @ SV524 @ ( c_Event_Oknows @ SY3048 @ SY3049 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OGets @ SY3048 @ SV524 ) @ ( c_List_Oset @ SY3049 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SY3048 = c_Message_Oagent_OSpy ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2099]) ).
thf(2725,plain,
! [SV525: $i] :
( ( ! [SY3050: $i,SY3051: $i,SY3052: $i,SY3053: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SY3050 @ ( c_Message_Omsg_OCrypt @ SY3051 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3052 ) @ ( c_Message_Omsg_ONonce @ SY3052 ) ) ) ) @ ( c_List_Oset @ SY3053 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3051 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3052 ) @ ( c_Message_Omsg_ONonce @ SY3052 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3053 ) ) @ tc_Message_Omsg )
| ! [SY3054: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SY3054 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3050 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3051 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3050 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3051 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SY3053 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3051 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3053 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3053 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY3050 @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2100]) ).
thf(2726,plain,
! [SV526: $i] :
( ( ! [SY3055: $i,SY3056: $i,SY3057: $i] :
( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3055 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3056 ) @ ( c_Message_Omsg_OAgent @ SY3057 ) ) ) )
| ! [SY3058: $i] :
( ~ ( c_in @ SY3058 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY3057 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY3059: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3057 ) @ ( c_Message_Omsg_OMPair @ SY3059 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3055 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3056 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3058 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2101]) ).
thf(2727,plain,
! [SV527: $i] :
( ( ! [SY3060: $i,SY3061: $i,SY3062: $i,SY3063: $i] :
( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3060 ) ) @ tc_Message_Omsg )
| ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3061 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3062 ) @ ( c_Message_Omsg_OAgent @ SY3063 ) ) ) )
| ~ ( c_in @ SY3060 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3064: $i,SY3065: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3064 @ SY3063 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3063 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3065 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3061 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3062 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SY3060 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2102]) ).
thf(2728,plain,
! [SV528: $i] :
( ( ! [SY3066: $i] :
( ( c_in @ SV528 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3066 ) @ tc_Message_Omsg )
| ! [SY3067: $i] :
( ~ ( c_in @ SY3067 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ SY3067 @ SV528 ) @ ( c_List_Oset @ SY3066 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2103]) ).
thf(2729,plain,
! [SV529: $i] :
( ( ! [SY3068: $i,SY3069: $i,SY3070: $i] :
( ( c_in @ SV529 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3068 ) ) @ tc_Message_Omsg )
| ! [SY3071: $i,SY3072: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3069 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3069 ) @ ( c_Message_Omsg_OMPair @ SY3070 @ ( c_Message_Omsg_OMPair @ SY3071 @ ( c_Message_Omsg_OMPair @ SV529 @ SY3072 ) ) ) ) ) @ ( c_List_Oset @ SY3068 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2104]) ).
thf(2730,plain,
! [SV530: $i] :
( ( ! [SY3073: $i] :
( ( ( c_Message_Omsg_OAgent @ SV530 )
!= ( c_Message_Omsg_OAgent @ SY3073 ) )
| ( SV530 = SY3073 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2105]) ).
thf(2731,plain,
! [SV531: $i] :
( ( ( c_Message_Oparts @ ( c_Message_Oanalz @ SV531 ) )
= ( c_Message_Oparts @ SV531 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2106]) ).
thf(2732,plain,
! [SV532: $i] :
( ( ! [SY3074: $i,SY3075: $i] :
( ( c_in @ SV532 @ ( c_Event_Oknows @ SY3074 @ SY3075 ) @ tc_Message_Omsg )
| ! [SY3076: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3074 @ SY3076 @ SV532 ) @ ( c_List_Oset @ SY3075 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2107]) ).
thf(2733,plain,
! [SV533: $i] :
( ( ( c_Message_Oanalz @ ( c_Message_Oanalz @ SV533 ) )
= ( c_Message_Oanalz @ SV533 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2108]) ).
thf(2734,plain,
! [SV534: $i] :
( ( ! [SY3077: $i] :
( ( c_in @ SV534 @ ( c_Message_Oanalz @ SY3077 ) @ tc_Message_Omsg )
| ! [SY3078: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3078 @ SV534 ) @ ( c_Message_Oanalz @ SY3077 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2109]) ).
thf(2735,plain,
! [SV535: $i] :
( ( ! [SY3079: $i] :
( ( c_in @ SV535 @ ( c_Message_Oanalz @ SY3079 ) @ tc_Message_Omsg )
| ! [SY3080: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV535 @ SY3080 ) @ ( c_Message_Oanalz @ SY3079 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2110]) ).
thf(2736,plain,
! [SV536: $i] :
( ( ! [SY3081: $i] :
( ( c_in @ SV536 @ ( c_Message_Oparts @ SY3081 ) @ tc_Message_Omsg )
| ! [SY3082: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3082 @ SV536 ) @ ( c_Message_Oparts @ SY3081 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2111]) ).
thf(2737,plain,
! [SV537: $i] :
( ( ! [SY3083: $i] :
( ( c_in @ SV537 @ ( c_Message_Oparts @ SY3083 ) @ tc_Message_Omsg )
| ! [SY3084: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV537 @ SY3084 ) @ ( c_Message_Oparts @ SY3083 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2112]) ).
thf(2738,plain,
! [SV538: $i] :
( ( ! [SY3085: $i,SY3086: $i] :
( ( c_Message_Omsg_OCrypt @ SV538 @ SY3085 )
!= ( c_Message_Omsg_ONonce @ SY3086 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2113]) ).
thf(2739,plain,
! [SV539: $i] :
( ( ! [SY3087: $i] :
( ( c_Message_Omsg_OAgent @ SV539 )
!= ( hAPP @ c_Message_Omsg_OKey @ SY3087 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2114]) ).
thf(2740,plain,
! [SV540: $i] :
( ( ! [SY3088: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ SV540 )
!= ( c_Message_Omsg_ONonce @ SY3088 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2115]) ).
thf(2741,plain,
! [SV541: $i] :
( ( ! [SY3089: $i,SY3090: $i,SY3091: $i] :
( ! [SY3092: $i,SY3093: $i] :
( ( c_Event_Oevent_OSays @ SV541 @ SY3089 @ SY3090 )
!= ( c_Event_Oevent_OSays @ SY3091 @ SY3092 @ SY3093 ) )
| ( SV541 = SY3091 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2116]) ).
thf(2742,plain,
! [SV542: $i] :
( ( ! [SY3094: $i,SY3095: $i,SY3096: $i,SY3097: $i] :
( ! [SY3098: $i] :
( ( c_Event_Oevent_OSays @ SV542 @ SY3094 @ SY3095 )
!= ( c_Event_Oevent_OSays @ SY3096 @ SY3097 @ SY3098 ) )
| ( SY3094 = SY3097 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2117]) ).
thf(2743,plain,
! [SV543: $i] :
( ( ! [SY3099: $i,SY3100: $i,SY3101: $i,SY3102: $i,SY3103: $i] :
( ( ( c_Event_Oevent_OSays @ SV543 @ SY3099 @ SY3100 )
!= ( c_Event_Oevent_OSays @ SY3101 @ SY3102 @ SY3103 ) )
| ( SY3100 = SY3103 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2118]) ).
thf(2744,plain,
! [SV544: $i] :
( ( ! [SY3104: $i] :
( ( c_in @ SV544 @ ( c_Message_Oparts @ SY3104 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV544 @ SY3104 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2119]) ).
thf(2745,plain,
! [SV545: $i] :
( ( ! [SY3105: $i] :
( ( c_in @ SV545 @ ( c_Message_Oanalz @ SY3105 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV545 @ SY3105 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2120]) ).
thf(2746,plain,
! [SV546: $i] :
( ( ! [SY3106: $i] :
( ( c_in @ SV546 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3106 ) ) @ tc_Message_Omsg )
| ! [SY3107: $i,SY3108: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3107 @ SY3108 @ SV546 ) @ ( c_List_Oset @ SY3106 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2121]) ).
thf(2747,plain,
! [SV547: $i] :
( ( ! [SY3109: $i] :
( ( c_in @ SV547 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3109 ) @ tc_Message_Omsg )
| ! [SY3110: $i,SY3111: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3110 @ SY3111 @ SV547 ) @ ( c_List_Oset @ SY3109 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2122]) ).
thf(2748,plain,
! [SV548: $i] :
( ( ! [SY3112: $i,SY3113: $i,SY3114: $i,SY3115: $i,SY3116: $i] :
( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3112 ) ) @ tc_Message_Omsg )
| ! [SY3117: $i,SY3118: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3113 @ SY3114 @ ( c_Message_Omsg_OCrypt @ SY3115 @ ( c_Message_Omsg_OMPair @ SY3116 @ ( c_Message_Omsg_OMPair @ SY3117 @ ( c_Message_Omsg_OMPair @ SY3118 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SY3112 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2124]) ).
thf(2749,plain,
! [SV549: $i] :
( ( ! [SY3119: $i,SY3120: $i] :
( ( c_Message_Omsg_OCrypt @ SV549 @ SY3119 )
!= ( hAPP @ c_Message_Omsg_OKey @ SY3120 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2125]) ).
thf(2750,plain,
! [SV550: $i] :
( ( ( c_Message_Oparts @ ( c_Message_Oparts @ SV550 ) )
= ( c_Message_Oparts @ SV550 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2126]) ).
thf(2751,plain,
! [SV551: $i] :
( ( ! [SY3121: $i] :
( ( c_Message_Omsg_ONonce @ SV551 )
!= ( hAPP @ c_Message_Omsg_OKey @ SY3121 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2127]) ).
thf(2752,plain,
! [SV552: $i] :
( ( ( c_Message_Oanalz @ ( c_Message_Oparts @ SV552 ) )
= ( c_Message_Oparts @ SV552 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2128]) ).
thf(2753,plain,
! [SV553: $i] :
( ( ! [SY3122: $i,SY3123: $i] :
( ( c_Message_Omsg_OMPair @ SV553 @ SY3122 )
!= ( c_Message_Omsg_OAgent @ SY3123 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2129]) ).
thf(2754,plain,
! [SV554: $i] :
( ( ! [SY3124: $i] :
( ( c_Message_Omsg_ONonce @ SV554 )
!= ( c_Message_Omsg_OAgent @ SY3124 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2130]) ).
thf(2755,plain,
! [SV555: $i] :
( ( ! [SY3125: $i] :
( ( c_in @ SV555 @ ( c_Message_Oparts @ SY3125 ) @ tc_Message_Omsg )
| ! [SY3126: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3126 @ SV555 ) @ ( c_Message_Oparts @ SY3125 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2131]) ).
thf(2756,plain,
! [SV556: $i] :
( ( ! [SY3127: $i] :
( ( c_in @ SV556 @ ( c_Message_Oanalz @ SY3127 ) @ tc_Message_Omsg )
| ! [SY3128: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SY3128 ) ) @ ( c_Message_Oanalz @ SY3127 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3128 ) @ SV556 ) @ ( c_Message_Oanalz @ SY3127 ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2132]) ).
thf(2757,plain,
! [SV557: $i] :
( ( ! [SY3129: $i] :
( ( c_in @ SV557 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3129 ) ) @ tc_Message_Omsg )
| ! [SY3130: $i,SY3131: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3130 @ SY3131 @ SV557 ) @ ( c_List_Oset @ SY3129 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2133]) ).
thf(2758,plain,
! [SV558: $i] :
( ( ! [SY3132: $i] :
( ( c_in @ SV558 @ ( c_Message_Oparts @ SY3132 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV558 @ ( c_Message_Oparts @ ( c_Message_Oparts @ SY3132 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2134]) ).
thf(2759,plain,
! [SV559: $i] :
( ( ! [SY3133: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV559 )
!= ( hAPP @ c_Message_Omsg_OKey @ SY3133 ) )
| ( SV559 = SY3133 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2135]) ).
thf(2760,plain,
! [SV560: $i] :
( ( ! [SY3134: $i,SY3135: $i] :
( ( c_Message_Omsg_OAgent @ SV560 )
!= ( c_Message_Omsg_OMPair @ SY3134 @ SY3135 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2136]) ).
thf(2761,plain,
! [SV561: $i] :
( ( ! [SY3136: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV561 ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3136 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV561 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2137]) ).
thf(2762,plain,
! [SV562: $i] :
( ( ! [SY3137: $i,SY3138: $i] :
( ( c_Message_Omsg_OAgent @ SV562 )
!= ( c_Message_Omsg_OCrypt @ SY3137 @ SY3138 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2138]) ).
thf(2763,plain,
! [SV563: $i] :
( ( ! [SY3139: $i,SY3140: $i] :
( ( c_Message_Omsg_ONonce @ SV563 )
!= ( c_Message_Omsg_OMPair @ SY3139 @ SY3140 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2139]) ).
thf(2764,plain,
! [SV564: $i] :
( ( ! [SY3141: $i,SY3142: $i,SY3143: $i] :
( ( c_Message_Omsg_OMPair @ SV564 @ SY3141 )
!= ( c_Message_Omsg_OCrypt @ SY3142 @ SY3143 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2140]) ).
thf(2765,plain,
! [SV565: $i] :
( ( ! [SY3144: $i,SY3145: $i] :
( ( c_Message_Omsg_OCrypt @ SV565 @ SY3144 )
!= ( c_Message_Omsg_OAgent @ SY3145 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2141]) ).
thf(2766,plain,
! [SV566: $i] :
( ( ! [SY3146: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV566 ) ) @ ( c_Event_Oknows @ SV566 @ SY3146 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2142]) ).
thf(2767,plain,
! [SV567: $i] :
( ( ! [SY3147: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ SV567 )
!= ( c_Message_Omsg_OAgent @ SY3147 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2143]) ).
thf(2768,plain,
! [SV568: $i] :
( ( ! [SY3148: $i] :
( ( c_in @ SV568 @ ( c_Message_Oanalz @ SY3148 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV568 @ ( c_Message_Oanalz @ ( c_Message_Oanalz @ SY3148 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2144]) ).
thf(2769,plain,
! [SV569: $i] :
( ( ! [SY3149: $i] :
( ( ( c_Message_Omsg_ONonce @ SV569 )
!= ( c_Message_Omsg_ONonce @ SY3149 ) )
| ( SV569 = SY3149 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2145]) ).
thf(2770,plain,
! [SV570: $i] :
( ( ! [SY3150: $i] :
( ! [SY3151: $i] : ( c_in @ SV570 @ SY3150 @ SY3151 )
| ~ ( hBOOL @ ( hAPP @ SY3150 @ SV570 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2146]) ).
thf(2771,plain,
! [SV571: $i] :
( ( ! [SY3152: $i] :
( ( hBOOL @ ( hAPP @ SV571 @ SY3152 ) )
| ! [SY3153: $i] :
~ ( c_in @ SY3152 @ SV571 @ SY3153 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2147]) ).
thf(2772,plain,
! [SV572: $i] :
( ( ! [SY3154: $i,SY3155: $i] :
( ( c_Message_Omsg_ONonce @ SV572 )
!= ( c_Message_Omsg_OCrypt @ SY3154 @ SY3155 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2148]) ).
thf(2773,plain,
! [SV573: $i] :
( ( ! [SY3156: $i,SY3157: $i] :
( ! [SY3158: $i] :
( ( c_Message_Omsg_OCrypt @ SV573 @ SY3156 )
!= ( c_Message_Omsg_OCrypt @ SY3157 @ SY3158 ) )
| ( SV573 = SY3157 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2149]) ).
thf(2774,plain,
! [SV574: $i] :
( ( ! [SY3159: $i,SY3160: $i,SY3161: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV574 @ SY3159 )
!= ( c_Message_Omsg_OCrypt @ SY3160 @ SY3161 ) )
| ( SY3159 = SY3161 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2150]) ).
thf(2775,plain,
! [SV575: $i] :
( ( ! [SY3162: $i] :
( ( c_Message_Omsg_OAgent @ SV575 )
!= ( c_Message_Omsg_ONonce @ SY3162 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2151]) ).
thf(2776,plain,
! [SV576: $i] :
( ( ! [SY3163: $i,SY3164: $i] :
( ! [SY3165: $i] :
( ( c_Message_Omsg_OMPair @ SV576 @ SY3163 )
!= ( c_Message_Omsg_OMPair @ SY3164 @ SY3165 ) )
| ( SV576 = SY3164 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2152]) ).
thf(2777,plain,
! [SV577: $i] :
( ( ! [SY3166: $i,SY3167: $i,SY3168: $i] :
( ( ( c_Message_Omsg_OMPair @ SV577 @ SY3166 )
!= ( c_Message_Omsg_OMPair @ SY3167 @ SY3168 ) )
| ( SY3166 = SY3168 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2153]) ).
thf(2778,plain,
! [SV578: $i] :
( ( ! [SY3169: $i] :
( ( c_in @ SV578 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3169 ) ) @ tc_Message_Omsg )
| ! [SY3170: $i] :
( ~ ( c_in @ SY3170 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3170 ) @ SV578 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3169 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2154]) ).
thf(2779,plain,
! [SV579: $i] :
( ( ! [SY3171: $i,SY3172: $i] :
( ( c_Message_Omsg_OMPair @ SV579 @ SY3171 )
!= ( c_Message_Omsg_ONonce @ SY3172 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2155]) ).
thf(2780,plain,
! [SV580: $i] :
( ( ! [SY3173: $i,SY3174: $i,SY3175: $i] :
( ( c_Message_Omsg_OCrypt @ SV580 @ SY3173 )
!= ( c_Message_Omsg_OMPair @ SY3174 @ SY3175 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2156]) ).
thf(2781,plain,
! [SV581: $i] :
( ( ! [SY3176: $i,SY3177: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ SV581 )
!= ( c_Message_Omsg_OMPair @ SY3176 @ SY3177 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2157]) ).
thf(2782,plain,
! [SV582: $i] :
( ( ! [SY3178: $i,SY3179: $i] :
( ( c_Message_Omsg_OMPair @ SV582 @ SY3178 )
!= ( hAPP @ c_Message_Omsg_OKey @ SY3179 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2158]) ).
thf(2783,plain,
! [SV583: $i] :
( ( ! [SY3180: $i,SY3181: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ SV583 )
!= ( c_Message_Omsg_OCrypt @ SY3180 @ SY3181 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2159]) ).
thf(2784,plain,
! [SV584: $i] :
( ( ! [SY3182: $i] :
( ( ( hAPP @ c_Public_OshrK @ SV584 )
!= ( hAPP @ c_Public_OshrK @ SY3182 ) )
| ( SV584 = SY3182 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2160]) ).
thf(2785,plain,
! [SV585: $i] :
( ( ! [SY3183: $i] :
( ~ ( c_in @ SV585 @ ( c_Message_Oanalz @ SY3183 ) @ tc_Message_Omsg )
| ( c_in @ SV585 @ ( c_Message_Oparts @ SY3183 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2161]) ).
thf(2786,plain,
! [SV586: $i] :
( ( ! [SY3184: $i] :
( ( c_in @ SV586 @ ( c_Message_Oparts @ SY3184 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV586 @ ( c_Message_Oanalz @ SY3184 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2162]) ).
thf(2787,plain,
! [SV587: $i] :
( ( ! [SY3185: $i] :
( ( c_in @ SV587 @ ( c_Message_Oparts @ SY3185 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV587 @ ( c_Message_Oanalz @ SY3185 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2163]) ).
thf(2788,plain,
! [SV588: $i] :
( ( ! [SY3186: $i] :
( ( class_Lattices_Oupper__semilattice @ ( tc_fun @ SV588 @ SY3186 ) )
| ~ ( class_Lattices_Olattice @ SY3186 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2164]) ).
thf(2789,plain,
! [SV589: $i] :
( ( ! [SY3187: $i] :
( ( class_Lattices_Obounded__lattice @ ( tc_fun @ SV589 @ SY3187 ) )
| ~ ( class_Lattices_Obounded__lattice @ SY3187 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2165]) ).
thf(2790,plain,
! [SV590: $i] :
( ( ! [SY3188: $i] :
( ( class_Lattices_Oboolean__algebra @ ( tc_fun @ SV590 @ SY3188 ) )
| ~ ( class_Lattices_Oboolean__algebra @ SY3188 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2166]) ).
thf(2791,plain,
! [SV591: $i] :
( ( ! [SY3189: $i] :
( ( class_Orderings_Opreorder @ ( tc_fun @ SV591 @ SY3189 ) )
| ~ ( class_Orderings_Opreorder @ SY3189 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2167]) ).
thf(2792,plain,
! [SV592: $i] :
( ( ! [SY3190: $i] :
( ( class_Lattices_Olattice @ ( tc_fun @ SV592 @ SY3190 ) )
| ~ ( class_Lattices_Olattice @ SY3190 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2168]) ).
thf(2793,plain,
! [SV593: $i] :
( ( ! [SY3191: $i] :
( ( class_Orderings_Oorder @ ( tc_fun @ SV593 @ SY3191 ) )
| ~ ( class_Orderings_Oorder @ SY3191 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2169]) ).
thf(2794,plain,
! [SV594: $i] :
( ( ! [SY3192: $i] :
( ( class_Orderings_Otop @ ( tc_fun @ SV594 @ SY3192 ) )
| ~ ( class_Orderings_Otop @ SY3192 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2170]) ).
thf(2795,plain,
! [SV595: $i] :
( ( ! [SY3193: $i] :
( ( class_Orderings_Obot @ ( tc_fun @ SV595 @ SY3193 ) )
| ~ ( class_Orderings_Obot @ SY3193 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2171]) ).
thf(2796,plain,
! [SV596: $i] :
( ( ! [SY3194: $i] :
( ( class_HOL_Oord @ ( tc_fun @ SV596 @ SY3194 ) )
| ~ ( class_HOL_Oord @ SY3194 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2172]) ).
thf(2797,plain,
! [SV597: $i] :
( ( ! [SY3195: $i] : ( c_fequal @ SV597 @ SV597 @ SY3195 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2189]) ).
thf(2798,plain,
! [SV598: $i] :
( ( ! [SY3196: $i] :
( ( SV598 = SY3196 )
| ! [SY3197: $i] :
~ ( c_fequal @ SV598 @ SY3196 @ SY3197 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2190]) ).
thf(2799,plain,
$false = $false,
inference(extcnf_not_pos,[status(thm)],[2191]) ).
thf(2800,plain,
! [SV599: $i,SV1: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV599 ) ) @ ( c_Message_Oparts @ SV599 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV1 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV599 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2196]) ).
thf(2801,plain,
! [SV600: $i,SV2: $i] :
( ( ! [SY3198: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV2 @ SV600 ) @ SY3198 @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV600 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SY3198 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2197]) ).
thf(2802,plain,
! [SV601: $i,SV3: $i] :
( ( ! [SY3199: $i,SY3200: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV3 @ SV601 @ SY3199 ) @ SY3200 @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3199 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SY3200 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2198]) ).
thf(2803,plain,
! [SV602: $i,SV4: $i] :
( ( ! [SY3201: $i,SY3202: $i] :
( ( c_in @ SV4 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV602 @ SY3201 @ SV4 @ SY3202 ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ SV602 @ SY3201 @ SV4 @ SY3202 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2199]) ).
thf(2804,plain,
! [SV603: $i,SV5: $i] :
( ( ( c_in @ SV5 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ ( c_Message_Oparts @ SV603 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ! [SY3203: $i] :
( ~ ( c_in @ SY3203 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV5 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3203 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2200]) ).
thf(2805,plain,
! [SV604: $i,SV6: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV6 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV604 ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV6 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV604 ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2201]) ).
thf(2806,plain,
! [SV605: $i,SV7: $i] :
( ( ~ ( hBOOL @ ( hAPP @ SV7 @ SV605 ) )
| ! [SY3204: $i] :
~ ( c_in @ SV605 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3204 @ tc_bool ) ) @ SY3204 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2202]) ).
thf(2807,plain,
! [SV606: $i,SV8: $i] :
( ( ~ ( c_in @ SV8 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV606 @ tc_bool ) ) @ SV606 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2203]) ).
thf(2808,plain,
! [SV607: $i,SV9: $i] :
( ( ~ ( c_in @ SV9 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV607 @ tc_bool ) ) @ SV607 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2204]) ).
thf(2809,plain,
! [SV608: $i,SV10: $i] :
( ( ( hBOOL @ ( hAPP @ SV10 @ SV608 ) )
| ! [SY3205: $i] :
~ ( c_in @ SV608 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3205 @ tc_bool ) ) @ SY3205 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2205]) ).
thf(2810,plain,
! [SV609: $i,SV11: $i] :
( ( ~ ( c_in @ SV11 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV609 @ tc_bool ) ) @ SV609 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2206]) ).
thf(2811,plain,
! [SV610: $i,SV12: $i] :
( ( ! [SY3206: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV12 @ tc_bool ) )
= ( c_Set_Oimage @ SV610 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3206 @ tc_bool ) ) @ SY3206 @ SV12 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2207]) ).
thf(2812,plain,
! [SV611: $i,SV13: $i] :
( ( ! [SY3207: $i] :
( ( c_Set_Oinsert @ SV13 @ SV611 @ SY3207 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ SV13 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3207 @ tc_bool ) ) @ SY3207 ) @ SV611 @ ( tc_fun @ SY3207 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2208]) ).
thf(2813,plain,
! [SV14: $i] :
( ( ( ~ ( class_Lattices_Obounded__lattice @ SV14 ) )
= $true )
| ( ( ! [SY1921: $i,SY1922: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY1921 @ SY1922 @ SV14 )
!= ( c_Orderings_Obot__class_Obot @ SV14 ) )
| ( SY1922
= ( c_Orderings_Obot__class_Obot @ SV14 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2209]) ).
thf(2814,plain,
! [SV15: $i] :
( ( ( ~ ( class_Lattices_Obounded__lattice @ SV15 ) )
= $true )
| ( ( ! [SY1923: $i] :
( ! [SY1924: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY1923 @ SY1924 @ SV15 )
!= ( c_Orderings_Obot__class_Obot @ SV15 ) )
| ( SY1923
= ( c_Orderings_Obot__class_Obot @ SV15 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2210]) ).
thf(2815,plain,
! [SV612: $i,SV16: $i] :
( ( ! [SY3208: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV16 @ SV612 @ ( tc_fun @ SY3208 @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3208 @ tc_bool ) ) )
| ( SV16
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3208 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2211]) ).
thf(2816,plain,
! [SV613: $i,SV17: $i] :
( ( ! [SY3209: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV17 @ SV613 @ ( tc_fun @ SY3209 @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3209 @ tc_bool ) ) )
| ( SV613
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3209 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2212]) ).
thf(2817,plain,
! [SV614: $i,SV18: $i] :
( ( ! [SY3210: $i] :
( ( ( c_Set_Oinsert @ SV18 @ SV614 @ SY3210 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3210 @ tc_bool ) ) )
| ( c_in @ SV18 @ SV614 @ SY3210 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2213]) ).
thf(2818,plain,
! [SV615: $i,SV19: $i] :
( ( ! [SY3211: $i] :
( ( ( c_Set_Oinsert @ SV19 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV615 @ tc_bool ) ) @ SV615 )
!= ( c_Set_Oinsert @ SY3211 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV615 @ tc_bool ) ) @ SV615 ) )
| ( SV19 = SY3211 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2214]) ).
thf(2819,plain,
! [SV616: $i,SV20: $i] :
( ( ! [SY3212: $i] :
( ( c_Set_Oimage @ SV20 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV616 @ tc_bool ) ) @ SV616 @ SY3212 )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3212 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2215]) ).
thf(2820,plain,
! [SV617: $i,SV21: $i] :
( ( ! [SY3213: $i] :
( ( c_Set_Oinsert @ SV21 @ ( c_Set_Oinsert @ SV617 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3213 @ tc_bool ) ) @ SY3213 ) @ SY3213 )
= ( c_Set_Oinsert @ SV617 @ ( c_Set_Oinsert @ SV21 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3213 @ tc_bool ) ) @ SY3213 ) @ SY3213 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2216]) ).
thf(2821,plain,
! [SV618: $i,SV22: $i] :
( ( ! [SY3214: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV22 @ ( c_Set_Oinsert @ SV618 @ SY3214 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV22 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV618 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ SY3214 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2217]) ).
thf(2822,plain,
! [SV619: $i,SV23: $i] :
( ( ( SV23 = SV619 )
| ! [SY3215: $i] :
~ ( c_in @ SV23 @ ( c_Set_Oinsert @ SV619 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3215 @ tc_bool ) ) @ SY3215 ) @ SY3215 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2218]) ).
thf(2823,plain,
! [SV620: $i,SV24: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV24 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SV620 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV24 @ ( c_Event_Oused @ SV620 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2219]) ).
thf(2824,plain,
! [SV621: $i,SV25: $i] :
( ( ! [SY3216: $i,SY3217: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV25 @ tc_bool ) )
!= ( c_Set_Oimage @ SV621 @ SY3216 @ SY3217 @ SV25 ) )
| ( SY3216
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3217 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2220]) ).
thf(2825,plain,
! [SV622: $i,SV26: $i] :
( ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV26 @ tc_bool ) ) @ SV622 @ ( tc_fun @ SV26 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2221]) ).
thf(2826,plain,
! [SV27: $i] :
( ( ( ~ ( class_Orderings_Obot @ SV27 ) )
= $true )
| ( ( ! [SY1946: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ SV27 ) @ SY1946 @ SV27 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2222]) ).
thf(2827,plain,
! [SV623: $i,SV28: $i] :
( ( ! [SY3218: $i] :
( ( c_Set_Oinsert @ SV28 @ SV623 @ SY3218 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3218 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2223]) ).
thf(2828,plain,
! [SV30: $i] :
( ( ( ~ ( class_Lattices_Obounded__lattice @ SV30 ) )
= $true )
| ( ( ! [SY1949: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY1949 @ ( c_Orderings_Obot__class_Obot @ SV30 ) @ SV30 )
= SY1949 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2225]) ).
thf(2829,plain,
! [SV31: $i] :
( ( ( ~ ( class_Lattices_Obounded__lattice @ SV31 ) )
= $true )
| ( ( ! [SY1950: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ SV31 ) @ SY1950 @ SV31 )
= SY1950 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2226]) ).
thf(2830,plain,
! [SV624: $i,SV32: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV32 @ tc_bool ) ) @ SV624 @ ( tc_fun @ SV32 @ tc_bool ) )
= SV624 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2227]) ).
thf(2831,plain,
! [SV625: $i,SV33: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV33 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV625 @ tc_bool ) ) @ ( tc_fun @ SV625 @ tc_bool ) )
= SV33 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2228]) ).
thf(2832,plain,
! [SV34: $i] :
( ( ( ~ ( class_Lattices_Oboolean__algebra @ SV34 ) )
= $true )
| ( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ SV34 ) @ SV34 )
= ( c_Orderings_Obot__class_Obot @ SV34 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2229]) ).
thf(2833,plain,
! [SV626: $i,SV36: $i] :
( ( ~ ( hBOOL @ ( hAPP @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV36 @ tc_bool ) ) @ SV626 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2231]) ).
thf(2834,plain,
! [SV37: $i] :
( ( ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV37 @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV37 @ tc_bool ) ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2232]) ).
thf(2835,plain,
! [SV627: $i,SV38: $i] :
( ( ! [SY3219: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV38 @ ( c_Event_Oknows @ SV627 @ SY3219 ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV38 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ SV627 @ SY3219 ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2233]) ).
thf(2836,plain,
! [SV628: $i,SV39: $i] :
( ( ! [SY3220: $i,SY3221: $i,SY3222: $i] :
( ( ( c_Set_Oinsert @ SV39 @ ( c_Set_Oinsert @ SV628 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3220 @ tc_bool ) ) @ SY3220 ) @ SY3220 )
!= ( c_Set_Oinsert @ SY3221 @ ( c_Set_Oinsert @ SY3222 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3220 @ tc_bool ) ) @ SY3220 ) @ SY3220 ) )
| ( SV39 = SY3222 )
| ( SV39 = SY3221 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2234]) ).
thf(2837,plain,
! [SV629: $i,SV40: $i] :
( ( ! [SY3223: $i,SY3224: $i] :
( ! [SY3225: $i] :
( ( c_Set_Oinsert @ SV40 @ ( c_Set_Oinsert @ SV629 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3223 @ tc_bool ) ) @ SY3223 ) @ SY3223 )
!= ( c_Set_Oinsert @ SY3224 @ ( c_Set_Oinsert @ SY3225 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3223 @ tc_bool ) ) @ SY3223 ) @ SY3223 ) )
| ( SV629 = SY3224 )
| ( SV40 = SY3224 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2235]) ).
thf(2838,plain,
! [SV630: $i,SV41: $i] :
( ( ! [SY3226: $i,SY3227: $i,SY3228: $i] :
( ( ( c_Set_Oinsert @ SV41 @ ( c_Set_Oinsert @ SV630 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3226 @ tc_bool ) ) @ SY3226 ) @ SY3226 )
!= ( c_Set_Oinsert @ SY3227 @ ( c_Set_Oinsert @ SY3228 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3226 @ tc_bool ) ) @ SY3226 ) @ SY3226 ) )
| ( SV41 = SY3228 )
| ( SV630 = SY3228 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2236]) ).
thf(2839,plain,
! [SV631: $i,SV42: $i] :
( ( ! [SY3229: $i,SY3230: $i,SY3231: $i] :
( ( ( c_Set_Oinsert @ SV42 @ ( c_Set_Oinsert @ SV631 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3229 @ tc_bool ) ) @ SY3229 ) @ SY3229 )
!= ( c_Set_Oinsert @ SY3230 @ ( c_Set_Oinsert @ SY3231 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3229 @ tc_bool ) ) @ SY3229 ) @ SY3229 ) )
| ( SV631 = SY3230 )
| ( SV631 = SY3231 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2237]) ).
thf(2840,plain,
! [SV632: $i,SV43: $i] :
( ( ( SV43
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV632 @ tc_bool ) ) )
| ~ ( c_lessequals @ SV43 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV632 @ tc_bool ) ) @ ( tc_fun @ SV632 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2238]) ).
thf(2841,plain,
! [SV633: $i,SV45: $i] :
( ( ! [SY3232: $i] :
( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV45 @ tc_bool ) )
!= ( c_Set_Oinsert @ SV633 @ SY3232 @ SV45 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2240]) ).
thf(2842,plain,
! [SV46: $i] :
( ( ( ~ ( class_Lattices_Oboolean__algebra @ SV46 ) )
= $true )
| ( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ SV46 ) @ SV46 )
= ( c_Orderings_Otop__class_Otop @ SV46 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2241]) ).
thf(2843,plain,
! [SV634: $i,SV48: $i] :
( ( ! [SY3233: $i] :
( ! [SY3234: $i] :
( ( c_Set_Oimage @ SV48 @ SV634 @ SY3233 @ SY3234 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3234 @ tc_bool ) ) )
| ( SV634
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3233 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2243]) ).
thf(2844,plain,
! [SV635: $i,SV49: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV49 @ SV635 @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV49 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ SV635 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2244]) ).
thf(2845,plain,
! [SV636: $i,SV50: $i] :
( ( c_in @ SV50 @ ( c_Set_Oinsert @ SV50 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV636 @ tc_bool ) ) @ SV636 ) @ SV636 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2245]) ).
thf(2846,plain,
! [SV637: $i,SV51: $i] :
( ( ( SV51
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV637 @ tc_bool ) ) )
| ~ ( c_lessequals @ SV51 @ ( c_HOL_Ouminus__class_Ouminus @ SV51 @ ( tc_fun @ SV637 @ tc_bool ) ) @ ( tc_fun @ SV637 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2246]) ).
thf(2847,plain,
! [SV638: $i,SV52: $i] :
( ( ! [SY3235: $i] :
( ( SV52
= ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3235 @ tc_bool ) ) @ SY3235 ) )
| ( SV52
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3235 @ tc_bool ) ) )
| ~ ( c_lessequals @ SV52 @ ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3235 @ tc_bool ) ) @ SY3235 ) @ ( tc_fun @ SY3235 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2247]) ).
thf(2848,plain,
! [SV639: $i,SV55: $i] :
( ( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV55 @ tc_bool ) )
!= ( c_List_Oset @ SV639 @ SV55 ) )
| ( SV639
= ( c_List_Olist_ONil @ SV55 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2250]) ).
thf(2849,plain,
! [SV640: $i,SV57: $i] :
( ( ( ( c_List_Oset @ SV57 @ SV640 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV640 @ tc_bool ) ) )
| ( SV57
= ( c_List_Olist_ONil @ SV640 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2252]) ).
thf(2850,plain,
! [SV58: $i] :
( ( c_in @ SV58 @ ( c_Message_Oparts @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2253]) ).
thf(2851,plain,
! [SV59: $i] :
( ( ( ! [SY1985: $i] : ( hBOOL @ ( hAPP @ SV59 @ SY1985 ) ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OEncryption ) )
| ~ ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OSignature ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2255]) ).
thf(2852,plain,
! [SV641: $i,SV60: $i] :
( ( ! [SY3236: $i,SY3237: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ SV60 @ SV641 @ SY3236 ) @ SY3237 @ ( tc_fun @ SY3236 @ tc_bool ) )
= ( c_Set_Oinsert @ SV60 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV641 @ SY3237 @ ( tc_fun @ SY3236 @ tc_bool ) ) @ SY3236 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2257]) ).
thf(2853,plain,
! [SV642: $i,SV61: $i] :
( ( ! [SY3238: $i,SY3239: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV61 @ ( c_Set_Oinsert @ SV642 @ SY3238 @ SY3239 ) @ ( tc_fun @ SY3239 @ tc_bool ) )
= ( c_Set_Oinsert @ SV642 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV61 @ SY3238 @ ( tc_fun @ SY3239 @ tc_bool ) ) @ SY3239 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2258]) ).
thf(2854,plain,
! [SV62: $i] :
( ( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV62 ) )
= $true )
| ( ( ! [SY1992: $i,SY1993: $i] :
( ( c_lessequals @ SY1992 @ SY1993 @ SV62 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY1993 @ SV62 ) @ ( c_HOL_Ouminus__class_Ouminus @ SY1992 @ SV62 ) @ SV62 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2259]) ).
thf(2855,plain,
! [SV63: $i] :
( ( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV63 ) )
= $true )
| ( ( ! [SY1994: $i,SY1995: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY1994 @ SV63 ) @ ( c_HOL_Ouminus__class_Ouminus @ SY1995 @ SV63 ) @ SV63 )
| ~ ( c_lessequals @ SY1995 @ SY1994 @ SV63 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2260]) ).
thf(2856,plain,
! [SV643: $i,SV64: $i] :
( ( ! [SY3240: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV64 @ ( tc_fun @ SV643 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SY3240 @ ( tc_fun @ SV643 @ tc_bool ) ) @ ( tc_fun @ SV643 @ tc_bool ) )
| ~ ( c_lessequals @ SY3240 @ SV64 @ ( tc_fun @ SV643 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2261]) ).
thf(2857,plain,
! [SV644: $i,SV65: $i] :
( ( ! [SY3241: $i] :
( ( c_lessequals @ SV65 @ SV644 @ ( tc_fun @ SY3241 @ tc_bool ) )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV644 @ ( tc_fun @ SY3241 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV65 @ ( tc_fun @ SY3241 @ tc_bool ) ) @ ( tc_fun @ SY3241 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2262]) ).
thf(2858,plain,
! [SV645: $i,SV66: $i] :
( ( ! [SY3242: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV66 @ ( tc_fun @ SV645 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SY3242 @ ( tc_fun @ SV645 @ tc_bool ) ) @ ( tc_fun @ SV645 @ tc_bool ) )
| ~ ( c_lessequals @ SY3242 @ SV66 @ ( tc_fun @ SV645 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2263]) ).
thf(2859,plain,
! [SV646: $i,SV67: $i] :
( ( ( c_lessequals @ ( c_Message_Osynth @ SV67 ) @ ( c_Message_Osynth @ SV646 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV67 @ SV646 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2264]) ).
thf(2860,plain,
! [SV647: $i,SV68: $i] :
( ( ! [SY3243: $i,SY3244: $i,SY3245: $i] :
( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ ( c_List_Oappend @ SV647 @ ( c_List_Olist_OCons @ SY3243 @ SY3244 @ SY3245 ) @ SY3245 ) @ SY3245 ) ) )
| ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ SY3244 @ SY3245 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV68 @ SY3243 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2265]) ).
thf(2861,plain,
! [SV69: $i] :
( ( ( ~ ( class_Lattices_Obounded__lattice @ SV69 ) )
= $true )
| ( ( ! [SY2007: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2007 @ ( c_Orderings_Otop__class_Otop @ SV69 ) @ SV69 )
= ( c_Orderings_Otop__class_Otop @ SV69 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2266]) ).
thf(2862,plain,
! [SV70: $i] :
( ( ( ~ ( class_Lattices_Obounded__lattice @ SV70 ) )
= $true )
| ( ( ! [SY2008: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ SV70 ) @ SY2008 @ SV70 )
= ( c_Orderings_Otop__class_Otop @ SV70 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2267]) ).
thf(2863,plain,
! [SV648: $i,SV71: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV71 @ tc_bool ) ) @ SV648 @ ( tc_fun @ SV71 @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV71 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2268]) ).
thf(2864,plain,
! [SV649: $i,SV72: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV72 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV649 @ tc_bool ) ) @ ( tc_fun @ SV649 @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV649 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2269]) ).
thf(2865,plain,
! [SV650: $i,SV73: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV73 @ SV650 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV73 ) @ ( c_Message_Oparts @ SV650 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2270]) ).
thf(2866,plain,
! [SV651: $i,SV74: $i] :
( ( ! [SY3246: $i] : ( c_lessequals @ SV74 @ ( c_Set_Oinsert @ SV651 @ SV74 @ SY3246 ) @ ( tc_fun @ SY3246 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2271]) ).
thf(2867,plain,
! [SV652: $i,SV75: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ SV75 @ ( c_Message_Osynth @ SV652 ) @ tc_Message_Omsg ) @ ( c_Message_Osynth @ ( c_Set_Oinsert @ SV75 @ SV652 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2272]) ).
thf(2868,plain,
! [SV653: $i,SV76: $i] :
( ( ! [SY3247: $i,SY3248: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV76 @ SV653 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SY3247 ) @ SY3248 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SY3247 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV76 @ SV653 ) @ SY3248 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2273]) ).
thf(2869,plain,
! [SV654: $i,SV77: $i] :
( ( ! [SY3249: $i,SY3250: $i,SY3251: $i] :
( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ ( c_List_Oappend @ SV654 @ ( c_List_Olist_OCons @ SY3249 @ SY3250 @ SY3251 ) @ SY3251 ) @ SY3251 ) ) )
| ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ SV654 @ SY3251 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV77 @ SY3249 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2274]) ).
thf(2870,plain,
! [SV655: $i,SV78: $i] :
( ( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV78 ) @ SV655 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SV655 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2275]) ).
thf(2871,plain,
! [SV656: $i,SV79: $i] :
( ( ( hBOOL @ ( hAPP @ SV79 @ SV656 ) )
| ! [SY3252: $i] :
( ( hBOOL @ ( hAPP @ SY3252 @ SV656 ) )
| ! [SY3253: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3252 @ SV79 @ ( tc_fun @ SY3253 @ tc_bool ) ) @ SV656 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2276]) ).
thf(2872,plain,
! [SV657: $i,SV80: $i] :
( ( ! [SY3254: $i,SY3255: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV80 @ SV657 @ ( tc_fun @ SY3254 @ tc_bool ) ) @ SY3255 ) )
| ~ ( hBOOL @ ( hAPP @ SV657 @ SY3255 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2277]) ).
thf(2873,plain,
! [SV658: $i,SV81: $i] :
( ( ! [SY3256: $i,SY3257: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV81 @ SV658 @ ( tc_fun @ SY3256 @ tc_bool ) ) @ SY3257 ) )
| ~ ( hBOOL @ ( hAPP @ SV81 @ SY3257 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2278]) ).
thf(2874,plain,
! [SV659: $i,SV82: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ SV82 ) @ ( c_Message_Osynth @ SV659 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Osynth @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV82 @ SV659 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2279]) ).
thf(2875,plain,
! [SV660: $i,SV83: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV83 ) @ SV660 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV83 ) @ ( c_Message_Oparts @ SV660 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2280]) ).
thf(2876,plain,
! [SV84: $i] :
( ( ( ~ ( class_Lattices_Oboolean__algebra @ SV84 ) )
= $true )
| ( ( ! [SY2034: $i,SY2035: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SY2034 @ SV84 )
!= ( c_HOL_Ouminus__class_Ouminus @ SY2035 @ SV84 ) )
| ( SY2034 = SY2035 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2281]) ).
thf(2877,plain,
! [SV85: $i] :
( ( ( ~ ( class_OrderedGroup_Ogroup__add @ SV85 ) )
= $true )
| ( ( ! [SY2036: $i,SY2037: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SY2036 @ SV85 )
!= ( c_HOL_Ouminus__class_Ouminus @ SY2037 @ SV85 ) )
| ( SY2036 = SY2037 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2282]) ).
thf(2878,plain,
! [SV661: $i,SV86: $i] :
( ( ! [SY3258: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SV86 @ ( tc_fun @ SV661 @ tc_bool ) )
!= ( c_HOL_Ouminus__class_Ouminus @ SY3258 @ ( tc_fun @ SV661 @ tc_bool ) ) )
| ( SV86 = SY3258 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2283]) ).
thf(2879,plain,
! [SV662: $i,SV87: $i] :
( ( ( SV87 = SV662 )
| ! [SY3259: $i] :
( ~ ( c_lessequals @ SV662 @ SV87 @ ( tc_fun @ SY3259 @ tc_bool ) )
| ~ ( c_lessequals @ SV87 @ SV662 @ ( tc_fun @ SY3259 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2284]) ).
thf(2880,plain,
! [SV663: $i,SV88: $i] :
( ( ( SV88 = SV663 )
| ! [SY3260: $i] :
( ~ ( c_lessequals @ SV663 @ SV88 @ ( tc_fun @ SY3260 @ tc_bool ) )
| ~ ( c_lessequals @ SV88 @ SV663 @ ( tc_fun @ SY3260 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2285]) ).
thf(2881,plain,
! [SV89: $i] :
( ( ( ~ ( class_Orderings_Oorder @ SV89 ) )
= $true )
| ( ( ! [SY2044: $i,SY2045: $i] :
( ( SY2044 = SY2045 )
| ~ ( c_lessequals @ SY2045 @ SY2044 @ SV89 )
| ~ ( c_lessequals @ SY2044 @ SY2045 @ SV89 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2286]) ).
thf(2882,plain,
! [SV90: $i] :
( ( ( ~ ( class_Orderings_Oorder @ SV90 ) )
= $true )
| ( ( ! [SY2046: $i,SY2047: $i] :
( ( SY2046 = SY2047 )
| ~ ( c_lessequals @ SY2047 @ SY2046 @ SV90 )
| ~ ( c_lessequals @ SY2046 @ SY2047 @ SV90 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2287]) ).
thf(2883,plain,
! [SV91: $i] :
( ( ( ~ ( class_Orderings_Oorder @ SV91 ) )
= $true )
| ( ( ! [SY2048: $i,SY2049: $i] :
( ( SY2048 = SY2049 )
| ~ ( c_lessequals @ SY2048 @ SY2049 @ SV91 )
| ~ ( c_lessequals @ SY2049 @ SY2048 @ SV91 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2288]) ).
thf(2884,plain,
! [SV92: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV92 ) )
= $true )
| ( ( ! [SY2050: $i,SY2051: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2050 @ SY2051 @ SV92 )
= SY2050 )
| ~ ( c_lessequals @ SY2051 @ SY2050 @ SV92 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2289]) ).
thf(2885,plain,
! [SV93: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV93 ) )
= $true )
| ( ( ! [SY2052: $i,SY2053: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2052 @ SY2053 @ SV93 )
!= SY2053 )
| ( c_lessequals @ SY2052 @ SY2053 @ SV93 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2290]) ).
thf(2886,plain,
! [SV94: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV94 ) )
= $true )
| ( ( ! [SY2054: $i,SY2055: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2054 @ SY2055 @ SV94 )
= SY2055 )
| ~ ( c_lessequals @ SY2054 @ SY2055 @ SV94 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2291]) ).
thf(2887,plain,
! [SV664: $i,SV95: $i] :
( ( ! [SY3261: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV95 @ SV664 @ ( tc_fun @ SY3261 @ tc_bool ) )
= SV664 )
| ~ ( c_lessequals @ SV95 @ SV664 @ ( tc_fun @ SY3261 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2292]) ).
thf(2888,plain,
! [SV665: $i,SV96: $i] :
( ( ! [SY3262: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV96 @ SV665 @ ( tc_fun @ SY3262 @ tc_bool ) )
= SV96 )
| ~ ( c_lessequals @ SV665 @ SV96 @ ( tc_fun @ SY3262 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2293]) ).
thf(2889,plain,
! [SV666: $i,SV97: $i] :
( ( ! [SY3263: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV97 @ SV666 @ ( tc_fun @ SY3263 @ tc_bool ) )
!= SV666 )
| ( c_lessequals @ SV97 @ SV666 @ ( tc_fun @ SY3263 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2294]) ).
thf(2890,plain,
! [SV667: $i,SV98: $i] :
( ( ! [SY3264: $i] :
( ( c_List_Oset @ ( c_List_Oappend @ SV98 @ SV667 @ SY3264 ) @ SY3264 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_List_Oset @ SV98 @ SY3264 ) @ ( c_List_Oset @ SV667 @ SY3264 ) @ ( tc_fun @ SY3264 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2295]) ).
thf(2891,plain,
! [SV668: $i,SV99: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ SV99 @ ( c_Message_Oparts @ SV668 ) @ tc_Message_Omsg ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV99 @ SV668 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2296]) ).
thf(2892,plain,
! [SV669: $i,SV100: $i] :
( ( ! [SY3265: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV100 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV669 ) @ SY3265 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV669 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV100 ) @ SY3265 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2297]) ).
thf(2893,plain,
! [SV670: $i,SV101: $i] :
( ( ( ( c_Message_Omsg_OHash @ SV101 )
!= ( c_Message_Omsg_OHash @ SV670 ) )
| ( SV101 = SV670 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2298]) ).
thf(2894,plain,
! [SV671: $i,SV102: $i] :
( ( ! [SY3266: $i,SY3267: $i,SY3268: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV102 @ SV671 @ SY3266 @ SY3267 ) @ ( c_Set_Oimage @ SV102 @ SY3268 @ SY3266 @ SY3267 ) @ ( tc_fun @ SY3267 @ tc_bool ) )
= ( c_Set_Oimage @ SV102 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV671 @ SY3268 @ ( tc_fun @ SY3266 @ tc_bool ) ) @ SY3266 @ SY3267 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2299]) ).
thf(2895,plain,
! [SV672: $i,SV103: $i] :
( ( ! [SY3269: $i,SY3270: $i,SY3271: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV103 @ SV672 @ ( tc_fun @ SY3269 @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3270 @ SY3271 @ ( tc_fun @ SY3269 @ tc_bool ) ) @ ( tc_fun @ SY3269 @ tc_bool ) )
| ~ ( c_lessequals @ SV672 @ SY3271 @ ( tc_fun @ SY3269 @ tc_bool ) )
| ~ ( c_lessequals @ SV103 @ SY3270 @ ( tc_fun @ SY3269 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2300]) ).
thf(2896,plain,
! [SV673: $i,SV104: $i] :
( ( c_lessequals @ SV104 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV673 @ tc_bool ) ) @ ( tc_fun @ SV673 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2301]) ).
thf(2897,plain,
! [SV105: $i] :
( ( ( ~ ( class_Orderings_Otop @ SV105 ) )
= $true )
| ( ( ! [SY2077: $i] : ( c_lessequals @ SY2077 @ ( c_Orderings_Otop__class_Otop @ SV105 ) @ SV105 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2302]) ).
thf(2898,plain,
! [SV674: $i,SV106: $i] :
( ( ! [SY3272: $i,SY3273: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ SV106 @ SV674 @ SY3272 ) @ SY3273 @ ( tc_fun @ SY3272 @ tc_bool ) )
| ~ ( c_lessequals @ SV674 @ SY3273 @ ( tc_fun @ SY3272 @ tc_bool ) )
| ~ ( c_in @ SV106 @ SY3273 @ SY3272 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2303]) ).
thf(2899,plain,
! [SV675: $i,SV108: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV108 )
| ! [SY3274: $i] :
( ( c_lessequals @ SV675 @ SY3274 @ SV108 )
| ! [SY3275: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3275 @ SV675 @ SV108 ) @ SY3274 @ SV108 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2305]) ).
thf(2900,plain,
! [SV676: $i,SV109: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV109 )
| ! [SY3276: $i] :
( ( c_lessequals @ SV676 @ SY3276 @ SV109 )
| ! [SY3277: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV676 @ SY3277 @ SV109 ) @ SY3276 @ SV109 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2306]) ).
thf(2901,plain,
! [SV677: $i,SV110: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV110 )
| ! [SY3278: $i,SY3279: $i] :
( ( c_lessequals @ SV677 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3278 @ SY3279 @ SV110 ) @ SV110 )
| ~ ( c_lessequals @ SV677 @ SY3279 @ SV110 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2307]) ).
thf(2902,plain,
! [SV678: $i,SV111: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV111 )
| ! [SY3280: $i] :
( ! [SY3281: $i] : ( c_lessequals @ SV678 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3280 @ SY3281 @ SV111 ) @ SV111 )
| ~ ( c_lessequals @ SV678 @ SY3280 @ SV111 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2308]) ).
thf(2903,plain,
! [SV679: $i,SV112: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV112 )
| ! [SY3282: $i] :
( ( c_lessequals @ SV679 @ SY3282 @ SV112 )
| ! [SY3283: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3283 @ SV679 @ SV112 ) @ SY3282 @ SV112 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2309]) ).
thf(2904,plain,
! [SV680: $i,SV113: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV113 )
| ! [SY3284: $i] :
( ( c_lessequals @ SV680 @ SY3284 @ SV113 )
| ! [SY3285: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV680 @ SY3285 @ SV113 ) @ SY3284 @ SV113 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2310]) ).
thf(2905,plain,
! [SV681: $i,SV114: $i] :
( ( ! [SY3286: $i] :
( ( c_lessequals @ SV114 @ SV681 @ ( tc_fun @ SY3286 @ tc_bool ) )
| ! [SY3287: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV114 @ SY3287 @ ( tc_fun @ SY3286 @ tc_bool ) ) @ SV681 @ ( tc_fun @ SY3286 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2311]) ).
thf(2906,plain,
! [SV682: $i,SV115: $i] :
( ( ! [SY3288: $i] :
( ( c_lessequals @ SV115 @ SV682 @ ( tc_fun @ SY3288 @ tc_bool ) )
| ! [SY3289: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3289 @ SV115 @ ( tc_fun @ SY3288 @ tc_bool ) ) @ SV682 @ ( tc_fun @ SY3288 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2312]) ).
thf(2907,plain,
! [SV683: $i,SV116: $i] :
( ( ~ ( class_Orderings_Oorder @ SV116 )
| ! [SY3290: $i] :
( ( c_lessequals @ SV683 @ SY3290 @ SV116 )
| ! [SY3291: $i] :
( ~ ( c_lessequals @ SV683 @ SY3291 @ SV116 )
| ~ ( c_lessequals @ SY3291 @ SY3290 @ SV116 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2313]) ).
thf(2908,plain,
! [SV684: $i,SV117: $i] :
( ( ~ ( class_Orderings_Opreorder @ SV117 )
| ! [SY3292: $i] :
( ( c_lessequals @ SV684 @ SY3292 @ SV117 )
| ! [SY3293: $i] :
( ~ ( c_lessequals @ SY3293 @ SY3292 @ SV117 )
| ~ ( c_lessequals @ SV684 @ SY3293 @ SV117 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2314]) ).
thf(2909,plain,
! [SV685: $i,SV118: $i] :
( ( c_lessequals @ SV118 @ SV118 @ ( tc_fun @ SV685 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2315]) ).
thf(2910,plain,
! [SV686: $i,SV119: $i] :
( ( c_lessequals @ SV119 @ SV119 @ ( tc_fun @ SV686 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2316]) ).
thf(2911,plain,
! [SV687: $i,SV120: $i] :
( ( ! [SY3294: $i] :
( ( c_lessequals @ SV120 @ SV687 @ ( tc_fun @ SY3294 @ tc_bool ) )
| ! [SY3295: $i] :
( ~ ( c_lessequals @ SY3295 @ SV687 @ ( tc_fun @ SY3294 @ tc_bool ) )
| ~ ( c_lessequals @ SV120 @ SY3295 @ ( tc_fun @ SY3294 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2317]) ).
thf(2912,plain,
! [SV688: $i,SV121: $i] :
( ( ( hBOOL @ ( hAPP @ SV121 @ SV688 ) )
| ! [SY3296: $i] :
( ~ ( hBOOL @ ( hAPP @ SY3296 @ SV688 ) )
| ! [SY2118: $i] :
~ ( c_lessequals @ SY3296 @ SV121 @ ( tc_fun @ SY2118 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2318]) ).
thf(2913,plain,
! [SV122: $i] :
( ( ( ~ ( class_Orderings_Oorder @ SV122 ) )
= $true )
| ( ( ! [SY2119: $i] : ( c_lessequals @ SY2119 @ SY2119 @ SV122 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2319]) ).
thf(2914,plain,
! [SV123: $i] :
( ( ( ~ ( class_Orderings_Opreorder @ SV123 ) )
= $true )
| ( ( ! [SY2120: $i] : ( c_lessequals @ SY2120 @ SY2120 @ SV123 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2320]) ).
thf(2915,plain,
! [SV689: $i,SV124: $i] :
( ( ( hBOOL @ ( hAPP @ SV124 @ SV689 ) )
| ! [SY3298: $i] :
( ! [SY2123: $i] :
~ ( c_lessequals @ SY3298 @ SV124 @ ( tc_fun @ SY2123 @ tc_bool ) )
| ~ ( hBOOL @ ( hAPP @ SY3298 @ SV689 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2321]) ).
thf(2916,plain,
! [SV690: $i,SV125: $i] :
( ( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV125 ) @ SV690 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SV690 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2322]) ).
thf(2917,plain,
! [SV691: $i,SV126: $i] :
( ( ! [SY3300: $i] :
( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV126 @ SV691 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SY3300 ) @ ( c_Message_Oparts @ SV691 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV126 @ SY3300 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2323]) ).
thf(2918,plain,
! [SV692: $i,SV127: $i] :
( ( ! [SY3301: $i,SY3302: $i,SY3303: $i] :
( ( c_lessequals @ ( c_Set_Oimage @ SV127 @ SV692 @ SY3301 @ SY3302 ) @ ( c_Set_Oimage @ SV127 @ SY3303 @ SY3301 @ SY3302 ) @ ( tc_fun @ SY3302 @ tc_bool ) )
| ~ ( c_lessequals @ SV692 @ SY3303 @ ( tc_fun @ SY3301 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2324]) ).
thf(2919,plain,
! [SV693: $i,SV128: $i] :
( ( ! [SY3304: $i] :
( ~ ( c_lessequals @ SV128 @ SV693 @ ( tc_fun @ SY3304 @ tc_bool ) )
| ! [SY3305: $i,SY3306: $i] : ( c_lessequals @ ( c_Set_Oimage @ SY3305 @ SV128 @ SY3304 @ SY3306 ) @ ( c_Set_Oimage @ SY3305 @ SV693 @ SY3304 @ SY3306 ) @ ( tc_fun @ SY3306 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2325]) ).
thf(2920,plain,
! [SV694: $i,SV129: $i] :
( ( ! [SY3307: $i,SY3308: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ SV129 @ SV694 @ SY3307 ) @ ( c_Set_Oinsert @ SV129 @ SY3308 @ SY3307 ) @ ( tc_fun @ SY3307 @ tc_bool ) )
| ~ ( c_lessequals @ SV694 @ SY3308 @ ( tc_fun @ SY3307 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2326]) ).
thf(2921,plain,
! [SV695: $i,SV130: $i] :
( ( ! [SY3309: $i,SY3310: $i,SY3311: $i] :
( ( c_Set_Oimage @ SV130 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV695 @ SY3309 @ ( tc_fun @ SY3310 @ tc_bool ) ) @ SY3310 @ SY3311 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV130 @ SV695 @ SY3310 @ SY3311 ) @ ( c_Set_Oimage @ SV130 @ SY3309 @ SY3310 @ SY3311 ) @ ( tc_fun @ SY3311 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2327]) ).
thf(2922,plain,
! [SV696: $i,SV131: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ SV131 @ ( c_Message_Oanalz @ SV696 ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV131 @ SV696 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2328]) ).
thf(2923,plain,
! [SV697: $i,SV132: $i] :
( ( ! [SY3312: $i,SY3313: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV132 @ SV697 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3312 @ SY3313 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV697 ) @ ( c_Message_Oanalz @ SY3313 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV132 ) @ ( c_Message_Oanalz @ SY3312 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2329]) ).
thf(2924,plain,
! [SV133: $i] :
( ( ( ~ ( class_Orderings_Olinorder @ SV133 ) )
= $true )
| ( ( ! [SY2146: $i,SY2147: $i] :
( ( c_lessequals @ SY2146 @ SY2147 @ SV133 )
| ( c_lessequals @ SY2147 @ SY2146 @ SV133 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2330]) ).
thf(2925,plain,
! [SV698: $i,SV134: $i] :
( ( ! [SY3314: $i,SY3315: $i] :
( ( c_in @ ( hAPP @ SV134 @ SV698 ) @ SY3314 @ SY3315 )
| ! [SY3316: $i,SY3317: $i] :
( ~ ( c_in @ SV698 @ SY3316 @ SY3317 )
| ~ ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SY3316 @ SY3317 @ SY3315 ) @ SY3314 @ ( tc_fun @ SY3315 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2331]) ).
thf(2926,plain,
! [SV699: $i,SV135: $i] :
( ( ! [SY3318: $i] : ( c_lessequals @ ( c_List_Oset @ SV135 @ SV699 ) @ ( c_List_Oset @ ( c_List_Olist_OCons @ SY3318 @ SV135 @ SV699 ) @ SV699 ) @ ( tc_fun @ SV699 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2332]) ).
thf(2927,plain,
! [SV700: $i,SV136: $i] :
( ( ( c_in @ SV136 @ ( c_Message_Oparts @ SV700 ) @ tc_Message_Omsg )
| ! [SY3319: $i] :
( ( c_in @ SV136 @ ( c_Message_Oparts @ SY3319 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV136 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3319 @ SV700 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2333]) ).
thf(2928,plain,
! [SV701: $i,SV137: $i] :
( ( ( c_in @ SV137 @ ( c_Message_Oparts @ SV701 ) @ tc_Message_Omsg )
| ! [SY3320: $i] :
( ~ ( c_lessequals @ SY3320 @ ( c_Message_Oparts @ SV701 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV137 @ ( c_Message_Oparts @ SY3320 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2334]) ).
thf(2929,plain,
! [SV702: $i,SV138: $i] :
( ( ! [SY3321: $i] :
( ( c_in @ SV138 @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV702 @ SY3321 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV138 @ ( c_Message_Oanalz @ SY3321 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2335]) ).
thf(2930,plain,
! [SV703: $i,SV139: $i] :
( ( ( c_in @ SV139 @ ( c_Message_Oanalz @ SV703 ) @ tc_Message_Omsg )
| ! [SY3322: $i] :
( ~ ( c_lessequals @ SY3322 @ ( c_Message_Oanalz @ SV703 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV139 @ ( c_Message_Oanalz @ SY3322 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2336]) ).
thf(2931,plain,
! [SV704: $i,SV141: $i] :
( ( ( c_in @ SV141 @ ( c_Message_Osynth @ SV704 ) @ tc_Message_Omsg )
| ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ SV704 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ ( c_Message_Osynth @ SV704 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2338]) ).
thf(2932,plain,
! [SV705: $i,SV142: $i] :
( ( ( c_in @ SV142 @ ( c_Message_Osynth @ SV705 ) @ tc_Message_Omsg )
| ! [SY3323: $i] :
( ~ ( c_lessequals @ SY3323 @ ( c_Message_Osynth @ SV705 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV142 @ ( c_Message_Osynth @ SY3323 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2339]) ).
thf(2933,plain,
! [SV706: $i,SV143: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ SV143 ) @ ( c_Message_Osynth @ SV706 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV143 @ ( c_Message_Osynth @ SV706 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2340]) ).
thf(2934,plain,
! [SV707: $i,SV145: $i] :
( ( ( c_lessequals @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV145 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV707 ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV145 @ SV707 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2342]) ).
thf(2935,plain,
! [SV708: $i,SV147: $i] :
( ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ SV147 ) @ SV708 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV147 @ SV708 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Osynth @ SV147 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2344]) ).
thf(2936,plain,
! [SV709: $i,SV148: $i] :
( ( ! [SY3324: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV148 @ SV709 ) @ ( c_Event_Oknows @ SV148 @ ( c_List_Olist_OCons @ SY3324 @ SV709 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2345]) ).
thf(2937,plain,
! [SV710: $i,SV149: $i] :
( ( c_lessequals @ ( c_Event_OinitState @ SV149 ) @ ( c_Event_Oknows @ SV149 @ SV710 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2346]) ).
thf(2938,plain,
! [SV711: $i,SV150: $i] :
( ( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV150 ) @ SV711 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SV711 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2347]) ).
thf(2939,plain,
! [SV712: $i,SV151: $i] :
( ( ! [SY3325: $i,SY3326: $i] :
( ( c_lessequals @ SV151 @ ( c_Set_Oinsert @ SV712 @ SY3325 @ SY3326 ) @ ( tc_fun @ SY3326 @ tc_bool ) )
| ~ ( c_lessequals @ SV151 @ SY3325 @ ( tc_fun @ SY3326 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2348]) ).
thf(2940,plain,
! [SV713: $i,SV152: $i] :
( ( ! [SY3327: $i] :
( ( c_lessequals @ SV152 @ SV713 @ ( tc_fun @ SY3327 @ tc_bool ) )
| ! [SY3328: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ SY3328 @ SV152 @ SY3327 ) @ SV713 @ ( tc_fun @ SY3327 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2349]) ).
thf(2941,plain,
! [SV714: $i,SV153: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV153 @ SV153 @ ( tc_fun @ SV714 @ tc_bool ) )
= SV153 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2350]) ).
thf(2942,plain,
! [SV154: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV154 ) )
= $true )
| ( ( ! [SY2180: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2180 @ SY2180 @ SV154 )
= SY2180 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2351]) ).
thf(2943,plain,
! [SV715: $i,SV155: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ SV155 ) @ ( c_Message_Oanalz @ SV715 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV155 @ SV715 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2352]) ).
thf(2944,plain,
! [SV716: $i,SV156: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV156 ) @ ( c_Message_Oparts @ SV716 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV156 @ SV716 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2353]) ).
thf(2945,plain,
! [SV717: $i,SV157: $i] :
( ( ( c_lessequals @ ( c_Message_Osynth @ SV157 ) @ ( c_Message_Osynth @ SV717 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV157 @ ( c_Message_Osynth @ SV717 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2354]) ).
thf(2946,plain,
! [SV718: $i,SV158: $i] :
( ( ( c_lessequals @ SV158 @ ( c_Message_Osynth @ SV718 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Osynth @ SV158 ) @ ( c_Message_Osynth @ SV718 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2355]) ).
thf(2947,plain,
! [SV719: $i,SV159: $i] :
( ( ! [SY3329: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV159 @ SV719 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3329 ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3329 @ SV719 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV159 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3329 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2356]) ).
thf(2948,plain,
! [SV720: $i,SV160: $i] :
( ( ! [SY3330: $i,SY3331: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV160 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV720 @ SY3330 @ ( tc_fun @ SY3331 @ tc_bool ) ) @ ( tc_fun @ SY3331 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV720 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV160 @ SY3330 @ ( tc_fun @ SY3331 @ tc_bool ) ) @ ( tc_fun @ SY3331 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2357]) ).
thf(2949,plain,
! [SV721: $i,SV161: $i] :
( ( ! [SY3332: $i,SY3333: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV161 @ SV721 @ ( tc_fun @ SY3332 @ tc_bool ) ) @ SY3333 @ ( tc_fun @ SY3332 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV161 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV721 @ SY3333 @ ( tc_fun @ SY3332 @ tc_bool ) ) @ ( tc_fun @ SY3332 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2358]) ).
thf(2950,plain,
! [SV722: $i,SV162: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV162 )
| ! [SY3334: $i,SY3335: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ SY3334 @ SV162 ) @ SY3335 @ SV162 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3334 @ SY3335 @ SV162 ) @ SV162 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2359]) ).
thf(2951,plain,
! [SV723: $i,SV163: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV163 )
| ! [SY3336: $i,SY3337: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3336 @ SY3337 @ SV163 ) @ SV163 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY3336 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ SY3337 @ SV163 ) @ SV163 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2360]) ).
thf(2952,plain,
! [SV724: $i,SV164: $i] :
( ( ! [SY3338: $i,SY3339: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV164 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV724 @ SY3338 @ ( tc_fun @ SY3339 @ tc_bool ) ) @ ( tc_fun @ SY3339 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV164 @ SV724 @ ( tc_fun @ SY3339 @ tc_bool ) ) @ SY3338 @ ( tc_fun @ SY3339 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2361]) ).
thf(2953,plain,
! [SV725: $i,SV165: $i] :
( ( ~ ( class_Lattices_Olattice @ SV165 )
| ! [SY3340: $i,SY3341: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3340 @ SY3341 @ SV165 ) @ SV165 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY3340 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ SY3341 @ SV165 ) @ SV165 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2362]) ).
thf(2954,plain,
! [SV726: $i,SV166: $i] :
( ( ~ ( class_Lattices_Olattice @ SV166 )
| ! [SY3342: $i,SY3343: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ SY3342 @ SV166 ) @ SY3343 @ SV166 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3342 @ SY3343 @ SV166 ) @ SV166 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2363]) ).
thf(2955,plain,
! [SV727: $i,SV167: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV167 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ SV727 @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV167 @ SV727 @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2364]) ).
thf(2956,plain,
! [SV728: $i,SV168: $i] :
( ( ( c_in @ SV168 @ SV728 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ SV168 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ SV728 @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2365]) ).
thf(2957,plain,
! [SV729: $i,SV169: $i] :
( ( ! [SY3344: $i,SY3345: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV169 @ SV729 @ ( tc_fun @ SY3344 @ tc_bool ) ) @ SY3345 @ ( tc_fun @ SY3344 @ tc_bool ) )
| ~ ( c_lessequals @ SV729 @ SY3345 @ ( tc_fun @ SY3344 @ tc_bool ) )
| ~ ( c_lessequals @ SV169 @ SY3345 @ ( tc_fun @ SY3344 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2366]) ).
thf(2958,plain,
! [SV730: $i,SV170: $i] :
( ( ! [SY3346: $i] : ( c_lessequals @ SV170 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV730 @ SV170 @ ( tc_fun @ SY3346 @ tc_bool ) ) @ ( tc_fun @ SY3346 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2367]) ).
thf(2959,plain,
! [SV731: $i,SV171: $i] :
( ( ! [SY3347: $i] : ( c_lessequals @ SV171 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV171 @ SV731 @ ( tc_fun @ SY3347 @ tc_bool ) ) @ ( tc_fun @ SY3347 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2368]) ).
thf(2960,plain,
! [SV732: $i,SV172: $i] :
( ( ! [SY3348: $i,SY3349: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV172 @ SV732 @ ( tc_fun @ SY3348 @ tc_bool ) ) @ SY3349 @ ( tc_fun @ SY3348 @ tc_bool ) )
| ~ ( c_lessequals @ SV732 @ SY3349 @ ( tc_fun @ SY3348 @ tc_bool ) )
| ~ ( c_lessequals @ SV172 @ SY3349 @ ( tc_fun @ SY3348 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2369]) ).
thf(2961,plain,
! [SV733: $i,SV173: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV173 )
| ! [SY3350: $i,SY3351: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV733 @ SY3350 @ SV173 ) @ SY3351 @ SV173 )
| ~ ( c_lessequals @ SY3350 @ SY3351 @ SV173 )
| ~ ( c_lessequals @ SV733 @ SY3351 @ SV173 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2370]) ).
thf(2962,plain,
! [SV174: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV174 ) )
= $true )
| ( ( ! [SY2223: $i,SY2224: $i] : ( c_lessequals @ SY2223 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2223 @ SY2224 @ SV174 ) @ SV174 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2371]) ).
thf(2963,plain,
! [SV175: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV175 ) )
= $true )
| ( ( ! [SY2225: $i,SY2226: $i] : ( c_lessequals @ SY2225 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2226 @ SY2225 @ SV175 ) @ SV175 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2372]) ).
thf(2964,plain,
! [SV734: $i,SV176: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV176 )
| ! [SY3352: $i,SY3353: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV734 @ SY3352 @ SV176 ) @ SY3353 @ SV176 )
| ~ ( c_lessequals @ SY3352 @ SY3353 @ SV176 )
| ~ ( c_lessequals @ SV734 @ SY3353 @ SV176 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2373]) ).
thf(2965,plain,
! [SV735: $i,SV177: $i] :
( ( ~ ( class_Lattices_Oupper__semilattice @ SV177 )
| ! [SY3354: $i,SY3355: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV735 @ SY3354 @ SV177 ) @ SY3355 @ SV177 )
| ~ ( c_lessequals @ SY3354 @ SY3355 @ SV177 )
| ~ ( c_lessequals @ SV735 @ SY3355 @ SV177 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2374]) ).
thf(2966,plain,
! [SV178: $i] :
( ( ( ~ ( class_Lattices_Olattice @ SV178 ) )
= $true )
| ( ( ! [SY2233: $i,SY2234: $i] : ( c_lessequals @ SY2233 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2234 @ SY2233 @ SV178 ) @ SV178 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2375]) ).
thf(2967,plain,
! [SV179: $i] :
( ( ( ~ ( class_Lattices_Olattice @ SV179 ) )
= $true )
| ( ( ! [SY2235: $i,SY2236: $i] : ( c_lessequals @ SY2235 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2235 @ SY2236 @ SV179 ) @ SV179 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2376]) ).
thf(2968,plain,
! [SV736: $i,SV180: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ SV180 @ ( tc_fun @ SV736 @ tc_bool ) ) @ SV180 @ ( tc_fun @ SV736 @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV736 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2377]) ).
thf(2969,plain,
! [SV737: $i,SV181: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV181 @ ( c_HOL_Ouminus__class_Ouminus @ SV181 @ ( tc_fun @ SV737 @ tc_bool ) ) @ ( tc_fun @ SV737 @ tc_bool ) )
= ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV737 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2378]) ).
thf(2970,plain,
! [SV182: $i] :
( ( ( ~ ( class_Lattices_Oboolean__algebra @ SV182 ) )
= $true )
| ( ( ! [SY2239: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ SY2239 @ SV182 ) @ SY2239 @ SV182 )
= ( c_Orderings_Otop__class_Otop @ SV182 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2379]) ).
thf(2971,plain,
! [SV183: $i] :
( ( ( ~ ( class_Lattices_Oboolean__algebra @ SV183 ) )
= $true )
| ( ( ! [SY2240: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2240 @ ( c_HOL_Ouminus__class_Ouminus @ SY2240 @ SV183 ) @ SV183 )
= ( c_Orderings_Otop__class_Otop @ SV183 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2380]) ).
thf(2972,plain,
! [SV738: $i,SV184: $i] :
( ( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV184 ) @ SV738 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SV738 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2381]) ).
thf(2973,plain,
! [SV739: $i,SV185: $i] :
( ( ! [SY3356: $i] :
( ( c_in @ SV185 @ SV739 @ SY3356 )
| ! [SY3357: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ SV185 @ SY3357 @ SY3356 ) @ SV739 @ ( tc_fun @ SY3356 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2382]) ).
thf(2974,plain,
! [SV740: $i,SV186: $i] :
( ( ! [SY3358: $i,SY3359: $i] :
( ( c_lessequals @ SV186 @ ( c_Set_Oinsert @ SV740 @ SY3358 @ SY3359 ) @ ( tc_fun @ SY3359 @ tc_bool ) )
| ~ ( c_lessequals @ SV186 @ SY3358 @ ( tc_fun @ SY3359 @ tc_bool ) )
| ( c_in @ SV740 @ SV186 @ SY3359 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2383]) ).
thf(2975,plain,
! [SV741: $i,SV187: $i] :
( ( ! [SY3360: $i] :
( ( c_lessequals @ SV187 @ SV741 @ ( tc_fun @ SY3360 @ tc_bool ) )
| ! [SY3361: $i] :
( ( c_in @ SY3361 @ SV187 @ SY3360 )
| ~ ( c_lessequals @ SV187 @ ( c_Set_Oinsert @ SY3361 @ SV741 @ SY3360 ) @ ( tc_fun @ SY3360 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2384]) ).
thf(2976,plain,
! [SV742: $i,SV188: $i] :
( ( ! [SY3362: $i,SY3363: $i] :
( ( c_lessequals @ SV188 @ ( c_Set_Oinsert @ SV742 @ SY3362 @ SY3363 ) @ ( tc_fun @ SY3363 @ tc_bool ) )
| ~ ( c_lessequals @ SV188 @ SY3362 @ ( tc_fun @ SY3363 @ tc_bool ) )
| ( c_in @ SV742 @ SV188 @ SY3363 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2385]) ).
thf(2977,plain,
! [SV743: $i,SV189: $i] :
( ( ! [SY3364: $i] :
( ( c_lessequals @ SV189 @ SV743 @ ( tc_fun @ SY3364 @ tc_bool ) )
| ! [SY3365: $i] :
( ~ ( c_lessequals @ SV189 @ ( c_Set_Oinsert @ SY3365 @ SV743 @ SY3364 ) @ ( tc_fun @ SY3364 @ tc_bool ) )
| ( c_in @ SY3365 @ SV189 @ SY3364 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2386]) ).
thf(2978,plain,
! [SV744: $i,SV190: $i] :
( ( ! [SY3366: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV190 @ SV744 @ ( tc_fun @ SY3366 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV744 @ SV190 @ ( tc_fun @ SY3366 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2387]) ).
thf(2979,plain,
! [SV191: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV191 ) )
= $true )
| ( ( ! [SY2259: $i,SY2260: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2259 @ SY2260 @ SV191 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2260 @ SY2259 @ SV191 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2388]) ).
thf(2980,plain,
! [SV192: $i] :
( ( ( ~ ( class_Lattices_Olattice @ SV192 ) )
= $true )
| ( ( ! [SY2261: $i,SY2262: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2261 @ SY2262 @ SV192 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2262 @ SY2261 @ SV192 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2389]) ).
thf(2981,plain,
! [SV745: $i,SV193: $i] :
( ( ! [SY3367: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV193 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV193 @ SV745 @ ( tc_fun @ SY3367 @ tc_bool ) ) @ ( tc_fun @ SY3367 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV193 @ SV745 @ ( tc_fun @ SY3367 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2390]) ).
thf(2982,plain,
! [SV194: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV194 ) )
= $true )
| ( ( ! [SY2265: $i,SY2266: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2265 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2265 @ SY2266 @ SV194 ) @ SV194 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2265 @ SY2266 @ SV194 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2391]) ).
thf(2983,plain,
! [SV195: $i] :
( ( ( ~ ( class_Lattices_Olattice @ SV195 ) )
= $true )
| ( ( ! [SY2267: $i,SY2268: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2267 @ SY2268 @ SV195 ) @ SV195 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2267 @ SY2268 @ SV195 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2392]) ).
thf(2984,plain,
! [SV746: $i,SV196: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV196 ) @ SV746 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV196 ) @ ( c_Message_Oanalz @ SV746 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2393]) ).
thf(2985,plain,
! [SV747: $i,SV197: $i] :
( ( ( c_lessequals @ ( c_Message_OkeysFor @ SV197 ) @ ( c_Message_OkeysFor @ SV747 ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_lessequals @ SV197 @ SV747 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2394]) ).
thf(2986,plain,
! [SV748: $i,SV198: $i] :
( ( ! [SY3368: $i] :
( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV198 @ SV748 ) @ SY3368 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SY3368 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2395]) ).
thf(2987,plain,
! [SV749: $i,SV199: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SV199 @ ( tc_fun @ SV749 @ tc_bool ) ) @ ( tc_fun @ SV749 @ tc_bool ) )
= SV199 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2396]) ).
thf(2988,plain,
! [SV200: $i] :
( ( ( ~ ( class_OrderedGroup_Ogroup__add @ SV200 ) )
= $true )
| ( ( ! [SY2274: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2274 @ SV200 ) @ SV200 )
= SY2274 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2397]) ).
thf(2989,plain,
! [SV201: $i] :
( ( ( ~ ( class_Lattices_Oboolean__algebra @ SV201 ) )
= $true )
| ( ( ! [SY2275: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2275 @ SV201 ) @ SV201 )
= SY2275 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2398]) ).
thf(2990,plain,
! [SV202: $i] :
( ( ( ~ ( class_OrderedGroup_Ogroup__add @ SV202 ) )
= $true )
| ( ( ! [SY2276: $i] :
( SY2276
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2276 @ SV202 ) @ SV202 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2399]) ).
thf(2991,plain,
! [SV203: $i] :
( ( ( ~ ( class_OrderedGroup_Ogroup__add @ SV203 ) )
= $true )
| ( ( ! [SY2277: $i] :
( SY2277
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2277 @ SV203 ) @ SV203 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2400]) ).
thf(2992,plain,
! [SV204: $i] :
( ( ( ~ ( class_OrderedGroup_Ogroup__add @ SV204 ) )
= $true )
| ( ( ! [SY2278: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2278 @ SV204 ) @ SV204 )
= SY2278 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2401]) ).
thf(2993,plain,
! [SV750: $i,SV205: $i] :
( ( ! [SY3369: $i] :
( ~ ( class_HOL_Oord @ SV205 )
| ! [SY3370: $i] :
( ( c_lessequals @ ( hAPP @ SV750 @ SY3369 ) @ ( hAPP @ SY3370 @ SY3369 ) @ SV205 )
| ! [SY3371: $i] :
~ ( c_lessequals @ SV750 @ SY3370 @ ( tc_fun @ SY3371 @ SV205 ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2402]) ).
thf(2994,plain,
! [SV206: $i] :
( ( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV206 ) )
= $true )
| ( ( ! [SY2283: $i,SY2284: $i] :
( ( c_lessequals @ SY2283 @ ( c_HOL_Ouminus__class_Ouminus @ SY2284 @ SV206 ) @ SV206 )
| ~ ( c_lessequals @ SY2284 @ ( c_HOL_Ouminus__class_Ouminus @ SY2283 @ SV206 ) @ SV206 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2403]) ).
thf(2995,plain,
! [SV207: $i] :
( ( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV207 ) )
= $true )
| ( ( ! [SY2285: $i,SY2286: $i] :
( ( c_lessequals @ SY2285 @ ( c_HOL_Ouminus__class_Ouminus @ SY2286 @ SV207 ) @ SV207 )
| ~ ( c_lessequals @ SY2286 @ ( c_HOL_Ouminus__class_Ouminus @ SY2285 @ SV207 ) @ SV207 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2404]) ).
thf(2996,plain,
! [SV208: $i] :
( ( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV208 ) )
= $true )
| ( ( ! [SY2287: $i,SY2288: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2287 @ SV208 ) @ SY2288 @ SV208 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2288 @ SV208 ) @ SY2287 @ SV208 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2405]) ).
thf(2997,plain,
! [SV209: $i] :
( ( ( ~ ( class_OrderedGroup_Opordered__ab__group__add @ SV209 ) )
= $true )
| ( ( ! [SY2289: $i,SY2290: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2289 @ SV209 ) @ SY2290 @ SV209 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2290 @ SV209 ) @ SY2289 @ SV209 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2406]) ).
thf(2998,plain,
! [SV751: $i,SV210: $i] :
( ( ! [SY3372: $i] :
( ( c_in @ SV210 @ SV751 @ SY3372 )
| ! [SY3373: $i] :
( ~ ( c_in @ SV210 @ SY3373 @ SY3372 )
| ~ ( c_lessequals @ SY3373 @ SV751 @ ( tc_fun @ SY3372 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2407]) ).
thf(2999,plain,
! [SV752: $i,SV211: $i] :
( ( ! [SY3374: $i] :
( ( c_in @ SV211 @ SV752 @ SY3374 )
| ! [SY3375: $i] :
( ~ ( c_lessequals @ SY3375 @ SV752 @ ( tc_fun @ SY3374 @ tc_bool ) )
| ~ ( c_in @ SV211 @ SY3375 @ SY3374 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2408]) ).
thf(3000,plain,
! [SV753: $i,SV212: $i] :
( ( ! [SY3376: $i] :
( ( c_in @ SV212 @ SV753 @ SY3376 )
| ! [SY3377: $i] :
( ~ ( c_in @ SV212 @ SY3377 @ SY3376 )
| ~ ( c_lessequals @ SY3377 @ SV753 @ ( tc_fun @ SY3376 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2409]) ).
thf(3001,plain,
! [SV754: $i,SV213: $i] :
( ( ! [SY3378: $i] :
( ( c_in @ SV213 @ SV754 @ SY3378 )
| ! [SY3379: $i] :
( ~ ( c_in @ SV213 @ SY3379 @ SY3378 )
| ~ ( c_lessequals @ SY3379 @ SV754 @ ( tc_fun @ SY3378 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2410]) ).
thf(3002,plain,
! [SV755: $i,SV214: $i] :
( ( ! [SY3380: $i,SY3381: $i] :
( ( c_in @ SV214 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV755 @ SY3380 @ ( tc_fun @ SY3381 @ tc_bool ) ) @ SY3381 )
| ~ ( c_in @ SV214 @ SV755 @ SY3381 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2411]) ).
thf(3003,plain,
! [SV756: $i,SV215: $i] :
( ( ! [SY3382: $i,SY3383: $i] :
( ( c_in @ SV215 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV756 @ SY3382 @ ( tc_fun @ SY3383 @ tc_bool ) ) @ SY3383 )
| ~ ( c_in @ SV215 @ SY3382 @ SY3383 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2412]) ).
thf(3004,plain,
! [SV757: $i,SV216: $i] :
( ( ! [SY3384: $i] :
( ( c_in @ SV216 @ SV757 @ SY3384 )
| ! [SY3385: $i] :
( ( c_in @ SV216 @ SY3385 @ SY3384 )
| ~ ( c_in @ SV216 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3385 @ SV757 @ ( tc_fun @ SY3384 @ tc_bool ) ) @ SY3384 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2413]) ).
thf(3005,plain,
! [SV758: $i,SV217: $i] :
( ( ! [SY3386: $i] :
( ( c_in @ SV217 @ ( c_HOL_Ouminus__class_Ouminus @ SV758 @ ( tc_fun @ SY3386 @ tc_bool ) ) @ SY3386 )
| ( c_in @ SV217 @ SV758 @ SY3386 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2414]) ).
thf(3006,plain,
! [SV759: $i,SV218: $i] :
( ( ! [SY3387: $i] :
( ~ ( c_in @ SV218 @ SV759 @ SY3387 )
| ~ ( c_in @ SV218 @ ( c_HOL_Ouminus__class_Ouminus @ SV759 @ ( tc_fun @ SY3387 @ tc_bool ) ) @ SY3387 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2415]) ).
thf(3007,plain,
! [SV760: $i,SV219: $i] :
( ( ! [SY3388: $i] :
( ( c_Message_Omsg_OMPair @ SV219 @ SV760 )
!= ( c_Message_Omsg_OHash @ SY3388 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2416]) ).
thf(3008,plain,
! [SV761: $i,SV220: $i] :
( ( ! [SY3389: $i] :
( ( c_Message_Omsg_OHash @ SV220 )
!= ( c_Message_Omsg_OMPair @ SV761 @ SY3389 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2417]) ).
thf(3009,plain,
! [SV762: $i,SV221: $i] :
( ( ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV221 @ SV762 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV221 ) @ ( c_Message_Oparts @ SV762 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2418]) ).
thf(3010,plain,
! [SV763: $i,SV223: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ SV223 ) @ ( c_Message_Oparts @ SV763 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV223 @ SV763 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2420]) ).
thf(3011,plain,
! [SV764: $i,SV224: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ SV224 ) @ ( c_Message_Oparts @ SV764 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV224 @ ( c_Message_Oparts @ SV764 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2421]) ).
thf(3012,plain,
! [SV765: $i,SV225: $i] :
( ( ( c_lessequals @ SV225 @ ( c_Message_Oparts @ SV765 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oparts @ SV225 ) @ ( c_Message_Oparts @ SV765 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2422]) ).
thf(3013,plain,
! [SV766: $i,SV226: $i] :
( ( ! [SY3390: $i] :
( ( c_Message_Omsg_OHash @ SV226 )
!= ( c_Message_Omsg_OCrypt @ SV766 @ SY3390 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2423]) ).
thf(3014,plain,
! [SV767: $i,SV227: $i] :
( ( ! [SY3391: $i] :
( ( c_Message_Omsg_OCrypt @ SV227 @ SV767 )
!= ( c_Message_Omsg_OHash @ SY3391 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2424]) ).
thf(3015,plain,
! [SV768: $i,SV228: $i] :
( ( ( c_Message_Omsg_OHash @ SV228 )
!= ( hAPP @ c_Message_Omsg_OKey @ SV768 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2425]) ).
thf(3016,plain,
! [SV769: $i,SV229: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV229 )
!= ( c_Message_Omsg_OHash @ SV769 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2426]) ).
thf(3017,plain,
! [SV770: $i,SV230: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ SV230 ) @ ( c_Message_Oanalz @ SV770 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV230 @ SV770 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2427]) ).
thf(3018,plain,
! [SV771: $i,SV231: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ SV231 ) @ ( c_Message_Oanalz @ SV771 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ SV231 @ ( c_Message_Oanalz @ SV771 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2428]) ).
thf(3019,plain,
! [SV772: $i,SV232: $i] :
( ( ( c_lessequals @ SV232 @ ( c_Message_Oanalz @ SV772 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV232 ) @ ( c_Message_Oanalz @ SV772 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2429]) ).
thf(3020,plain,
! [SV773: $i,SV234: $i] :
( ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oanalz @ SV234 ) @ SV773 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV234 @ SV773 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2431]) ).
thf(3021,plain,
! [SV774: $i,SV235: $i] :
( ( ( ( c_Message_Oanalz @ SV235 )
!= ( c_Message_Oanalz @ SV774 ) )
| ! [SY3392: $i,SY3393: $i] :
( ( ( c_Message_Oanalz @ SY3392 )
!= ( c_Message_Oanalz @ SY3393 ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3392 @ SV235 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3393 @ SV774 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2432]) ).
thf(3022,plain,
! [SV775: $i,SV236: $i] :
( ( ( c_Message_Omsg_OHash @ SV236 )
!= ( c_Message_Omsg_OAgent @ SV775 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2433]) ).
thf(3023,plain,
! [SV776: $i,SV237: $i] :
( ( ( c_Message_Omsg_OAgent @ SV237 )
!= ( c_Message_Omsg_OHash @ SV776 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2434]) ).
thf(3024,plain,
! [SV777: $i,SV238: $i] :
( ( ( c_Message_Omsg_ONonce @ SV238 )
!= ( c_Message_Omsg_OHash @ SV777 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2435]) ).
thf(3025,plain,
! [SV778: $i,SV239: $i] :
( ( ( c_Message_Omsg_OHash @ SV239 )
!= ( c_Message_Omsg_ONonce @ SV778 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2436]) ).
thf(3026,plain,
! [SV779: $i,SV241: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV241 @ SV779 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV779 ) ) @ ( c_Message_Oparts @ SV779 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV241 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV779 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2438]) ).
thf(3027,plain,
! [SV780: $i,SV242: $i] :
( ( ! [SY3394: $i] :
( ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV780 @ SY3394 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ! [SY3395: $i] :
( ~ ( c_in @ SY3395 @ ( c_Message_Oparts @ SY3394 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3395 @ SV780 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2439]) ).
thf(3028,plain,
! [SV781: $i,SV243: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV243 @ SV781 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SV781 ) )
| ! [SY3396: $i] :
( ~ ( c_lessequals @ SY3396 @ SV781 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV243 @ ( c_Message_Oanalz @ SY3396 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2440]) ).
thf(3029,plain,
! [SV782: $i,SV244: $i] :
( ( ! [SY3397: $i] : ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV244 @ SV782 ) @ SY3397 @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV244 @ SV782 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV782 @ SY3397 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2441]) ).
thf(3030,plain,
! [SV783: $i,SV245: $i] :
( ( ~ ( c_in @ ( c_Message_Omsg_OHash @ SV245 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV783 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2442]) ).
thf(3031,plain,
! [SV784: $i,SV246: $i] :
( ( ! [SY3398: $i,SY3399: $i,SY3400: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV246 @ SV784 ) @ ( c_Event_Oknows @ SV246 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SY3398 @ SY3399 @ SY3400 ) @ SV784 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2443]) ).
thf(3032,plain,
! [SV785: $i,SV247: $i] :
( ( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ SV247 ) )
!= ( hAPP @ c_Public_OshrK @ SV785 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2444]) ).
thf(3033,plain,
! [SV786: $i,SV248: $i] :
( ( ! [SY3401: $i,SY3402: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV248 @ SV786 ) @ ( c_Event_Oknows @ SV248 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SY3401 @ SY3402 ) @ SV786 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2445]) ).
thf(3034,plain,
! [SV787: $i,SV249: $i] :
( ( ! [SY3403: $i,SY3404: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV249 @ SV787 ) @ ( c_Event_Oknows @ SV249 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SY3403 @ SY3404 ) @ SV787 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2446]) ).
thf(3035,plain,
! [SV788: $i,SV250: $i] :
( ( ! [SY3405: $i,SY3406: $i,SY3407: $i] :
( ~ ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3408: $i,SY3409: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3405 @ ( c_Message_Omsg_OCrypt @ SY3406 @ ( c_Message_Omsg_OMPair @ SY3407 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3408 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY3409 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2447]) ).
thf(3036,plain,
! [SV789: $i,SV251: $i] :
( ( ! [SY3410: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV251 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV789 @ SY3410 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY3410 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV251 ) @ tc_Message_Omsg ) )
| ~ ( c_in @ SV789 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2448]) ).
thf(3037,plain,
! [SV790: $i,SV252: $i] :
( ( ! [SY3411: $i,SY3412: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV252 @ SV790 @ SY3411 ) @ SY3412 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY3411 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3412 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2449]) ).
thf(3038,plain,
! [SV253: $i] :
( ( ( ! [SY2372: $i,SY2373: $i] :
( ( c_Event_Oknows @ SV253 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV253 @ SY2372 ) @ SY2373 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY2372 @ ( c_Event_Oknows @ SV253 @ SY2373 ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( SV253 = c_Message_Oagent_OSpy )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2450]) ).
thf(3039,plain,
! [SV791: $i,SV254: $i] :
( ( ! [SY3413: $i,SY3414: $i] :
( ~ ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY3413 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY3415: $i,SY3416: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3413 ) @ ( c_Message_Omsg_OMPair @ SY3414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3415 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY3416 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2451]) ).
thf(3040,plain,
! [SV792: $i,SV255: $i] :
( ( ~ ( c_in @ SV255 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV792 ) ) ) @ tc_nat )
| ~ ( c_in @ SV792 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ SV255 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV255 ) @ ( c_Event_Oused @ SV792 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2452]) ).
thf(3041,plain,
! [SV793: $i,SV256: $i] :
( ( ! [SY3417: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SV793 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV793 @ SY3417 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SV793 ) @ SY3417 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV256 ) ) @ ( c_Message_Oanalz @ SY3417 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2453]) ).
thf(3042,plain,
! [SV794: $i,SV257: $i] :
( ( ! [SY3418: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SV794 ) @ SY3418 @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SV794 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV794 @ SY3418 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV257 ) ) @ ( c_Message_Oanalz @ SY3418 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2454]) ).
thf(3043,plain,
! [SV795: $i,SV258: $i] :
( ( ( c_in @ SV258 @ SV795 @ tc_Message_Oagent )
| ! [SY3419: $i,SY3420: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SY3419 ) @ SV258 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY3420 ) @ SV795 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2455]) ).
thf(3044,plain,
! [SV796: $i,SV259: $i] :
( ( ! [SY3421: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV259 ) @ SV796 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV259 ) @ SY3421 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV796 @ SY3421 @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2456]) ).
thf(3045,plain,
! [SV797: $i,SV260: $i] :
( ( ! [SY3422: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ SV260 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV797 ) @ SY3422 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2457]) ).
thf(3046,plain,
! [SV798: $i,SV261: $i] :
( ( ! [SY3423: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV798 @ tc_nat @ tc_Message_Omsg ) @ SY3423 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ SY3423 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV261 @ SV798 @ tc_nat ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2458]) ).
thf(3047,plain,
! [SV799: $i,SV262: $i] :
( ( ! [SY3424: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV799 @ tc_nat @ tc_Message_Omsg ) @ SY3424 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV262 @ SV799 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ SY3424 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2459]) ).
thf(3048,plain,
! [SV800: $i,SV263: $i] :
( ( ! [SY3425: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SY3425 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV263 @ SV800 @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SY3425 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2460]) ).
thf(3049,plain,
! [SV801: $i,SV264: $i] :
( ( ! [SY3426: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV264 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV801 @ tc_nat @ tc_Message_Omsg ) @ SY3426 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV264 @ SV801 @ tc_nat )
| ~ ( c_in @ SV264 @ SV801 @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2461]) ).
thf(3050,plain,
! [SV802: $i,SV265: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SV802 ) @ tc_Message_Omsg )
| ! [SY3427: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3427 @ SV802 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ! [SY3428: $i] :
( ~ ( c_lessequals @ SY3428 @ SV802 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SY3427 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3428 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2462]) ).
thf(3051,plain,
! [SV803: $i,SV266: $i] :
( ( ! [SY3429: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV803 @ SY3429 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SY3429 ) @ tc_Message_Omsg )
| ! [SY3430: $i] :
( ~ ( c_lessequals @ SY3430 @ SY3429 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV803 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3430 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2463]) ).
thf(3052,plain,
! [SV804: $i,SV267: $i] :
( ( ( c_in @ SV267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ ( c_Message_Oparts @ SV804 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
| ! [SY3431: $i] :
( ~ ( c_in @ SY3431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV267 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3431 @ SV804 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2464]) ).
thf(3053,plain,
! [SV805: $i,SV268: $i] :
( ( ! [SY3432: $i,SY3433: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV268 @ SV805 @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV268 @ SV805 @ SY3432 @ SY3433 ) ) @ ( c_List_Oset @ SY3433 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ SV268 @ SV805 @ SY3432 @ SY3433 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2465]) ).
thf(3054,plain,
! [SV269: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ SV269 ) ) @ c_Message_OsymKeys @ tc_nat )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2466]) ).
thf(3055,plain,
! [SV806: $i,SV270: $i] :
( ( ( SV270 = SV806 )
| ! [SY3434: $i,SY3435: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV270 ) @ SY3434 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV806 ) @ SY3435 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2467]) ).
thf(3056,plain,
! [SV807: $i,SV271: $i] :
( ( ! [SY3436: $i,SY3437: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV271 ) @ SV807 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY3436 ) @ SY3437 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2468]) ).
thf(3057,plain,
! [SV808: $i,SV272: $i] :
( ( ! [SY3438: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV272 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV808 @ SY3438 ) @ SV272 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2469]) ).
thf(3058,plain,
! [SV273: $i] :
( ( ( c_in @ SV273 @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY2418: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SY2418 ) @ SV273 ) @ ( c_List_Oset @ SY2418 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SY2418 ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ SV273 @ SY2418 ) @ SV273 ) @ ( c_List_Oset @ SY2418 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV273 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2418 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2470]) ).
thf(3059,plain,
! [SV809: $i,SV274: $i] :
( ( ! [SY3439: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV274 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV809 @ SY3439 ) @ SV274 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2471]) ).
thf(3060,plain,
! [SV810: $i,SV275: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) ) @ tc_Message_Omsg )
| ! [SY3440: $i] :
( ( c_in @ SV275 @ SY3440 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY3440 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ SY3440 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV810 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2472]) ).
thf(3061,plain,
! [SV811: $i,SV276: $i] :
( ( ! [SY3441: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV276 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV811 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3441 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV276 @ SV811 @ tc_nat )
| ~ ( c_lessequals @ SV811 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SY3441 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2473]) ).
thf(3062,plain,
! [SV812: $i,SV277: $i] :
( ( ! [SY3442: $i,SY3443: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV277 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV812 @ SY3442 @ SY3443 ) @ SV277 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2474]) ).
thf(3063,plain,
! [SV813: $i,SV278: $i] :
( ( ( c_in @ SV278 @ ( c_Message_OkeysFor @ SV813 ) @ tc_nat )
| ~ ( c_in @ SV278 @ c_Message_OsymKeys @ tc_nat )
| ! [SY3444: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV278 @ SY3444 ) @ SV813 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2475]) ).
thf(3064,plain,
! [SV814: $i,SV280: $i] :
( ( ! [SY3445: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV814 @ tc_nat @ tc_Message_Omsg ) @ SY3445 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SY3445 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SY3445 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2477]) ).
thf(3065,plain,
! [SV815: $i,SV281: $i] :
( ( ! [SY3446: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SY3446 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ SY3446 ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SY3446 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2478]) ).
thf(3066,plain,
! [SV816: $i,SV282: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV282 ) @ ( c_Message_OkeysFor @ SV816 ) @ tc_nat )
| ! [SY3447: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV282 @ SY3447 ) @ SV816 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2479]) ).
thf(3067,plain,
! [SV817: $i,SV283: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV283 ) ) @ ( c_Message_Oparts @ SV817 ) @ tc_Message_Omsg )
| ! [SY3448: $i] :
( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3448 @ SV817 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
| ! [SY3449: $i] :
( ~ ( c_in @ SY3449 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV817 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3449 @ SY3448 @ tc_Message_Omsg ) ) ) @ tc_nat ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2480]) ).
thf(3068,plain,
! [SV818: $i,SV284: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV284 ) @ SV818 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV284 ) @ ( c_Message_Oanalz @ SV818 ) @ tc_Message_Omsg ) )
| ( c_in @ SV284 @ ( c_Message_OkeysFor @ ( c_Message_Oanalz @ SV818 ) ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2481]) ).
thf(3069,plain,
! [SV819: $i,SV285: $i] :
( ( ! [SY3450: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Oanalz @ SY3450 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3450 ) ) @ tc_Message_Omsg )
| ( c_in @ SV285 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3450 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2482]) ).
thf(3070,plain,
! [SV820: $i,SV286: $i] :
( ( ! [SY3451: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3451 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Oanalz @ SY3451 ) @ tc_Message_Omsg )
| ( c_in @ SV286 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3451 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2483]) ).
thf(3071,plain,
! [SV821: $i,SV287: $i] :
( ( ! [SY3452: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV821 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3452 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3452 ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ SV821 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SY3452 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2484]) ).
thf(3072,plain,
! [SV822: $i,SV288: $i] :
( ( ! [SY3453: $i,SY3454: $i,SY3455: $i] :
( ( hBOOL @ ( hAPP @ SV288 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ ( c_List_Oappend @ SV822 @ ( c_List_Olist_OCons @ SY3453 @ SY3454 @ SY3455 ) @ SY3455 ) @ SY3455 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ SV822 @ SY3455 ) @ ( c_List_Oset @ SV822 @ SY3455 ) @ SY3455 )
| ~ ( hBOOL @ ( hAPP @ SV288 @ SY3453 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2485]) ).
thf(3073,plain,
! [SV823: $i,SV289: $i] :
( ( ! [SY3456: $i,SY3457: $i,SY3458: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SY3456 @ SY3457 @ SY3458 ) @ SY3458 ) @ SY3458 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SY3456 @ SY3457 @ SY3458 ) @ SY3458 ) @ SY3458 ) @ SY3458 )
| ( hBOOL @ ( hAPP @ SV289 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ SY3457 @ SY3458 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV289 @ SY3456 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2486]) ).
thf(3074,plain,
! [SV824: $i,SV290: $i] :
( ( ! [SY3459: $i,SY3460: $i,SY3461: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SY3459 @ SY3460 @ SY3461 ) @ SY3461 ) @ SY3461 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SY3459 @ SY3460 @ SY3461 ) @ SY3461 ) @ SY3461 ) @ SY3461 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ SV824 @ SY3461 ) @ ( c_List_Oset @ SV824 @ SY3461 ) @ SY3461 )
| ~ ( hBOOL @ ( hAPP @ SV290 @ SY3459 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2487]) ).
thf(3075,plain,
! [SV825: $i,SV291: $i] :
( ( ! [SY3462: $i,SY3463: $i,SY3464: $i] :
( ( hBOOL @ ( hAPP @ SV291 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ ( c_List_Oappend @ SV825 @ ( c_List_Olist_OCons @ SY3462 @ SY3463 @ SY3464 ) @ SY3464 ) @ SY3464 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ SY3463 @ SY3464 ) @ ( c_List_Oset @ SY3463 @ SY3464 ) @ SY3464 )
| ~ ( hBOOL @ ( hAPP @ SV291 @ SY3462 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2488]) ).
thf(3076,plain,
! [SV826: $i,SV292: $i] :
( ( ! [SY3465: $i,SY3466: $i,SY3467: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SY3465 @ SY3466 @ SY3467 ) @ SY3467 ) @ SY3467 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SY3465 @ SY3466 @ SY3467 ) @ SY3467 ) @ SY3467 ) @ SY3467 )
| ( hBOOL @ ( hAPP @ SV292 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ SV826 @ SY3467 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV292 @ SY3465 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2489]) ).
thf(3077,plain,
! [SV827: $i,SV293: $i] :
( ( ! [SY3468: $i,SY3469: $i,SY3470: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SY3468 @ SY3469 @ SY3470 ) @ SY3470 ) @ SY3470 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SY3468 @ SY3469 @ SY3470 ) @ SY3470 ) @ SY3470 ) @ SY3470 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ SY3469 @ SY3470 ) @ ( c_List_Oset @ SY3469 @ SY3470 ) @ SY3470 )
| ~ ( hBOOL @ ( hAPP @ SV293 @ SY3468 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2490]) ).
thf(3078,plain,
! [SV828: $i,SV294: $i] :
( ( ! [SY3471: $i] :
( ( c_Event_Oknows @ SV294 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV294 @ SV828 ) @ SY3471 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV828 @ ( c_Event_Oknows @ SV294 @ SY3471 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2491]) ).
thf(3079,plain,
! [SV829: $i,SV295: $i] :
( ( ! [SY3472: $i,SY3473: $i] :
( ( c_Event_Oknows @ SV295 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV295 @ SV829 @ SY3472 ) @ SY3473 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY3472 @ ( c_Event_Oknows @ SV295 @ SY3473 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2492]) ).
thf(3080,plain,
! [SV830: $i,SV296: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV296 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV830 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
| ~ ( c_in @ SV296 @ SV830 @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2493]) ).
thf(3081,plain,
! [SV831: $i,SV297: $i] :
( ( ( c_in @ SV297 @ SV831 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV297 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV831 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2494]) ).
thf(3082,plain,
! [SV832: $i,SV298: $i] :
( ( ( ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV298 @ SV832 @ tc_Message_Omsg ) ) )
= ( c_Message_Osynth @ ( c_Message_Oanalz @ SV832 ) ) )
| ~ ( c_in @ SV298 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV832 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2495]) ).
thf(3083,plain,
! [SV833: $i,SV299: $i] :
( ( ! [SY3474: $i,SY3475: $i] :
( ( c_in @ SV299 @ ( c_List_Oset @ ( c_List_Oappend @ SV833 @ ( c_List_Olist_OCons @ SV299 @ SY3474 @ SY3475 ) @ SY3475 ) @ SY3475 ) @ SY3475 )
| ( c_in @ SV299 @ ( c_List_Oset @ SV833 @ SY3475 ) @ SY3475 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2496]) ).
thf(3084,plain,
! [SV834: $i,SV300: $i] :
( ( ! [SY3476: $i,SY3477: $i] :
( ( c_in @ SV300 @ ( c_List_Oset @ ( c_List_Oappend @ SV834 @ ( c_List_Olist_OCons @ SV300 @ SY3476 @ SY3477 ) @ SY3477 ) @ SY3477 ) @ SY3477 )
| ( c_in @ SV300 @ ( c_List_Oset @ SY3476 @ SY3477 ) @ SY3477 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2497]) ).
thf(3085,plain,
! [SV835: $i,SV301: $i] :
( ( ! [SY3478: $i,SY3479: $i] : ( c_in @ SV301 @ ( c_List_Oset @ ( c_List_Oappend @ SV835 @ ( c_List_Olist_OCons @ SV301 @ SY3478 @ SY3479 ) @ SY3479 ) @ SY3479 ) @ SY3479 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2498]) ).
thf(3086,plain,
! [SV836: $i,SV302: $i] :
( ( ! [SY3480: $i,SY3481: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV302 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV836 @ SY3480 @ SY3481 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY3481 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV302 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2499]) ).
thf(3087,plain,
! [SV837: $i,SV303: $i] :
( ( ! [SY3482: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV837 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3482 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3482 ) ) @ tc_Message_Omsg )
| ( c_in @ SV837 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SY3482 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2500]) ).
thf(3088,plain,
! [SV838: $i,SV304: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) ) @ tc_Message_Omsg )
| ! [SY3483: $i] :
( ( SV304 = SY3483 )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SY3483 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ( c_in @ SY3483 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV838 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2501]) ).
thf(3089,plain,
! [SV305: $i] :
( ( ( c_in @ SV305 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true )
| ( ( ! [SY2494: $i] :
( ~ ( c_in @ SY2494 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2494 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2502]) ).
thf(3090,plain,
! [SV839: $i,SV306: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV306 ) @ SV839 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV306 ) @ ( c_Message_Oanalz @ SV839 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2503]) ).
thf(3091,plain,
! [SV840: $i,SV307: $i] :
( ( ! [SY3484: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV307 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV840 ) @ SY3484 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV840 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV307 ) @ SY3484 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2504]) ).
thf(3092,plain,
! [SV841: $i,SV308: $i] :
( ( ! [SY3485: $i,SY3486: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV308 @ SV841 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SY3485 ) @ SY3486 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SY3485 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV308 @ SV841 ) @ SY3486 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2505]) ).
thf(3093,plain,
! [SV842: $i,SV309: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV309 ) @ SV842 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV309 ) @ ( c_Message_Oanalz @ SV842 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2506]) ).
thf(3094,plain,
! [SV843: $i,SV310: $i] :
( ( ! [SY3487: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV310 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV843 ) @ SY3487 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV843 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV310 ) @ SY3487 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2507]) ).
thf(3095,plain,
! [SV844: $i,SV311: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV311 ) @ SV844 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV311 ) @ ( c_Message_Oparts @ SV844 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2508]) ).
thf(3096,plain,
! [SV845: $i,SV312: $i] :
( ( ! [SY3488: $i,SY3489: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV312 @ SV845 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SY3488 ) @ SY3489 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SY3488 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV312 @ SV845 ) @ SY3489 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2509]) ).
thf(3097,plain,
! [SV846: $i,SV313: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV313 ) @ SV846 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV313 ) @ ( c_Message_Oparts @ SV846 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2510]) ).
thf(3098,plain,
! [SV847: $i,SV314: $i] :
( ( ! [SY3490: $i,SY3491: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV314 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV847 @ SY3490 ) @ SY3491 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV847 @ SY3490 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV314 ) @ SY3491 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2511]) ).
thf(3099,plain,
! [SV848: $i,SV315: $i] :
( ( ( c_in @ SV315 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
| ! [SY3492: $i] :
( ~ ( c_in @ SY3492 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV315 @ ( c_Message_Osynth @ ( c_Set_Oinsert @ SY3492 @ SV848 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2512]) ).
thf(3100,plain,
! [SV849: $i,SV316: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV316 ) @ SV849 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV316 ) @ ( c_Message_Oparts @ SV849 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2513]) ).
thf(3101,plain,
! [SV850: $i,SV317: $i] :
( ( ( c_in @ SV317 @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
| ! [SY3493: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3493 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3493 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3493 @ SV317 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2514]) ).
thf(3102,plain,
! [SV851: $i,SV318: $i] :
( ( ! [SY3494: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV318 @ SV851 ) @ SY3494 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV318 @ SV851 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV318 @ ( c_Set_Oinsert @ SV851 @ SY3494 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2515]) ).
thf(3103,plain,
! [SV852: $i,SV319: $i] :
( ( ! [SY3495: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV319 @ SV852 ) @ SY3495 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV319 @ SV852 ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV852 @ SY3495 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2516]) ).
thf(3104,plain,
! [SV853: $i,SV320: $i] :
( ( ! [SY3496: $i,SY3497: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV320 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV853 @ SY3496 ) @ SY3497 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV853 @ SY3496 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV320 ) @ SY3497 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2517]) ).
thf(3105,plain,
! [SV854: $i,SV321: $i] :
( ( ( c_in @ SV321 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
| ! [SY3498: $i] :
( ~ ( c_in @ SY3498 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV321 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3498 @ SV854 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2518]) ).
thf(3106,plain,
! [SV855: $i,SV322: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV322 @ SV855 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SV855 ) )
| ~ ( c_in @ SV322 @ ( c_Message_Oanalz @ SV855 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2519]) ).
thf(3107,plain,
! [SV856: $i,SV323: $i] :
( ( ! [SY3499: $i] :
( ( c_in @ SV323 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV856 @ SY3499 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV323 @ ( c_Message_Oanalz @ SY3499 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2520]) ).
thf(3108,plain,
! [SV857: $i,SV324: $i] :
( ( ! [SY3500: $i,SY3501: $i,SY3502: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SV857 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SY3500 @ SY3501 ) @ SY3502 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SY3500 @ SY3501 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SV857 ) @ SY3502 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2521]) ).
thf(3109,plain,
! [SV858: $i,SV325: $i] :
( ( ! [SY3503: $i] :
( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV325 @ SV858 ) @ SY3503 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV325 @ SV858 ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV325 @ ( c_Set_Oinsert @ SV858 @ SY3503 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2522]) ).
thf(3110,plain,
! [SV859: $i,SV326: $i] :
( ( ! [SY3504: $i] :
( ( c_in @ SV326 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV859 @ SY3504 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV326 @ ( c_Message_Oparts @ SY3504 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2523]) ).
thf(3111,plain,
! [SV860: $i,SV327: $i] :
( ( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV327 @ SV860 @ tc_Message_Omsg ) )
= ( c_Message_Oparts @ SV860 ) )
| ~ ( c_in @ SV327 @ ( c_Message_Oparts @ SV860 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2524]) ).
thf(3112,plain,
! [SV861: $i,SV328: $i] :
( ( ! [SY3505: $i] :
( ( c_List_Oset @ ( c_List_Olist_OCons @ SV328 @ SV861 @ SY3505 ) @ SY3505 )
= ( c_Set_Oinsert @ SV328 @ ( c_List_Oset @ SV861 @ SY3505 ) @ SY3505 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2525]) ).
thf(3113,plain,
! [SV862: $i,SV329: $i] :
( ( ! [SY3506: $i,SY3507: $i,SY3508: $i] :
( ( ( c_List_Oappend @ SV329 @ ( c_List_Olist_OCons @ SV862 @ ( c_List_Olist_ONil @ SY3506 ) @ SY3506 ) @ SY3506 )
!= ( c_List_Oappend @ SY3507 @ ( c_List_Olist_OCons @ SY3508 @ ( c_List_Olist_ONil @ SY3506 ) @ SY3506 ) @ SY3506 ) )
| ( SV862 = SY3508 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2526]) ).
thf(3114,plain,
! [SV863: $i,SV330: $i] :
( ( ! [SY3509: $i,SY3510: $i] :
( ! [SY3511: $i] :
( ( c_List_Oappend @ SV330 @ ( c_List_Olist_OCons @ SV863 @ ( c_List_Olist_ONil @ SY3509 ) @ SY3509 ) @ SY3509 )
!= ( c_List_Oappend @ SY3510 @ ( c_List_Olist_OCons @ SY3511 @ ( c_List_Olist_ONil @ SY3509 ) @ SY3509 ) @ SY3509 ) )
| ( SV330 = SY3510 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2527]) ).
thf(3115,plain,
! [SV864: $i,SV331: $i] :
( ( ! [SY3512: $i] :
( ( c_List_Oappend @ ( c_List_Olist_ONil @ SV331 ) @ ( c_List_Olist_OCons @ SV864 @ SY3512 @ SV331 ) @ SV331 )
= ( c_List_Olist_OCons @ SV864 @ SY3512 @ SV331 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2528]) ).
thf(3116,plain,
! [SV865: $i,SV332: $i] :
( ( ! [SY3513: $i] :
( ( c_List_Olist_OCons @ SV332 @ SV865 @ SY3513 )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ SY3513 ) @ ( c_List_Olist_OCons @ SV332 @ SV865 @ SY3513 ) @ SY3513 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2529]) ).
thf(3117,plain,
! [SV866: $i,SV333: $i] :
( ( ! [SY3514: $i,SY3515: $i] : ( c_in @ ( hAPP @ SV333 @ SV866 ) @ ( c_Set_Oimage @ SV333 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SY3514 @ tc_bool ) ) @ SY3514 @ SY3515 ) @ SY3515 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2530]) ).
thf(3118,plain,
! [SV867: $i,SV334: $i] :
( ( ! [SY3516: $i,SY3517: $i] :
( ! [SY3518: $i] :
( ( c_Set_Oinsert @ ( hAPP @ SV334 @ SV867 ) @ ( c_Set_Oimage @ SV334 @ SY3516 @ SY3517 @ SY3518 ) @ SY3518 )
= ( c_Set_Oimage @ SV334 @ SY3516 @ SY3517 @ SY3518 ) )
| ~ ( c_in @ SV867 @ SY3516 @ SY3517 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2531]) ).
thf(3119,plain,
! [SV868: $i,SV335: $i] :
( ( ! [SY3519: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV335 ) @ SV868 ) ) @ ( c_Set_Oimage @ c_Public_OshrK @ SY3519 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2532]) ).
thf(3120,plain,
! [SV869: $i,SV337: $i] :
( ( ! [SY3520: $i,SY3521: $i] :
( ( c_List_Oappend @ SV337 @ ( c_List_Oappend @ SV869 @ SY3520 @ SY3521 ) @ SY3521 )
= ( c_List_Oappend @ ( c_List_Oappend @ SV337 @ SV869 @ SY3521 ) @ SY3520 @ SY3521 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2534]) ).
thf(3121,plain,
! [SV870: $i,SV338: $i] :
( ( ! [SY3522: $i,SY3523: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ SV338 @ SV870 @ SY3522 ) @ SY3523 @ SY3522 )
= ( c_List_Oappend @ SV338 @ ( c_List_Oappend @ SV870 @ SY3523 @ SY3522 ) @ SY3522 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2535]) ).
thf(3122,plain,
! [SV871: $i,SV339: $i] :
( ( ! [SY3524: $i,SY3525: $i] :
( ( c_List_Oappend @ SV339 @ ( c_List_Oappend @ SV871 @ SY3524 @ SY3525 ) @ SY3525 )
= ( c_List_Oappend @ ( c_List_Oappend @ SV339 @ SV871 @ SY3525 ) @ SY3524 @ SY3525 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2536]) ).
thf(3123,plain,
! [SV872: $i,SV340: $i] :
( ( ! [SY3526: $i,SY3527: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ SV340 @ SV872 @ SY3526 ) @ SY3527 @ SY3526 )
= ( c_List_Oappend @ SV340 @ ( c_List_Oappend @ SV872 @ SY3527 @ SY3526 ) @ SY3526 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2537]) ).
thf(3124,plain,
! [SV873: $i,SV341: $i] :
( ( ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV341 ) @ SV873 ) ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2538]) ).
thf(3125,plain,
! [SV874: $i,SV342: $i] :
( ( ! [SY3528: $i] : ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV342 @ SV874 @ SY3528 ) @ SV342 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2539]) ).
thf(3126,plain,
! [SV875: $i,SV343: $i] :
( ( ! [SY3529: $i,SY3530: $i,SY3531: $i] :
( ( c_Set_Oimage @ SV343 @ ( c_Set_Oinsert @ SV875 @ SY3529 @ SY3530 ) @ SY3530 @ SY3531 )
= ( c_Set_Oinsert @ ( hAPP @ SV343 @ SV875 ) @ ( c_Set_Oimage @ SV343 @ SY3529 @ SY3530 @ SY3531 ) @ SY3531 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2540]) ).
thf(3127,plain,
! [SV876: $i,SV344: $i] :
( ( hBOOL @ ( hAPP @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV344 @ tc_bool ) ) @ SV876 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2541]) ).
thf(3128,plain,
! [SV345: $i] :
( ( ( ( hAPP @ c_Message_OinvKey @ SV345 )
= SV345 )
= $true )
| ( ( ~ ( c_in @ SV345 @ c_Message_OsymKeys @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2542]) ).
thf(3129,plain,
! [SV346: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV346 ) @ c_Message_OsymKeys @ tc_nat )
= $true )
| ( ( ~ ( c_in @ SV346 @ c_Message_OsymKeys @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2543]) ).
thf(3130,plain,
! [SV347: $i] :
( ( ( c_in @ SV347 @ c_Message_OsymKeys @ tc_nat )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ SV347 ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2544]) ).
thf(3131,plain,
! [SV877: $i,SV348: $i] :
( ( ( hBOOL @ ( hAPP @ SV348 @ SV877 ) )
| ! [SY3532: $i] :
( ( SY3532 = SV877 )
| ! [SY3533: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SY3532 @ SV348 @ SY3533 ) @ SV877 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2545]) ).
thf(3132,plain,
! [SV878: $i,SV349: $i] :
( ( ! [SY3534: $i] :
( ( c_Set_Oinsert @ SV349 @ ( c_Set_Oinsert @ SV349 @ SV878 @ SY3534 ) @ SY3534 )
= ( c_Set_Oinsert @ SV349 @ SV878 @ SY3534 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2546]) ).
thf(3133,plain,
! [SV879: $i,SV350: $i] :
( ( ! [SY3535: $i,SY3536: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV350 ) @ SV879 ) ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY3535 ) @ SY3536 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2547]) ).
thf(3134,plain,
! [SV880: $i,SV351: $i] :
( ( ! [SY3537: $i] :
( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV351 ) @ SV880 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV351 ) @ SY3537 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV880 @ SY3537 @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2548]) ).
thf(3135,plain,
! [SV881: $i,SV352: $i] :
( ( ( c_in @ SV352 @ SV881 @ tc_Message_Oagent )
| ! [SY3538: $i,SY3539: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SY3538 ) @ SV352 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY3539 ) @ SV881 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2549]) ).
thf(3136,plain,
! [SV882: $i,SV353: $i] :
( ( ( SV353 = SV882 )
| ! [SY3540: $i,SY3541: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV353 ) @ SY3540 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV882 ) @ SY3541 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2550]) ).
thf(3137,plain,
! [SV883: $i,SV354: $i] :
( ( ! [SY3542: $i,SY3543: $i] :
( ( ( c_List_Oappend @ SV354 @ SV883 @ SY3542 )
!= ( c_List_Oappend @ SV354 @ SY3543 @ SY3542 ) )
| ( SV883 = SY3543 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2551]) ).
thf(3138,plain,
! [SV884: $i,SV355: $i] :
( ( ! [SY3544: $i,SY3545: $i] :
( ( ( c_List_Oappend @ SV355 @ SV884 @ SY3544 )
!= ( c_List_Oappend @ SY3545 @ SV884 @ SY3544 ) )
| ( SV355 = SY3545 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2552]) ).
thf(3139,plain,
! [SV885: $i,SV356: $i] :
( ( ! [SY3546: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV356 ) @ SV885 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SY3546 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2553]) ).
thf(3140,plain,
! [SV886: $i,SV357: $i] :
( ( ! [SY3547: $i,SY3548: $i] :
( ( c_Set_Oinsert @ SV357 @ ( c_Set_Oinsert @ SV886 @ SY3547 @ SY3548 ) @ SY3548 )
= ( c_Set_Oinsert @ SV886 @ ( c_Set_Oinsert @ SV357 @ SY3547 @ SY3548 ) @ SY3548 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2554]) ).
thf(3141,plain,
! [SV887: $i,SV358: $i] :
( ( ! [SY3549: $i,SY3550: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ SV358 @ SV887 @ SY3549 ) @ SY3550 @ SY3549 )
= ( c_List_Olist_OCons @ SV358 @ ( c_List_Oappend @ SV887 @ SY3550 @ SY3549 ) @ SY3549 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2555]) ).
thf(3142,plain,
! [SV888: $i,SV359: $i] :
( ( ! [SY3551: $i,SY3552: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ SV359 @ SV888 @ SY3551 ) @ SY3552 @ SY3551 )
= ( c_List_Olist_OCons @ SV359 @ ( c_List_Oappend @ SV888 @ SY3552 @ SY3551 ) @ SY3551 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2556]) ).
thf(3143,plain,
! [SV889: $i,SV360: $i] :
( ( ! [SY3553: $i,SY3554: $i] :
( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV360 @ SV889 @ SY3553 ) @ SY3554 ) )
| ~ ( hBOOL @ ( hAPP @ SV889 @ SY3554 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2557]) ).
thf(3144,plain,
! [SV890: $i,SV361: $i] :
( ( ! [SY3555: $i,SY3556: $i] :
( ( c_List_Olist_OCons @ SV361 @ ( c_List_Oappend @ SV890 @ SY3555 @ SY3556 ) @ SY3556 )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ SV361 @ SV890 @ SY3556 ) @ SY3555 @ SY3556 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2558]) ).
thf(3145,plain,
! [SV891: $i,SV362: $i] :
( ( ! [SY3557: $i,SY3558: $i] :
( ( c_List_Olist_OCons @ SV362 @ ( c_List_Oappend @ SV891 @ SY3557 @ SY3558 ) @ SY3558 )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ SV362 @ SV891 @ SY3558 ) @ SY3557 @ SY3558 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2559]) ).
thf(3146,plain,
! [SV892: $i,SV363: $i] :
( ( ~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV363 ) @ SV892 ) @ c_Message_OsymKeys @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2560]) ).
thf(3147,plain,
! [SV893: $i,SV364: $i] :
( ( ! [SY3559: $i,SY3560: $i,SY3561: $i] :
( ( c_Set_Oinsert @ ( hAPP @ SV364 @ SV893 ) @ ( c_Set_Oimage @ SV364 @ SY3559 @ SY3560 @ SY3561 ) @ SY3561 )
= ( c_Set_Oimage @ SV364 @ ( c_Set_Oinsert @ SV893 @ SY3559 @ SY3560 ) @ SY3560 @ SY3561 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2561]) ).
thf(3148,plain,
! [SV894: $i,SV365: $i] :
( ( ! [SY3562: $i] :
~ ( c_in @ ( hAPP @ c_Public_OshrK @ SV365 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV894 ) @ SY3562 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2562]) ).
thf(3149,plain,
! [SV366: $i] :
( ( ( ~ ( c_in @ SV366 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( ! [SY2630: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV366 ) @ ( c_Event_Oused @ SY2630 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2563]) ).
thf(3150,plain,
! [SV895: $i,SV367: $i] :
( ( ! [SY3563: $i,SY3564: $i] :
( ( c_in @ SV367 @ ( c_Set_Oinsert @ SV895 @ SY3563 @ SY3564 ) @ SY3564 )
| ~ ( c_in @ SV367 @ SY3563 @ SY3564 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2564]) ).
thf(3151,plain,
! [SV896: $i,SV368: $i] :
( ( ! [SY3565: $i,SY3566: $i] :
( ( c_in @ SV368 @ ( c_Set_Oinsert @ SV896 @ SY3565 @ SY3566 ) @ SY3566 )
| ~ ( c_in @ SV368 @ SY3565 @ SY3566 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2565]) ).
thf(3152,plain,
! [SV897: $i,SV369: $i] :
( ( ! [SY3567: $i] :
( ( c_in @ SV369 @ SV897 @ SY3567 )
| ! [SY3568: $i] :
( ( SV369 = SY3568 )
| ~ ( c_in @ SV369 @ ( c_Set_Oinsert @ SY3568 @ SV897 @ SY3567 ) @ SY3567 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2566]) ).
thf(3153,plain,
! [SV898: $i,SV370: $i] :
( ( c_in @ SV370 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV898 @ tc_bool ) ) @ SV898 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2567]) ).
thf(3154,plain,
! [SV899: $i,SV371: $i] :
( ( ! [SY3569: $i] : ( c_in @ SV371 @ ( c_Set_Oinsert @ SV371 @ SV899 @ SY3569 ) @ SY3569 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2568]) ).
thf(3155,plain,
! [SV900: $i,SV372: $i] :
( ( ! [SY3570: $i] : ( c_in @ SV372 @ ( c_Set_Oinsert @ SV372 @ SV900 @ SY3570 ) @ SY3570 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2569]) ).
thf(3156,plain,
! [SV901: $i,SV373: $i] :
( ( ! [SY3571: $i] : ( c_in @ SV373 @ ( c_Set_Oinsert @ SV373 @ SV901 @ SY3571 ) @ SY3571 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2570]) ).
thf(3157,plain,
! [SV902: $i,SV374: $i] :
( ( ! [SY3572: $i,SY3573: $i] :
( ( ( c_Set_Oinsert @ SV374 @ SV902 @ SY3572 )
!= ( c_Set_Oinsert @ SV374 @ SY3573 @ SY3572 ) )
| ( c_in @ SV374 @ SY3573 @ SY3572 )
| ( SV902 = SY3573 )
| ( c_in @ SV374 @ SV902 @ SY3572 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2571]) ).
thf(3158,plain,
! [SV903: $i,SV375: $i] :
( ( ! [SY3574: $i] :
( ( ( c_Set_Oinsert @ SV375 @ SV903 @ SY3574 )
= SV903 )
| ~ ( c_in @ SV375 @ SV903 @ SY3574 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2572]) ).
thf(3159,plain,
! [SV904: $i,SV377: $i] :
( ( ! [SY3575: $i] :
( ( SV377
!= ( c_List_Oappend @ SV904 @ SV377 @ SY3575 ) )
| ( SV904
= ( c_List_Olist_ONil @ SY3575 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2574]) ).
thf(3160,plain,
! [SV905: $i,SV378: $i] :
( ( ! [SY3576: $i] :
( ( ( c_List_Oappend @ SV378 @ SV905 @ SY3576 )
!= SV905 )
| ( SV378
= ( c_List_Olist_ONil @ SY3576 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2575]) ).
thf(3161,plain,
! [SV906: $i,SV379: $i] :
( ( ! [SY3577: $i] :
( ( SV379
!= ( c_List_Oappend @ SV379 @ SV906 @ SY3577 ) )
| ( SV906
= ( c_List_Olist_ONil @ SY3577 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2576]) ).
thf(3162,plain,
! [SV907: $i,SV380: $i] :
( ( ! [SY3578: $i] :
( ( ( c_List_Oappend @ SV380 @ SV907 @ SY3578 )
!= SV380 )
| ( SV907
= ( c_List_Olist_ONil @ SY3578 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2577]) ).
thf(3163,plain,
! [SV908: $i,SV381: $i] :
( ( ! [SY3579: $i] :
( ( ( c_List_Oappend @ SV381 @ SV908 @ SY3579 )
!= ( c_List_Olist_ONil @ SY3579 ) )
| ( SV908
= ( c_List_Olist_ONil @ SY3579 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2578]) ).
thf(3164,plain,
! [SV909: $i,SV382: $i] :
( ( ! [SY3580: $i] :
( ( ( c_List_Oappend @ SV382 @ SV909 @ SY3580 )
!= ( c_List_Olist_ONil @ SY3580 ) )
| ( SV382
= ( c_List_Olist_ONil @ SY3580 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2579]) ).
thf(3165,plain,
! [SV910: $i,SV383: $i] :
( ( ! [SY3581: $i] :
( ( ( c_List_Olist_ONil @ SV383 )
!= ( c_List_Oappend @ SV910 @ SY3581 @ SV383 ) )
| ( SY3581
= ( c_List_Olist_ONil @ SV383 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2580]) ).
thf(3166,plain,
! [SV911: $i,SV384: $i] :
( ( ! [SY3582: $i] :
( ( c_List_Olist_ONil @ SV384 )
!= ( c_List_Oappend @ SV911 @ SY3582 @ SV384 ) )
| ( SV911
= ( c_List_Olist_ONil @ SV384 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2581]) ).
thf(3167,plain,
! [SV912: $i,SV385: $i] :
( ( SV385
= ( c_List_Oappend @ ( c_List_Olist_ONil @ SV912 ) @ SV385 @ SV912 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2582]) ).
thf(3168,plain,
! [SV913: $i,SV386: $i] :
( ( ( c_List_Oappend @ ( c_List_Olist_ONil @ SV386 ) @ SV913 @ SV386 )
= SV913 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2583]) ).
thf(3169,plain,
! [SV914: $i,SV387: $i] :
( ( SV387
= ( c_List_Oappend @ SV387 @ ( c_List_Olist_ONil @ SV914 ) @ SV914 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2584]) ).
thf(3170,plain,
! [SV915: $i,SV388: $i] :
( ( SV388
= ( c_List_Oappend @ ( c_List_Olist_ONil @ SV915 ) @ SV388 @ SV915 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2585]) ).
thf(3171,plain,
! [SV916: $i,SV389: $i] :
( ( ( c_List_Oappend @ SV389 @ ( c_List_Olist_ONil @ SV916 ) @ SV916 )
= SV389 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2586]) ).
thf(3172,plain,
! [SV917: $i,SV391: $i] :
( ( ( ( c_Message_Oanalz @ SV391 )
!= ( c_Message_Oanalz @ SV917 ) )
| ! [SY3583: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3583 @ SV391 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3583 @ SV917 @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2588]) ).
thf(3173,plain,
! [SV918: $i,SV392: $i] :
( ( ( c_in @ ( hAPP @ c_Public_OshrK @ SV392 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV918 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV392 @ SV918 @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2589]) ).
thf(3174,plain,
! [SV919: $i,SV393: $i] :
( ( ( c_in @ SV393 @ SV919 @ tc_Message_Oagent )
| ~ ( c_in @ ( hAPP @ c_Public_OshrK @ SV393 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV919 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2590]) ).
thf(3175,plain,
! [SV920: $i,SV394: $i] :
( ( ! [SY3584: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV394 @ SV920 ) @ SY3584 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV394 @ SV920 ) @ ( c_Message_Oanalz @ SY3584 ) @ tc_Message_Omsg ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV394 ) ) @ ( c_Message_Oanalz @ SY3584 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2591]) ).
thf(3176,plain,
! [SV921: $i,SV395: $i] :
( ( ! [SY3585: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SV921 ) @ SY3585 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SV921 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV921 @ SY3585 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV395 ) ) @ ( c_Message_Oanalz @ SY3585 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2592]) ).
thf(3177,plain,
! [SV922: $i,SV396: $i] :
( ( ! [SY3586: $i,SY3587: $i,SY3588: $i] :
( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3586 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3589: $i,SY3590: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3587 @ SY3588 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3588 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3589 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3590 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3586 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2593]) ).
thf(3178,plain,
! [SV923: $i,SV397: $i] :
( ( ! [SY3591: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV397 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV923 @ SY3591 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV397 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2594]) ).
thf(3179,plain,
! [SV924: $i,SV398: $i] :
( ( ! [SY3592: $i,SY3593: $i,SY3594: $i,SY3595: $i,SY3596: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SY3592 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3593 ) @ ( c_Message_Omsg_ONonce @ SY3593 ) ) ) ) @ SY3594 @ tc_Event_Oevent ) )
| ! [SY3597: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3595 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3596 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3592 ) @ SY3597 ) ) ) ) ) @ ( c_List_Oset @ SY3594 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2696: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2696 @ SV398 @ ( c_Message_Omsg_OCrypt @ SY3592 @ ( c_Message_Omsg_ONonce @ SY3593 ) ) ) @ ( c_List_Oset @ SY3594 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3592 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY3594 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2595]) ).
thf(3180,plain,
! [SV925: $i,SV399: $i] :
( ( ! [SY3599: $i,SY3600: $i,SY3601: $i,SY3602: $i,SY3603: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SY3599 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3600 ) @ ( c_Message_Omsg_ONonce @ SY3600 ) ) ) ) @ SY3601 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3604: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3602 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3603 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3599 ) @ SY3604 ) ) ) ) ) @ ( c_List_Oset @ SY3601 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2704: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY2704 @ SV399 @ ( c_Message_Omsg_OCrypt @ SY3599 @ ( c_Message_Omsg_ONonce @ SY3600 ) ) ) @ ( c_List_Oset @ SY3601 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3599 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SY3601 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2596]) ).
thf(3181,plain,
! [SV400: $i] :
( ( ( ! [SY2705: $i,SY2706: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV400 @ SY2705 ) @ SY2706 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY2705 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2706 ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( ~ ( c_in @ SV400 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2597]) ).
thf(3182,plain,
! [SV926: $i,SV401: $i] :
( ( ! [SY3606: $i,SY3607: $i,SY3608: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SY3606 @ ( c_Message_Omsg_ONonce @ SY3607 ) ) ) @ SY3608 @ tc_Event_Oevent ) )
| ! [SY3609: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3609 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3606 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SY3608 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3606 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY3607 ) @ ( c_Event_Oused @ SY3608 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY3608 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2598]) ).
thf(3183,plain,
! [SV927: $i,SV402: $i] :
( ( ! [SY3610: $i,SY3611: $i,SY3612: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SY3610 @ ( c_Message_Omsg_ONonce @ SY3611 ) ) ) @ SY3612 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3613: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3613 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3610 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SY3612 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3610 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY3611 ) @ ( c_Event_Oused @ SY3612 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3612 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2599]) ).
thf(3184,plain,
! [SV928: $i,SV403: $i] :
( ( ! [SY3614: $i,SY3615: $i,SY3616: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3614 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3615 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3614 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3615 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SY3616 @ tc_Event_Oevent ) )
| ! [SY3617: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3617 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3614 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SY3616 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3615 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3615 ) @ ( c_Event_Oused @ SY3616 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY3616 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2600]) ).
thf(3185,plain,
! [SV929: $i,SV404: $i] :
( ( ! [SY3618: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV404 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV929 @ SY3618 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV404 ) )
| ( c_in @ SV929 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2601]) ).
thf(3186,plain,
! [SV930: $i,SV405: $i] :
( ( ! [SY3619: $i,SY3620: $i,SY3621: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3619 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3620 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3619 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3620 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SY3621 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3622: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3622 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3619 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SY3621 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3620 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3620 ) @ ( c_Event_Oused @ SY3621 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3621 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2602]) ).
thf(3187,plain,
! [SV931: $i,SV406: $i] :
( ( ( c_in @ SV406 @ ( c_Event_OinitState @ SV931 ) @ tc_Message_Omsg )
| ! [SY3623: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ SV931 @ SV406 ) @ ( c_List_Oset @ SY3623 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OGets @ SV931 @ SV406 ) @ ( c_List_Oset @ SY3623 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ SV931 @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ SV931 @ SV406 @ SY3623 ) @ SV406 ) @ ( c_List_Oset @ SY3623 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV931 = c_Message_Oagent_OSpy )
| ~ ( c_in @ SV406 @ ( c_Event_Oknows @ SV931 @ SY3623 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2603]) ).
thf(3188,plain,
! [SV932: $i,SV407: $i] :
( ( ! [SY3624: $i,SY3625: $i,SY3626: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY3624 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SY3625 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY3626 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SY3626 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY3627: $i,SY3628: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3625 @ ( c_Message_Omsg_OCrypt @ SY3627 @ ( c_Message_Omsg_OMPair @ SY3626 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3624 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY3628 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2604]) ).
thf(3189,plain,
! [SV933: $i,SV408: $i] :
( ( ! [SY3629: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY3629 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SY3629 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3630: $i] :
( ( c_in @ SY3630 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY3631: $i] :
( ( c_in @ SY3631 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3631 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3631 ) @ ( c_Message_Omsg_OMPair @ SY3629 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3630 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3630 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY3631 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2605]) ).
thf(3190,plain,
! [SV934: $i,SV409: $i] :
( ( ( c_in @ SV409 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV934 ) ) @ tc_Message_Omsg )
| ! [SY3632: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3632 @ SV409 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV934 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2606]) ).
thf(3191,plain,
! [SV935: $i,SV410: $i] :
( ( ! [SY3633: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV410 @ SV935 ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ SY3633 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2607]) ).
thf(3192,plain,
! [SV936: $i,SV411: $i] :
( ( ! [SY3634: $i,SY3635: $i,SY3636: $i] :
( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3634 ) @ ( c_Message_Omsg_OAgent @ SY3635 ) ) ) )
| ~ ( c_in @ SY3636 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3637: $i,SY3638: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3635 @ ( c_Message_Omsg_OCrypt @ SY3637 @ ( c_Message_Omsg_OMPair @ SY3638 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3634 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SY3636 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2608]) ).
thf(3193,plain,
! [SV937: $i,SV412: $i] :
( ( ! [SY3639: $i,SY3640: $i,SY3641: $i,SY3642: $i,SY3643: $i,SY3644: $i] :
( ( SV412 = SV937 )
| ~ ( c_in @ SY3639 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3640 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3640 ) @ ( c_Message_Omsg_OMPair @ SY3641 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3642 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3643 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SY3639 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2758: $i,SY2759: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3644 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3644 ) @ ( c_Message_Omsg_OMPair @ SY2758 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2759 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3643 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SY3639 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2609]) ).
thf(3194,plain,
! [SV938: $i,SV413: $i] :
( ( ! [SY3647: $i,SY3648: $i,SY3649: $i,SY3650: $i,SY3651: $i,SY3652: $i] :
( ( SV413 = SV938 )
| ~ ( c_in @ SY3647 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3648 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3648 ) @ ( c_Message_Omsg_OMPair @ SY3649 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3650 ) @ SY3651 ) ) ) ) ) @ ( c_List_Oset @ SY3647 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2767: $i,SY2768: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3652 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3652 ) @ ( c_Message_Omsg_OMPair @ SY2767 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3650 ) @ SY2768 ) ) ) ) ) @ ( c_List_Oset @ SY3647 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2610]) ).
thf(3195,plain,
! [SV939: $i,SV414: $i] :
( ( ! [SY3655: $i,SY3656: $i,SY3657: $i,SY3658: $i,SY3659: $i,SY3660: $i] :
( ( SV414 = SV939 )
| ~ ( c_in @ SY3655 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3656 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3656 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3657 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3658 ) @ SY3659 ) ) ) ) ) @ ( c_List_Oset @ SY3655 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2776: $i,SY2777: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3660 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3660 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2776 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3658 ) @ SY2777 ) ) ) ) ) @ ( c_List_Oset @ SY3655 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2611]) ).
thf(3196,plain,
! [SV940: $i,SV415: $i] :
( ( ! [SY3663: $i,SY3664: $i,SY3665: $i,SY3666: $i,SY3667: $i,SY3668: $i] :
( ( SV415 = SV940 )
| ~ ( c_in @ SY3663 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SY3664 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3665 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3666 ) @ SY3667 ) ) ) ) ) @ ( c_List_Oset @ SY3663 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY2785: $i,SY2786: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SY3668 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY2785 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3666 ) @ SY2786 ) ) ) ) ) @ ( c_List_Oset @ SY3663 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2612]) ).
thf(3197,plain,
! [SV941: $i,SV416: $i] :
( ( ! [SY3671: $i,SY3672: $i,SY3673: $i] :
( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
| ~ ( c_in @ SY3671 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3674: $i,SY3675: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SY3672 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3673 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3674 ) @ SY3675 ) ) ) ) ) @ ( c_List_Oset @ SY3671 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2613]) ).
thf(3198,plain,
! [SV942: $i,SV417: $i] :
( ( ! [SY3676: $i,SY3677: $i,SY3678: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SY3676 ) ) ) ) @ SY3677 @ tc_Event_Oevent ) )
| ! [SY3679: $i] :
( ! [SY2798: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3678 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3678 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3679 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3676 ) @ SY2798 ) ) ) ) ) @ ( c_List_Oset @ SY3677 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY3679 @ SY3678 @ ( c_Message_Omsg_OCrypt @ SY3676 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SY3677 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY3677 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2614]) ).
thf(3199,plain,
! [SV943: $i,SV419: $i] :
( ( ! [SY3681: $i,SY3682: $i,SY3683: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SY3681 ) @ SY3682 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SY3683 ) ) ) ) @ ( c_List_Oset @ SY3682 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY3684: $i,SY3685: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3684 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3683 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3685 ) @ SY3681 ) ) ) ) ) @ ( c_List_Oset @ SY3682 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SY3682 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2616]) ).
thf(3200,plain,
! [SV420: $i] :
( ( ( ! [SY2805: $i,SY2806: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV420 @ SY2805 ) @ SY2806 @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY2806 ) ) )
= $true )
| ( ( c_in @ SV420 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2618]) ).
thf(3201,plain,
! [SV944: $i,SV421: $i] :
( ( ! [SY3686: $i,SY3687: $i,SY3688: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SY3686 ) ) ) ) @ SY3687 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3689: $i] :
( ! [SY2812: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3688 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3688 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3689 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3686 ) @ SY2812 ) ) ) ) ) @ ( c_List_Oset @ SY3687 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY3689 @ SY3688 @ ( c_Message_Omsg_OCrypt @ SY3686 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SY3687 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3687 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2619]) ).
thf(3202,plain,
! [SV945: $i,SV422: $i] :
( ( ~ ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV945 ) ) @ tc_Message_Omsg )
| ! [SY3691: $i,SY3692: $i] : ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SY3691 @ SY3692 ) @ SV945 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2620]) ).
thf(3203,plain,
! [SV946: $i,SV423: $i] :
( ( ~ ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV946 ) ) @ tc_Message_Omsg )
| ! [SY3693: $i,SY3694: $i] : ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SY3693 @ SY3694 ) @ SV946 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2621]) ).
thf(3204,plain,
! [SV947: $i,SV425: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV425 ) @ SV947 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV425 ) @ ( c_Message_Osynth @ SV947 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2623]) ).
thf(3205,plain,
! [SV948: $i,SV426: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV426 ) @ SV948 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV426 ) @ ( c_Message_Osynth @ SV948 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2624]) ).
thf(3206,plain,
! [SV949: $i,SV427: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV427 ) @ ( c_Message_Osynth @ SV949 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV427 ) @ SV949 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2625]) ).
thf(3207,plain,
! [SV950: $i,SV428: $i] :
( ( c_in @ ( c_Message_Omsg_OAgent @ SV428 ) @ ( c_Message_Osynth @ SV950 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2626]) ).
thf(3208,plain,
! [SV951: $i,SV429: $i] :
( ( c_in @ ( c_Message_Omsg_OAgent @ SV429 ) @ ( c_Message_Osynth @ SV951 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2627]) ).
thf(3209,plain,
! [SV952: $i,SV431: $i] :
( ( ( c_in @ SV431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
| ! [SY3695: $i] :
( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3695 @ SV431 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SY3695 ) ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3695 ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2629]) ).
thf(3210,plain,
! [SV953: $i,SV432: $i] :
( ( ! [SY3696: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV432 @ SV953 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3696 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV953 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3696 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV432 ) ) @ ( c_Message_Oanalz @ SY3696 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV432 ) @ ( c_Message_Oanalz @ SY3696 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2630]) ).
thf(3211,plain,
! [SV954: $i,SV433: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV433 ) @ SV954 @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV433 ) @ ( c_Message_Osynth @ SV954 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2631]) ).
thf(3212,plain,
! [SV955: $i,SV434: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV434 ) @ ( c_Message_Osynth @ SV955 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV434 ) @ SV955 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2632]) ).
thf(3213,plain,
! [SV956: $i,SV435: $i] :
( ( ( c_in @ SV435 @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg )
| ! [SY3697: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SY3697 @ SV435 ) @ SV956 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3697 @ SV435 ) @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2633]) ).
thf(3214,plain,
! [SV957: $i,SV436: $i] :
( ( ( c_in @ SV436 @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg )
| ! [SY3698: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SY3698 ) @ SV957 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SY3698 ) @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2634]) ).
thf(3215,plain,
! [SV958: $i,SV437: $i] :
( ( ( c_in @ SV437 @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg )
| ! [SY3699: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SY3699 @ SV437 ) @ SV958 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3699 @ SV437 ) @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2635]) ).
thf(3216,plain,
! [SV959: $i,SV438: $i] :
( ( ! [SY3700: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SV438 @ SV959 ) @ ( c_Message_Osynth @ SY3700 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV959 @ ( c_Message_Osynth @ SY3700 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV438 @ ( c_Message_Osynth @ SY3700 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2636]) ).
thf(3217,plain,
! [SV960: $i,SV439: $i] :
( ( ( c_in @ SV439 @ ( c_Event_Oused @ SV960 ) @ tc_Message_Omsg )
| ! [SY3701: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV439 @ SY3701 ) @ ( c_Event_Oused @ SV960 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2637]) ).
thf(3218,plain,
! [SV961: $i,SV440: $i] :
( ( ( c_in @ SV440 @ ( c_Event_Oused @ SV961 ) @ tc_Message_Omsg )
| ! [SY3702: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3702 @ SV440 ) @ ( c_Event_Oused @ SV961 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2638]) ).
thf(3219,plain,
! [SV962: $i,SV441: $i] :
( ( ! [SY3703: $i] :
( ( c_in @ SV441 @ ( c_List_Oset @ SV962 @ SY3703 ) @ SY3703 )
| ! [SY3704: $i] :
( ( SV441 = SY3704 )
| ~ ( c_in @ SV441 @ ( c_List_Oset @ ( c_List_Olist_OCons @ SY3704 @ SV962 @ SY3703 ) @ SY3703 ) @ SY3703 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2639]) ).
thf(3220,plain,
! [SV963: $i,SV442: $i] :
( ( ! [SY3705: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV442 @ SV963 ) @ SY3705 @ tc_Event_Oevent ) )
| ~ ( c_in @ SV963 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3705 ) ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY3705 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2640]) ).
thf(3221,plain,
! [SV964: $i,SV443: $i] :
( ( ( c_in @ SV443 @ ( c_Event_Oused @ SV964 ) @ tc_Message_Omsg )
| ! [SY3706: $i] :
~ ( c_in @ ( c_Event_Oevent_ONotes @ SY3706 @ SV443 ) @ ( c_List_Oset @ SV964 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2641]) ).
thf(3222,plain,
! [SV965: $i,SV444: $i] :
( ( ! [SY3707: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV444 @ SV965 ) @ SY3707 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ SV965 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3707 ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3707 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2642]) ).
thf(3223,plain,
! [SV966: $i,SV445: $i] :
( ( ! [SY3708: $i,SY3709: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV445 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV445 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV966 ) @ ( c_Message_Omsg_ONonce @ SY3708 ) ) ) ) @ SY3709 @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY3708 ) @ ( c_Event_Oused @ SY3709 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY3709 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2643]) ).
thf(3224,plain,
! [SV967: $i,SV447: $i] :
( ( ! [SY3710: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ SV447 ) @ SV967 )
!= ( hAPP @ c_Public_OshrK @ SY3710 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2645]) ).
thf(3225,plain,
! [SV968: $i,SV448: $i] :
( ( ! [SY3711: $i] :
( ( hAPP @ c_Public_OshrK @ SV448 )
!= ( hAPP @ ( c_Public_OpublicKey @ SV968 ) @ SY3711 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2646]) ).
thf(3226,plain,
! [SV969: $i,SV449: $i] :
( ( ! [SY3712: $i,SY3713: $i,SY3714: $i] :
( ( c_Event_Oevent_ONotes @ SV449 @ SV969 )
!= ( c_Event_Oevent_OSays @ SY3712 @ SY3713 @ SY3714 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2647]) ).
thf(3227,plain,
! [SV970: $i,SV450: $i] :
( ( ! [SY3715: $i,SY3716: $i,SY3717: $i] :
( ( c_Event_Oevent_OGets @ SV450 @ SV970 )
!= ( c_Event_Oevent_OSays @ SY3715 @ SY3716 @ SY3717 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2648]) ).
thf(3228,plain,
! [SV971: $i,SV451: $i] :
( ( ! [SY3718: $i,SY3719: $i,SY3720: $i] :
( ( c_Event_Oevent_OSays @ SV451 @ SV971 @ SY3718 )
!= ( c_Event_Oevent_ONotes @ SY3719 @ SY3720 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2649]) ).
thf(3229,plain,
! [SV972: $i,SV452: $i] :
( ( ! [SY3721: $i,SY3722: $i,SY3723: $i] :
( ( c_Event_Oevent_OSays @ SV452 @ SV972 @ SY3721 )
!= ( c_Event_Oevent_OGets @ SY3722 @ SY3723 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2650]) ).
thf(3230,plain,
! [SV973: $i,SV453: $i] :
( ( ! [SY3724: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV453 @ SV973 ) @ SY3724 @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3724 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2651]) ).
thf(3231,plain,
! [SV974: $i,SV454: $i] :
( ( ! [SY3725: $i,SY3726: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV454 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV454 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV974 ) @ ( c_Message_Omsg_ONonce @ SY3725 ) ) ) ) @ SY3726 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY3725 ) @ ( c_Event_Oused @ SY3726 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3726 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2654]) ).
thf(3232,plain,
! [SV975: $i,SV455: $i] :
( ( ! [SY3727: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV455 ) @ SV975 ) ) @ ( c_Event_OinitState @ SY3727 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2655]) ).
thf(3233,plain,
! [SV976: $i,SV456: $i] :
( ( ! [SY3728: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV456 ) @ SV976 ) ) @ ( c_Event_Oused @ SY3728 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2656]) ).
thf(3234,plain,
! [SV457: $i] :
( ( ( ! [SY2883: $i] : ( c_in @ SV457 @ ( c_Event_Oused @ SY2883 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ! [SY2884: $i] :
~ ( c_in @ SV457 @ ( c_Message_Oparts @ ( c_Event_OinitState @ SY2884 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2657]) ).
thf(3235,plain,
! [SV977: $i,SV458: $i] :
( ( ! [SY3729: $i] :
( ( c_List_Olist_OCons @ SV458 @ SV977 @ SY3729 )
!= ( c_List_Olist_ONil @ SY3729 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2658]) ).
thf(3236,plain,
! [SV978: $i,SV459: $i] :
( ( ! [SY3730: $i] :
( ( c_List_Olist_OCons @ SV459 @ SV978 @ SY3730 )
!= ( c_List_Olist_ONil @ SY3730 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2659]) ).
thf(3237,plain,
! [SV979: $i,SV460: $i] :
( ( ! [SY3731: $i] :
( ( c_List_Olist_ONil @ SV460 )
!= ( c_List_Olist_OCons @ SV979 @ SY3731 @ SV460 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2660]) ).
thf(3238,plain,
! [SV980: $i,SV461: $i] :
( ( ( c_in @ SV461 @ ( c_Message_Osynth @ SV980 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV461 @ ( c_Message_Osynth @ ( c_Message_Osynth @ SV980 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2661]) ).
thf(3239,plain,
! [SV981: $i,SV462: $i] :
( ( ( c_in @ SV462 @ ( c_Message_Osynth @ SV981 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV462 @ SV981 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2662]) ).
thf(3240,plain,
! [SV982: $i,SV463: $i] :
( ( ! [SY3732: $i,SY3733: $i] :
( ! [SY3734: $i] : ( c_in @ ( hAPP @ SV463 @ SV982 ) @ ( c_Set_Oimage @ SV463 @ SY3732 @ SY3733 @ SY3734 ) @ SY3734 )
| ~ ( c_in @ SV982 @ SY3732 @ SY3733 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2663]) ).
thf(3241,plain,
! [SV983: $i,SV464: $i] :
( ( ! [SY3735: $i,SY3736: $i] :
( ! [SY3737: $i] : ( c_in @ ( hAPP @ SV464 @ SV983 ) @ ( c_Set_Oimage @ SV464 @ SY3735 @ SY3736 @ SY3737 ) @ SY3737 )
| ~ ( c_in @ SV983 @ SY3735 @ SY3736 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2664]) ).
thf(3242,plain,
! [SV984: $i,SV465: $i] :
( ( ! [SY3738: $i] :
( ~ ( c_in @ SV465 @ SV984 @ SY3738 )
| ! [SY3739: $i,SY3740: $i] : ( c_in @ ( hAPP @ SY3739 @ SV465 ) @ ( c_Set_Oimage @ SY3739 @ SV984 @ SY3738 @ SY3740 ) @ SY3740 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2665]) ).
thf(3243,plain,
! [SV985: $i,SV466: $i] :
( ( ! [SY3741: $i] :
( ~ ( c_in @ SV466 @ SV985 @ SY3741 )
| ! [SY3742: $i,SY3743: $i] : ( c_in @ ( hAPP @ SY3742 @ SV466 ) @ ( c_Set_Oimage @ SY3742 @ SV985 @ SY3741 @ SY3743 ) @ SY3743 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2666]) ).
thf(3244,plain,
! [SV986: $i,SV467: $i] :
( ( ! [SY3744: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV467 ) @ SV986 ) ) ) @ ( c_Event_Oused @ SY3744 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2667]) ).
thf(3245,plain,
! [SV987: $i,SV468: $i] :
( ( ! [SY3745: $i] :
( SV468
!= ( c_List_Olist_OCons @ SV987 @ SV468 @ SY3745 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2668]) ).
thf(3246,plain,
! [SV988: $i,SV469: $i] :
( ( ! [SY3746: $i] :
( ( c_List_Olist_OCons @ SV469 @ SV988 @ SY3746 )
!= SV988 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2669]) ).
thf(3247,plain,
! [SV989: $i,SV471: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV471 ) @ SV989 ) ) ) @ ( c_Event_OinitState @ SV989 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2671]) ).
thf(3248,plain,
! [SV990: $i,SV472: $i] :
( ( ! [SY3747: $i] :
( ! [SY3748: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ SV472 ) @ SV990 )
!= ( hAPP @ ( c_Public_OpublicKey @ SY3747 ) @ SY3748 ) )
| ( SV472 = SY3747 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2672]) ).
thf(3249,plain,
! [SV991: $i,SV473: $i] :
( ( ! [SY3749: $i,SY3750: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ SV473 ) @ SV991 )
!= ( hAPP @ ( c_Public_OpublicKey @ SY3749 ) @ SY3750 ) )
| ( SV991 = SY3750 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2673]) ).
thf(3250,plain,
! [SV992: $i,SV474: $i] :
( ( ! [SY3751: $i,SY3752: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV474 ) @ SV992 ) )
!= ( hAPP @ ( c_Public_OpublicKey @ SY3751 ) @ SY3752 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2674]) ).
thf(3251,plain,
! [SV993: $i,SV475: $i] :
( ( ( ( hAPP @ c_Message_OinvKey @ SV475 )
!= ( hAPP @ c_Message_OinvKey @ SV993 ) )
| ( SV475 = SV993 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2675]) ).
thf(3252,plain,
! [SV994: $i,SV476: $i] :
( ( ! [SY3753: $i,SY3754: $i] :
( ( ( c_Event_Oevent_OGets @ SV476 @ SV994 )
!= ( c_Event_Oevent_OGets @ SY3753 @ SY3754 ) )
| ( SV994 = SY3754 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2676]) ).
thf(3253,plain,
! [SV995: $i,SV477: $i] :
( ( ! [SY3755: $i] :
( ! [SY3756: $i] :
( ( c_Event_Oevent_OGets @ SV477 @ SV995 )
!= ( c_Event_Oevent_OGets @ SY3755 @ SY3756 ) )
| ( SV477 = SY3755 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2677]) ).
thf(3254,plain,
! [SV996: $i,SV478: $i] :
( ( ! [SY3757: $i,SY3758: $i] :
( ( c_Event_Oevent_OGets @ SV478 @ SV996 )
!= ( c_Event_Oevent_ONotes @ SY3757 @ SY3758 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2678]) ).
thf(3255,plain,
! [SV997: $i,SV479: $i] :
( ( ! [SY3759: $i,SY3760: $i] :
( ( ( c_Event_Oevent_ONotes @ SV479 @ SV997 )
!= ( c_Event_Oevent_ONotes @ SY3759 @ SY3760 ) )
| ( SV997 = SY3760 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2679]) ).
thf(3256,plain,
! [SV998: $i,SV480: $i] :
( ( ! [SY3761: $i] :
( ! [SY3762: $i] :
( ( c_Event_Oevent_ONotes @ SV480 @ SV998 )
!= ( c_Event_Oevent_ONotes @ SY3761 @ SY3762 ) )
| ( SV480 = SY3761 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2680]) ).
thf(3257,plain,
! [SV999: $i,SV482: $i] :
( ( ! [SY3763: $i,SY3764: $i] :
( ( c_Event_Oevent_ONotes @ SV482 @ SV999 )
!= ( c_Event_Oevent_OGets @ SY3763 @ SY3764 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2682]) ).
thf(3258,plain,
! [SV1000: $i,SV483: $i] :
( ( ! [SY3765: $i,SY3766: $i] :
( ! [SY3767: $i] :
( ( c_List_Olist_OCons @ SV483 @ SV1000 @ SY3765 )
!= ( c_List_Olist_OCons @ SY3766 @ SY3767 @ SY3765 ) )
| ( SV483 = SY3766 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2683]) ).
thf(3259,plain,
! [SV1001: $i,SV484: $i] :
( ( ! [SY3768: $i,SY3769: $i,SY3770: $i] :
( ( ( c_List_Olist_OCons @ SV484 @ SV1001 @ SY3768 )
!= ( c_List_Olist_OCons @ SY3769 @ SY3770 @ SY3768 ) )
| ( SV1001 = SY3770 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2684]) ).
thf(3260,plain,
! [SV1002: $i,SV485: $i] :
( ( ! [SY3771: $i] :
( ( hAPP @ c_Public_OshrK @ SV485 )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV1002 ) @ SY3771 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2685]) ).
thf(3261,plain,
! [SV1003: $i,SV486: $i] :
( ( ! [SY3772: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV486 @ SV1003 ) @ SY3772 @ tc_Event_Oevent ) )
= ( c_Event_Oused @ SY3772 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2686]) ).
thf(3262,plain,
! [SV1004: $i,SV487: $i] :
( ( ! [SY3773: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV487 ) @ SV1004 ) )
!= ( hAPP @ c_Public_OshrK @ SY3773 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2687]) ).
thf(3263,plain,
! [SV1005: $i,SV488: $i] :
( ( ! [SY3774: $i,SY3775: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ SV488 ) @ SV1005 )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SY3774 ) @ SY3775 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2688]) ).
thf(3264,plain,
! [SV1006: $i,SV489: $i] :
( ( ( c_in @ SV489 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1006 ) ) @ tc_Message_Omsg )
| ! [SY3776: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV489 @ SY3776 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1006 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2689]) ).
thf(3265,plain,
! [SV1007: $i,SV490: $i] :
( ( ! [SY3777: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SV490 @ SV1007 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3777 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1007 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3777 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV490 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3777 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2690]) ).
thf(3266,plain,
! [SV1008: $i,SV491: $i] :
( ( ! [SY3778: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV491 @ SV1008 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY3778 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2691]) ).
thf(3267,plain,
! [SV1009: $i,SV492: $i] :
( ( ! [SY3779: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ ( c_Message_Osynth @ SY3779 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ SY3779 @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV492 ) @ SY3779 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2692]) ).
thf(3268,plain,
! [SV1010: $i,SV493: $i] :
( ( ! [SY3780: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ SY3780 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ ( c_Message_Osynth @ SY3780 ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV493 ) @ SY3780 @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2693]) ).
thf(3269,plain,
! [SV1011: $i,SV494: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV494 ) @ SV1011 @ tc_Message_Omsg )
| ! [SY3781: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SY3781 ) @ SV1011 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SY3781 ) @ ( c_Message_Osynth @ SV1011 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2694]) ).
thf(3270,plain,
! [SV1012: $i,SV495: $i] :
( ( ! [SY3782: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV495 @ SV1012 ) @ ( c_Message_Osynth @ SY3782 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV495 ) @ SY3782 @ tc_Message_Omsg )
| ~ ( c_in @ SV1012 @ ( c_Message_Osynth @ SY3782 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2695]) ).
thf(3271,plain,
! [SV1013: $i,SV496: $i] :
( ( ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV496 ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ SV1013 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2696]) ).
thf(3272,plain,
! [SV1014: $i,SV497: $i] :
( ( ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV497 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1014 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2697]) ).
thf(3273,plain,
! [SV1015: $i,SV499: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV499 ) ) @ ( c_Event_Oused @ SV1015 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2699]) ).
thf(3274,plain,
! [SV1016: $i,SV500: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV500 ) ) @ ( c_Event_Oused @ SV1016 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2700]) ).
thf(3275,plain,
! [SV1017: $i,SV501: $i] :
( ( ! [SY3783: $i,SY3784: $i,SY3785: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SY3783 ) @ SY3784 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SY3785 ) ) ) ) @ ( c_List_Oset @ SY3784 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY3786: $i,SY3787: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3786 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3785 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3787 ) @ SY3783 ) ) ) ) ) @ ( c_List_Oset @ SY3784 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY3784 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2701]) ).
thf(3276,plain,
! [SV1018: $i,SV502: $i] :
( ( ! [SY3788: $i,SY3789: $i,SY3790: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SY3788 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3789 ) @ ( c_Message_Omsg_ONonce @ SY3789 ) ) ) ) @ ( c_List_Oset @ SY3790 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3790 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SY3788 @ SY3790 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SY3788 @ SY3790 ) @ ( hAPP @ c_Message_Omsg_OKey @ SY3788 ) ) ) ) @ ( c_List_Oset @ SY3790 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3788 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3790 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3788 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3789 ) @ ( c_Message_Omsg_ONonce @ SY3789 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3790 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2702]) ).
thf(3277,plain,
! [SV1019: $i,SV503: $i] :
( ( ! [SY3791: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV503 ) @ SV1019 ) ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3791 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1019 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2703]) ).
thf(3278,plain,
! [SV1020: $i,SV504: $i] :
( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV504 @ SV1020 ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2704]) ).
thf(3279,plain,
! [SV505: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ SV505 ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2705]) ).
thf(3280,plain,
! [SV1021: $i,SV506: $i] :
( ( ! [SY3792: $i,SY3793: $i,SY3794: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SY3792 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SY3792 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3793 @ ( c_Message_Omsg_ONonce @ SY3794 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3792 ) ) @ tc_Message_Omsg )
| ! [SY3795: $i,SY3796: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3795 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3795 ) @ ( c_Message_Omsg_OMPair @ SY3796 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3793 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SY3792 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3793 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3792 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3792 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2706]) ).
thf(3281,plain,
! [SV1022: $i,SV507: $i] :
( ( ! [SY3797: $i,SY3798: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV507 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV507 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ SV507 @ SV1022 @ SY3797 @ SY3798 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3797 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3797 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SY3798 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3798 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1022 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3797 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3798 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2707]) ).
thf(3282,plain,
! [SV1023: $i,SV508: $i] :
( ( ! [SY3799: $i,SY3800: $i,SY3801: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SY3799 @ ( c_Message_Omsg_ONonce @ SY3800 ) ) ) @ ( c_List_Oset @ SY3801 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3801 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY3802: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY3802 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SY3799 @ SY3802 @ SY3801 ) @ ( hAPP @ c_Message_Omsg_OKey @ SY3799 ) ) ) ) @ ( c_List_Oset @ SY3801 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY3803: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SY3802 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3799 ) @ SY3803 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3801 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3799 @ ( c_Message_Omsg_ONonce @ SY3800 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3801 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2708]) ).
thf(3283,plain,
! [SV1024: $i,SV509: $i] :
( ( ( c_in @ SV509 @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
| ! [SY3804: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SY3804 ) ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3804 @ SV509 ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2709]) ).
thf(3284,plain,
! [SV1025: $i,SV510: $i] :
( ( ( c_in @ SV510 @ ( c_Event_Oused @ SV1025 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV510 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1025 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2710]) ).
thf(3285,plain,
! [SV1026: $i,SV511: $i] :
( ( ! [SY3805: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV511 ) @ SV1026 ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3805 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2711]) ).
thf(3286,plain,
! [SV1027: $i,SV512: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV512 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1027 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV512 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ SV1027 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2712]) ).
thf(3287,plain,
! [SV513: $i] :
( ( ( c_in @ SV513 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ! [SY3013: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV513 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3013 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3013 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2713]) ).
thf(3288,plain,
! [SV1028: $i,SV514: $i] :
( ( ! [SY3806: $i] :
( ( c_in @ SV514 @ ( c_Event_Oknows @ SV1028 @ SY3806 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ SV1028 @ SV514 ) @ ( c_List_Oset @ SY3806 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2714]) ).
thf(3289,plain,
! [SV515: $i] :
( ( ( c_in @ SV515 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ! [SY3016: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV515 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3016 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3016 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2715]) ).
thf(3290,plain,
! [SV1029: $i,SV516: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV516 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1029 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV516 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ SV1029 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2716]) ).
thf(3291,plain,
! [SV1030: $i,SV517: $i] :
( ( ( c_in @ SV517 @ ( c_Event_Oused @ SV1030 ) @ tc_Message_Omsg )
| ! [SY3807: $i,SY3808: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3807 @ SY3808 @ SV517 ) @ ( c_List_Oset @ SV1030 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2717]) ).
thf(3292,plain,
! [SV1031: $i,SV518: $i] :
( ( ! [SY3809: $i,SY3810: $i,SY3811: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SY3809 @ ( c_Message_Omsg_ONonce @ SY3810 ) ) @ SY3811 )
| ~ ( c_in @ SY3811 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3809 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3811 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SY3809 @ ( c_Message_Omsg_ONonce @ SY3810 ) ) ) @ ( c_List_Oset @ SY3811 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2718]) ).
thf(3293,plain,
! [SV1032: $i,SV519: $i] :
( ( ! [SY3812: $i,SY3813: $i,SY3814: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SY3812 @ ( c_Message_Omsg_ONonce @ SY3813 ) ) @ SY3814 )
| ~ ( c_in @ SY3814 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3812 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3814 ) ) @ tc_Message_Omsg )
| ! [SY3815: $i,SY3816: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY3815 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3812 ) @ SY3816 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3814 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3812 @ ( c_Message_Omsg_ONonce @ SY3813 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3814 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2719]) ).
thf(3294,plain,
! [SV1033: $i,SV520: $i] :
( ( ! [SY3817: $i,SY3818: $i,SY3819: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SY3817 @ ( c_Message_Omsg_ONonce @ SY3818 ) ) ) @ ( c_List_Oset @ SY3819 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3817 @ ( c_Message_Omsg_ONonce @ SY3818 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3819 ) ) @ tc_Message_Omsg )
| ! [SY3820: $i,SY3821: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SY3820 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3817 ) @ SY3821 ) ) ) ) ) @ ( c_List_Oset @ SY3819 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3817 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3819 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3819 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2720]) ).
thf(3295,plain,
! [SV1034: $i,SV521: $i] :
( ( ! [SY3822: $i,SY3823: $i,SY3824: $i,SY3825: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3822 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3823 ) @ SY3824 ) ) ) ) ) @ ( c_List_Oset @ SY3825 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY3825 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3822 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3823 ) @ SY3824 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3825 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2721]) ).
thf(3296,plain,
! [SV1035: $i,SV522: $i] :
( ( ! [SY3826: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV522 ) @ SV1035 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3826 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2722]) ).
thf(3297,plain,
! [SV1036: $i,SV523: $i] :
( ( ! [SY3827: $i] :
( ~ ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1036 ) ) @ tc_Message_Omsg )
| ! [SY3828: $i,SY3829: $i] : ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SY3827 @ SY3828 @ SY3829 ) @ SV1036 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2723]) ).
thf(3298,plain,
! [SV1037: $i,SV524: $i] :
( ( ! [SY3830: $i] :
( ( c_in @ SV524 @ ( c_Event_Oknows @ SV1037 @ SY3830 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OGets @ SV1037 @ SV524 ) @ ( c_List_Oset @ SY3830 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV1037 = c_Message_Oagent_OSpy ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2724]) ).
thf(3299,plain,
! [SV1038: $i,SV525: $i] :
( ( ! [SY3831: $i,SY3832: $i,SY3833: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SY3831 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3832 ) @ ( c_Message_Omsg_ONonce @ SY3832 ) ) ) ) @ ( c_List_Oset @ SY3833 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3831 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3832 ) @ ( c_Message_Omsg_ONonce @ SY3832 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3833 ) ) @ tc_Message_Omsg )
| ! [SY3834: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SY3834 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3831 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3831 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SY3833 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3831 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3833 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3833 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2725]) ).
thf(3300,plain,
! [SV1039: $i,SV526: $i] :
( ( ! [SY3835: $i,SY3836: $i] :
( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3835 ) @ ( c_Message_Omsg_OAgent @ SY3836 ) ) ) )
| ! [SY3837: $i] :
( ~ ( c_in @ SY3837 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY3836 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY3838: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3836 ) @ ( c_Message_Omsg_OMPair @ SY3838 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3835 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3837 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2726]) ).
thf(3301,plain,
! [SV1040: $i,SV527: $i] :
( ( ! [SY3839: $i,SY3840: $i,SY3841: $i] :
( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
| ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3839 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3840 ) @ ( c_Message_Omsg_OAgent @ SY3841 ) ) ) )
| ~ ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3842: $i,SY3843: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3842 @ SY3841 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3841 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY3843 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3839 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY3840 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2727]) ).
thf(3302,plain,
! [SV1041: $i,SV528: $i] :
( ( ( c_in @ SV528 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1041 ) @ tc_Message_Omsg )
| ! [SY3844: $i] :
( ~ ( c_in @ SY3844 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ SY3844 @ SV528 ) @ ( c_List_Oset @ SV1041 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2728]) ).
thf(3303,plain,
! [SV1042: $i,SV529: $i] :
( ( ! [SY3845: $i,SY3846: $i] :
( ( c_in @ SV529 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1042 ) ) @ tc_Message_Omsg )
| ! [SY3847: $i,SY3848: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY3845 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3845 ) @ ( c_Message_Omsg_OMPair @ SY3846 @ ( c_Message_Omsg_OMPair @ SY3847 @ ( c_Message_Omsg_OMPair @ SV529 @ SY3848 ) ) ) ) ) @ ( c_List_Oset @ SV1042 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2729]) ).
thf(3304,plain,
! [SV1043: $i,SV530: $i] :
( ( ( ( c_Message_Omsg_OAgent @ SV530 )
!= ( c_Message_Omsg_OAgent @ SV1043 ) )
| ( SV530 = SV1043 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2730]) ).
thf(3305,plain,
! [SV1044: $i,SV532: $i] :
( ( ! [SY3849: $i] :
( ( c_in @ SV532 @ ( c_Event_Oknows @ SV1044 @ SY3849 ) @ tc_Message_Omsg )
| ! [SY3850: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1044 @ SY3850 @ SV532 ) @ ( c_List_Oset @ SY3849 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2732]) ).
thf(3306,plain,
! [SV1045: $i,SV534: $i] :
( ( ( c_in @ SV534 @ ( c_Message_Oanalz @ SV1045 ) @ tc_Message_Omsg )
| ! [SY3851: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3851 @ SV534 ) @ ( c_Message_Oanalz @ SV1045 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2734]) ).
thf(3307,plain,
! [SV1046: $i,SV535: $i] :
( ( ( c_in @ SV535 @ ( c_Message_Oanalz @ SV1046 ) @ tc_Message_Omsg )
| ! [SY3852: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV535 @ SY3852 ) @ ( c_Message_Oanalz @ SV1046 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2735]) ).
thf(3308,plain,
! [SV1047: $i,SV536: $i] :
( ( ( c_in @ SV536 @ ( c_Message_Oparts @ SV1047 ) @ tc_Message_Omsg )
| ! [SY3853: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3853 @ SV536 ) @ ( c_Message_Oparts @ SV1047 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2736]) ).
thf(3309,plain,
! [SV1048: $i,SV537: $i] :
( ( ( c_in @ SV537 @ ( c_Message_Oparts @ SV1048 ) @ tc_Message_Omsg )
| ! [SY3854: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV537 @ SY3854 ) @ ( c_Message_Oparts @ SV1048 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2737]) ).
thf(3310,plain,
! [SV1049: $i,SV538: $i] :
( ( ! [SY3855: $i] :
( ( c_Message_Omsg_OCrypt @ SV538 @ SV1049 )
!= ( c_Message_Omsg_ONonce @ SY3855 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2738]) ).
thf(3311,plain,
! [SV1050: $i,SV539: $i] :
( ( ( c_Message_Omsg_OAgent @ SV539 )
!= ( hAPP @ c_Message_Omsg_OKey @ SV1050 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2739]) ).
thf(3312,plain,
! [SV1051: $i,SV540: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV540 )
!= ( c_Message_Omsg_ONonce @ SV1051 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2740]) ).
thf(3313,plain,
! [SV1052: $i,SV541: $i] :
( ( ! [SY3856: $i,SY3857: $i] :
( ! [SY3858: $i,SY3859: $i] :
( ( c_Event_Oevent_OSays @ SV541 @ SV1052 @ SY3856 )
!= ( c_Event_Oevent_OSays @ SY3857 @ SY3858 @ SY3859 ) )
| ( SV541 = SY3857 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2741]) ).
thf(3314,plain,
! [SV1053: $i,SV542: $i] :
( ( ! [SY3860: $i,SY3861: $i,SY3862: $i] :
( ! [SY3863: $i] :
( ( c_Event_Oevent_OSays @ SV542 @ SV1053 @ SY3860 )
!= ( c_Event_Oevent_OSays @ SY3861 @ SY3862 @ SY3863 ) )
| ( SV1053 = SY3862 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2742]) ).
thf(3315,plain,
! [SV1054: $i,SV543: $i] :
( ( ! [SY3864: $i,SY3865: $i,SY3866: $i,SY3867: $i] :
( ( ( c_Event_Oevent_OSays @ SV543 @ SV1054 @ SY3864 )
!= ( c_Event_Oevent_OSays @ SY3865 @ SY3866 @ SY3867 ) )
| ( SY3864 = SY3867 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2743]) ).
thf(3316,plain,
! [SV1055: $i,SV544: $i] :
( ( ( c_in @ SV544 @ ( c_Message_Oparts @ SV1055 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV544 @ SV1055 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2744]) ).
thf(3317,plain,
! [SV1056: $i,SV545: $i] :
( ( ( c_in @ SV545 @ ( c_Message_Oanalz @ SV1056 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV545 @ SV1056 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2745]) ).
thf(3318,plain,
! [SV1057: $i,SV546: $i] :
( ( ( c_in @ SV546 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1057 ) ) @ tc_Message_Omsg )
| ! [SY3868: $i,SY3869: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3868 @ SY3869 @ SV546 ) @ ( c_List_Oset @ SV1057 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2746]) ).
thf(3319,plain,
! [SV1058: $i,SV547: $i] :
( ( ( c_in @ SV547 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1058 ) @ tc_Message_Omsg )
| ! [SY3870: $i,SY3871: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3870 @ SY3871 @ SV547 ) @ ( c_List_Oset @ SV1058 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2747]) ).
thf(3320,plain,
! [SV1059: $i,SV548: $i] :
( ( ! [SY3872: $i,SY3873: $i,SY3874: $i,SY3875: $i] :
( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1059 ) ) @ tc_Message_Omsg )
| ! [SY3876: $i,SY3877: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3872 @ SY3873 @ ( c_Message_Omsg_OCrypt @ SY3874 @ ( c_Message_Omsg_OMPair @ SY3875 @ ( c_Message_Omsg_OMPair @ SY3876 @ ( c_Message_Omsg_OMPair @ SY3877 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SV1059 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2748]) ).
thf(3321,plain,
! [SV1060: $i,SV549: $i] :
( ( ! [SY3878: $i] :
( ( c_Message_Omsg_OCrypt @ SV549 @ SV1060 )
!= ( hAPP @ c_Message_Omsg_OKey @ SY3878 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2749]) ).
thf(3322,plain,
! [SV1061: $i,SV551: $i] :
( ( ( c_Message_Omsg_ONonce @ SV551 )
!= ( hAPP @ c_Message_Omsg_OKey @ SV1061 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2751]) ).
thf(3323,plain,
! [SV1062: $i,SV553: $i] :
( ( ! [SY3879: $i] :
( ( c_Message_Omsg_OMPair @ SV553 @ SV1062 )
!= ( c_Message_Omsg_OAgent @ SY3879 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2753]) ).
thf(3324,plain,
! [SV1063: $i,SV554: $i] :
( ( ( c_Message_Omsg_ONonce @ SV554 )
!= ( c_Message_Omsg_OAgent @ SV1063 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2754]) ).
thf(3325,plain,
! [SV1064: $i,SV555: $i] :
( ( ( c_in @ SV555 @ ( c_Message_Oparts @ SV1064 ) @ tc_Message_Omsg )
| ! [SY3880: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3880 @ SV555 ) @ ( c_Message_Oparts @ SV1064 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2755]) ).
thf(3326,plain,
! [SV1065: $i,SV556: $i] :
( ( ( c_in @ SV556 @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
| ! [SY3881: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SY3881 ) ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3881 ) @ SV556 ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2756]) ).
thf(3327,plain,
! [SV1066: $i,SV557: $i] :
( ( ( c_in @ SV557 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1066 ) ) @ tc_Message_Omsg )
| ! [SY3882: $i,SY3883: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3882 @ SY3883 @ SV557 ) @ ( c_List_Oset @ SV1066 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2757]) ).
thf(3328,plain,
! [SV1067: $i,SV558: $i] :
( ( ( c_in @ SV558 @ ( c_Message_Oparts @ SV1067 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV558 @ ( c_Message_Oparts @ ( c_Message_Oparts @ SV1067 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2758]) ).
thf(3329,plain,
! [SV1068: $i,SV559: $i] :
( ( ( ( hAPP @ c_Message_Omsg_OKey @ SV559 )
!= ( hAPP @ c_Message_Omsg_OKey @ SV1068 ) )
| ( SV559 = SV1068 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2759]) ).
thf(3330,plain,
! [SV1069: $i,SV560: $i] :
( ( ! [SY3884: $i] :
( ( c_Message_Omsg_OAgent @ SV560 )
!= ( c_Message_Omsg_OMPair @ SV1069 @ SY3884 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2760]) ).
thf(3331,plain,
! [SV561: $i] :
( ( ( ! [SY3136: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV561 ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3136 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV561 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2761]) ).
thf(3332,plain,
! [SV1070: $i,SV562: $i] :
( ( ! [SY3885: $i] :
( ( c_Message_Omsg_OAgent @ SV562 )
!= ( c_Message_Omsg_OCrypt @ SV1070 @ SY3885 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2762]) ).
thf(3333,plain,
! [SV1071: $i,SV563: $i] :
( ( ! [SY3886: $i] :
( ( c_Message_Omsg_ONonce @ SV563 )
!= ( c_Message_Omsg_OMPair @ SV1071 @ SY3886 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2763]) ).
thf(3334,plain,
! [SV1072: $i,SV564: $i] :
( ( ! [SY3887: $i,SY3888: $i] :
( ( c_Message_Omsg_OMPair @ SV564 @ SV1072 )
!= ( c_Message_Omsg_OCrypt @ SY3887 @ SY3888 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2764]) ).
thf(3335,plain,
! [SV1073: $i,SV565: $i] :
( ( ! [SY3889: $i] :
( ( c_Message_Omsg_OCrypt @ SV565 @ SV1073 )
!= ( c_Message_Omsg_OAgent @ SY3889 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2765]) ).
thf(3336,plain,
! [SV1074: $i,SV566: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV566 ) ) @ ( c_Event_Oknows @ SV566 @ SV1074 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2766]) ).
thf(3337,plain,
! [SV1075: $i,SV567: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV567 )
!= ( c_Message_Omsg_OAgent @ SV1075 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2767]) ).
thf(3338,plain,
! [SV1076: $i,SV568: $i] :
( ( ( c_in @ SV568 @ ( c_Message_Oanalz @ SV1076 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV568 @ ( c_Message_Oanalz @ ( c_Message_Oanalz @ SV1076 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2768]) ).
thf(3339,plain,
! [SV1077: $i,SV569: $i] :
( ( ( ( c_Message_Omsg_ONonce @ SV569 )
!= ( c_Message_Omsg_ONonce @ SV1077 ) )
| ( SV569 = SV1077 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2769]) ).
thf(3340,plain,
! [SV1078: $i,SV570: $i] :
( ( ! [SY3890: $i] : ( c_in @ SV570 @ SV1078 @ SY3890 )
| ~ ( hBOOL @ ( hAPP @ SV1078 @ SV570 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2770]) ).
thf(3341,plain,
! [SV1079: $i,SV571: $i] :
( ( ( hBOOL @ ( hAPP @ SV571 @ SV1079 ) )
| ! [SY3891: $i] :
~ ( c_in @ SV1079 @ SV571 @ SY3891 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2771]) ).
thf(3342,plain,
! [SV1080: $i,SV572: $i] :
( ( ! [SY3892: $i] :
( ( c_Message_Omsg_ONonce @ SV572 )
!= ( c_Message_Omsg_OCrypt @ SV1080 @ SY3892 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2772]) ).
thf(3343,plain,
! [SV1081: $i,SV573: $i] :
( ( ! [SY3893: $i] :
( ! [SY3894: $i] :
( ( c_Message_Omsg_OCrypt @ SV573 @ SV1081 )
!= ( c_Message_Omsg_OCrypt @ SY3893 @ SY3894 ) )
| ( SV573 = SY3893 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2773]) ).
thf(3344,plain,
! [SV1082: $i,SV574: $i] :
( ( ! [SY3895: $i,SY3896: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV574 @ SV1082 )
!= ( c_Message_Omsg_OCrypt @ SY3895 @ SY3896 ) )
| ( SV1082 = SY3896 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2774]) ).
thf(3345,plain,
! [SV1083: $i,SV575: $i] :
( ( ( c_Message_Omsg_OAgent @ SV575 )
!= ( c_Message_Omsg_ONonce @ SV1083 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2775]) ).
thf(3346,plain,
! [SV1084: $i,SV576: $i] :
( ( ! [SY3897: $i] :
( ! [SY3898: $i] :
( ( c_Message_Omsg_OMPair @ SV576 @ SV1084 )
!= ( c_Message_Omsg_OMPair @ SY3897 @ SY3898 ) )
| ( SV576 = SY3897 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2776]) ).
thf(3347,plain,
! [SV1085: $i,SV577: $i] :
( ( ! [SY3899: $i,SY3900: $i] :
( ( ( c_Message_Omsg_OMPair @ SV577 @ SV1085 )
!= ( c_Message_Omsg_OMPair @ SY3899 @ SY3900 ) )
| ( SV1085 = SY3900 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2777]) ).
thf(3348,plain,
! [SV1086: $i,SV578: $i] :
( ( ( c_in @ SV578 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg )
| ! [SY3901: $i] :
( ~ ( c_in @ SY3901 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3901 ) @ SV578 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2778]) ).
thf(3349,plain,
! [SV1087: $i,SV579: $i] :
( ( ! [SY3902: $i] :
( ( c_Message_Omsg_OMPair @ SV579 @ SV1087 )
!= ( c_Message_Omsg_ONonce @ SY3902 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2779]) ).
thf(3350,plain,
! [SV1088: $i,SV580: $i] :
( ( ! [SY3903: $i,SY3904: $i] :
( ( c_Message_Omsg_OCrypt @ SV580 @ SV1088 )
!= ( c_Message_Omsg_OMPair @ SY3903 @ SY3904 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2780]) ).
thf(3351,plain,
! [SV1089: $i,SV581: $i] :
( ( ! [SY3905: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ SV581 )
!= ( c_Message_Omsg_OMPair @ SV1089 @ SY3905 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2781]) ).
thf(3352,plain,
! [SV1090: $i,SV582: $i] :
( ( ! [SY3906: $i] :
( ( c_Message_Omsg_OMPair @ SV582 @ SV1090 )
!= ( hAPP @ c_Message_Omsg_OKey @ SY3906 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2782]) ).
thf(3353,plain,
! [SV1091: $i,SV583: $i] :
( ( ! [SY3907: $i] :
( ( hAPP @ c_Message_Omsg_OKey @ SV583 )
!= ( c_Message_Omsg_OCrypt @ SV1091 @ SY3907 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2783]) ).
thf(3354,plain,
! [SV1092: $i,SV584: $i] :
( ( ( ( hAPP @ c_Public_OshrK @ SV584 )
!= ( hAPP @ c_Public_OshrK @ SV1092 ) )
| ( SV584 = SV1092 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2784]) ).
thf(3355,plain,
! [SV1093: $i,SV585: $i] :
( ( ~ ( c_in @ SV585 @ ( c_Message_Oanalz @ SV1093 ) @ tc_Message_Omsg )
| ( c_in @ SV585 @ ( c_Message_Oparts @ SV1093 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2785]) ).
thf(3356,plain,
! [SV1094: $i,SV586: $i] :
( ( ( c_in @ SV586 @ ( c_Message_Oparts @ SV1094 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV586 @ ( c_Message_Oanalz @ SV1094 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2786]) ).
thf(3357,plain,
! [SV1095: $i,SV587: $i] :
( ( ( c_in @ SV587 @ ( c_Message_Oparts @ SV1095 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV587 @ ( c_Message_Oanalz @ SV1095 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2787]) ).
thf(3358,plain,
! [SV1096: $i,SV588: $i] :
( ( ( class_Lattices_Oupper__semilattice @ ( tc_fun @ SV588 @ SV1096 ) )
| ~ ( class_Lattices_Olattice @ SV1096 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2788]) ).
thf(3359,plain,
! [SV1097: $i,SV589: $i] :
( ( ( class_Lattices_Obounded__lattice @ ( tc_fun @ SV589 @ SV1097 ) )
| ~ ( class_Lattices_Obounded__lattice @ SV1097 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2789]) ).
thf(3360,plain,
! [SV1098: $i,SV590: $i] :
( ( ( class_Lattices_Oboolean__algebra @ ( tc_fun @ SV590 @ SV1098 ) )
| ~ ( class_Lattices_Oboolean__algebra @ SV1098 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2790]) ).
thf(3361,plain,
! [SV1099: $i,SV591: $i] :
( ( ( class_Orderings_Opreorder @ ( tc_fun @ SV591 @ SV1099 ) )
| ~ ( class_Orderings_Opreorder @ SV1099 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2791]) ).
thf(3362,plain,
! [SV1100: $i,SV592: $i] :
( ( ( class_Lattices_Olattice @ ( tc_fun @ SV592 @ SV1100 ) )
| ~ ( class_Lattices_Olattice @ SV1100 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2792]) ).
thf(3363,plain,
! [SV1101: $i,SV593: $i] :
( ( ( class_Orderings_Oorder @ ( tc_fun @ SV593 @ SV1101 ) )
| ~ ( class_Orderings_Oorder @ SV1101 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2793]) ).
thf(3364,plain,
! [SV1102: $i,SV594: $i] :
( ( ( class_Orderings_Otop @ ( tc_fun @ SV594 @ SV1102 ) )
| ~ ( class_Orderings_Otop @ SV1102 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2794]) ).
thf(3365,plain,
! [SV1103: $i,SV595: $i] :
( ( ( class_Orderings_Obot @ ( tc_fun @ SV595 @ SV1103 ) )
| ~ ( class_Orderings_Obot @ SV1103 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2795]) ).
thf(3366,plain,
! [SV1104: $i,SV596: $i] :
( ( ( class_HOL_Oord @ ( tc_fun @ SV596 @ SV1104 ) )
| ~ ( class_HOL_Oord @ SV1104 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2796]) ).
thf(3367,plain,
! [SV1105: $i,SV597: $i] :
( ( c_fequal @ SV597 @ SV597 @ SV1105 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2797]) ).
thf(3368,plain,
! [SV1106: $i,SV598: $i] :
( ( ( SV598 = SV1106 )
| ! [SY3908: $i] :
~ ( c_fequal @ SV598 @ SV1106 @ SY3908 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2798]) ).
thf(3369,plain,
! [SV599: $i,SV1: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV599 ) ) @ ( c_Message_Oparts @ SV599 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_in @ SV1 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV599 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2800]) ).
thf(3370,plain,
! [SV1107: $i,SV600: $i,SV2: $i] :
( ( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV2 @ SV600 ) @ SV1107 @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV600 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SV1107 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2801]) ).
thf(3371,plain,
! [SV1108: $i,SV601: $i,SV3: $i] :
( ( ! [SY3909: $i] :
( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV3 @ SV601 @ SV1108 ) @ SY3909 @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1108 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SY3909 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2802]) ).
thf(3372,plain,
! [SV1109: $i,SV602: $i,SV4: $i] :
( ( ! [SY3910: $i] :
( ( c_in @ SV4 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV602 @ SV1109 @ SV4 @ SY3910 ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ SV602 @ SV1109 @ SV4 @ SY3910 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2803]) ).
thf(3373,plain,
! [SV603: $i,SV5: $i] :
( ( ( c_in @ SV5 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ ( c_Message_Oparts @ SV603 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3203: $i] :
( ~ ( c_in @ SY3203 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV5 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3203 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2804]) ).
thf(3374,plain,
! [SV605: $i,SV7: $i] :
( ( ( ~ ( hBOOL @ ( hAPP @ SV7 @ SV605 ) ) )
= $true )
| ( ( ! [SY3204: $i] :
~ ( c_in @ SV605 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3204 @ tc_bool ) ) @ SY3204 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2806]) ).
thf(3375,plain,
! [SV606: $i,SV8: $i] :
( ( c_in @ SV8 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV606 @ tc_bool ) ) @ SV606 )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2807]) ).
thf(3376,plain,
! [SV607: $i,SV9: $i] :
( ( c_in @ SV9 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV607 @ tc_bool ) ) @ SV607 )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2808]) ).
thf(3377,plain,
! [SV608: $i,SV10: $i] :
( ( ( hBOOL @ ( hAPP @ SV10 @ SV608 ) )
= $true )
| ( ( ! [SY3205: $i] :
~ ( c_in @ SV608 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3205 @ tc_bool ) ) @ SY3205 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2809]) ).
thf(3378,plain,
! [SV609: $i,SV11: $i] :
( ( c_in @ SV11 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV609 @ tc_bool ) ) @ SV609 )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2810]) ).
thf(3379,plain,
! [SV1110: $i,SV610: $i,SV12: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV12 @ tc_bool ) )
= ( c_Set_Oimage @ SV610 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1110 @ tc_bool ) ) @ SV1110 @ SV12 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2811]) ).
thf(3380,plain,
! [SV1111: $i,SV611: $i,SV13: $i] :
( ( ( c_Set_Oinsert @ SV13 @ SV611 @ SV1111 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ SV13 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1111 @ tc_bool ) ) @ SV1111 ) @ SV611 @ ( tc_fun @ SV1111 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2812]) ).
thf(3381,plain,
! [SV14: $i] :
( ( ( class_Lattices_Obounded__lattice @ SV14 )
= $false )
| ( ( ! [SY1921: $i,SY1922: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY1921 @ SY1922 @ SV14 )
!= ( c_Orderings_Obot__class_Obot @ SV14 ) )
| ( SY1922
= ( c_Orderings_Obot__class_Obot @ SV14 ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2813]) ).
thf(3382,plain,
! [SV15: $i] :
( ( ( class_Lattices_Obounded__lattice @ SV15 )
= $false )
| ( ( ! [SY1923: $i] :
( ! [SY1924: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY1923 @ SY1924 @ SV15 )
!= ( c_Orderings_Obot__class_Obot @ SV15 ) )
| ( SY1923
= ( c_Orderings_Obot__class_Obot @ SV15 ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2814]) ).
thf(3383,plain,
! [SV1112: $i,SV612: $i,SV16: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV16 @ SV612 @ ( tc_fun @ SV1112 @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1112 @ tc_bool ) ) )
| ( SV16
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1112 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2815]) ).
thf(3384,plain,
! [SV1113: $i,SV613: $i,SV17: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV17 @ SV613 @ ( tc_fun @ SV1113 @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1113 @ tc_bool ) ) )
| ( SV613
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1113 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2816]) ).
thf(3385,plain,
! [SV1114: $i,SV614: $i,SV18: $i] :
( ( ( ( c_Set_Oinsert @ SV18 @ SV614 @ SV1114 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1114 @ tc_bool ) ) )
| ( c_in @ SV18 @ SV614 @ SV1114 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2817]) ).
thf(3386,plain,
! [SV1115: $i,SV615: $i,SV19: $i] :
( ( ( ( c_Set_Oinsert @ SV19 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV615 @ tc_bool ) ) @ SV615 )
!= ( c_Set_Oinsert @ SV1115 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV615 @ tc_bool ) ) @ SV615 ) )
| ( SV19 = SV1115 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2818]) ).
thf(3387,plain,
! [SV1116: $i,SV616: $i,SV20: $i] :
( ( ( c_Set_Oimage @ SV20 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV616 @ tc_bool ) ) @ SV616 @ SV1116 )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1116 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2819]) ).
thf(3388,plain,
! [SV1117: $i,SV617: $i,SV21: $i] :
( ( ( c_Set_Oinsert @ SV21 @ ( c_Set_Oinsert @ SV617 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1117 @ tc_bool ) ) @ SV1117 ) @ SV1117 )
= ( c_Set_Oinsert @ SV617 @ ( c_Set_Oinsert @ SV21 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1117 @ tc_bool ) ) @ SV1117 ) @ SV1117 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2820]) ).
thf(3389,plain,
! [SV1118: $i,SV618: $i,SV22: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV22 @ ( c_Set_Oinsert @ SV618 @ SV1118 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV22 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV618 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( c_Message_Oparts @ SV1118 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2821]) ).
thf(3390,plain,
! [SV619: $i,SV23: $i] :
( ( ( SV23 = SV619 )
= $true )
| ( ( ! [SY3215: $i] :
~ ( c_in @ SV23 @ ( c_Set_Oinsert @ SV619 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3215 @ tc_bool ) ) @ SY3215 ) @ SY3215 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2822]) ).
thf(3391,plain,
! [SV620: $i,SV24: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV24 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SV620 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_in @ SV24 @ ( c_Event_Oused @ SV620 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2823]) ).
thf(3392,plain,
! [SV1119: $i,SV621: $i,SV25: $i] :
( ( ! [SY3911: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV25 @ tc_bool ) )
!= ( c_Set_Oimage @ SV621 @ SV1119 @ SY3911 @ SV25 ) )
| ( SV1119
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3911 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2824]) ).
thf(3393,plain,
! [SV27: $i] :
( ( ( class_Orderings_Obot @ SV27 )
= $false )
| ( ( ! [SY1946: $i] : ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ SV27 ) @ SY1946 @ SV27 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2826]) ).
thf(3394,plain,
! [SV1120: $i,SV623: $i,SV28: $i] :
( ( ( c_Set_Oinsert @ SV28 @ SV623 @ SV1120 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1120 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2827]) ).
thf(3395,plain,
! [SV30: $i] :
( ( ( class_Lattices_Obounded__lattice @ SV30 )
= $false )
| ( ( ! [SY1949: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY1949 @ ( c_Orderings_Obot__class_Obot @ SV30 ) @ SV30 )
= SY1949 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2828]) ).
thf(3396,plain,
! [SV31: $i] :
( ( ( class_Lattices_Obounded__lattice @ SV31 )
= $false )
| ( ( ! [SY1950: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ SV31 ) @ SY1950 @ SV31 )
= SY1950 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2829]) ).
thf(3397,plain,
! [SV34: $i] :
( ( ( class_Lattices_Oboolean__algebra @ SV34 )
= $false )
| ( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Otop__class_Otop @ SV34 ) @ SV34 )
= ( c_Orderings_Obot__class_Obot @ SV34 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2832]) ).
thf(3398,plain,
! [SV626: $i,SV36: $i] :
( ( hBOOL @ ( hAPP @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV36 @ tc_bool ) ) @ SV626 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[2833]) ).
thf(3399,plain,
! [SV1121: $i,SV627: $i,SV38: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV38 @ ( c_Event_Oknows @ SV627 @ SV1121 ) @ tc_Message_Omsg ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV38 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ SV627 @ SV1121 ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2835]) ).
thf(3400,plain,
! [SV1122: $i,SV628: $i,SV39: $i] :
( ( ! [SY3912: $i,SY3913: $i] :
( ( ( c_Set_Oinsert @ SV39 @ ( c_Set_Oinsert @ SV628 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 )
!= ( c_Set_Oinsert @ SY3912 @ ( c_Set_Oinsert @ SY3913 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 ) )
| ( SV39 = SY3913 )
| ( SV39 = SY3912 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2836]) ).
thf(3401,plain,
! [SV1123: $i,SV629: $i,SV40: $i] :
( ( ! [SY3914: $i] :
( ! [SY3915: $i] :
( ( c_Set_Oinsert @ SV40 @ ( c_Set_Oinsert @ SV629 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 )
!= ( c_Set_Oinsert @ SY3914 @ ( c_Set_Oinsert @ SY3915 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 ) )
| ( SV629 = SY3914 )
| ( SV40 = SY3914 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2837]) ).
thf(3402,plain,
! [SV1124: $i,SV630: $i,SV41: $i] :
( ( ! [SY3916: $i,SY3917: $i] :
( ( ( c_Set_Oinsert @ SV41 @ ( c_Set_Oinsert @ SV630 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 )
!= ( c_Set_Oinsert @ SY3916 @ ( c_Set_Oinsert @ SY3917 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 ) )
| ( SV41 = SY3917 )
| ( SV630 = SY3917 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2838]) ).
thf(3403,plain,
! [SV1125: $i,SV631: $i,SV42: $i] :
( ( ! [SY3918: $i,SY3919: $i] :
( ( ( c_Set_Oinsert @ SV42 @ ( c_Set_Oinsert @ SV631 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 )
!= ( c_Set_Oinsert @ SY3918 @ ( c_Set_Oinsert @ SY3919 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 ) )
| ( SV631 = SY3918 )
| ( SV631 = SY3919 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2839]) ).
thf(3404,plain,
! [SV632: $i,SV43: $i] :
( ( ( SV43
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV632 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ SV43 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV632 @ tc_bool ) ) @ ( tc_fun @ SV632 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2840]) ).
thf(3405,plain,
! [SV1126: $i,SV633: $i,SV45: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV45 @ tc_bool ) )
!= ( c_Set_Oinsert @ SV633 @ SV1126 @ SV45 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2841]) ).
thf(3406,plain,
! [SV46: $i] :
( ( ( class_Lattices_Oboolean__algebra @ SV46 )
= $false )
| ( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_Orderings_Obot__class_Obot @ SV46 ) @ SV46 )
= ( c_Orderings_Otop__class_Otop @ SV46 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2842]) ).
thf(3407,plain,
! [SV1127: $i,SV634: $i,SV48: $i] :
( ( ! [SY3920: $i] :
( ( c_Set_Oimage @ SV48 @ SV634 @ SV1127 @ SY3920 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3920 @ tc_bool ) ) )
| ( SV634
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1127 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2843]) ).
thf(3408,plain,
! [SV637: $i,SV51: $i] :
( ( ( SV51
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV637 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ SV51 @ ( c_HOL_Ouminus__class_Ouminus @ SV51 @ ( tc_fun @ SV637 @ tc_bool ) ) @ ( tc_fun @ SV637 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2846]) ).
thf(3409,plain,
! [SV1128: $i,SV638: $i,SV52: $i] :
( ( ( SV52
= ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) @ SV1128 ) )
| ( SV52
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) )
| ~ ( c_lessequals @ SV52 @ ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) @ SV1128 ) @ ( tc_fun @ SV1128 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2847]) ).
thf(3410,plain,
! [SV639: $i,SV55: $i] :
( ( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV55 @ tc_bool ) )
!= ( c_List_Oset @ SV639 @ SV55 ) )
= $true )
| ( ( SV639
= ( c_List_Olist_ONil @ SV55 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2848]) ).
thf(3411,plain,
! [SV640: $i,SV57: $i] :
( ( ( ( c_List_Oset @ SV57 @ SV640 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV640 @ tc_bool ) ) )
= $true )
| ( ( SV57
= ( c_List_Olist_ONil @ SV640 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2849]) ).
thf(3412,plain,
! [SV1129: $i,SV59: $i] :
( ( ( hBOOL @ ( hAPP @ SV59 @ SV1129 ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OEncryption ) )
| ~ ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OSignature ) ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[2851]) ).
thf(3413,plain,
! [SV1130: $i,SV641: $i,SV60: $i] :
( ( ! [SY3921: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ SV60 @ SV641 @ SV1130 ) @ SY3921 @ ( tc_fun @ SV1130 @ tc_bool ) )
= ( c_Set_Oinsert @ SV60 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV641 @ SY3921 @ ( tc_fun @ SV1130 @ tc_bool ) ) @ SV1130 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2852]) ).
thf(3414,plain,
! [SV1131: $i,SV642: $i,SV61: $i] :
( ( ! [SY3922: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV61 @ ( c_Set_Oinsert @ SV642 @ SV1131 @ SY3922 ) @ ( tc_fun @ SY3922 @ tc_bool ) )
= ( c_Set_Oinsert @ SV642 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV61 @ SV1131 @ ( tc_fun @ SY3922 @ tc_bool ) ) @ SY3922 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2853]) ).
thf(3415,plain,
! [SV62: $i] :
( ( ( class_OrderedGroup_Opordered__ab__group__add @ SV62 )
= $false )
| ( ( ! [SY1992: $i,SY1993: $i] :
( ( c_lessequals @ SY1992 @ SY1993 @ SV62 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY1993 @ SV62 ) @ ( c_HOL_Ouminus__class_Ouminus @ SY1992 @ SV62 ) @ SV62 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2854]) ).
thf(3416,plain,
! [SV63: $i] :
( ( ( class_OrderedGroup_Opordered__ab__group__add @ SV63 )
= $false )
| ( ( ! [SY1994: $i,SY1995: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY1994 @ SV63 ) @ ( c_HOL_Ouminus__class_Ouminus @ SY1995 @ SV63 ) @ SV63 )
| ~ ( c_lessequals @ SY1995 @ SY1994 @ SV63 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2855]) ).
thf(3417,plain,
! [SV1132: $i,SV643: $i,SV64: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV64 @ ( tc_fun @ SV643 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1132 @ ( tc_fun @ SV643 @ tc_bool ) ) @ ( tc_fun @ SV643 @ tc_bool ) )
| ~ ( c_lessequals @ SV1132 @ SV64 @ ( tc_fun @ SV643 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2856]) ).
thf(3418,plain,
! [SV1133: $i,SV644: $i,SV65: $i] :
( ( ( c_lessequals @ SV65 @ SV644 @ ( tc_fun @ SV1133 @ tc_bool ) )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV644 @ ( tc_fun @ SV1133 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV65 @ ( tc_fun @ SV1133 @ tc_bool ) ) @ ( tc_fun @ SV1133 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2857]) ).
thf(3419,plain,
! [SV1134: $i,SV645: $i,SV66: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV66 @ ( tc_fun @ SV645 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1134 @ ( tc_fun @ SV645 @ tc_bool ) ) @ ( tc_fun @ SV645 @ tc_bool ) )
| ~ ( c_lessequals @ SV1134 @ SV66 @ ( tc_fun @ SV645 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2858]) ).
thf(3420,plain,
! [SV646: $i,SV67: $i] :
( ( ( c_lessequals @ ( c_Message_Osynth @ SV67 ) @ ( c_Message_Osynth @ SV646 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV67 @ SV646 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2859]) ).
thf(3421,plain,
! [SV1135: $i,SV647: $i,SV68: $i] :
( ( ! [SY3923: $i,SY3924: $i] :
( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ ( c_List_Oappend @ SV647 @ ( c_List_Olist_OCons @ SV1135 @ SY3923 @ SY3924 ) @ SY3924 ) @ SY3924 ) ) )
| ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ SY3923 @ SY3924 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV68 @ SV1135 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2860]) ).
thf(3422,plain,
! [SV69: $i] :
( ( ( class_Lattices_Obounded__lattice @ SV69 )
= $false )
| ( ( ! [SY2007: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2007 @ ( c_Orderings_Otop__class_Otop @ SV69 ) @ SV69 )
= ( c_Orderings_Otop__class_Otop @ SV69 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2861]) ).
thf(3423,plain,
! [SV70: $i] :
( ( ( class_Lattices_Obounded__lattice @ SV70 )
= $false )
| ( ( ! [SY2008: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ SV70 ) @ SY2008 @ SV70 )
= ( c_Orderings_Otop__class_Otop @ SV70 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2862]) ).
thf(3424,plain,
! [SV1136: $i,SV651: $i,SV74: $i] :
( ( c_lessequals @ SV74 @ ( c_Set_Oinsert @ SV651 @ SV74 @ SV1136 ) @ ( tc_fun @ SV1136 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2866]) ).
thf(3425,plain,
! [SV1137: $i,SV653: $i,SV76: $i] :
( ( ! [SY3925: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV76 @ SV653 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV1137 ) @ SY3925 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV1137 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV76 @ SV653 ) @ SY3925 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2868]) ).
thf(3426,plain,
! [SV1138: $i,SV654: $i,SV77: $i] :
( ( ! [SY3926: $i,SY3927: $i] :
( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ ( c_List_Oappend @ SV654 @ ( c_List_Olist_OCons @ SV1138 @ SY3926 @ SY3927 ) @ SY3927 ) @ SY3927 ) ) )
| ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ SV654 @ SY3927 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV77 @ SV1138 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2869]) ).
thf(3427,plain,
! [SV656: $i,SV79: $i] :
( ( ( hBOOL @ ( hAPP @ SV79 @ SV656 ) )
= $true )
| ( ( ! [SY3252: $i] :
( ( hBOOL @ ( hAPP @ SY3252 @ SV656 ) )
| ! [SY3253: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3252 @ SV79 @ ( tc_fun @ SY3253 @ tc_bool ) ) @ SV656 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2871]) ).
thf(3428,plain,
! [SV1139: $i,SV657: $i,SV80: $i] :
( ( ! [SY3928: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV80 @ SV657 @ ( tc_fun @ SV1139 @ tc_bool ) ) @ SY3928 ) )
| ~ ( hBOOL @ ( hAPP @ SV657 @ SY3928 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2872]) ).
thf(3429,plain,
! [SV1140: $i,SV658: $i,SV81: $i] :
( ( ! [SY3929: $i] :
( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV81 @ SV658 @ ( tc_fun @ SV1140 @ tc_bool ) ) @ SY3929 ) )
| ~ ( hBOOL @ ( hAPP @ SV81 @ SY3929 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2873]) ).
thf(3430,plain,
! [SV84: $i] :
( ( ( class_Lattices_Oboolean__algebra @ SV84 )
= $false )
| ( ( ! [SY2034: $i,SY2035: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SY2034 @ SV84 )
!= ( c_HOL_Ouminus__class_Ouminus @ SY2035 @ SV84 ) )
| ( SY2034 = SY2035 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2876]) ).
thf(3431,plain,
! [SV85: $i] :
( ( ( class_OrderedGroup_Ogroup__add @ SV85 )
= $false )
| ( ( ! [SY2036: $i,SY2037: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SY2036 @ SV85 )
!= ( c_HOL_Ouminus__class_Ouminus @ SY2037 @ SV85 ) )
| ( SY2036 = SY2037 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2877]) ).
thf(3432,plain,
! [SV1141: $i,SV661: $i,SV86: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ SV86 @ ( tc_fun @ SV661 @ tc_bool ) )
!= ( c_HOL_Ouminus__class_Ouminus @ SV1141 @ ( tc_fun @ SV661 @ tc_bool ) ) )
| ( SV86 = SV1141 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2878]) ).
thf(3433,plain,
! [SV662: $i,SV87: $i] :
( ( ( SV87 = SV662 )
= $true )
| ( ( ! [SY3259: $i] :
( ~ ( c_lessequals @ SV662 @ SV87 @ ( tc_fun @ SY3259 @ tc_bool ) )
| ~ ( c_lessequals @ SV87 @ SV662 @ ( tc_fun @ SY3259 @ tc_bool ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2879]) ).
thf(3434,plain,
! [SV663: $i,SV88: $i] :
( ( ( SV88 = SV663 )
= $true )
| ( ( ! [SY3260: $i] :
( ~ ( c_lessequals @ SV663 @ SV88 @ ( tc_fun @ SY3260 @ tc_bool ) )
| ~ ( c_lessequals @ SV88 @ SV663 @ ( tc_fun @ SY3260 @ tc_bool ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2880]) ).
thf(3435,plain,
! [SV89: $i] :
( ( ( class_Orderings_Oorder @ SV89 )
= $false )
| ( ( ! [SY2044: $i,SY2045: $i] :
( ( SY2044 = SY2045 )
| ~ ( c_lessequals @ SY2045 @ SY2044 @ SV89 )
| ~ ( c_lessequals @ SY2044 @ SY2045 @ SV89 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2881]) ).
thf(3436,plain,
! [SV90: $i] :
( ( ( class_Orderings_Oorder @ SV90 )
= $false )
| ( ( ! [SY2046: $i,SY2047: $i] :
( ( SY2046 = SY2047 )
| ~ ( c_lessequals @ SY2047 @ SY2046 @ SV90 )
| ~ ( c_lessequals @ SY2046 @ SY2047 @ SV90 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2882]) ).
thf(3437,plain,
! [SV91: $i] :
( ( ( class_Orderings_Oorder @ SV91 )
= $false )
| ( ( ! [SY2048: $i,SY2049: $i] :
( ( SY2048 = SY2049 )
| ~ ( c_lessequals @ SY2048 @ SY2049 @ SV91 )
| ~ ( c_lessequals @ SY2049 @ SY2048 @ SV91 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2883]) ).
thf(3438,plain,
! [SV92: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV92 )
= $false )
| ( ( ! [SY2050: $i,SY2051: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2050 @ SY2051 @ SV92 )
= SY2050 )
| ~ ( c_lessequals @ SY2051 @ SY2050 @ SV92 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2884]) ).
thf(3439,plain,
! [SV93: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV93 )
= $false )
| ( ( ! [SY2052: $i,SY2053: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2052 @ SY2053 @ SV93 )
!= SY2053 )
| ( c_lessequals @ SY2052 @ SY2053 @ SV93 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2885]) ).
thf(3440,plain,
! [SV94: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV94 )
= $false )
| ( ( ! [SY2054: $i,SY2055: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2054 @ SY2055 @ SV94 )
= SY2055 )
| ~ ( c_lessequals @ SY2054 @ SY2055 @ SV94 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2886]) ).
thf(3441,plain,
! [SV1142: $i,SV664: $i,SV95: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV95 @ SV664 @ ( tc_fun @ SV1142 @ tc_bool ) )
= SV664 )
| ~ ( c_lessequals @ SV95 @ SV664 @ ( tc_fun @ SV1142 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2887]) ).
thf(3442,plain,
! [SV1143: $i,SV665: $i,SV96: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV96 @ SV665 @ ( tc_fun @ SV1143 @ tc_bool ) )
= SV96 )
| ~ ( c_lessequals @ SV665 @ SV96 @ ( tc_fun @ SV1143 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2888]) ).
thf(3443,plain,
! [SV1144: $i,SV666: $i,SV97: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV97 @ SV666 @ ( tc_fun @ SV1144 @ tc_bool ) )
!= SV666 )
| ( c_lessequals @ SV97 @ SV666 @ ( tc_fun @ SV1144 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2889]) ).
thf(3444,plain,
! [SV1145: $i,SV667: $i,SV98: $i] :
( ( ( c_List_Oset @ ( c_List_Oappend @ SV98 @ SV667 @ SV1145 ) @ SV1145 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_List_Oset @ SV98 @ SV1145 ) @ ( c_List_Oset @ SV667 @ SV1145 ) @ ( tc_fun @ SV1145 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2890]) ).
thf(3445,plain,
! [SV1146: $i,SV669: $i,SV100: $i] :
( ( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV100 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV669 ) @ SV1146 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV669 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV100 ) @ SV1146 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2892]) ).
thf(3446,plain,
! [SV670: $i,SV101: $i] :
( ( ( ( c_Message_Omsg_OHash @ SV101 )
!= ( c_Message_Omsg_OHash @ SV670 ) )
= $true )
| ( ( SV101 = SV670 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2893]) ).
thf(3447,plain,
! [SV1147: $i,SV671: $i,SV102: $i] :
( ( ! [SY3930: $i,SY3931: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV102 @ SV671 @ SV1147 @ SY3930 ) @ ( c_Set_Oimage @ SV102 @ SY3931 @ SV1147 @ SY3930 ) @ ( tc_fun @ SY3930 @ tc_bool ) )
= ( c_Set_Oimage @ SV102 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV671 @ SY3931 @ ( tc_fun @ SV1147 @ tc_bool ) ) @ SV1147 @ SY3930 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2894]) ).
thf(3448,plain,
! [SV1148: $i,SV672: $i,SV103: $i] :
( ( ! [SY3932: $i,SY3933: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV103 @ SV672 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3932 @ SY3933 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( tc_fun @ SV1148 @ tc_bool ) )
| ~ ( c_lessequals @ SV672 @ SY3933 @ ( tc_fun @ SV1148 @ tc_bool ) )
| ~ ( c_lessequals @ SV103 @ SY3932 @ ( tc_fun @ SV1148 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2895]) ).
thf(3449,plain,
! [SV105: $i] :
( ( ( class_Orderings_Otop @ SV105 )
= $false )
| ( ( ! [SY2077: $i] : ( c_lessequals @ SY2077 @ ( c_Orderings_Otop__class_Otop @ SV105 ) @ SV105 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2897]) ).
thf(3450,plain,
! [SV1149: $i,SV674: $i,SV106: $i] :
( ( ! [SY3934: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ SV106 @ SV674 @ SV1149 ) @ SY3934 @ ( tc_fun @ SV1149 @ tc_bool ) )
| ~ ( c_lessequals @ SV674 @ SY3934 @ ( tc_fun @ SV1149 @ tc_bool ) )
| ~ ( c_in @ SV106 @ SY3934 @ SV1149 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2898]) ).
thf(3451,plain,
! [SV675: $i,SV108: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV108 ) )
= $true )
| ( ( ! [SY3274: $i] :
( ( c_lessequals @ SV675 @ SY3274 @ SV108 )
| ! [SY3275: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3275 @ SV675 @ SV108 ) @ SY3274 @ SV108 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2899]) ).
thf(3452,plain,
! [SV676: $i,SV109: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV109 ) )
= $true )
| ( ( ! [SY3276: $i] :
( ( c_lessequals @ SV676 @ SY3276 @ SV109 )
| ! [SY3277: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV676 @ SY3277 @ SV109 ) @ SY3276 @ SV109 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2900]) ).
thf(3453,plain,
! [SV677: $i,SV110: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV110 ) )
= $true )
| ( ( ! [SY3278: $i,SY3279: $i] :
( ( c_lessequals @ SV677 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3278 @ SY3279 @ SV110 ) @ SV110 )
| ~ ( c_lessequals @ SV677 @ SY3279 @ SV110 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2901]) ).
thf(3454,plain,
! [SV678: $i,SV111: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV111 ) )
= $true )
| ( ( ! [SY3280: $i] :
( ! [SY3281: $i] : ( c_lessequals @ SV678 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3280 @ SY3281 @ SV111 ) @ SV111 )
| ~ ( c_lessequals @ SV678 @ SY3280 @ SV111 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2902]) ).
thf(3455,plain,
! [SV679: $i,SV112: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV112 ) )
= $true )
| ( ( ! [SY3282: $i] :
( ( c_lessequals @ SV679 @ SY3282 @ SV112 )
| ! [SY3283: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3283 @ SV679 @ SV112 ) @ SY3282 @ SV112 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2903]) ).
thf(3456,plain,
! [SV680: $i,SV113: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV113 ) )
= $true )
| ( ( ! [SY3284: $i] :
( ( c_lessequals @ SV680 @ SY3284 @ SV113 )
| ! [SY3285: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV680 @ SY3285 @ SV113 ) @ SY3284 @ SV113 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2904]) ).
thf(3457,plain,
! [SV1150: $i,SV681: $i,SV114: $i] :
( ( ( c_lessequals @ SV114 @ SV681 @ ( tc_fun @ SV1150 @ tc_bool ) )
| ! [SY3935: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV114 @ SY3935 @ ( tc_fun @ SV1150 @ tc_bool ) ) @ SV681 @ ( tc_fun @ SV1150 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2905]) ).
thf(3458,plain,
! [SV1151: $i,SV682: $i,SV115: $i] :
( ( ( c_lessequals @ SV115 @ SV682 @ ( tc_fun @ SV1151 @ tc_bool ) )
| ! [SY3936: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3936 @ SV115 @ ( tc_fun @ SV1151 @ tc_bool ) ) @ SV682 @ ( tc_fun @ SV1151 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2906]) ).
thf(3459,plain,
! [SV683: $i,SV116: $i] :
( ( ( ~ ( class_Orderings_Oorder @ SV116 ) )
= $true )
| ( ( ! [SY3290: $i] :
( ( c_lessequals @ SV683 @ SY3290 @ SV116 )
| ! [SY3291: $i] :
( ~ ( c_lessequals @ SV683 @ SY3291 @ SV116 )
| ~ ( c_lessequals @ SY3291 @ SY3290 @ SV116 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2907]) ).
thf(3460,plain,
! [SV684: $i,SV117: $i] :
( ( ( ~ ( class_Orderings_Opreorder @ SV117 ) )
= $true )
| ( ( ! [SY3292: $i] :
( ( c_lessequals @ SV684 @ SY3292 @ SV117 )
| ! [SY3293: $i] :
( ~ ( c_lessequals @ SY3293 @ SY3292 @ SV117 )
| ~ ( c_lessequals @ SV684 @ SY3293 @ SV117 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2908]) ).
thf(3461,plain,
! [SV1152: $i,SV687: $i,SV120: $i] :
( ( ( c_lessequals @ SV120 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
| ! [SY3937: $i] :
( ~ ( c_lessequals @ SY3937 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
| ~ ( c_lessequals @ SV120 @ SY3937 @ ( tc_fun @ SV1152 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2911]) ).
thf(3462,plain,
! [SV688: $i,SV121: $i] :
( ( ( hBOOL @ ( hAPP @ SV121 @ SV688 ) )
= $true )
| ( ( ! [SY3296: $i] :
( ~ ( hBOOL @ ( hAPP @ SY3296 @ SV688 ) )
| ! [SY2118: $i] :
~ ( c_lessequals @ SY3296 @ SV121 @ ( tc_fun @ SY2118 @ tc_bool ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2912]) ).
thf(3463,plain,
! [SV122: $i] :
( ( ( class_Orderings_Oorder @ SV122 )
= $false )
| ( ( ! [SY2119: $i] : ( c_lessequals @ SY2119 @ SY2119 @ SV122 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2913]) ).
thf(3464,plain,
! [SV123: $i] :
( ( ( class_Orderings_Opreorder @ SV123 )
= $false )
| ( ( ! [SY2120: $i] : ( c_lessequals @ SY2120 @ SY2120 @ SV123 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2914]) ).
thf(3465,plain,
! [SV689: $i,SV124: $i] :
( ( ( hBOOL @ ( hAPP @ SV124 @ SV689 ) )
= $true )
| ( ( ! [SY3298: $i] :
( ! [SY2123: $i] :
~ ( c_lessequals @ SY3298 @ SV124 @ ( tc_fun @ SY2123 @ tc_bool ) )
| ~ ( hBOOL @ ( hAPP @ SY3298 @ SV689 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2915]) ).
thf(3466,plain,
! [SV1153: $i,SV691: $i,SV126: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV126 @ SV691 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV1153 ) @ ( c_Message_Oparts @ SV691 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV126 @ SV1153 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2917]) ).
thf(3467,plain,
! [SV1154: $i,SV692: $i,SV127: $i] :
( ( ! [SY3938: $i,SY3939: $i] :
( ( c_lessequals @ ( c_Set_Oimage @ SV127 @ SV692 @ SV1154 @ SY3938 ) @ ( c_Set_Oimage @ SV127 @ SY3939 @ SV1154 @ SY3938 ) @ ( tc_fun @ SY3938 @ tc_bool ) )
| ~ ( c_lessequals @ SV692 @ SY3939 @ ( tc_fun @ SV1154 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2918]) ).
thf(3468,plain,
! [SV1155: $i,SV693: $i,SV128: $i] :
( ( ~ ( c_lessequals @ SV128 @ SV693 @ ( tc_fun @ SV1155 @ tc_bool ) )
| ! [SY3940: $i,SY3941: $i] : ( c_lessequals @ ( c_Set_Oimage @ SY3940 @ SV128 @ SV1155 @ SY3941 ) @ ( c_Set_Oimage @ SY3940 @ SV693 @ SV1155 @ SY3941 ) @ ( tc_fun @ SY3941 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2919]) ).
thf(3469,plain,
! [SV1156: $i,SV694: $i,SV129: $i] :
( ( ! [SY3942: $i] :
( ( c_lessequals @ ( c_Set_Oinsert @ SV129 @ SV694 @ SV1156 ) @ ( c_Set_Oinsert @ SV129 @ SY3942 @ SV1156 ) @ ( tc_fun @ SV1156 @ tc_bool ) )
| ~ ( c_lessequals @ SV694 @ SY3942 @ ( tc_fun @ SV1156 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2920]) ).
thf(3470,plain,
! [SV1157: $i,SV695: $i,SV130: $i] :
( ( ! [SY3943: $i,SY3944: $i] :
( ( c_Set_Oimage @ SV130 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV695 @ SV1157 @ ( tc_fun @ SY3943 @ tc_bool ) ) @ SY3943 @ SY3944 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV130 @ SV695 @ SY3943 @ SY3944 ) @ ( c_Set_Oimage @ SV130 @ SV1157 @ SY3943 @ SY3944 ) @ ( tc_fun @ SY3944 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2921]) ).
thf(3471,plain,
! [SV1158: $i,SV697: $i,SV132: $i] :
( ( ! [SY3945: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV132 @ SV697 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1158 @ SY3945 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV697 ) @ ( c_Message_Oanalz @ SY3945 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV132 ) @ ( c_Message_Oanalz @ SV1158 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2923]) ).
thf(3472,plain,
! [SV133: $i] :
( ( ( class_Orderings_Olinorder @ SV133 )
= $false )
| ( ( ! [SY2146: $i,SY2147: $i] :
( ( c_lessequals @ SY2146 @ SY2147 @ SV133 )
| ( c_lessequals @ SY2147 @ SY2146 @ SV133 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2924]) ).
thf(3473,plain,
! [SV1159: $i,SV698: $i,SV134: $i] :
( ( ! [SY3946: $i] :
( ( c_in @ ( hAPP @ SV134 @ SV698 ) @ SV1159 @ SY3946 )
| ! [SY3947: $i,SY3948: $i] :
( ~ ( c_in @ SV698 @ SY3947 @ SY3948 )
| ~ ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SY3947 @ SY3948 @ SY3946 ) @ SV1159 @ ( tc_fun @ SY3946 @ tc_bool ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2925]) ).
thf(3474,plain,
! [SV1160: $i,SV699: $i,SV135: $i] :
( ( c_lessequals @ ( c_List_Oset @ SV135 @ SV699 ) @ ( c_List_Oset @ ( c_List_Olist_OCons @ SV1160 @ SV135 @ SV699 ) @ SV699 ) @ ( tc_fun @ SV699 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2926]) ).
thf(3475,plain,
! [SV700: $i,SV136: $i] :
( ( ( c_in @ SV136 @ ( c_Message_Oparts @ SV700 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3319: $i] :
( ( c_in @ SV136 @ ( c_Message_Oparts @ SY3319 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV136 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3319 @ SV700 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2927]) ).
thf(3476,plain,
! [SV701: $i,SV137: $i] :
( ( ( c_in @ SV137 @ ( c_Message_Oparts @ SV701 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3320: $i] :
( ~ ( c_lessequals @ SY3320 @ ( c_Message_Oparts @ SV701 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV137 @ ( c_Message_Oparts @ SY3320 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2928]) ).
thf(3477,plain,
! [SV1161: $i,SV702: $i,SV138: $i] :
( ( ( c_in @ SV138 @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV702 @ SV1161 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV138 @ ( c_Message_Oanalz @ SV1161 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2929]) ).
thf(3478,plain,
! [SV703: $i,SV139: $i] :
( ( ( c_in @ SV139 @ ( c_Message_Oanalz @ SV703 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3322: $i] :
( ~ ( c_lessequals @ SY3322 @ ( c_Message_Oanalz @ SV703 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV139 @ ( c_Message_Oanalz @ SY3322 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2930]) ).
thf(3479,plain,
! [SV704: $i,SV141: $i] :
( ( ( c_in @ SV141 @ ( c_Message_Osynth @ SV704 ) @ tc_Message_Omsg )
= $true )
| ( ( ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ SV704 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ ( c_Message_Osynth @ SV704 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2931]) ).
thf(3480,plain,
! [SV705: $i,SV142: $i] :
( ( ( c_in @ SV142 @ ( c_Message_Osynth @ SV705 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3323: $i] :
( ~ ( c_lessequals @ SY3323 @ ( c_Message_Osynth @ SV705 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV142 @ ( c_Message_Osynth @ SY3323 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2932]) ).
thf(3481,plain,
! [SV706: $i,SV143: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ SV143 ) @ ( c_Message_Osynth @ SV706 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV143 @ ( c_Message_Osynth @ SV706 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2933]) ).
thf(3482,plain,
! [SV707: $i,SV145: $i] :
( ( ( c_lessequals @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV145 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV707 ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV145 @ SV707 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2934]) ).
thf(3483,plain,
! [SV1162: $i,SV709: $i,SV148: $i] :
( ( c_lessequals @ ( c_Event_Oknows @ SV148 @ SV709 ) @ ( c_Event_Oknows @ SV148 @ ( c_List_Olist_OCons @ SV1162 @ SV709 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2936]) ).
thf(3484,plain,
! [SV1163: $i,SV712: $i,SV151: $i] :
( ( ! [SY3949: $i] :
( ( c_lessequals @ SV151 @ ( c_Set_Oinsert @ SV712 @ SV1163 @ SY3949 ) @ ( tc_fun @ SY3949 @ tc_bool ) )
| ~ ( c_lessequals @ SV151 @ SV1163 @ ( tc_fun @ SY3949 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2939]) ).
thf(3485,plain,
! [SV1164: $i,SV713: $i,SV152: $i] :
( ( ( c_lessequals @ SV152 @ SV713 @ ( tc_fun @ SV1164 @ tc_bool ) )
| ! [SY3950: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ SY3950 @ SV152 @ SV1164 ) @ SV713 @ ( tc_fun @ SV1164 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2940]) ).
thf(3486,plain,
! [SV154: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV154 )
= $false )
| ( ( ! [SY2180: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2180 @ SY2180 @ SV154 )
= SY2180 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2942]) ).
thf(3487,plain,
! [SV717: $i,SV157: $i] :
( ( ( c_lessequals @ ( c_Message_Osynth @ SV157 ) @ ( c_Message_Osynth @ SV717 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV157 @ ( c_Message_Osynth @ SV717 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2945]) ).
thf(3488,plain,
! [SV718: $i,SV158: $i] :
( ( ( c_lessequals @ SV158 @ ( c_Message_Osynth @ SV718 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ ( c_Message_Osynth @ SV158 ) @ ( c_Message_Osynth @ SV718 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2946]) ).
thf(3489,plain,
! [SV1165: $i,SV719: $i,SV159: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV159 @ SV719 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1165 ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1165 @ SV719 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV159 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1165 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2947]) ).
thf(3490,plain,
! [SV1166: $i,SV720: $i,SV160: $i] :
( ( ! [SY3951: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV160 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV720 @ SV1166 @ ( tc_fun @ SY3951 @ tc_bool ) ) @ ( tc_fun @ SY3951 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV720 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV160 @ SV1166 @ ( tc_fun @ SY3951 @ tc_bool ) ) @ ( tc_fun @ SY3951 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2948]) ).
thf(3491,plain,
! [SV1167: $i,SV721: $i,SV161: $i] :
( ( ! [SY3952: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV161 @ SV721 @ ( tc_fun @ SV1167 @ tc_bool ) ) @ SY3952 @ ( tc_fun @ SV1167 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV161 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV721 @ SY3952 @ ( tc_fun @ SV1167 @ tc_bool ) ) @ ( tc_fun @ SV1167 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2949]) ).
thf(3492,plain,
! [SV722: $i,SV162: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV162 ) )
= $true )
| ( ( ! [SY3334: $i,SY3335: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ SY3334 @ SV162 ) @ SY3335 @ SV162 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3334 @ SY3335 @ SV162 ) @ SV162 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2950]) ).
thf(3493,plain,
! [SV723: $i,SV163: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV163 ) )
= $true )
| ( ( ! [SY3336: $i,SY3337: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3336 @ SY3337 @ SV163 ) @ SV163 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY3336 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ SY3337 @ SV163 ) @ SV163 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2951]) ).
thf(3494,plain,
! [SV1168: $i,SV724: $i,SV164: $i] :
( ( ! [SY3953: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV164 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV724 @ SV1168 @ ( tc_fun @ SY3953 @ tc_bool ) ) @ ( tc_fun @ SY3953 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV164 @ SV724 @ ( tc_fun @ SY3953 @ tc_bool ) ) @ SV1168 @ ( tc_fun @ SY3953 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2952]) ).
thf(3495,plain,
! [SV725: $i,SV165: $i] :
( ( ( ~ ( class_Lattices_Olattice @ SV165 ) )
= $true )
| ( ( ! [SY3340: $i,SY3341: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3340 @ SY3341 @ SV165 ) @ SV165 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY3340 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ SY3341 @ SV165 ) @ SV165 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2953]) ).
thf(3496,plain,
! [SV726: $i,SV166: $i] :
( ( ( ~ ( class_Lattices_Olattice @ SV166 ) )
= $true )
| ( ( ! [SY3342: $i,SY3343: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ SY3342 @ SV166 ) @ SY3343 @ SV166 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3342 @ SY3343 @ SV166 ) @ SV166 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2954]) ).
thf(3497,plain,
! [SV727: $i,SV167: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV167 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ SV727 @ tc_nat @ tc_nat ) @ tc_nat )
= $true )
| ( ( ~ ( c_in @ SV167 @ SV727 @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2955]) ).
thf(3498,plain,
! [SV728: $i,SV168: $i] :
( ( ( c_in @ SV168 @ SV728 @ tc_nat )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ SV168 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ SV728 @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2956]) ).
thf(3499,plain,
! [SV1169: $i,SV729: $i,SV169: $i] :
( ( ! [SY3954: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV169 @ SV729 @ ( tc_fun @ SV1169 @ tc_bool ) ) @ SY3954 @ ( tc_fun @ SV1169 @ tc_bool ) )
| ~ ( c_lessequals @ SV729 @ SY3954 @ ( tc_fun @ SV1169 @ tc_bool ) )
| ~ ( c_lessequals @ SV169 @ SY3954 @ ( tc_fun @ SV1169 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2957]) ).
thf(3500,plain,
! [SV1170: $i,SV730: $i,SV170: $i] :
( ( c_lessequals @ SV170 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV730 @ SV170 @ ( tc_fun @ SV1170 @ tc_bool ) ) @ ( tc_fun @ SV1170 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2958]) ).
thf(3501,plain,
! [SV1171: $i,SV731: $i,SV171: $i] :
( ( c_lessequals @ SV171 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV171 @ SV731 @ ( tc_fun @ SV1171 @ tc_bool ) ) @ ( tc_fun @ SV1171 @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2959]) ).
thf(3502,plain,
! [SV1172: $i,SV732: $i,SV172: $i] :
( ( ! [SY3955: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV172 @ SV732 @ ( tc_fun @ SV1172 @ tc_bool ) ) @ SY3955 @ ( tc_fun @ SV1172 @ tc_bool ) )
| ~ ( c_lessequals @ SV732 @ SY3955 @ ( tc_fun @ SV1172 @ tc_bool ) )
| ~ ( c_lessequals @ SV172 @ SY3955 @ ( tc_fun @ SV1172 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2960]) ).
thf(3503,plain,
! [SV733: $i,SV173: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV173 ) )
= $true )
| ( ( ! [SY3350: $i,SY3351: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV733 @ SY3350 @ SV173 ) @ SY3351 @ SV173 )
| ~ ( c_lessequals @ SY3350 @ SY3351 @ SV173 )
| ~ ( c_lessequals @ SV733 @ SY3351 @ SV173 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2961]) ).
thf(3504,plain,
! [SV174: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV174 )
= $false )
| ( ( ! [SY2223: $i,SY2224: $i] : ( c_lessequals @ SY2223 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2223 @ SY2224 @ SV174 ) @ SV174 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2962]) ).
thf(3505,plain,
! [SV175: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV175 )
= $false )
| ( ( ! [SY2225: $i,SY2226: $i] : ( c_lessequals @ SY2225 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2226 @ SY2225 @ SV175 ) @ SV175 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2963]) ).
thf(3506,plain,
! [SV734: $i,SV176: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV176 ) )
= $true )
| ( ( ! [SY3352: $i,SY3353: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV734 @ SY3352 @ SV176 ) @ SY3353 @ SV176 )
| ~ ( c_lessequals @ SY3352 @ SY3353 @ SV176 )
| ~ ( c_lessequals @ SV734 @ SY3353 @ SV176 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2964]) ).
thf(3507,plain,
! [SV735: $i,SV177: $i] :
( ( ( ~ ( class_Lattices_Oupper__semilattice @ SV177 ) )
= $true )
| ( ( ! [SY3354: $i,SY3355: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV735 @ SY3354 @ SV177 ) @ SY3355 @ SV177 )
| ~ ( c_lessequals @ SY3354 @ SY3355 @ SV177 )
| ~ ( c_lessequals @ SV735 @ SY3355 @ SV177 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2965]) ).
thf(3508,plain,
! [SV178: $i] :
( ( ( class_Lattices_Olattice @ SV178 )
= $false )
| ( ( ! [SY2233: $i,SY2234: $i] : ( c_lessequals @ SY2233 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2234 @ SY2233 @ SV178 ) @ SV178 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2966]) ).
thf(3509,plain,
! [SV179: $i] :
( ( ( class_Lattices_Olattice @ SV179 )
= $false )
| ( ( ! [SY2235: $i,SY2236: $i] : ( c_lessequals @ SY2235 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2235 @ SY2236 @ SV179 ) @ SV179 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2967]) ).
thf(3510,plain,
! [SV182: $i] :
( ( ( class_Lattices_Oboolean__algebra @ SV182 )
= $false )
| ( ( ! [SY2239: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ SY2239 @ SV182 ) @ SY2239 @ SV182 )
= ( c_Orderings_Otop__class_Otop @ SV182 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2970]) ).
thf(3511,plain,
! [SV183: $i] :
( ( ( class_Lattices_Oboolean__algebra @ SV183 )
= $false )
| ( ( ! [SY2240: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2240 @ ( c_HOL_Ouminus__class_Ouminus @ SY2240 @ SV183 ) @ SV183 )
= ( c_Orderings_Otop__class_Otop @ SV183 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2971]) ).
thf(3512,plain,
! [SV1173: $i,SV739: $i,SV185: $i] :
( ( ( c_in @ SV185 @ SV739 @ SV1173 )
| ! [SY3956: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ SV185 @ SY3956 @ SV1173 ) @ SV739 @ ( tc_fun @ SV1173 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2973]) ).
thf(3513,plain,
! [SV1174: $i,SV740: $i,SV186: $i] :
( ( ! [SY3957: $i] :
( ( c_lessequals @ SV186 @ ( c_Set_Oinsert @ SV740 @ SV1174 @ SY3957 ) @ ( tc_fun @ SY3957 @ tc_bool ) )
| ~ ( c_lessequals @ SV186 @ SV1174 @ ( tc_fun @ SY3957 @ tc_bool ) )
| ( c_in @ SV740 @ SV186 @ SY3957 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2974]) ).
thf(3514,plain,
! [SV1175: $i,SV741: $i,SV187: $i] :
( ( ( c_lessequals @ SV187 @ SV741 @ ( tc_fun @ SV1175 @ tc_bool ) )
| ! [SY3958: $i] :
( ( c_in @ SY3958 @ SV187 @ SV1175 )
| ~ ( c_lessequals @ SV187 @ ( c_Set_Oinsert @ SY3958 @ SV741 @ SV1175 ) @ ( tc_fun @ SV1175 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2975]) ).
thf(3515,plain,
! [SV1176: $i,SV742: $i,SV188: $i] :
( ( ! [SY3959: $i] :
( ( c_lessequals @ SV188 @ ( c_Set_Oinsert @ SV742 @ SV1176 @ SY3959 ) @ ( tc_fun @ SY3959 @ tc_bool ) )
| ~ ( c_lessequals @ SV188 @ SV1176 @ ( tc_fun @ SY3959 @ tc_bool ) )
| ( c_in @ SV742 @ SV188 @ SY3959 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2976]) ).
thf(3516,plain,
! [SV1177: $i,SV743: $i,SV189: $i] :
( ( ( c_lessequals @ SV189 @ SV743 @ ( tc_fun @ SV1177 @ tc_bool ) )
| ! [SY3960: $i] :
( ~ ( c_lessequals @ SV189 @ ( c_Set_Oinsert @ SY3960 @ SV743 @ SV1177 ) @ ( tc_fun @ SV1177 @ tc_bool ) )
| ( c_in @ SY3960 @ SV189 @ SV1177 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2977]) ).
thf(3517,plain,
! [SV1178: $i,SV744: $i,SV190: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV190 @ SV744 @ ( tc_fun @ SV1178 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV744 @ SV190 @ ( tc_fun @ SV1178 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2978]) ).
thf(3518,plain,
! [SV191: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV191 )
= $false )
| ( ( ! [SY2259: $i,SY2260: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2259 @ SY2260 @ SV191 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2260 @ SY2259 @ SV191 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2979]) ).
thf(3519,plain,
! [SV192: $i] :
( ( ( class_Lattices_Olattice @ SV192 )
= $false )
| ( ( ! [SY2261: $i,SY2262: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2261 @ SY2262 @ SV192 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2262 @ SY2261 @ SV192 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2980]) ).
thf(3520,plain,
! [SV1179: $i,SV745: $i,SV193: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV193 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV193 @ SV745 @ ( tc_fun @ SV1179 @ tc_bool ) ) @ ( tc_fun @ SV1179 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV193 @ SV745 @ ( tc_fun @ SV1179 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2981]) ).
thf(3521,plain,
! [SV194: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV194 )
= $false )
| ( ( ! [SY2265: $i,SY2266: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2265 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2265 @ SY2266 @ SV194 ) @ SV194 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2265 @ SY2266 @ SV194 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2982]) ).
thf(3522,plain,
! [SV195: $i] :
( ( ( class_Lattices_Olattice @ SV195 )
= $false )
| ( ( ! [SY2267: $i,SY2268: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SY2267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY2267 @ SY2268 @ SV195 ) @ SV195 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY2267 @ SY2268 @ SV195 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2983]) ).
thf(3523,plain,
! [SV747: $i,SV197: $i] :
( ( ( c_lessequals @ ( c_Message_OkeysFor @ SV197 ) @ ( c_Message_OkeysFor @ SV747 ) @ ( tc_fun @ tc_nat @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV197 @ SV747 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[2985]) ).
thf(3524,plain,
! [SV1180: $i,SV748: $i,SV198: $i] :
( ( ( c_Message_OkeysFor @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV198 @ SV748 ) @ SV1180 @ tc_Message_Omsg ) )
= ( c_Message_OkeysFor @ SV1180 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2986]) ).
thf(3525,plain,
! [SV200: $i] :
( ( ( class_OrderedGroup_Ogroup__add @ SV200 )
= $false )
| ( ( ! [SY2274: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2274 @ SV200 ) @ SV200 )
= SY2274 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2988]) ).
thf(3526,plain,
! [SV201: $i] :
( ( ( class_Lattices_Oboolean__algebra @ SV201 )
= $false )
| ( ( ! [SY2275: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2275 @ SV201 ) @ SV201 )
= SY2275 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2989]) ).
thf(3527,plain,
! [SV202: $i] :
( ( ( class_OrderedGroup_Ogroup__add @ SV202 )
= $false )
| ( ( ! [SY2276: $i] :
( SY2276
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2276 @ SV202 ) @ SV202 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2990]) ).
thf(3528,plain,
! [SV203: $i] :
( ( ( class_OrderedGroup_Ogroup__add @ SV203 )
= $false )
| ( ( ! [SY2277: $i] :
( SY2277
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2277 @ SV203 ) @ SV203 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2991]) ).
thf(3529,plain,
! [SV204: $i] :
( ( ( class_OrderedGroup_Ogroup__add @ SV204 )
= $false )
| ( ( ! [SY2278: $i] :
( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SY2278 @ SV204 ) @ SV204 )
= SY2278 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2992]) ).
thf(3530,plain,
! [SV1181: $i,SV750: $i,SV205: $i] :
( ( ~ ( class_HOL_Oord @ SV205 )
| ! [SY3961: $i] :
( ( c_lessequals @ ( hAPP @ SV750 @ SV1181 ) @ ( hAPP @ SY3961 @ SV1181 ) @ SV205 )
| ! [SY3371: $i] :
~ ( c_lessequals @ SV750 @ SY3961 @ ( tc_fun @ SY3371 @ SV205 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2993]) ).
thf(3531,plain,
! [SV206: $i] :
( ( ( class_OrderedGroup_Opordered__ab__group__add @ SV206 )
= $false )
| ( ( ! [SY2283: $i,SY2284: $i] :
( ( c_lessequals @ SY2283 @ ( c_HOL_Ouminus__class_Ouminus @ SY2284 @ SV206 ) @ SV206 )
| ~ ( c_lessequals @ SY2284 @ ( c_HOL_Ouminus__class_Ouminus @ SY2283 @ SV206 ) @ SV206 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2994]) ).
thf(3532,plain,
! [SV207: $i] :
( ( ( class_OrderedGroup_Opordered__ab__group__add @ SV207 )
= $false )
| ( ( ! [SY2285: $i,SY2286: $i] :
( ( c_lessequals @ SY2285 @ ( c_HOL_Ouminus__class_Ouminus @ SY2286 @ SV207 ) @ SV207 )
| ~ ( c_lessequals @ SY2286 @ ( c_HOL_Ouminus__class_Ouminus @ SY2285 @ SV207 ) @ SV207 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2995]) ).
thf(3533,plain,
! [SV208: $i] :
( ( ( class_OrderedGroup_Opordered__ab__group__add @ SV208 )
= $false )
| ( ( ! [SY2287: $i,SY2288: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2287 @ SV208 ) @ SY2288 @ SV208 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2288 @ SV208 ) @ SY2287 @ SV208 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2996]) ).
thf(3534,plain,
! [SV209: $i] :
( ( ( class_OrderedGroup_Opordered__ab__group__add @ SV209 )
= $false )
| ( ( ! [SY2289: $i,SY2290: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2289 @ SV209 ) @ SY2290 @ SV209 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY2290 @ SV209 ) @ SY2289 @ SV209 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[2997]) ).
thf(3535,plain,
! [SV1182: $i,SV751: $i,SV210: $i] :
( ( ( c_in @ SV210 @ SV751 @ SV1182 )
| ! [SY3963: $i] :
( ~ ( c_in @ SV210 @ SY3963 @ SV1182 )
| ~ ( c_lessequals @ SY3963 @ SV751 @ ( tc_fun @ SV1182 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2998]) ).
thf(3536,plain,
! [SV1183: $i,SV752: $i,SV211: $i] :
( ( ( c_in @ SV211 @ SV752 @ SV1183 )
| ! [SY3964: $i] :
( ~ ( c_lessequals @ SY3964 @ SV752 @ ( tc_fun @ SV1183 @ tc_bool ) )
| ~ ( c_in @ SV211 @ SY3964 @ SV1183 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[2999]) ).
thf(3537,plain,
! [SV1184: $i,SV753: $i,SV212: $i] :
( ( ( c_in @ SV212 @ SV753 @ SV1184 )
| ! [SY3965: $i] :
( ~ ( c_in @ SV212 @ SY3965 @ SV1184 )
| ~ ( c_lessequals @ SY3965 @ SV753 @ ( tc_fun @ SV1184 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3000]) ).
thf(3538,plain,
! [SV1185: $i,SV754: $i,SV213: $i] :
( ( ( c_in @ SV213 @ SV754 @ SV1185 )
| ! [SY3966: $i] :
( ~ ( c_in @ SV213 @ SY3966 @ SV1185 )
| ~ ( c_lessequals @ SY3966 @ SV754 @ ( tc_fun @ SV1185 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3001]) ).
thf(3539,plain,
! [SV1186: $i,SV755: $i,SV214: $i] :
( ( ! [SY3967: $i] :
( ( c_in @ SV214 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV755 @ SV1186 @ ( tc_fun @ SY3967 @ tc_bool ) ) @ SY3967 )
| ~ ( c_in @ SV214 @ SV755 @ SY3967 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3002]) ).
thf(3540,plain,
! [SV1187: $i,SV756: $i,SV215: $i] :
( ( ! [SY3968: $i] :
( ( c_in @ SV215 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV756 @ SV1187 @ ( tc_fun @ SY3968 @ tc_bool ) ) @ SY3968 )
| ~ ( c_in @ SV215 @ SV1187 @ SY3968 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3003]) ).
thf(3541,plain,
! [SV1188: $i,SV757: $i,SV216: $i] :
( ( ( c_in @ SV216 @ SV757 @ SV1188 )
| ! [SY3969: $i] :
( ( c_in @ SV216 @ SY3969 @ SV1188 )
| ~ ( c_in @ SV216 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3969 @ SV757 @ ( tc_fun @ SV1188 @ tc_bool ) ) @ SV1188 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3004]) ).
thf(3542,plain,
! [SV1189: $i,SV758: $i,SV217: $i] :
( ( ( c_in @ SV217 @ ( c_HOL_Ouminus__class_Ouminus @ SV758 @ ( tc_fun @ SV1189 @ tc_bool ) ) @ SV1189 )
| ( c_in @ SV217 @ SV758 @ SV1189 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3005]) ).
thf(3543,plain,
! [SV1190: $i,SV759: $i,SV218: $i] :
( ( ~ ( c_in @ SV218 @ SV759 @ SV1190 )
| ~ ( c_in @ SV218 @ ( c_HOL_Ouminus__class_Ouminus @ SV759 @ ( tc_fun @ SV1190 @ tc_bool ) ) @ SV1190 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3006]) ).
thf(3544,plain,
! [SV1191: $i,SV760: $i,SV219: $i] :
( ( ( c_Message_Omsg_OMPair @ SV219 @ SV760 )
!= ( c_Message_Omsg_OHash @ SV1191 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3007]) ).
thf(3545,plain,
! [SV1192: $i,SV761: $i,SV220: $i] :
( ( ( c_Message_Omsg_OHash @ SV220 )
!= ( c_Message_Omsg_OMPair @ SV761 @ SV1192 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3008]) ).
thf(3546,plain,
! [SV763: $i,SV223: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ SV223 ) @ ( c_Message_Oparts @ SV763 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV223 @ SV763 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3010]) ).
thf(3547,plain,
! [SV764: $i,SV224: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ SV224 ) @ ( c_Message_Oparts @ SV764 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV224 @ ( c_Message_Oparts @ SV764 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3011]) ).
thf(3548,plain,
! [SV765: $i,SV225: $i] :
( ( ( c_lessequals @ SV225 @ ( c_Message_Oparts @ SV765 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ ( c_Message_Oparts @ SV225 ) @ ( c_Message_Oparts @ SV765 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3012]) ).
thf(3549,plain,
! [SV1193: $i,SV766: $i,SV226: $i] :
( ( ( c_Message_Omsg_OHash @ SV226 )
!= ( c_Message_Omsg_OCrypt @ SV766 @ SV1193 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3013]) ).
thf(3550,plain,
! [SV1194: $i,SV767: $i,SV227: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV227 @ SV767 )
!= ( c_Message_Omsg_OHash @ SV1194 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3014]) ).
thf(3551,plain,
! [SV768: $i,SV228: $i] :
( ( ( c_Message_Omsg_OHash @ SV228 )
= ( hAPP @ c_Message_Omsg_OKey @ SV768 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3015]) ).
thf(3552,plain,
! [SV769: $i,SV229: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV229 )
= ( c_Message_Omsg_OHash @ SV769 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3016]) ).
thf(3553,plain,
! [SV770: $i,SV230: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ SV230 ) @ ( c_Message_Oanalz @ SV770 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV230 @ SV770 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3017]) ).
thf(3554,plain,
! [SV771: $i,SV231: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ SV231 ) @ ( c_Message_Oanalz @ SV771 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV231 @ ( c_Message_Oanalz @ SV771 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3018]) ).
thf(3555,plain,
! [SV772: $i,SV232: $i] :
( ( ( c_lessequals @ SV232 @ ( c_Message_Oanalz @ SV772 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ ( c_Message_Oanalz @ SV232 ) @ ( c_Message_Oanalz @ SV772 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3019]) ).
thf(3556,plain,
! [SV774: $i,SV235: $i] :
( ( ( ( c_Message_Oanalz @ SV235 )
!= ( c_Message_Oanalz @ SV774 ) )
= $true )
| ( ( ! [SY3392: $i,SY3393: $i] :
( ( ( c_Message_Oanalz @ SY3392 )
!= ( c_Message_Oanalz @ SY3393 ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3392 @ SV235 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3393 @ SV774 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3021]) ).
thf(3557,plain,
! [SV775: $i,SV236: $i] :
( ( ( c_Message_Omsg_OHash @ SV236 )
= ( c_Message_Omsg_OAgent @ SV775 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3022]) ).
thf(3558,plain,
! [SV776: $i,SV237: $i] :
( ( ( c_Message_Omsg_OAgent @ SV237 )
= ( c_Message_Omsg_OHash @ SV776 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3023]) ).
thf(3559,plain,
! [SV777: $i,SV238: $i] :
( ( ( c_Message_Omsg_ONonce @ SV238 )
= ( c_Message_Omsg_OHash @ SV777 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3024]) ).
thf(3560,plain,
! [SV778: $i,SV239: $i] :
( ( ( c_Message_Omsg_OHash @ SV239 )
= ( c_Message_Omsg_ONonce @ SV778 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3025]) ).
thf(3561,plain,
! [SV779: $i,SV241: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV241 @ SV779 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV779 ) ) @ ( c_Message_Oparts @ SV779 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_in @ SV241 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV779 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3026]) ).
thf(3562,plain,
! [SV1195: $i,SV780: $i,SV242: $i] :
( ( ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV780 @ SV1195 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ! [SY3970: $i] :
( ~ ( c_in @ SY3970 @ ( c_Message_Oparts @ SV1195 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3970 @ SV780 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3027]) ).
thf(3563,plain,
! [SV781: $i,SV243: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV243 @ SV781 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SV781 ) )
= $true )
| ( ( ! [SY3396: $i] :
( ~ ( c_lessequals @ SY3396 @ SV781 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV243 @ ( c_Message_Oanalz @ SY3396 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3028]) ).
thf(3564,plain,
! [SV1196: $i,SV782: $i,SV244: $i] :
( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV244 @ SV782 ) @ SV1196 @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV244 @ SV782 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV782 @ SV1196 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3029]) ).
thf(3565,plain,
! [SV783: $i,SV245: $i] :
( ( c_in @ ( c_Message_Omsg_OHash @ SV245 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV783 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3030]) ).
thf(3566,plain,
! [SV1197: $i,SV784: $i,SV246: $i] :
( ( ! [SY3971: $i,SY3972: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV246 @ SV784 ) @ ( c_Event_Oknows @ SV246 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV1197 @ SY3971 @ SY3972 ) @ SV784 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3031]) ).
thf(3567,plain,
! [SV785: $i,SV247: $i] :
( ( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ c_Public_Okeymode_OEncryption ) @ SV247 ) )
= ( hAPP @ c_Public_OshrK @ SV785 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3032]) ).
thf(3568,plain,
! [SV1198: $i,SV786: $i,SV248: $i] :
( ( ! [SY3973: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV248 @ SV786 ) @ ( c_Event_Oknows @ SV248 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV1198 @ SY3973 ) @ SV786 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3033]) ).
thf(3569,plain,
! [SV1199: $i,SV787: $i,SV249: $i] :
( ( ! [SY3974: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV249 @ SV787 ) @ ( c_Event_Oknows @ SV249 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV1199 @ SY3974 ) @ SV787 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3034]) ).
thf(3570,plain,
! [SV1200: $i,SV788: $i,SV250: $i] :
( ( ! [SY3975: $i,SY3976: $i] :
( ~ ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY3977: $i,SY3978: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SY3975 @ ( c_Message_Omsg_OMPair @ SY3976 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3977 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY3978 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3035]) ).
thf(3571,plain,
! [SV789: $i,SV251: $i] :
( ( ( ! [SY3410: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV251 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV789 @ SY3410 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY3410 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV251 ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( ~ ( c_in @ SV789 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3036]) ).
thf(3572,plain,
! [SV1201: $i,SV790: $i,SV252: $i] :
( ( ! [SY3979: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV252 @ SV790 @ SV1201 ) @ SY3979 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1201 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3979 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3037]) ).
thf(3573,plain,
! [SV1202: $i,SV253: $i] :
( ( ( ! [SY3980: $i] :
( ( c_Event_Oknows @ SV253 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV253 @ SV1202 ) @ SY3980 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1202 @ ( c_Event_Oknows @ SV253 @ SY3980 ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( SV253 = c_Message_Oagent_OSpy )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3038]) ).
thf(3574,plain,
! [SV1203: $i,SV791: $i,SV254: $i] :
( ( ! [SY3981: $i] :
( ~ ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY3982: $i,SY3983: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SY3981 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY3982 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY3983 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3039]) ).
thf(3575,plain,
! [SV792: $i,SV255: $i] :
( ( ( ~ ( c_in @ SV255 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV792 ) ) ) @ tc_nat ) )
= $true )
| ( ( ~ ( c_in @ SV792 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ SV255 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV255 ) @ ( c_Event_Oused @ SV792 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3040]) ).
thf(3576,plain,
! [SV1204: $i,SV793: $i,SV256: $i] :
( ( ( c_lessequals @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SV793 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV793 @ SV1204 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SV793 ) @ SV1204 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV256 ) ) @ ( c_Message_Oanalz @ SV1204 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3041]) ).
thf(3577,plain,
! [SV1205: $i,SV794: $i,SV257: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SV794 ) @ SV1205 @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SV794 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV794 @ SV1205 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV257 ) ) @ ( c_Message_Oanalz @ SV1205 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3042]) ).
thf(3578,plain,
! [SV795: $i,SV258: $i] :
( ( ( c_in @ SV258 @ SV795 @ tc_Message_Oagent )
= $true )
| ( ( ! [SY3419: $i,SY3420: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SY3419 ) @ SV258 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY3420 ) @ SV795 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3043]) ).
thf(3579,plain,
! [SV1206: $i,SV796: $i,SV259: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV259 ) @ SV796 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV259 ) @ SV1206 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV796 @ SV1206 @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3044]) ).
thf(3580,plain,
! [SV1207: $i,SV797: $i,SV260: $i] :
( ( ~ ( c_in @ ( hAPP @ c_Public_OshrK @ SV260 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV797 ) @ SV1207 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3045]) ).
thf(3581,plain,
! [SV1208: $i,SV798: $i,SV261: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV798 @ tc_nat @ tc_Message_Omsg ) @ SV1208 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ SV1208 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV261 @ SV798 @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3046]) ).
thf(3582,plain,
! [SV1209: $i,SV799: $i,SV262: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV799 @ tc_nat @ tc_Message_Omsg ) @ SV1209 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV262 @ SV799 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ SV1209 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3047]) ).
thf(3583,plain,
! [SV1210: $i,SV800: $i,SV263: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SV1210 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV263 @ SV800 @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SV1210 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3048]) ).
thf(3584,plain,
! [SV801: $i,SV264: $i] :
( ( ( ! [SY3426: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV264 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV801 @ tc_nat @ tc_Message_Omsg ) @ SY3426 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV264 @ SV801 @ tc_nat )
| ~ ( c_in @ SV264 @ SV801 @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3049]) ).
thf(3585,plain,
! [SV802: $i,SV265: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SV802 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3427: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3427 @ SV802 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ! [SY3428: $i] :
( ~ ( c_lessequals @ SY3428 @ SV802 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SY3427 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3428 ) ) @ tc_Message_Omsg ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3050]) ).
thf(3586,plain,
! [SV1211: $i,SV803: $i,SV266: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV803 @ SV1211 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SV1211 ) @ tc_Message_Omsg )
| ! [SY3984: $i] :
( ~ ( c_lessequals @ SY3984 @ SV1211 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV803 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3984 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3051]) ).
thf(3587,plain,
! [SV804: $i,SV267: $i] :
( ( ( c_in @ SV267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ ( c_Message_Oparts @ SV804 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3431: $i] :
( ~ ( c_in @ SY3431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV267 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3431 @ SV804 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3052]) ).
thf(3588,plain,
! [SV1212: $i,SV805: $i,SV268: $i] :
( ( ! [SY3985: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV268 @ SV805 @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV268 @ SV805 @ SV1212 @ SY3985 ) ) @ ( c_List_Oset @ SY3985 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ SV268 @ SV805 @ SV1212 @ SY3985 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3053]) ).
thf(3589,plain,
! [SV806: $i,SV270: $i] :
( ( ( SV270 = SV806 )
= $true )
| ( ( ! [SY3434: $i,SY3435: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV270 ) @ SY3434 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV806 ) @ SY3435 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3055]) ).
thf(3590,plain,
! [SV1213: $i,SV807: $i,SV271: $i] :
( ( ! [SY3986: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV271 ) @ SV807 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1213 ) @ SY3986 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3056]) ).
thf(3591,plain,
! [SV1214: $i,SV808: $i,SV272: $i] :
( ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV272 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV808 @ SV1214 ) @ SV272 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3057]) ).
thf(3592,plain,
! [SV1215: $i,SV273: $i] :
( ( ( ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SV1215 ) @ SV273 ) @ ( c_List_Oset @ SV1215 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SV1215 ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ SV273 @ SV1215 ) @ SV273 ) @ ( c_List_Oset @ SV1215 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV273 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1215 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV273 @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3058]) ).
thf(3593,plain,
! [SV1216: $i,SV809: $i,SV274: $i] :
( ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV274 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV809 @ SV1216 ) @ SV274 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3059]) ).
thf(3594,plain,
! [SV810: $i,SV275: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3440: $i] :
( ( c_in @ SV275 @ SY3440 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SY3440 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ SY3440 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV810 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3060]) ).
thf(3595,plain,
! [SV1217: $i,SV811: $i,SV276: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV276 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV811 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1217 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV276 @ SV811 @ tc_nat )
| ~ ( c_lessequals @ SV811 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV1217 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3061]) ).
thf(3596,plain,
! [SV1218: $i,SV812: $i,SV277: $i] :
( ( ! [SY3987: $i] : ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV277 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV812 @ SV1218 @ SY3987 ) @ SV277 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3062]) ).
thf(3597,plain,
! [SV813: $i,SV278: $i] :
( ( ( c_in @ SV278 @ ( c_Message_OkeysFor @ SV813 ) @ tc_nat )
= $true )
| ( ( ~ ( c_in @ SV278 @ c_Message_OsymKeys @ tc_nat )
| ! [SY3444: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV278 @ SY3444 ) @ SV813 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3063]) ).
thf(3598,plain,
! [SV1219: $i,SV814: $i,SV280: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV814 @ tc_nat @ tc_Message_Omsg ) @ SV1219 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3064]) ).
thf(3599,plain,
! [SV1220: $i,SV815: $i,SV281: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SV1220 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ SV1220 ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SV1220 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3065]) ).
thf(3600,plain,
! [SV816: $i,SV282: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV282 ) @ ( c_Message_OkeysFor @ SV816 ) @ tc_nat )
= $true )
| ( ( ! [SY3447: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV282 @ SY3447 ) @ SV816 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3066]) ).
thf(3601,plain,
! [SV817: $i,SV283: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV283 ) ) @ ( c_Message_Oparts @ SV817 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3448: $i] :
( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3448 @ SV817 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
| ! [SY3449: $i] :
( ~ ( c_in @ SY3449 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV817 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3449 @ SY3448 @ tc_Message_Omsg ) ) ) @ tc_nat ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3067]) ).
thf(3602,plain,
! [SV818: $i,SV284: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV284 ) @ SV818 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV284 ) @ ( c_Message_Oanalz @ SV818 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV284 @ ( c_Message_OkeysFor @ ( c_Message_Oanalz @ SV818 ) ) @ tc_nat )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3068]) ).
thf(3603,plain,
! [SV1221: $i,SV819: $i,SV285: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Oanalz @ SV1221 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1221 ) ) @ tc_Message_Omsg )
| ( c_in @ SV285 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1221 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3069]) ).
thf(3604,plain,
! [SV1222: $i,SV820: $i,SV286: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1222 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Oanalz @ SV1222 ) @ tc_Message_Omsg )
| ( c_in @ SV286 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1222 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3070]) ).
thf(3605,plain,
! [SV1223: $i,SV821: $i,SV287: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV821 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ SV821 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV1223 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3071]) ).
thf(3606,plain,
! [SV1224: $i,SV822: $i,SV288: $i] :
( ( ! [SY3988: $i,SY3989: $i] :
( ( hBOOL @ ( hAPP @ SV288 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ ( c_List_Oappend @ SV822 @ ( c_List_Olist_OCons @ SV1224 @ SY3988 @ SY3989 ) @ SY3989 ) @ SY3989 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ SV822 @ SY3989 ) @ ( c_List_Oset @ SV822 @ SY3989 ) @ SY3989 )
| ~ ( hBOOL @ ( hAPP @ SV288 @ SV1224 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3072]) ).
thf(3607,plain,
! [SV1225: $i,SV823: $i,SV289: $i] :
( ( ! [SY3990: $i,SY3991: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SY3990 @ SY3991 ) @ SY3991 ) @ SY3991 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SY3990 @ SY3991 ) @ SY3991 ) @ SY3991 ) @ SY3991 )
| ( hBOOL @ ( hAPP @ SV289 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ SY3990 @ SY3991 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV289 @ SV1225 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3073]) ).
thf(3608,plain,
! [SV1226: $i,SV824: $i,SV290: $i] :
( ( ! [SY3992: $i,SY3993: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SY3992 @ SY3993 ) @ SY3993 ) @ SY3993 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SY3992 @ SY3993 ) @ SY3993 ) @ SY3993 ) @ SY3993 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ SV824 @ SY3993 ) @ ( c_List_Oset @ SV824 @ SY3993 ) @ SY3993 )
| ~ ( hBOOL @ ( hAPP @ SV290 @ SV1226 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3074]) ).
thf(3609,plain,
! [SV1227: $i,SV825: $i,SV291: $i] :
( ( ! [SY3994: $i,SY3995: $i] :
( ( hBOOL @ ( hAPP @ SV291 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ ( c_List_Oappend @ SV825 @ ( c_List_Olist_OCons @ SV1227 @ SY3994 @ SY3995 ) @ SY3995 ) @ SY3995 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ SY3994 @ SY3995 ) @ ( c_List_Oset @ SY3994 @ SY3995 ) @ SY3995 )
| ~ ( hBOOL @ ( hAPP @ SV291 @ SV1227 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3075]) ).
thf(3610,plain,
! [SV1228: $i,SV826: $i,SV292: $i] :
( ( ! [SY3996: $i,SY3997: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SY3996 @ SY3997 ) @ SY3997 ) @ SY3997 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SY3996 @ SY3997 ) @ SY3997 ) @ SY3997 ) @ SY3997 )
| ( hBOOL @ ( hAPP @ SV292 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ SV826 @ SY3997 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV292 @ SV1228 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3076]) ).
thf(3611,plain,
! [SV1229: $i,SV827: $i,SV293: $i] :
( ( ! [SY3998: $i,SY3999: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SY3998 @ SY3999 ) @ SY3999 ) @ SY3999 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SY3998 @ SY3999 ) @ SY3999 ) @ SY3999 ) @ SY3999 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ SY3998 @ SY3999 ) @ ( c_List_Oset @ SY3998 @ SY3999 ) @ SY3999 )
| ~ ( hBOOL @ ( hAPP @ SV293 @ SV1229 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3077]) ).
thf(3612,plain,
! [SV1230: $i,SV828: $i,SV294: $i] :
( ( ( c_Event_Oknows @ SV294 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV294 @ SV828 ) @ SV1230 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV828 @ ( c_Event_Oknows @ SV294 @ SV1230 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3078]) ).
thf(3613,plain,
! [SV1231: $i,SV829: $i,SV295: $i] :
( ( ! [SY4000: $i] :
( ( c_Event_Oknows @ SV295 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV295 @ SV829 @ SV1231 ) @ SY4000 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1231 @ ( c_Event_Oknows @ SV295 @ SY4000 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3079]) ).
thf(3614,plain,
! [SV830: $i,SV296: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV296 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV830 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV296 @ SV830 @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3080]) ).
thf(3615,plain,
! [SV831: $i,SV297: $i] :
( ( ( c_in @ SV297 @ SV831 @ tc_nat )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV297 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV831 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3081]) ).
thf(3616,plain,
! [SV832: $i,SV298: $i] :
( ( ( ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV298 @ SV832 @ tc_Message_Omsg ) ) )
= ( c_Message_Osynth @ ( c_Message_Oanalz @ SV832 ) ) )
= $true )
| ( ( ~ ( c_in @ SV298 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV832 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3082]) ).
thf(3617,plain,
! [SV1232: $i,SV833: $i,SV299: $i] :
( ( ! [SY4001: $i] :
( ( c_in @ SV299 @ ( c_List_Oset @ ( c_List_Oappend @ SV833 @ ( c_List_Olist_OCons @ SV299 @ SV1232 @ SY4001 ) @ SY4001 ) @ SY4001 ) @ SY4001 )
| ( c_in @ SV299 @ ( c_List_Oset @ SV833 @ SY4001 ) @ SY4001 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3083]) ).
thf(3618,plain,
! [SV1233: $i,SV834: $i,SV300: $i] :
( ( ! [SY4002: $i] :
( ( c_in @ SV300 @ ( c_List_Oset @ ( c_List_Oappend @ SV834 @ ( c_List_Olist_OCons @ SV300 @ SV1233 @ SY4002 ) @ SY4002 ) @ SY4002 ) @ SY4002 )
| ( c_in @ SV300 @ ( c_List_Oset @ SV1233 @ SY4002 ) @ SY4002 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3084]) ).
thf(3619,plain,
! [SV1234: $i,SV835: $i,SV301: $i] :
( ( ! [SY4003: $i] : ( c_in @ SV301 @ ( c_List_Oset @ ( c_List_Oappend @ SV835 @ ( c_List_Olist_OCons @ SV301 @ SV1234 @ SY4003 ) @ SY4003 ) @ SY4003 ) @ SY4003 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3085]) ).
thf(3620,plain,
! [SV1235: $i,SV836: $i,SV302: $i] :
( ( ! [SY4004: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV302 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV836 @ SV1235 @ SY4004 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SY4004 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV302 ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3086]) ).
thf(3621,plain,
! [SV1236: $i,SV837: $i,SV303: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV837 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) ) @ tc_Message_Omsg )
| ( c_in @ SV837 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV1236 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3087]) ).
thf(3622,plain,
! [SV838: $i,SV304: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3483: $i] :
( ( SV304 = SY3483 )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SY3483 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ( c_in @ SY3483 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV838 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3088]) ).
thf(3623,plain,
! [SV305: $i,SV1237: $i] :
( ( ( ~ ( c_in @ SV1237 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1237 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV305 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3089]) ).
thf(3624,plain,
! [SV1238: $i,SV840: $i,SV307: $i] :
( ( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV307 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV840 ) @ SV1238 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV840 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV307 ) @ SV1238 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3091]) ).
thf(3625,plain,
! [SV1239: $i,SV841: $i,SV308: $i] :
( ( ! [SY4005: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV308 @ SV841 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV1239 ) @ SY4005 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV1239 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV308 @ SV841 ) @ SY4005 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3092]) ).
thf(3626,plain,
! [SV1240: $i,SV843: $i,SV310: $i] :
( ( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV310 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV843 ) @ SV1240 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV843 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV310 ) @ SV1240 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3094]) ).
thf(3627,plain,
! [SV1241: $i,SV845: $i,SV312: $i] :
( ( ! [SY4006: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV312 @ SV845 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV1241 ) @ SY4006 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV1241 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV312 @ SV845 ) @ SY4006 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3096]) ).
thf(3628,plain,
! [SV1242: $i,SV847: $i,SV314: $i] :
( ( ! [SY4007: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV314 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV847 @ SV1242 ) @ SY4007 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV847 @ SV1242 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV314 ) @ SY4007 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3098]) ).
thf(3629,plain,
! [SV848: $i,SV315: $i] :
( ( ( c_in @ SV315 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3492: $i] :
( ~ ( c_in @ SY3492 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV315 @ ( c_Message_Osynth @ ( c_Set_Oinsert @ SY3492 @ SV848 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3099]) ).
thf(3630,plain,
! [SV850: $i,SV317: $i] :
( ( ( c_in @ SV317 @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3493: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3493 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY3493 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3493 @ SV317 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3101]) ).
thf(3631,plain,
! [SV1243: $i,SV851: $i,SV318: $i] :
( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV318 @ SV851 ) @ SV1243 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV318 @ SV851 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV318 @ ( c_Set_Oinsert @ SV851 @ SV1243 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3102]) ).
thf(3632,plain,
! [SV1244: $i,SV852: $i,SV319: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV319 @ SV852 ) @ SV1244 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV319 @ SV852 ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV852 @ SV1244 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3103]) ).
thf(3633,plain,
! [SV1245: $i,SV853: $i,SV320: $i] :
( ( ! [SY4008: $i] :
( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV320 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV853 @ SV1245 ) @ SY4008 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV853 @ SV1245 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV320 ) @ SY4008 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3104]) ).
thf(3634,plain,
! [SV854: $i,SV321: $i] :
( ( ( c_in @ SV321 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3498: $i] :
( ~ ( c_in @ SY3498 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV321 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3498 @ SV854 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3105]) ).
thf(3635,plain,
! [SV855: $i,SV322: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV322 @ SV855 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SV855 ) )
= $true )
| ( ( ~ ( c_in @ SV322 @ ( c_Message_Oanalz @ SV855 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3106]) ).
thf(3636,plain,
! [SV1246: $i,SV856: $i,SV323: $i] :
( ( ( c_in @ SV323 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV856 @ SV1246 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV323 @ ( c_Message_Oanalz @ SV1246 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3107]) ).
thf(3637,plain,
! [SV1247: $i,SV857: $i,SV324: $i] :
( ( ! [SY4009: $i,SY4010: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SV857 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV1247 @ SY4009 ) @ SY4010 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV1247 @ SY4009 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SV857 ) @ SY4010 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3108]) ).
thf(3638,plain,
! [SV1248: $i,SV858: $i,SV325: $i] :
( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV325 @ SV858 ) @ SV1248 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV325 @ SV858 ) @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV325 @ ( c_Set_Oinsert @ SV858 @ SV1248 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3109]) ).
thf(3639,plain,
! [SV1249: $i,SV859: $i,SV326: $i] :
( ( ( c_in @ SV326 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV859 @ SV1249 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV326 @ ( c_Message_Oparts @ SV1249 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3110]) ).
thf(3640,plain,
! [SV860: $i,SV327: $i] :
( ( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV327 @ SV860 @ tc_Message_Omsg ) )
= ( c_Message_Oparts @ SV860 ) )
= $true )
| ( ( ~ ( c_in @ SV327 @ ( c_Message_Oparts @ SV860 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3111]) ).
thf(3641,plain,
! [SV1250: $i,SV861: $i,SV328: $i] :
( ( ( c_List_Oset @ ( c_List_Olist_OCons @ SV328 @ SV861 @ SV1250 ) @ SV1250 )
= ( c_Set_Oinsert @ SV328 @ ( c_List_Oset @ SV861 @ SV1250 ) @ SV1250 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3112]) ).
thf(3642,plain,
! [SV1251: $i,SV862: $i,SV329: $i] :
( ( ! [SY4011: $i,SY4012: $i] :
( ( ( c_List_Oappend @ SV329 @ ( c_List_Olist_OCons @ SV862 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 )
!= ( c_List_Oappend @ SY4011 @ ( c_List_Olist_OCons @ SY4012 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 ) )
| ( SV862 = SY4012 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3113]) ).
thf(3643,plain,
! [SV1252: $i,SV863: $i,SV330: $i] :
( ( ! [SY4013: $i] :
( ! [SY4014: $i] :
( ( c_List_Oappend @ SV330 @ ( c_List_Olist_OCons @ SV863 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 )
!= ( c_List_Oappend @ SY4013 @ ( c_List_Olist_OCons @ SY4014 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 ) )
| ( SV330 = SY4013 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3114]) ).
thf(3644,plain,
! [SV1253: $i,SV864: $i,SV331: $i] :
( ( ( c_List_Oappend @ ( c_List_Olist_ONil @ SV331 ) @ ( c_List_Olist_OCons @ SV864 @ SV1253 @ SV331 ) @ SV331 )
= ( c_List_Olist_OCons @ SV864 @ SV1253 @ SV331 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3115]) ).
thf(3645,plain,
! [SV1254: $i,SV865: $i,SV332: $i] :
( ( ( c_List_Olist_OCons @ SV332 @ SV865 @ SV1254 )
= ( c_List_Oappend @ ( c_List_Olist_ONil @ SV1254 ) @ ( c_List_Olist_OCons @ SV332 @ SV865 @ SV1254 ) @ SV1254 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3116]) ).
thf(3646,plain,
! [SV1255: $i,SV866: $i,SV333: $i] :
( ( ! [SY4015: $i] : ( c_in @ ( hAPP @ SV333 @ SV866 ) @ ( c_Set_Oimage @ SV333 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV1255 @ tc_bool ) ) @ SV1255 @ SY4015 ) @ SY4015 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3117]) ).
thf(3647,plain,
! [SV1256: $i,SV867: $i,SV334: $i] :
( ( ! [SY4016: $i] :
( ! [SY4017: $i] :
( ( c_Set_Oinsert @ ( hAPP @ SV334 @ SV867 ) @ ( c_Set_Oimage @ SV334 @ SV1256 @ SY4016 @ SY4017 ) @ SY4017 )
= ( c_Set_Oimage @ SV334 @ SV1256 @ SY4016 @ SY4017 ) )
| ~ ( c_in @ SV867 @ SV1256 @ SY4016 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3118]) ).
thf(3648,plain,
! [SV1257: $i,SV868: $i,SV335: $i] :
( ( ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV335 ) @ SV868 ) ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV1257 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3119]) ).
thf(3649,plain,
! [SV1258: $i,SV869: $i,SV337: $i] :
( ( ! [SY4018: $i] :
( ( c_List_Oappend @ SV337 @ ( c_List_Oappend @ SV869 @ SV1258 @ SY4018 ) @ SY4018 )
= ( c_List_Oappend @ ( c_List_Oappend @ SV337 @ SV869 @ SY4018 ) @ SV1258 @ SY4018 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3120]) ).
thf(3650,plain,
! [SV1259: $i,SV870: $i,SV338: $i] :
( ( ! [SY4019: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ SV338 @ SV870 @ SV1259 ) @ SY4019 @ SV1259 )
= ( c_List_Oappend @ SV338 @ ( c_List_Oappend @ SV870 @ SY4019 @ SV1259 ) @ SV1259 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3121]) ).
thf(3651,plain,
! [SV1260: $i,SV871: $i,SV339: $i] :
( ( ! [SY4020: $i] :
( ( c_List_Oappend @ SV339 @ ( c_List_Oappend @ SV871 @ SV1260 @ SY4020 ) @ SY4020 )
= ( c_List_Oappend @ ( c_List_Oappend @ SV339 @ SV871 @ SY4020 ) @ SV1260 @ SY4020 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3122]) ).
thf(3652,plain,
! [SV1261: $i,SV872: $i,SV340: $i] :
( ( ! [SY4021: $i] :
( ( c_List_Oappend @ ( c_List_Oappend @ SV340 @ SV872 @ SV1261 ) @ SY4021 @ SV1261 )
= ( c_List_Oappend @ SV340 @ ( c_List_Oappend @ SV872 @ SY4021 @ SV1261 ) @ SV1261 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3123]) ).
thf(3653,plain,
! [SV873: $i,SV341: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV341 ) @ SV873 ) ) @ c_Message_OsymKeys @ tc_nat )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3124]) ).
thf(3654,plain,
! [SV1262: $i,SV874: $i,SV342: $i] :
( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV342 @ SV874 @ SV1262 ) @ SV342 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3125]) ).
thf(3655,plain,
! [SV1263: $i,SV875: $i,SV343: $i] :
( ( ! [SY4022: $i,SY4023: $i] :
( ( c_Set_Oimage @ SV343 @ ( c_Set_Oinsert @ SV875 @ SV1263 @ SY4022 ) @ SY4022 @ SY4023 )
= ( c_Set_Oinsert @ ( hAPP @ SV343 @ SV875 ) @ ( c_Set_Oimage @ SV343 @ SV1263 @ SY4022 @ SY4023 ) @ SY4023 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3126]) ).
thf(3656,plain,
! [SV345: $i] :
( ( ( c_in @ SV345 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( ( hAPP @ c_Message_OinvKey @ SV345 )
= SV345 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3128]) ).
thf(3657,plain,
! [SV346: $i] :
( ( ( c_in @ SV346 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV346 ) @ c_Message_OsymKeys @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3129]) ).
thf(3658,plain,
! [SV347: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV347 ) @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ SV347 @ c_Message_OsymKeys @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3130]) ).
thf(3659,plain,
! [SV877: $i,SV348: $i] :
( ( ( hBOOL @ ( hAPP @ SV348 @ SV877 ) )
= $true )
| ( ( ! [SY3532: $i] :
( ( SY3532 = SV877 )
| ! [SY3533: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SY3532 @ SV348 @ SY3533 ) @ SV877 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3131]) ).
thf(3660,plain,
! [SV1264: $i,SV878: $i,SV349: $i] :
( ( ( c_Set_Oinsert @ SV349 @ ( c_Set_Oinsert @ SV349 @ SV878 @ SV1264 ) @ SV1264 )
= ( c_Set_Oinsert @ SV349 @ SV878 @ SV1264 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3132]) ).
thf(3661,plain,
! [SV1265: $i,SV879: $i,SV350: $i] :
( ( ! [SY4024: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV350 ) @ SV879 ) ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1265 ) @ SY4024 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3133]) ).
thf(3662,plain,
! [SV1266: $i,SV880: $i,SV351: $i] :
( ( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV351 ) @ SV880 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV351 ) @ SV1266 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV880 @ SV1266 @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3134]) ).
thf(3663,plain,
! [SV881: $i,SV352: $i] :
( ( ( c_in @ SV352 @ SV881 @ tc_Message_Oagent )
= $true )
| ( ( ! [SY3538: $i,SY3539: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SY3538 ) @ SV352 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY3539 ) @ SV881 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3135]) ).
thf(3664,plain,
! [SV882: $i,SV353: $i] :
( ( ( SV353 = SV882 )
= $true )
| ( ( ! [SY3540: $i,SY3541: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV353 ) @ SY3540 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV882 ) @ SY3541 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3136]) ).
thf(3665,plain,
! [SV1267: $i,SV883: $i,SV354: $i] :
( ( ! [SY4025: $i] :
( ( ( c_List_Oappend @ SV354 @ SV883 @ SV1267 )
!= ( c_List_Oappend @ SV354 @ SY4025 @ SV1267 ) )
| ( SV883 = SY4025 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3137]) ).
thf(3666,plain,
! [SV1268: $i,SV884: $i,SV355: $i] :
( ( ! [SY4026: $i] :
( ( ( c_List_Oappend @ SV355 @ SV884 @ SV1268 )
!= ( c_List_Oappend @ SY4026 @ SV884 @ SV1268 ) )
| ( SV355 = SY4026 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3138]) ).
thf(3667,plain,
! [SV1269: $i,SV885: $i,SV356: $i] :
( ( ~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV356 ) @ SV885 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV1269 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3139]) ).
thf(3668,plain,
! [SV1270: $i,SV886: $i,SV357: $i] :
( ( ! [SY4027: $i] :
( ( c_Set_Oinsert @ SV357 @ ( c_Set_Oinsert @ SV886 @ SV1270 @ SY4027 ) @ SY4027 )
= ( c_Set_Oinsert @ SV886 @ ( c_Set_Oinsert @ SV357 @ SV1270 @ SY4027 ) @ SY4027 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3140]) ).
thf(3669,plain,
! [SV1271: $i,SV887: $i,SV358: $i] :
( ( ! [SY4028: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ SV358 @ SV887 @ SV1271 ) @ SY4028 @ SV1271 )
= ( c_List_Olist_OCons @ SV358 @ ( c_List_Oappend @ SV887 @ SY4028 @ SV1271 ) @ SV1271 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3141]) ).
thf(3670,plain,
! [SV1272: $i,SV888: $i,SV359: $i] :
( ( ! [SY4029: $i] :
( ( c_List_Oappend @ ( c_List_Olist_OCons @ SV359 @ SV888 @ SV1272 ) @ SY4029 @ SV1272 )
= ( c_List_Olist_OCons @ SV359 @ ( c_List_Oappend @ SV888 @ SY4029 @ SV1272 ) @ SV1272 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3142]) ).
thf(3671,plain,
! [SV1273: $i,SV889: $i,SV360: $i] :
( ( ! [SY4030: $i] :
( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV360 @ SV889 @ SV1273 ) @ SY4030 ) )
| ~ ( hBOOL @ ( hAPP @ SV889 @ SY4030 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3143]) ).
thf(3672,plain,
! [SV1274: $i,SV890: $i,SV361: $i] :
( ( ! [SY4031: $i] :
( ( c_List_Olist_OCons @ SV361 @ ( c_List_Oappend @ SV890 @ SV1274 @ SY4031 ) @ SY4031 )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ SV361 @ SV890 @ SY4031 ) @ SV1274 @ SY4031 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3144]) ).
thf(3673,plain,
! [SV1275: $i,SV891: $i,SV362: $i] :
( ( ! [SY4032: $i] :
( ( c_List_Olist_OCons @ SV362 @ ( c_List_Oappend @ SV891 @ SV1275 @ SY4032 ) @ SY4032 )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ SV362 @ SV891 @ SY4032 ) @ SV1275 @ SY4032 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3145]) ).
thf(3674,plain,
! [SV892: $i,SV363: $i] :
( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV363 ) @ SV892 ) @ c_Message_OsymKeys @ tc_nat )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3146]) ).
thf(3675,plain,
! [SV1276: $i,SV893: $i,SV364: $i] :
( ( ! [SY4033: $i,SY4034: $i] :
( ( c_Set_Oinsert @ ( hAPP @ SV364 @ SV893 ) @ ( c_Set_Oimage @ SV364 @ SV1276 @ SY4033 @ SY4034 ) @ SY4034 )
= ( c_Set_Oimage @ SV364 @ ( c_Set_Oinsert @ SV893 @ SV1276 @ SY4033 ) @ SY4033 @ SY4034 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3147]) ).
thf(3676,plain,
! [SV1277: $i,SV894: $i,SV365: $i] :
( ( ~ ( c_in @ ( hAPP @ c_Public_OshrK @ SV365 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV894 ) @ SV1277 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3148]) ).
thf(3677,plain,
! [SV366: $i] :
( ( ( c_in @ SV366 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( ! [SY2630: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV366 ) @ ( c_Event_Oused @ SY2630 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3149]) ).
thf(3678,plain,
! [SV1278: $i,SV895: $i,SV367: $i] :
( ( ! [SY4035: $i] :
( ( c_in @ SV367 @ ( c_Set_Oinsert @ SV895 @ SV1278 @ SY4035 ) @ SY4035 )
| ~ ( c_in @ SV367 @ SV1278 @ SY4035 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3150]) ).
thf(3679,plain,
! [SV1279: $i,SV896: $i,SV368: $i] :
( ( ! [SY4036: $i] :
( ( c_in @ SV368 @ ( c_Set_Oinsert @ SV896 @ SV1279 @ SY4036 ) @ SY4036 )
| ~ ( c_in @ SV368 @ SV1279 @ SY4036 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3151]) ).
thf(3680,plain,
! [SV1280: $i,SV897: $i,SV369: $i] :
( ( ( c_in @ SV369 @ SV897 @ SV1280 )
| ! [SY4037: $i] :
( ( SV369 = SY4037 )
| ~ ( c_in @ SV369 @ ( c_Set_Oinsert @ SY4037 @ SV897 @ SV1280 ) @ SV1280 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3152]) ).
thf(3681,plain,
! [SV1281: $i,SV899: $i,SV371: $i] :
( ( c_in @ SV371 @ ( c_Set_Oinsert @ SV371 @ SV899 @ SV1281 ) @ SV1281 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3154]) ).
thf(3682,plain,
! [SV1282: $i,SV900: $i,SV372: $i] :
( ( c_in @ SV372 @ ( c_Set_Oinsert @ SV372 @ SV900 @ SV1282 ) @ SV1282 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3155]) ).
thf(3683,plain,
! [SV1283: $i,SV901: $i,SV373: $i] :
( ( c_in @ SV373 @ ( c_Set_Oinsert @ SV373 @ SV901 @ SV1283 ) @ SV1283 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3156]) ).
thf(3684,plain,
! [SV1284: $i,SV902: $i,SV374: $i] :
( ( ! [SY4038: $i] :
( ( ( c_Set_Oinsert @ SV374 @ SV902 @ SV1284 )
!= ( c_Set_Oinsert @ SV374 @ SY4038 @ SV1284 ) )
| ( c_in @ SV374 @ SY4038 @ SV1284 )
| ( SV902 = SY4038 )
| ( c_in @ SV374 @ SV902 @ SV1284 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3157]) ).
thf(3685,plain,
! [SV1285: $i,SV903: $i,SV375: $i] :
( ( ( ( c_Set_Oinsert @ SV375 @ SV903 @ SV1285 )
= SV903 )
| ~ ( c_in @ SV375 @ SV903 @ SV1285 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3158]) ).
thf(3686,plain,
! [SV1286: $i,SV904: $i,SV377: $i] :
( ( ( SV377
!= ( c_List_Oappend @ SV904 @ SV377 @ SV1286 ) )
| ( SV904
= ( c_List_Olist_ONil @ SV1286 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3159]) ).
thf(3687,plain,
! [SV1287: $i,SV905: $i,SV378: $i] :
( ( ( ( c_List_Oappend @ SV378 @ SV905 @ SV1287 )
!= SV905 )
| ( SV378
= ( c_List_Olist_ONil @ SV1287 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3160]) ).
thf(3688,plain,
! [SV1288: $i,SV906: $i,SV379: $i] :
( ( ( SV379
!= ( c_List_Oappend @ SV379 @ SV906 @ SV1288 ) )
| ( SV906
= ( c_List_Olist_ONil @ SV1288 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3161]) ).
thf(3689,plain,
! [SV1289: $i,SV907: $i,SV380: $i] :
( ( ( ( c_List_Oappend @ SV380 @ SV907 @ SV1289 )
!= SV380 )
| ( SV907
= ( c_List_Olist_ONil @ SV1289 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3162]) ).
thf(3690,plain,
! [SV1290: $i,SV908: $i,SV381: $i] :
( ( ( ( c_List_Oappend @ SV381 @ SV908 @ SV1290 )
!= ( c_List_Olist_ONil @ SV1290 ) )
| ( SV908
= ( c_List_Olist_ONil @ SV1290 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3163]) ).
thf(3691,plain,
! [SV1291: $i,SV909: $i,SV382: $i] :
( ( ( ( c_List_Oappend @ SV382 @ SV909 @ SV1291 )
!= ( c_List_Olist_ONil @ SV1291 ) )
| ( SV382
= ( c_List_Olist_ONil @ SV1291 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3164]) ).
thf(3692,plain,
! [SV1292: $i,SV910: $i,SV383: $i] :
( ( ( ( c_List_Olist_ONil @ SV383 )
!= ( c_List_Oappend @ SV910 @ SV1292 @ SV383 ) )
| ( SV1292
= ( c_List_Olist_ONil @ SV383 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3165]) ).
thf(3693,plain,
! [SV911: $i,SV384: $i] :
( ( ( ! [SY3582: $i] :
( ( c_List_Olist_ONil @ SV384 )
!= ( c_List_Oappend @ SV911 @ SY3582 @ SV384 ) ) )
= $true )
| ( ( SV911
= ( c_List_Olist_ONil @ SV384 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3166]) ).
thf(3694,plain,
! [SV917: $i,SV391: $i] :
( ( ( ( c_Message_Oanalz @ SV391 )
!= ( c_Message_Oanalz @ SV917 ) )
= $true )
| ( ( ! [SY3583: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3583 @ SV391 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3583 @ SV917 @ tc_Message_Omsg ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3172]) ).
thf(3695,plain,
! [SV918: $i,SV392: $i] :
( ( ( c_in @ ( hAPP @ c_Public_OshrK @ SV392 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV918 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true )
| ( ( ~ ( c_in @ SV392 @ SV918 @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3173]) ).
thf(3696,plain,
! [SV919: $i,SV393: $i] :
( ( ( c_in @ SV393 @ SV919 @ tc_Message_Oagent )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Public_OshrK @ SV393 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV919 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3174]) ).
thf(3697,plain,
! [SV1293: $i,SV920: $i,SV394: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV394 @ SV920 ) @ SV1293 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV394 @ SV920 ) @ ( c_Message_Oanalz @ SV1293 ) @ tc_Message_Omsg ) )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV394 ) ) @ ( c_Message_Oanalz @ SV1293 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3175]) ).
thf(3698,plain,
! [SV1294: $i,SV921: $i,SV395: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SV921 ) @ SV1294 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SV921 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV921 @ SV1294 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV395 ) ) @ ( c_Message_Oanalz @ SV1294 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3176]) ).
thf(3699,plain,
! [SV1295: $i,SV922: $i,SV396: $i] :
( ( ! [SY4039: $i,SY4040: $i] :
( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4041: $i,SY4042: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4039 @ SY4040 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4040 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4041 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4042 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3177]) ).
thf(3700,plain,
! [SV1296: $i,SV923: $i,SV397: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV397 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV923 @ SV1296 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV397 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3178]) ).
thf(3701,plain,
! [SV1297: $i,SV924: $i,SV398: $i] :
( ( ! [SY4043: $i,SY4044: $i,SY4045: $i,SY4046: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4043 ) @ ( c_Message_Omsg_ONonce @ SY4043 ) ) ) ) @ SY4044 @ tc_Event_Oevent ) )
| ! [SY4047: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4045 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4046 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SY4047 ) ) ) ) ) @ ( c_List_Oset @ SY4044 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4048: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4048 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SY4043 ) ) ) @ ( c_List_Oset @ SY4044 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY4044 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3179]) ).
thf(3702,plain,
! [SV1298: $i,SV925: $i,SV399: $i] :
( ( ! [SY4049: $i,SY4050: $i,SY4051: $i,SY4052: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4049 ) @ ( c_Message_Omsg_ONonce @ SY4049 ) ) ) ) @ SY4050 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4053: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4051 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4052 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SY4053 ) ) ) ) ) @ ( c_List_Oset @ SY4050 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4054: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4054 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SY4049 ) ) ) @ ( c_List_Oset @ SY4050 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SY4050 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3180]) ).
thf(3703,plain,
! [SV1299: $i,SV400: $i] :
( ( ( ! [SY4055: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV400 @ SV1299 ) @ SY4055 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1299 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4055 ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( ~ ( c_in @ SV400 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3181]) ).
thf(3704,plain,
! [SV1300: $i,SV926: $i,SV401: $i] :
( ( ! [SY4056: $i,SY4057: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SY4056 ) ) ) @ SY4057 @ tc_Event_Oevent ) )
| ! [SY4058: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4058 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SY4057 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY4056 ) @ ( c_Event_Oused @ SY4057 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY4057 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3182]) ).
thf(3705,plain,
! [SV1301: $i,SV927: $i,SV402: $i] :
( ( ! [SY4059: $i,SY4060: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SY4059 ) ) ) @ SY4060 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4061: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4061 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SY4060 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SY4059 ) @ ( c_Event_Oused @ SY4060 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY4060 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3183]) ).
thf(3706,plain,
! [SV1302: $i,SV928: $i,SV403: $i] :
( ( ! [SY4062: $i,SY4063: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4062 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4062 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SY4063 @ tc_Event_Oevent ) )
| ! [SY4064: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4064 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SY4063 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4062 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY4062 ) @ ( c_Event_Oused @ SY4063 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY4063 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3184]) ).
thf(3707,plain,
! [SV929: $i,SV404: $i] :
( ( ( ! [SY3618: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV404 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV929 @ SY3618 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV404 ) ) )
= $true )
| ( ( c_in @ SV929 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3185]) ).
thf(3708,plain,
! [SV1303: $i,SV930: $i,SV405: $i] :
( ( ! [SY4065: $i,SY4066: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4065 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4065 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SY4066 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4067: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4067 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SY4066 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4065 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY4065 ) @ ( c_Event_Oused @ SY4066 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY4066 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3186]) ).
thf(3709,plain,
! [SV931: $i,SV406: $i] :
( ( ( c_in @ SV406 @ ( c_Event_OinitState @ SV931 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3623: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ SV931 @ SV406 ) @ ( c_List_Oset @ SY3623 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OGets @ SV931 @ SV406 ) @ ( c_List_Oset @ SY3623 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ SV931 @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ SV931 @ SV406 @ SY3623 ) @ SV406 ) @ ( c_List_Oset @ SY3623 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV931 = c_Message_Oagent_OSpy )
| ~ ( c_in @ SV406 @ ( c_Event_Oknows @ SV931 @ SY3623 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3187]) ).
thf(3710,plain,
! [SV1304: $i,SV932: $i,SV407: $i] :
( ( ! [SY4068: $i,SY4069: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SY4068 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4069 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SY4069 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4070: $i,SY4071: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4068 @ ( c_Message_Omsg_OCrypt @ SY4070 @ ( c_Message_Omsg_OMPair @ SY4069 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4071 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3188]) ).
thf(3711,plain,
! [SV1305: $i,SV933: $i,SV408: $i] :
( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4072: $i] :
( ( c_in @ SY4072 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4073: $i] :
( ( c_in @ SY4073 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4073 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4073 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY4073 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3189]) ).
thf(3712,plain,
! [SV934: $i,SV409: $i] :
( ( ( c_in @ SV409 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV934 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3632: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3632 @ SV409 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV934 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3190]) ).
thf(3713,plain,
! [SV1306: $i,SV935: $i,SV410: $i] :
( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV410 @ SV935 ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ SV1306 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3191]) ).
thf(3714,plain,
! [SV1307: $i,SV936: $i,SV411: $i] :
( ( ! [SY4074: $i,SY4075: $i] :
( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ ( c_Message_Omsg_OAgent @ SY4074 ) ) ) )
| ~ ( c_in @ SY4075 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4076: $i,SY4077: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4074 @ ( c_Message_Omsg_OCrypt @ SY4076 @ ( c_Message_Omsg_OMPair @ SY4077 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SY4075 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3192]) ).
thf(3715,plain,
! [SV1308: $i,SV937: $i,SV412: $i] :
( ( ! [SY4078: $i,SY4079: $i,SY4080: $i,SY4081: $i,SY4082: $i] :
( ( SV412 = SV937 )
| ~ ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4078 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4078 ) @ ( c_Message_Omsg_OMPair @ SY4079 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4080 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4081 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4083: $i,SY4084: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4082 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4082 ) @ ( c_Message_Omsg_OMPair @ SY4083 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4084 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4081 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3193]) ).
thf(3716,plain,
! [SV1309: $i,SV938: $i,SV413: $i] :
( ( ! [SY4085: $i,SY4086: $i,SY4087: $i,SY4088: $i,SY4089: $i] :
( ( SV413 = SV938 )
| ~ ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4085 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4085 ) @ ( c_Message_Omsg_OMPair @ SY4086 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4087 ) @ SY4088 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4090: $i,SY4091: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4089 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4089 ) @ ( c_Message_Omsg_OMPair @ SY4090 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4087 ) @ SY4091 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3194]) ).
thf(3717,plain,
! [SV1310: $i,SV939: $i,SV414: $i] :
( ( ! [SY4092: $i,SY4093: $i,SY4094: $i,SY4095: $i,SY4096: $i] :
( ( SV414 = SV939 )
| ~ ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4092 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4092 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4093 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4094 ) @ SY4095 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4097: $i,SY4098: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4096 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4096 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4097 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4094 ) @ SY4098 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3195]) ).
thf(3718,plain,
! [SV1311: $i,SV940: $i,SV415: $i] :
( ( ! [SY4099: $i,SY4100: $i,SY4101: $i,SY4102: $i,SY4103: $i] :
( ( SV415 = SV940 )
| ~ ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SY4099 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4100 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4101 ) @ SY4102 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4104: $i,SY4105: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SY4103 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4104 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4101 ) @ SY4105 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3196]) ).
thf(3719,plain,
! [SV1312: $i,SV941: $i,SV416: $i] :
( ( ! [SY4106: $i,SY4107: $i] :
( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
| ~ ( c_in @ SV1312 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4108: $i,SY4109: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SY4106 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4107 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4108 ) @ SY4109 ) ) ) ) ) @ ( c_List_Oset @ SV1312 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3197]) ).
thf(3720,plain,
! [SV1313: $i,SV942: $i,SV417: $i] :
( ( ! [SY4110: $i,SY4111: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SY4110 @ tc_Event_Oevent ) )
| ! [SY4112: $i] :
( ! [SY4113: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4111 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4111 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4112 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SY4113 ) ) ) ) ) @ ( c_List_Oset @ SY4110 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY4112 @ SY4111 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SY4110 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY4110 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3198]) ).
thf(3721,plain,
! [SV1314: $i,SV943: $i,SV419: $i] :
( ( ! [SY4114: $i,SY4115: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SY4114 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SY4115 ) ) ) ) @ ( c_List_Oset @ SY4114 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4116: $i,SY4117: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4116 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4115 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4117 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SY4114 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SY4114 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3199]) ).
thf(3722,plain,
! [SV1315: $i,SV420: $i] :
( ( ( ! [SY4118: $i] :
( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV420 @ SV1315 ) @ SY4118 @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4118 ) ) )
= $true )
| ( ( c_in @ SV420 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3200]) ).
thf(3723,plain,
! [SV1316: $i,SV944: $i,SV421: $i] :
( ( ! [SY4119: $i,SY4120: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SY4119 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4121: $i] :
( ! [SY4122: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4120 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4120 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4121 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SY4122 ) ) ) ) ) @ ( c_List_Oset @ SY4119 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY4121 @ SY4120 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SY4119 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4119 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3201]) ).
thf(3724,plain,
! [SV945: $i,SV422: $i] :
( ( ( ~ ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV945 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ! [SY3691: $i,SY3692: $i] : ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SY3691 @ SY3692 ) @ SV945 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3202]) ).
thf(3725,plain,
! [SV946: $i,SV423: $i] :
( ( ( ~ ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV946 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ! [SY3693: $i,SY3694: $i] : ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SY3693 @ SY3694 ) @ SV946 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3203]) ).
thf(3726,plain,
! [SV947: $i,SV425: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV425 ) @ SV947 @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV425 ) @ ( c_Message_Osynth @ SV947 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3204]) ).
thf(3727,plain,
! [SV948: $i,SV426: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV426 ) @ SV948 @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV426 ) @ ( c_Message_Osynth @ SV948 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3205]) ).
thf(3728,plain,
! [SV949: $i,SV427: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV427 ) @ ( c_Message_Osynth @ SV949 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_ONonce @ SV427 ) @ SV949 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3206]) ).
thf(3729,plain,
! [SV952: $i,SV431: $i] :
( ( ( c_in @ SV431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3695: $i] :
( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3695 @ SV431 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SY3695 ) ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY3695 ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3209]) ).
thf(3730,plain,
! [SV1317: $i,SV953: $i,SV432: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV432 @ SV953 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV953 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV432 ) ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV432 ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3210]) ).
thf(3731,plain,
! [SV954: $i,SV433: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV433 ) @ SV954 @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV433 ) @ ( c_Message_Osynth @ SV954 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3211]) ).
thf(3732,plain,
! [SV955: $i,SV434: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV434 ) @ ( c_Message_Osynth @ SV955 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV434 ) @ SV955 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3212]) ).
thf(3733,plain,
! [SV956: $i,SV435: $i] :
( ( ( c_in @ SV435 @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3697: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SY3697 @ SV435 ) @ SV956 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3697 @ SV435 ) @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3213]) ).
thf(3734,plain,
! [SV957: $i,SV436: $i] :
( ( ( c_in @ SV436 @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3698: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SY3698 ) @ SV957 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SY3698 ) @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3214]) ).
thf(3735,plain,
! [SV958: $i,SV437: $i] :
( ( ( c_in @ SV437 @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3699: $i] :
( ( c_in @ ( c_Message_Omsg_OMPair @ SY3699 @ SV437 ) @ SV958 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3699 @ SV437 ) @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3215]) ).
thf(3736,plain,
! [SV1318: $i,SV959: $i,SV438: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV438 @ SV959 ) @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV959 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV438 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3216]) ).
thf(3737,plain,
! [SV960: $i,SV439: $i] :
( ( ( c_in @ SV439 @ ( c_Event_Oused @ SV960 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3701: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV439 @ SY3701 ) @ ( c_Event_Oused @ SV960 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3217]) ).
thf(3738,plain,
! [SV961: $i,SV440: $i] :
( ( ( c_in @ SV440 @ ( c_Event_Oused @ SV961 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3702: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3702 @ SV440 ) @ ( c_Event_Oused @ SV961 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3218]) ).
thf(3739,plain,
! [SV1319: $i,SV962: $i,SV441: $i] :
( ( ( c_in @ SV441 @ ( c_List_Oset @ SV962 @ SV1319 ) @ SV1319 )
| ! [SY4123: $i] :
( ( SV441 = SY4123 )
| ~ ( c_in @ SV441 @ ( c_List_Oset @ ( c_List_Olist_OCons @ SY4123 @ SV962 @ SV1319 ) @ SV1319 ) @ SV1319 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3219]) ).
thf(3740,plain,
! [SV1320: $i,SV963: $i,SV442: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV442 @ SV963 ) @ SV1320 @ tc_Event_Oevent ) )
| ~ ( c_in @ SV963 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1320 ) ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1320 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3220]) ).
thf(3741,plain,
! [SV964: $i,SV443: $i] :
( ( ( c_in @ SV443 @ ( c_Event_Oused @ SV964 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3706: $i] :
~ ( c_in @ ( c_Event_Oevent_ONotes @ SY3706 @ SV443 ) @ ( c_List_Oset @ SV964 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3221]) ).
thf(3742,plain,
! [SV1321: $i,SV965: $i,SV444: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV444 @ SV965 ) @ SV1321 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ SV965 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1321 ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1321 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3222]) ).
thf(3743,plain,
! [SV1322: $i,SV966: $i,SV445: $i] :
( ( ! [SY4124: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV445 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV445 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV966 ) @ ( c_Message_Omsg_ONonce @ SV1322 ) ) ) ) @ SY4124 @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1322 ) @ ( c_Event_Oused @ SY4124 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY4124 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3223]) ).
thf(3744,plain,
! [SV1323: $i,SV967: $i,SV447: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ SV447 ) @ SV967 )
!= ( hAPP @ c_Public_OshrK @ SV1323 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3224]) ).
thf(3745,plain,
! [SV1324: $i,SV968: $i,SV448: $i] :
( ( ( hAPP @ c_Public_OshrK @ SV448 )
!= ( hAPP @ ( c_Public_OpublicKey @ SV968 ) @ SV1324 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3225]) ).
thf(3746,plain,
! [SV1325: $i,SV969: $i,SV449: $i] :
( ( ! [SY4125: $i,SY4126: $i] :
( ( c_Event_Oevent_ONotes @ SV449 @ SV969 )
!= ( c_Event_Oevent_OSays @ SV1325 @ SY4125 @ SY4126 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3226]) ).
thf(3747,plain,
! [SV1326: $i,SV970: $i,SV450: $i] :
( ( ! [SY4127: $i,SY4128: $i] :
( ( c_Event_Oevent_OGets @ SV450 @ SV970 )
!= ( c_Event_Oevent_OSays @ SV1326 @ SY4127 @ SY4128 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3227]) ).
thf(3748,plain,
! [SV1327: $i,SV971: $i,SV451: $i] :
( ( ! [SY4129: $i,SY4130: $i] :
( ( c_Event_Oevent_OSays @ SV451 @ SV971 @ SV1327 )
!= ( c_Event_Oevent_ONotes @ SY4129 @ SY4130 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3228]) ).
thf(3749,plain,
! [SV1328: $i,SV972: $i,SV452: $i] :
( ( ! [SY4131: $i,SY4132: $i] :
( ( c_Event_Oevent_OSays @ SV452 @ SV972 @ SV1328 )
!= ( c_Event_Oevent_OGets @ SY4131 @ SY4132 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3229]) ).
thf(3750,plain,
! [SV1329: $i,SV973: $i,SV453: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV453 @ SV973 ) @ SV1329 @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1329 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3230]) ).
thf(3751,plain,
! [SV1330: $i,SV974: $i,SV454: $i] :
( ( ! [SY4133: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV454 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV454 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV974 ) @ ( c_Message_Omsg_ONonce @ SV1330 ) ) ) ) @ SY4133 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1330 ) @ ( c_Event_Oused @ SY4133 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY4133 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3231]) ).
thf(3752,plain,
! [SV1331: $i,SV975: $i,SV455: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV455 ) @ SV975 ) ) @ ( c_Event_OinitState @ SV1331 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3232]) ).
thf(3753,plain,
! [SV1332: $i,SV976: $i,SV456: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV456 ) @ SV976 ) ) @ ( c_Event_Oused @ SV1332 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3233]) ).
thf(3754,plain,
! [SV1333: $i,SV457: $i] :
( ( ( c_in @ SV457 @ ( c_Event_Oused @ SV1333 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY2884: $i] :
~ ( c_in @ SV457 @ ( c_Message_Oparts @ ( c_Event_OinitState @ SY2884 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3234]) ).
thf(3755,plain,
! [SV1334: $i,SV977: $i,SV458: $i] :
( ( ( c_List_Olist_OCons @ SV458 @ SV977 @ SV1334 )
!= ( c_List_Olist_ONil @ SV1334 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3235]) ).
thf(3756,plain,
! [SV1335: $i,SV978: $i,SV459: $i] :
( ( ( c_List_Olist_OCons @ SV459 @ SV978 @ SV1335 )
!= ( c_List_Olist_ONil @ SV1335 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3236]) ).
thf(3757,plain,
! [SV1336: $i,SV979: $i,SV460: $i] :
( ( ( c_List_Olist_ONil @ SV460 )
!= ( c_List_Olist_OCons @ SV979 @ SV1336 @ SV460 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3237]) ).
thf(3758,plain,
! [SV980: $i,SV461: $i] :
( ( ( c_in @ SV461 @ ( c_Message_Osynth @ SV980 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV461 @ ( c_Message_Osynth @ ( c_Message_Osynth @ SV980 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3238]) ).
thf(3759,plain,
! [SV981: $i,SV462: $i] :
( ( ( c_in @ SV462 @ ( c_Message_Osynth @ SV981 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV462 @ SV981 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3239]) ).
thf(3760,plain,
! [SV1337: $i,SV982: $i,SV463: $i] :
( ( ! [SY4134: $i] :
( ! [SY4135: $i] : ( c_in @ ( hAPP @ SV463 @ SV982 ) @ ( c_Set_Oimage @ SV463 @ SV1337 @ SY4134 @ SY4135 ) @ SY4135 )
| ~ ( c_in @ SV982 @ SV1337 @ SY4134 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3240]) ).
thf(3761,plain,
! [SV1338: $i,SV983: $i,SV464: $i] :
( ( ! [SY4136: $i] :
( ! [SY4137: $i] : ( c_in @ ( hAPP @ SV464 @ SV983 ) @ ( c_Set_Oimage @ SV464 @ SV1338 @ SY4136 @ SY4137 ) @ SY4137 )
| ~ ( c_in @ SV983 @ SV1338 @ SY4136 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3241]) ).
thf(3762,plain,
! [SV1339: $i,SV984: $i,SV465: $i] :
( ( ~ ( c_in @ SV465 @ SV984 @ SV1339 )
| ! [SY4138: $i,SY4139: $i] : ( c_in @ ( hAPP @ SY4138 @ SV465 ) @ ( c_Set_Oimage @ SY4138 @ SV984 @ SV1339 @ SY4139 ) @ SY4139 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3242]) ).
thf(3763,plain,
! [SV1340: $i,SV985: $i,SV466: $i] :
( ( ~ ( c_in @ SV466 @ SV985 @ SV1340 )
| ! [SY4140: $i,SY4141: $i] : ( c_in @ ( hAPP @ SY4140 @ SV466 ) @ ( c_Set_Oimage @ SY4140 @ SV985 @ SV1340 @ SY4141 ) @ SY4141 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3243]) ).
thf(3764,plain,
! [SV1341: $i,SV986: $i,SV467: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV467 ) @ SV986 ) ) ) @ ( c_Event_Oused @ SV1341 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3244]) ).
thf(3765,plain,
! [SV1342: $i,SV987: $i,SV468: $i] :
( ( SV468
!= ( c_List_Olist_OCons @ SV987 @ SV468 @ SV1342 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3245]) ).
thf(3766,plain,
! [SV1343: $i,SV988: $i,SV469: $i] :
( ( ( c_List_Olist_OCons @ SV469 @ SV988 @ SV1343 )
!= SV988 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3246]) ).
thf(3767,plain,
! [SV1344: $i,SV990: $i,SV472: $i] :
( ( ! [SY4142: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ SV472 ) @ SV990 )
!= ( hAPP @ ( c_Public_OpublicKey @ SV1344 ) @ SY4142 ) )
| ( SV472 = SV1344 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3248]) ).
thf(3768,plain,
! [SV1345: $i,SV991: $i,SV473: $i] :
( ( ! [SY4143: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ SV473 ) @ SV991 )
!= ( hAPP @ ( c_Public_OpublicKey @ SV1345 ) @ SY4143 ) )
| ( SV991 = SY4143 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3249]) ).
thf(3769,plain,
! [SV1346: $i,SV992: $i,SV474: $i] :
( ( ! [SY4144: $i] :
( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV474 ) @ SV992 ) )
!= ( hAPP @ ( c_Public_OpublicKey @ SV1346 ) @ SY4144 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3250]) ).
thf(3770,plain,
! [SV993: $i,SV475: $i] :
( ( ( ( hAPP @ c_Message_OinvKey @ SV475 )
!= ( hAPP @ c_Message_OinvKey @ SV993 ) )
= $true )
| ( ( SV475 = SV993 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3251]) ).
thf(3771,plain,
! [SV1347: $i,SV994: $i,SV476: $i] :
( ( ! [SY4145: $i] :
( ( ( c_Event_Oevent_OGets @ SV476 @ SV994 )
!= ( c_Event_Oevent_OGets @ SV1347 @ SY4145 ) )
| ( SV994 = SY4145 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3252]) ).
thf(3772,plain,
! [SV1348: $i,SV995: $i,SV477: $i] :
( ( ! [SY4146: $i] :
( ( c_Event_Oevent_OGets @ SV477 @ SV995 )
!= ( c_Event_Oevent_OGets @ SV1348 @ SY4146 ) )
| ( SV477 = SV1348 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3253]) ).
thf(3773,plain,
! [SV1349: $i,SV996: $i,SV478: $i] :
( ( ! [SY4147: $i] :
( ( c_Event_Oevent_OGets @ SV478 @ SV996 )
!= ( c_Event_Oevent_ONotes @ SV1349 @ SY4147 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3254]) ).
thf(3774,plain,
! [SV1350: $i,SV997: $i,SV479: $i] :
( ( ! [SY4148: $i] :
( ( ( c_Event_Oevent_ONotes @ SV479 @ SV997 )
!= ( c_Event_Oevent_ONotes @ SV1350 @ SY4148 ) )
| ( SV997 = SY4148 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3255]) ).
thf(3775,plain,
! [SV1351: $i,SV998: $i,SV480: $i] :
( ( ! [SY4149: $i] :
( ( c_Event_Oevent_ONotes @ SV480 @ SV998 )
!= ( c_Event_Oevent_ONotes @ SV1351 @ SY4149 ) )
| ( SV480 = SV1351 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3256]) ).
thf(3776,plain,
! [SV1352: $i,SV999: $i,SV482: $i] :
( ( ! [SY4150: $i] :
( ( c_Event_Oevent_ONotes @ SV482 @ SV999 )
!= ( c_Event_Oevent_OGets @ SV1352 @ SY4150 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3257]) ).
thf(3777,plain,
! [SV1353: $i,SV1000: $i,SV483: $i] :
( ( ! [SY4151: $i] :
( ! [SY4152: $i] :
( ( c_List_Olist_OCons @ SV483 @ SV1000 @ SV1353 )
!= ( c_List_Olist_OCons @ SY4151 @ SY4152 @ SV1353 ) )
| ( SV483 = SY4151 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3258]) ).
thf(3778,plain,
! [SV1354: $i,SV1001: $i,SV484: $i] :
( ( ! [SY4153: $i,SY4154: $i] :
( ( ( c_List_Olist_OCons @ SV484 @ SV1001 @ SV1354 )
!= ( c_List_Olist_OCons @ SY4153 @ SY4154 @ SV1354 ) )
| ( SV1001 = SY4154 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3259]) ).
thf(3779,plain,
! [SV1355: $i,SV1002: $i,SV485: $i] :
( ( ( hAPP @ c_Public_OshrK @ SV485 )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV1002 ) @ SV1355 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3260]) ).
thf(3780,plain,
! [SV1356: $i,SV1003: $i,SV486: $i] :
( ( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV486 @ SV1003 ) @ SV1356 @ tc_Event_Oevent ) )
= ( c_Event_Oused @ SV1356 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3261]) ).
thf(3781,plain,
! [SV1357: $i,SV1004: $i,SV487: $i] :
( ( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV487 ) @ SV1004 ) )
!= ( hAPP @ c_Public_OshrK @ SV1357 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3262]) ).
thf(3782,plain,
! [SV1358: $i,SV1005: $i,SV488: $i] :
( ( ! [SY4155: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ SV488 ) @ SV1005 )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV1358 ) @ SY4155 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3263]) ).
thf(3783,plain,
! [SV1006: $i,SV489: $i] :
( ( ( c_in @ SV489 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1006 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3776: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV489 @ SY3776 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1006 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3264]) ).
thf(3784,plain,
! [SV1359: $i,SV1007: $i,SV490: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV490 @ SV1007 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1007 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV490 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3265]) ).
thf(3785,plain,
! [SV1360: $i,SV1008: $i,SV491: $i] :
( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV491 @ SV1008 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1360 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3266]) ).
thf(3786,plain,
! [SV1361: $i,SV1009: $i,SV492: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ ( c_Message_Osynth @ SV1361 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ SV1361 @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV492 ) @ SV1361 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3267]) ).
thf(3787,plain,
! [SV1362: $i,SV1010: $i,SV493: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ SV1362 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ ( c_Message_Osynth @ SV1362 ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV493 ) @ SV1362 @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3268]) ).
thf(3788,plain,
! [SV1011: $i,SV494: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV494 ) @ SV1011 @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3781: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SY3781 ) @ SV1011 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SY3781 ) @ ( c_Message_Osynth @ SV1011 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3269]) ).
thf(3789,plain,
! [SV1363: $i,SV1012: $i,SV495: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV495 @ SV1012 ) @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV495 ) @ SV1363 @ tc_Message_Omsg )
| ~ ( c_in @ SV1012 @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3270]) ).
thf(3790,plain,
! [SV1013: $i,SV496: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ SV496 ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ SV1013 ) ) @ tc_Message_Omsg )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3271]) ).
thf(3791,plain,
! [SV1014: $i,SV497: $i] :
( ( c_in @ ( c_Message_Omsg_ONonce @ SV497 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1014 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3272]) ).
thf(3792,plain,
! [SV1364: $i,SV1017: $i,SV501: $i] :
( ( ! [SY4156: $i,SY4157: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SY4156 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SY4157 ) ) ) ) @ ( c_List_Oset @ SY4156 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4158: $i,SY4159: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4158 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4157 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4159 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SY4156 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY4156 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3275]) ).
thf(3793,plain,
! [SV1365: $i,SV1018: $i,SV502: $i] :
( ( ! [SY4160: $i,SY4161: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4160 ) @ ( c_Message_Omsg_ONonce @ SY4160 ) ) ) ) @ ( c_List_Oset @ SY4161 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4161 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SY4161 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SY4161 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SY4161 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4161 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4160 ) @ ( c_Message_Omsg_ONonce @ SY4160 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4161 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3276]) ).
thf(3794,plain,
! [SV1019: $i,SV503: $i] :
( ( ( ! [SY3791: $i] : ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV503 ) @ SV1019 ) ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY3791 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV1019 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3277]) ).
thf(3795,plain,
! [SV1020: $i,SV504: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV504 @ SV1020 ) @ ( c_Event_Oused @ ( c_List_Olist_ONil @ tc_Event_Oevent ) ) @ tc_Message_Omsg )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3278]) ).
thf(3796,plain,
! [SV1366: $i,SV1021: $i,SV506: $i] :
( ( ! [SY4162: $i,SY4163: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY4162 @ ( c_Message_Omsg_ONonce @ SY4163 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ! [SY4164: $i,SY4165: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4164 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4164 ) @ ( c_Message_Omsg_OMPair @ SY4165 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4162 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SY4162 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3280]) ).
thf(3797,plain,
! [SV1367: $i,SV1022: $i,SV507: $i] :
( ( ! [SY4166: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV507 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV507 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ SV507 @ SV1022 @ SV1367 @ SY4166 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SY4166 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4166 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1022 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4166 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3281]) ).
thf(3798,plain,
! [SV1368: $i,SV1023: $i,SV508: $i] :
( ( ! [SY4167: $i,SY4168: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SY4167 ) ) ) @ ( c_List_Oset @ SY4168 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4168 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4169: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4169 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SY4169 @ SY4168 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SY4168 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4170: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SY4169 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4170 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4168 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SY4167 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4168 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3282]) ).
thf(3799,plain,
! [SV1024: $i,SV509: $i] :
( ( ( c_in @ SV509 @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3804: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SY3804 ) ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3804 @ SV509 ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3283]) ).
thf(3800,plain,
! [SV1025: $i,SV510: $i] :
( ( ( c_in @ SV510 @ ( c_Event_Oused @ SV1025 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV510 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1025 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3284]) ).
thf(3801,plain,
! [SV1369: $i,SV1026: $i,SV511: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV511 ) @ SV1026 ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1369 ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3285]) ).
thf(3802,plain,
! [SV1027: $i,SV512: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV512 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1027 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV512 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ SV1027 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3286]) ).
thf(3803,plain,
! [SV1370: $i,SV513: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV513 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1370 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1370 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV513 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3287]) ).
thf(3804,plain,
! [SV1371: $i,SV1028: $i,SV514: $i] :
( ( ( c_in @ SV514 @ ( c_Event_Oknows @ SV1028 @ SV1371 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ SV1028 @ SV514 ) @ ( c_List_Oset @ SV1371 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3288]) ).
thf(3805,plain,
! [SV1372: $i,SV515: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV515 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1372 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1372 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV515 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3289]) ).
thf(3806,plain,
! [SV1029: $i,SV516: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV516 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1029 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV516 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ SV1029 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3290]) ).
thf(3807,plain,
! [SV1030: $i,SV517: $i] :
( ( ( c_in @ SV517 @ ( c_Event_Oused @ SV1030 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3807: $i,SY3808: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3807 @ SY3808 @ SV517 ) @ ( c_List_Oset @ SV1030 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3291]) ).
thf(3808,plain,
! [SV1373: $i,SV1031: $i,SV518: $i] :
( ( ! [SY4171: $i,SY4172: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SY4171 ) ) @ SY4172 )
| ~ ( c_in @ SY4172 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4172 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SY4171 ) ) ) @ ( c_List_Oset @ SY4172 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3292]) ).
thf(3809,plain,
! [SV1374: $i,SV1032: $i,SV519: $i] :
( ( ! [SY4173: $i,SY4174: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SY4173 ) ) @ SY4174 )
| ~ ( c_in @ SY4174 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4174 ) ) @ tc_Message_Omsg )
| ! [SY4175: $i,SY4176: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4175 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4176 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4174 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SY4173 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4174 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3293]) ).
thf(3810,plain,
! [SV1375: $i,SV1033: $i,SV520: $i] :
( ( ! [SY4177: $i,SY4178: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SY4177 ) ) ) @ ( c_List_Oset @ SY4178 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SY4177 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4178 ) ) @ tc_Message_Omsg )
| ! [SY4179: $i,SY4180: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SY4179 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SY4180 ) ) ) ) ) @ ( c_List_Oset @ SY4178 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4178 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY4178 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3294]) ).
thf(3811,plain,
! [SV1376: $i,SV1034: $i,SV521: $i] :
( ( ! [SY4181: $i,SY4182: $i,SY4183: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4181 ) @ SY4182 ) ) ) ) ) @ ( c_List_Oset @ SY4183 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4183 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4181 ) @ SY4182 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4183 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3295]) ).
thf(3812,plain,
! [SV1377: $i,SV1035: $i,SV522: $i] :
( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ ( c_Public_OpublicKey @ SV522 ) @ SV1035 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1377 ) ) @ tc_Message_Omsg )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3296]) ).
thf(3813,plain,
! [SV1378: $i,SV1036: $i,SV523: $i] :
( ( ~ ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1036 ) ) @ tc_Message_Omsg )
| ! [SY4184: $i,SY4185: $i] : ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV1378 @ SY4184 @ SY4185 ) @ SV1036 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3297]) ).
thf(3814,plain,
! [SV1379: $i,SV1037: $i,SV524: $i] :
( ( ( c_in @ SV524 @ ( c_Event_Oknows @ SV1037 @ SV1379 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OGets @ SV1037 @ SV524 ) @ ( c_List_Oset @ SV1379 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV1037 = c_Message_Oagent_OSpy ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3298]) ).
thf(3815,plain,
! [SV1380: $i,SV1038: $i,SV525: $i] :
( ( ! [SY4186: $i,SY4187: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4186 ) @ ( c_Message_Omsg_ONonce @ SY4186 ) ) ) ) @ ( c_List_Oset @ SY4187 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4186 ) @ ( c_Message_Omsg_ONonce @ SY4186 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4187 ) ) @ tc_Message_Omsg )
| ! [SY4188: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SY4188 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SY4187 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4187 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY4187 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3299]) ).
thf(3816,plain,
! [SV1381: $i,SV1039: $i,SV526: $i] :
( ( ! [SY4189: $i] :
( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ ( c_Message_Omsg_OAgent @ SY4189 ) ) ) )
| ! [SY4190: $i] :
( ~ ( c_in @ SY4190 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SY4189 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4191: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4189 ) @ ( c_Message_Omsg_OMPair @ SY4191 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4190 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3300]) ).
thf(3817,plain,
! [SV1382: $i,SV1040: $i,SV527: $i] :
( ( ! [SY4192: $i,SY4193: $i] :
( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
| ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4192 ) @ ( c_Message_Omsg_OAgent @ SY4193 ) ) ) )
| ~ ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4194: $i,SY4195: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4194 @ SY4193 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4193 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4195 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4192 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3301]) ).
thf(3818,plain,
! [SV1041: $i,SV528: $i] :
( ( ( c_in @ SV528 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1041 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3844: $i] :
( ~ ( c_in @ SY3844 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ SY3844 @ SV528 ) @ ( c_List_Oset @ SV1041 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3302]) ).
thf(3819,plain,
! [SV1383: $i,SV1042: $i,SV529: $i] :
( ( ! [SY4196: $i] :
( ( c_in @ SV529 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1042 ) ) @ tc_Message_Omsg )
| ! [SY4197: $i,SY4198: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1383 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1383 ) @ ( c_Message_Omsg_OMPair @ SY4196 @ ( c_Message_Omsg_OMPair @ SY4197 @ ( c_Message_Omsg_OMPair @ SV529 @ SY4198 ) ) ) ) ) @ ( c_List_Oset @ SV1042 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3303]) ).
thf(3820,plain,
! [SV1043: $i,SV530: $i] :
( ( ( ( c_Message_Omsg_OAgent @ SV530 )
!= ( c_Message_Omsg_OAgent @ SV1043 ) )
= $true )
| ( ( SV530 = SV1043 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3304]) ).
thf(3821,plain,
! [SV1384: $i,SV1044: $i,SV532: $i] :
( ( ( c_in @ SV532 @ ( c_Event_Oknows @ SV1044 @ SV1384 ) @ tc_Message_Omsg )
| ! [SY4199: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1044 @ SY4199 @ SV532 ) @ ( c_List_Oset @ SV1384 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3305]) ).
thf(3822,plain,
! [SV1045: $i,SV534: $i] :
( ( ( c_in @ SV534 @ ( c_Message_Oanalz @ SV1045 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3851: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3851 @ SV534 ) @ ( c_Message_Oanalz @ SV1045 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3306]) ).
thf(3823,plain,
! [SV1046: $i,SV535: $i] :
( ( ( c_in @ SV535 @ ( c_Message_Oanalz @ SV1046 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3852: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV535 @ SY3852 ) @ ( c_Message_Oanalz @ SV1046 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3307]) ).
thf(3824,plain,
! [SV1047: $i,SV536: $i] :
( ( ( c_in @ SV536 @ ( c_Message_Oparts @ SV1047 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3853: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SY3853 @ SV536 ) @ ( c_Message_Oparts @ SV1047 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3308]) ).
thf(3825,plain,
! [SV1048: $i,SV537: $i] :
( ( ( c_in @ SV537 @ ( c_Message_Oparts @ SV1048 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3854: $i] :
~ ( c_in @ ( c_Message_Omsg_OMPair @ SV537 @ SY3854 ) @ ( c_Message_Oparts @ SV1048 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3309]) ).
thf(3826,plain,
! [SV1385: $i,SV1049: $i,SV538: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV538 @ SV1049 )
!= ( c_Message_Omsg_ONonce @ SV1385 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3310]) ).
thf(3827,plain,
! [SV1050: $i,SV539: $i] :
( ( ( c_Message_Omsg_OAgent @ SV539 )
= ( hAPP @ c_Message_Omsg_OKey @ SV1050 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3311]) ).
thf(3828,plain,
! [SV1051: $i,SV540: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV540 )
= ( c_Message_Omsg_ONonce @ SV1051 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3312]) ).
thf(3829,plain,
! [SV1386: $i,SV1052: $i,SV541: $i] :
( ( ! [SY4200: $i] :
( ! [SY4201: $i,SY4202: $i] :
( ( c_Event_Oevent_OSays @ SV541 @ SV1052 @ SV1386 )
!= ( c_Event_Oevent_OSays @ SY4200 @ SY4201 @ SY4202 ) )
| ( SV541 = SY4200 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3313]) ).
thf(3830,plain,
! [SV1387: $i,SV1053: $i,SV542: $i] :
( ( ! [SY4203: $i,SY4204: $i] :
( ! [SY4205: $i] :
( ( c_Event_Oevent_OSays @ SV542 @ SV1053 @ SV1387 )
!= ( c_Event_Oevent_OSays @ SY4203 @ SY4204 @ SY4205 ) )
| ( SV1053 = SY4204 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3314]) ).
thf(3831,plain,
! [SV1388: $i,SV1054: $i,SV543: $i] :
( ( ! [SY4206: $i,SY4207: $i,SY4208: $i] :
( ( ( c_Event_Oevent_OSays @ SV543 @ SV1054 @ SV1388 )
!= ( c_Event_Oevent_OSays @ SY4206 @ SY4207 @ SY4208 ) )
| ( SV1388 = SY4208 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3315]) ).
thf(3832,plain,
! [SV1055: $i,SV544: $i] :
( ( ( c_in @ SV544 @ ( c_Message_Oparts @ SV1055 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV544 @ SV1055 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3316]) ).
thf(3833,plain,
! [SV1056: $i,SV545: $i] :
( ( ( c_in @ SV545 @ ( c_Message_Oanalz @ SV1056 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV545 @ SV1056 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3317]) ).
thf(3834,plain,
! [SV1057: $i,SV546: $i] :
( ( ( c_in @ SV546 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1057 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3868: $i,SY3869: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3868 @ SY3869 @ SV546 ) @ ( c_List_Oset @ SV1057 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3318]) ).
thf(3835,plain,
! [SV1058: $i,SV547: $i] :
( ( ( c_in @ SV547 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1058 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3870: $i,SY3871: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3870 @ SY3871 @ SV547 ) @ ( c_List_Oset @ SV1058 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3319]) ).
thf(3836,plain,
! [SV1389: $i,SV1059: $i,SV548: $i] :
( ( ! [SY4209: $i,SY4210: $i,SY4211: $i] :
( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1059 ) ) @ tc_Message_Omsg )
| ! [SY4212: $i,SY4213: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1389 @ SY4209 @ ( c_Message_Omsg_OCrypt @ SY4210 @ ( c_Message_Omsg_OMPair @ SY4211 @ ( c_Message_Omsg_OMPair @ SY4212 @ ( c_Message_Omsg_OMPair @ SY4213 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SV1059 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3320]) ).
thf(3837,plain,
! [SV1390: $i,SV1060: $i,SV549: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV549 @ SV1060 )
!= ( hAPP @ c_Message_Omsg_OKey @ SV1390 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3321]) ).
thf(3838,plain,
! [SV1061: $i,SV551: $i] :
( ( ( c_Message_Omsg_ONonce @ SV551 )
= ( hAPP @ c_Message_Omsg_OKey @ SV1061 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3322]) ).
thf(3839,plain,
! [SV1391: $i,SV1062: $i,SV553: $i] :
( ( ( c_Message_Omsg_OMPair @ SV553 @ SV1062 )
!= ( c_Message_Omsg_OAgent @ SV1391 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3323]) ).
thf(3840,plain,
! [SV1063: $i,SV554: $i] :
( ( ( c_Message_Omsg_ONonce @ SV554 )
= ( c_Message_Omsg_OAgent @ SV1063 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3324]) ).
thf(3841,plain,
! [SV1064: $i,SV555: $i] :
( ( ( c_in @ SV555 @ ( c_Message_Oparts @ SV1064 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3880: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SY3880 @ SV555 ) @ ( c_Message_Oparts @ SV1064 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3325]) ).
thf(3842,plain,
! [SV1065: $i,SV556: $i] :
( ( ( c_in @ SV556 @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3881: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SY3881 ) ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3881 ) @ SV556 ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3326]) ).
thf(3843,plain,
! [SV1066: $i,SV557: $i] :
( ( ( c_in @ SV557 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1066 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3882: $i,SY3883: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY3882 @ SY3883 @ SV557 ) @ ( c_List_Oset @ SV1066 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3327]) ).
thf(3844,plain,
! [SV1067: $i,SV558: $i] :
( ( ( c_in @ SV558 @ ( c_Message_Oparts @ SV1067 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV558 @ ( c_Message_Oparts @ ( c_Message_Oparts @ SV1067 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3328]) ).
thf(3845,plain,
! [SV1068: $i,SV559: $i] :
( ( ( ( hAPP @ c_Message_Omsg_OKey @ SV559 )
!= ( hAPP @ c_Message_Omsg_OKey @ SV1068 ) )
= $true )
| ( ( SV559 = SV1068 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3329]) ).
thf(3846,plain,
! [SV1392: $i,SV1069: $i,SV560: $i] :
( ( ( c_Message_Omsg_OAgent @ SV560 )
!= ( c_Message_Omsg_OMPair @ SV1069 @ SV1392 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3330]) ).
thf(3847,plain,
! [SV1393: $i,SV561: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV561 ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1393 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV561 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3331]) ).
thf(3848,plain,
! [SV1394: $i,SV1070: $i,SV562: $i] :
( ( ( c_Message_Omsg_OAgent @ SV562 )
!= ( c_Message_Omsg_OCrypt @ SV1070 @ SV1394 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3332]) ).
thf(3849,plain,
! [SV1395: $i,SV1071: $i,SV563: $i] :
( ( ( c_Message_Omsg_ONonce @ SV563 )
!= ( c_Message_Omsg_OMPair @ SV1071 @ SV1395 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3333]) ).
thf(3850,plain,
! [SV1396: $i,SV1072: $i,SV564: $i] :
( ( ! [SY4214: $i] :
( ( c_Message_Omsg_OMPair @ SV564 @ SV1072 )
!= ( c_Message_Omsg_OCrypt @ SV1396 @ SY4214 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3334]) ).
thf(3851,plain,
! [SV1397: $i,SV1073: $i,SV565: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV565 @ SV1073 )
!= ( c_Message_Omsg_OAgent @ SV1397 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3335]) ).
thf(3852,plain,
! [SV1075: $i,SV567: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV567 )
= ( c_Message_Omsg_OAgent @ SV1075 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3337]) ).
thf(3853,plain,
! [SV1076: $i,SV568: $i] :
( ( ( c_in @ SV568 @ ( c_Message_Oanalz @ SV1076 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV568 @ ( c_Message_Oanalz @ ( c_Message_Oanalz @ SV1076 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3338]) ).
thf(3854,plain,
! [SV1077: $i,SV569: $i] :
( ( ( ( c_Message_Omsg_ONonce @ SV569 )
!= ( c_Message_Omsg_ONonce @ SV1077 ) )
= $true )
| ( ( SV569 = SV1077 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3339]) ).
thf(3855,plain,
! [SV1078: $i,SV570: $i] :
( ( ( ! [SY3890: $i] : ( c_in @ SV570 @ SV1078 @ SY3890 ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV1078 @ SV570 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3340]) ).
thf(3856,plain,
! [SV1079: $i,SV571: $i] :
( ( ( hBOOL @ ( hAPP @ SV571 @ SV1079 ) )
= $true )
| ( ( ! [SY3891: $i] :
~ ( c_in @ SV1079 @ SV571 @ SY3891 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3341]) ).
thf(3857,plain,
! [SV1398: $i,SV1080: $i,SV572: $i] :
( ( ( c_Message_Omsg_ONonce @ SV572 )
!= ( c_Message_Omsg_OCrypt @ SV1080 @ SV1398 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3342]) ).
thf(3858,plain,
! [SV1399: $i,SV1081: $i,SV573: $i] :
( ( ! [SY4215: $i] :
( ( c_Message_Omsg_OCrypt @ SV573 @ SV1081 )
!= ( c_Message_Omsg_OCrypt @ SV1399 @ SY4215 ) )
| ( SV573 = SV1399 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3343]) ).
thf(3859,plain,
! [SV1400: $i,SV1082: $i,SV574: $i] :
( ( ! [SY4216: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV574 @ SV1082 )
!= ( c_Message_Omsg_OCrypt @ SV1400 @ SY4216 ) )
| ( SV1082 = SY4216 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3344]) ).
thf(3860,plain,
! [SV1083: $i,SV575: $i] :
( ( ( c_Message_Omsg_OAgent @ SV575 )
= ( c_Message_Omsg_ONonce @ SV1083 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3345]) ).
thf(3861,plain,
! [SV1401: $i,SV1084: $i,SV576: $i] :
( ( ! [SY4217: $i] :
( ( c_Message_Omsg_OMPair @ SV576 @ SV1084 )
!= ( c_Message_Omsg_OMPair @ SV1401 @ SY4217 ) )
| ( SV576 = SV1401 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3346]) ).
thf(3862,plain,
! [SV1402: $i,SV1085: $i,SV577: $i] :
( ( ! [SY4218: $i] :
( ( ( c_Message_Omsg_OMPair @ SV577 @ SV1085 )
!= ( c_Message_Omsg_OMPair @ SV1402 @ SY4218 ) )
| ( SV1085 = SY4218 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3347]) ).
thf(3863,plain,
! [SV1086: $i,SV578: $i] :
( ( ( c_in @ SV578 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3901: $i] :
( ~ ( c_in @ SY3901 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY3901 ) @ SV578 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3348]) ).
thf(3864,plain,
! [SV1403: $i,SV1087: $i,SV579: $i] :
( ( ( c_Message_Omsg_OMPair @ SV579 @ SV1087 )
!= ( c_Message_Omsg_ONonce @ SV1403 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3349]) ).
thf(3865,plain,
! [SV1404: $i,SV1088: $i,SV580: $i] :
( ( ! [SY4219: $i] :
( ( c_Message_Omsg_OCrypt @ SV580 @ SV1088 )
!= ( c_Message_Omsg_OMPair @ SV1404 @ SY4219 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3350]) ).
thf(3866,plain,
! [SV1405: $i,SV1089: $i,SV581: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV581 )
!= ( c_Message_Omsg_OMPair @ SV1089 @ SV1405 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3351]) ).
thf(3867,plain,
! [SV1406: $i,SV1090: $i,SV582: $i] :
( ( ( c_Message_Omsg_OMPair @ SV582 @ SV1090 )
!= ( hAPP @ c_Message_Omsg_OKey @ SV1406 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3352]) ).
thf(3868,plain,
! [SV1407: $i,SV1091: $i,SV583: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV583 )
!= ( c_Message_Omsg_OCrypt @ SV1091 @ SV1407 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3353]) ).
thf(3869,plain,
! [SV1092: $i,SV584: $i] :
( ( ( ( hAPP @ c_Public_OshrK @ SV584 )
!= ( hAPP @ c_Public_OshrK @ SV1092 ) )
= $true )
| ( ( SV584 = SV1092 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3354]) ).
thf(3870,plain,
! [SV1093: $i,SV585: $i] :
( ( ( ~ ( c_in @ SV585 @ ( c_Message_Oanalz @ SV1093 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV585 @ ( c_Message_Oparts @ SV1093 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3355]) ).
thf(3871,plain,
! [SV1094: $i,SV586: $i] :
( ( ( c_in @ SV586 @ ( c_Message_Oparts @ SV1094 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV586 @ ( c_Message_Oanalz @ SV1094 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3356]) ).
thf(3872,plain,
! [SV1095: $i,SV587: $i] :
( ( ( c_in @ SV587 @ ( c_Message_Oparts @ SV1095 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV587 @ ( c_Message_Oanalz @ SV1095 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3357]) ).
thf(3873,plain,
! [SV1096: $i,SV588: $i] :
( ( ( class_Lattices_Oupper__semilattice @ ( tc_fun @ SV588 @ SV1096 ) )
= $true )
| ( ( ~ ( class_Lattices_Olattice @ SV1096 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3358]) ).
thf(3874,plain,
! [SV1097: $i,SV589: $i] :
( ( ( class_Lattices_Obounded__lattice @ ( tc_fun @ SV589 @ SV1097 ) )
= $true )
| ( ( ~ ( class_Lattices_Obounded__lattice @ SV1097 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3359]) ).
thf(3875,plain,
! [SV1098: $i,SV590: $i] :
( ( ( class_Lattices_Oboolean__algebra @ ( tc_fun @ SV590 @ SV1098 ) )
= $true )
| ( ( ~ ( class_Lattices_Oboolean__algebra @ SV1098 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3360]) ).
thf(3876,plain,
! [SV1099: $i,SV591: $i] :
( ( ( class_Orderings_Opreorder @ ( tc_fun @ SV591 @ SV1099 ) )
= $true )
| ( ( ~ ( class_Orderings_Opreorder @ SV1099 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3361]) ).
thf(3877,plain,
! [SV1100: $i,SV592: $i] :
( ( ( class_Lattices_Olattice @ ( tc_fun @ SV592 @ SV1100 ) )
= $true )
| ( ( ~ ( class_Lattices_Olattice @ SV1100 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3362]) ).
thf(3878,plain,
! [SV1101: $i,SV593: $i] :
( ( ( class_Orderings_Oorder @ ( tc_fun @ SV593 @ SV1101 ) )
= $true )
| ( ( ~ ( class_Orderings_Oorder @ SV1101 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3363]) ).
thf(3879,plain,
! [SV1102: $i,SV594: $i] :
( ( ( class_Orderings_Otop @ ( tc_fun @ SV594 @ SV1102 ) )
= $true )
| ( ( ~ ( class_Orderings_Otop @ SV1102 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3364]) ).
thf(3880,plain,
! [SV1103: $i,SV595: $i] :
( ( ( class_Orderings_Obot @ ( tc_fun @ SV595 @ SV1103 ) )
= $true )
| ( ( ~ ( class_Orderings_Obot @ SV1103 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3365]) ).
thf(3881,plain,
! [SV1104: $i,SV596: $i] :
( ( ( class_HOL_Oord @ ( tc_fun @ SV596 @ SV1104 ) )
= $true )
| ( ( ~ ( class_HOL_Oord @ SV1104 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3366]) ).
thf(3882,plain,
! [SV1106: $i,SV598: $i] :
( ( ( SV598 = SV1106 )
= $true )
| ( ( ! [SY3908: $i] :
~ ( c_fequal @ SV598 @ SV1106 @ SY3908 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3368]) ).
thf(3883,plain,
! [SV599: $i,SV1: $i] :
( ( ( c_in @ SV1 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV599 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV599 ) ) @ ( c_Message_Oparts @ SV599 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3369]) ).
thf(3884,plain,
! [SV1408: $i,SV1108: $i,SV601: $i,SV3: $i] :
( ( ( c_Event_Oused @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV3 @ SV601 @ SV1108 ) @ SV1408 @ tc_Event_Oevent ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1108 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SV1408 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3371]) ).
thf(3885,plain,
! [SV1409: $i,SV1109: $i,SV602: $i,SV4: $i] :
( ( ( c_in @ SV4 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV602 @ SV1109 @ SV4 @ SV1409 ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ SV602 @ SV1109 @ SV4 @ SV1409 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3372]) ).
thf(3886,plain,
! [SV5: $i,SV603: $i,SV1410: $i] :
( ( ( ~ ( c_in @ SV1410 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV5 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1410 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV5 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ ( c_Message_Oparts @ SV603 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3373]) ).
thf(3887,plain,
! [SV605: $i,SV7: $i] :
( ( ( hBOOL @ ( hAPP @ SV7 @ SV605 ) )
= $false )
| ( ( ! [SY3204: $i] :
~ ( c_in @ SV605 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3204 @ tc_bool ) ) @ SY3204 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3374]) ).
thf(3888,plain,
! [SV10: $i,SV1411: $i,SV608: $i] :
( ( ( ~ ( c_in @ SV608 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1411 @ tc_bool ) ) @ SV1411 ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV10 @ SV608 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3377]) ).
thf(3889,plain,
! [SV14: $i,SV1412: $i] :
( ( ( ! [SY4220: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1412 @ SY4220 @ SV14 )
!= ( c_Orderings_Obot__class_Obot @ SV14 ) )
| ( SY4220
= ( c_Orderings_Obot__class_Obot @ SV14 ) ) ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV14 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3381]) ).
thf(3890,plain,
! [SV15: $i,SV1413: $i] :
( ( ( ! [SY4221: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1413 @ SY4221 @ SV15 )
!= ( c_Orderings_Obot__class_Obot @ SV15 ) )
| ( SV1413
= ( c_Orderings_Obot__class_Obot @ SV15 ) ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV15 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3382]) ).
thf(3891,plain,
! [SV1112: $i,SV612: $i,SV16: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV16 @ SV612 @ ( tc_fun @ SV1112 @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1112 @ tc_bool ) ) )
= $true )
| ( ( SV16
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1112 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3383]) ).
thf(3892,plain,
! [SV1113: $i,SV613: $i,SV17: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV17 @ SV613 @ ( tc_fun @ SV1113 @ tc_bool ) )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1113 @ tc_bool ) ) )
= $true )
| ( ( SV613
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1113 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3384]) ).
thf(3893,plain,
! [SV1114: $i,SV614: $i,SV18: $i] :
( ( ( ( c_Set_Oinsert @ SV18 @ SV614 @ SV1114 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1114 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV18 @ SV614 @ SV1114 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3385]) ).
thf(3894,plain,
! [SV1115: $i,SV615: $i,SV19: $i] :
( ( ( ( c_Set_Oinsert @ SV19 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV615 @ tc_bool ) ) @ SV615 )
!= ( c_Set_Oinsert @ SV1115 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV615 @ tc_bool ) ) @ SV615 ) )
= $true )
| ( ( SV19 = SV1115 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3386]) ).
thf(3895,plain,
! [SV1414: $i,SV619: $i,SV23: $i] :
( ( ( ~ ( c_in @ SV23 @ ( c_Set_Oinsert @ SV619 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1414 @ tc_bool ) ) @ SV1414 ) @ SV1414 ) )
= $true )
| ( ( SV23 = SV619 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3390]) ).
thf(3896,plain,
! [SV620: $i,SV24: $i] :
( ( ( c_in @ SV24 @ ( c_Event_Oused @ SV620 ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV24 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ ( c_Event_Oused @ SV620 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3391]) ).
thf(3897,plain,
! [SV1415: $i,SV1119: $i,SV621: $i,SV25: $i] :
( ( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV25 @ tc_bool ) )
!= ( c_Set_Oimage @ SV621 @ SV1119 @ SV1415 @ SV25 ) )
| ( SV1119
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1415 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3392]) ).
thf(3898,plain,
! [SV1416: $i,SV27: $i] :
( ( ( c_lessequals @ ( c_Orderings_Obot__class_Obot @ SV27 ) @ SV1416 @ SV27 )
= $true )
| ( ( class_Orderings_Obot @ SV27 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3393]) ).
thf(3899,plain,
! [SV1120: $i,SV623: $i,SV28: $i] :
( ( ( c_Set_Oinsert @ SV28 @ SV623 @ SV1120 )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1120 @ tc_bool ) ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3394]) ).
thf(3900,plain,
! [SV30: $i,SV1417: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1417 @ ( c_Orderings_Obot__class_Obot @ SV30 ) @ SV30 )
= SV1417 )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV30 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3395]) ).
thf(3901,plain,
! [SV1418: $i,SV31: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Obot__class_Obot @ SV31 ) @ SV1418 @ SV31 )
= SV1418 )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV31 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3396]) ).
thf(3902,plain,
! [SV1419: $i,SV1122: $i,SV628: $i,SV39: $i] :
( ( ! [SY4222: $i] :
( ( ( c_Set_Oinsert @ SV39 @ ( c_Set_Oinsert @ SV628 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 )
!= ( c_Set_Oinsert @ SV1419 @ ( c_Set_Oinsert @ SY4222 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 ) )
| ( SV39 = SY4222 )
| ( SV39 = SV1419 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3400]) ).
thf(3903,plain,
! [SV1420: $i,SV1123: $i,SV629: $i,SV40: $i] :
( ( ! [SY4223: $i] :
( ( c_Set_Oinsert @ SV40 @ ( c_Set_Oinsert @ SV629 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 )
!= ( c_Set_Oinsert @ SV1420 @ ( c_Set_Oinsert @ SY4223 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 ) )
| ( SV629 = SV1420 )
| ( SV40 = SV1420 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3401]) ).
thf(3904,plain,
! [SV1421: $i,SV1124: $i,SV630: $i,SV41: $i] :
( ( ! [SY4224: $i] :
( ( ( c_Set_Oinsert @ SV41 @ ( c_Set_Oinsert @ SV630 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 )
!= ( c_Set_Oinsert @ SV1421 @ ( c_Set_Oinsert @ SY4224 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 ) )
| ( SV41 = SY4224 )
| ( SV630 = SY4224 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3402]) ).
thf(3905,plain,
! [SV1422: $i,SV1125: $i,SV631: $i,SV42: $i] :
( ( ! [SY4225: $i] :
( ( ( c_Set_Oinsert @ SV42 @ ( c_Set_Oinsert @ SV631 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 )
!= ( c_Set_Oinsert @ SV1422 @ ( c_Set_Oinsert @ SY4225 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 ) )
| ( SV631 = SV1422 )
| ( SV631 = SY4225 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3403]) ).
thf(3906,plain,
! [SV632: $i,SV43: $i] :
( ( ( c_lessequals @ SV43 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV632 @ tc_bool ) ) @ ( tc_fun @ SV632 @ tc_bool ) )
= $false )
| ( ( SV43
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV632 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3404]) ).
thf(3907,plain,
! [SV1126: $i,SV633: $i,SV45: $i] :
( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV45 @ tc_bool ) )
= ( c_Set_Oinsert @ SV633 @ SV1126 @ SV45 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3405]) ).
thf(3908,plain,
! [SV1127: $i,SV634: $i,SV48: $i] :
( ( ( ! [SY3920: $i] :
( ( c_Set_Oimage @ SV48 @ SV634 @ SV1127 @ SY3920 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SY3920 @ tc_bool ) ) ) )
= $true )
| ( ( SV634
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1127 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3407]) ).
thf(3909,plain,
! [SV637: $i,SV51: $i] :
( ( ( c_lessequals @ SV51 @ ( c_HOL_Ouminus__class_Ouminus @ SV51 @ ( tc_fun @ SV637 @ tc_bool ) ) @ ( tc_fun @ SV637 @ tc_bool ) )
= $false )
| ( ( SV51
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV637 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3408]) ).
thf(3910,plain,
! [SV1128: $i,SV638: $i,SV52: $i] :
( ( ( SV52
= ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) @ SV1128 ) )
= $true )
| ( ( ( SV52
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) )
| ~ ( c_lessequals @ SV52 @ ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) @ SV1128 ) @ ( tc_fun @ SV1128 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3409]) ).
thf(3911,plain,
! [SV639: $i,SV55: $i] :
( ( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV55 @ tc_bool ) )
= ( c_List_Oset @ SV639 @ SV55 ) )
= $false )
| ( ( SV639
= ( c_List_Olist_ONil @ SV55 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3410]) ).
thf(3912,plain,
! [SV640: $i,SV57: $i] :
( ( ( ( c_List_Oset @ SV57 @ SV640 )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV640 @ tc_bool ) ) )
= $false )
| ( ( SV57
= ( c_List_Olist_ONil @ SV640 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3411]) ).
thf(3913,plain,
! [SV1129: $i,SV59: $i] :
( ( ( ~ ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OEncryption ) ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OSignature ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV59 @ SV1129 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3412]) ).
thf(3914,plain,
! [SV1423: $i,SV1130: $i,SV641: $i,SV60: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oinsert @ SV60 @ SV641 @ SV1130 ) @ SV1423 @ ( tc_fun @ SV1130 @ tc_bool ) )
= ( c_Set_Oinsert @ SV60 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV641 @ SV1423 @ ( tc_fun @ SV1130 @ tc_bool ) ) @ SV1130 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3413]) ).
thf(3915,plain,
! [SV1424: $i,SV1131: $i,SV642: $i,SV61: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV61 @ ( c_Set_Oinsert @ SV642 @ SV1131 @ SV1424 ) @ ( tc_fun @ SV1424 @ tc_bool ) )
= ( c_Set_Oinsert @ SV642 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV61 @ SV1131 @ ( tc_fun @ SV1424 @ tc_bool ) ) @ SV1424 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3414]) ).
thf(3916,plain,
! [SV62: $i,SV1425: $i] :
( ( ( ! [SY4226: $i] :
( ( c_lessequals @ SV1425 @ SY4226 @ SV62 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY4226 @ SV62 ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1425 @ SV62 ) @ SV62 ) ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV62 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3415]) ).
thf(3917,plain,
! [SV63: $i,SV1426: $i] :
( ( ( ! [SY4227: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1426 @ SV63 ) @ ( c_HOL_Ouminus__class_Ouminus @ SY4227 @ SV63 ) @ SV63 )
| ~ ( c_lessequals @ SY4227 @ SV1426 @ SV63 ) ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV63 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3416]) ).
thf(3918,plain,
! [SV1132: $i,SV643: $i,SV64: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV64 @ ( tc_fun @ SV643 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1132 @ ( tc_fun @ SV643 @ tc_bool ) ) @ ( tc_fun @ SV643 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1132 @ SV64 @ ( tc_fun @ SV643 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3417]) ).
thf(3919,plain,
! [SV1133: $i,SV644: $i,SV65: $i] :
( ( ( c_lessequals @ SV65 @ SV644 @ ( tc_fun @ SV1133 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV644 @ ( tc_fun @ SV1133 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV65 @ ( tc_fun @ SV1133 @ tc_bool ) ) @ ( tc_fun @ SV1133 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3418]) ).
thf(3920,plain,
! [SV1134: $i,SV645: $i,SV66: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV66 @ ( tc_fun @ SV645 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1134 @ ( tc_fun @ SV645 @ tc_bool ) ) @ ( tc_fun @ SV645 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1134 @ SV66 @ ( tc_fun @ SV645 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3419]) ).
thf(3921,plain,
! [SV646: $i,SV67: $i] :
( ( ( c_lessequals @ SV67 @ SV646 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_Osynth @ SV67 ) @ ( c_Message_Osynth @ SV646 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3420]) ).
thf(3922,plain,
! [SV1427: $i,SV1135: $i,SV647: $i,SV68: $i] :
( ( ! [SY4228: $i] :
( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ ( c_List_Oappend @ SV647 @ ( c_List_Olist_OCons @ SV1135 @ SV1427 @ SY4228 ) @ SY4228 ) @ SY4228 ) ) )
| ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ SV1427 @ SY4228 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV68 @ SV1135 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3421]) ).
thf(3923,plain,
! [SV69: $i,SV1428: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1428 @ ( c_Orderings_Otop__class_Otop @ SV69 ) @ SV69 )
= ( c_Orderings_Otop__class_Otop @ SV69 ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV69 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3422]) ).
thf(3924,plain,
! [SV1429: $i,SV70: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Orderings_Otop__class_Otop @ SV70 ) @ SV1429 @ SV70 )
= ( c_Orderings_Otop__class_Otop @ SV70 ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV70 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3423]) ).
thf(3925,plain,
! [SV1430: $i,SV1137: $i,SV653: $i,SV76: $i] :
( ( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV76 @ SV653 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV1137 ) @ SV1430 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OHash @ SV1137 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV76 @ SV653 ) @ SV1430 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3425]) ).
thf(3926,plain,
! [SV1431: $i,SV1138: $i,SV654: $i,SV77: $i] :
( ( ! [SY4229: $i] :
( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ ( c_List_Oappend @ SV654 @ ( c_List_Olist_OCons @ SV1138 @ SV1431 @ SY4229 ) @ SY4229 ) @ SY4229 ) ) )
| ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ SV654 @ SY4229 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV77 @ SV1138 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3426]) ).
thf(3927,plain,
! [SV79: $i,SV656: $i,SV1432: $i] :
( ( ( ( hBOOL @ ( hAPP @ SV1432 @ SV656 ) )
| ! [SY4230: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1432 @ SV79 @ ( tc_fun @ SY4230 @ tc_bool ) ) @ SV656 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV79 @ SV656 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3427]) ).
thf(3928,plain,
! [SV1433: $i,SV1139: $i,SV657: $i,SV80: $i] :
( ( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV80 @ SV657 @ ( tc_fun @ SV1139 @ tc_bool ) ) @ SV1433 ) )
| ~ ( hBOOL @ ( hAPP @ SV657 @ SV1433 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3428]) ).
thf(3929,plain,
! [SV1434: $i,SV1140: $i,SV658: $i,SV81: $i] :
( ( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV81 @ SV658 @ ( tc_fun @ SV1140 @ tc_bool ) ) @ SV1434 ) )
| ~ ( hBOOL @ ( hAPP @ SV81 @ SV1434 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3429]) ).
thf(3930,plain,
! [SV84: $i,SV1435: $i] :
( ( ( ! [SY4231: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SV1435 @ SV84 )
!= ( c_HOL_Ouminus__class_Ouminus @ SY4231 @ SV84 ) )
| ( SV1435 = SY4231 ) ) )
= $true )
| ( ( class_Lattices_Oboolean__algebra @ SV84 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3430]) ).
thf(3931,plain,
! [SV85: $i,SV1436: $i] :
( ( ( ! [SY4232: $i] :
( ( ( c_HOL_Ouminus__class_Ouminus @ SV1436 @ SV85 )
!= ( c_HOL_Ouminus__class_Ouminus @ SY4232 @ SV85 ) )
| ( SV1436 = SY4232 ) ) )
= $true )
| ( ( class_OrderedGroup_Ogroup__add @ SV85 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3431]) ).
thf(3932,plain,
! [SV1141: $i,SV661: $i,SV86: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ SV86 @ ( tc_fun @ SV661 @ tc_bool ) )
!= ( c_HOL_Ouminus__class_Ouminus @ SV1141 @ ( tc_fun @ SV661 @ tc_bool ) ) )
= $true )
| ( ( SV86 = SV1141 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3432]) ).
thf(3933,plain,
! [SV1437: $i,SV87: $i,SV662: $i] :
( ( ( ~ ( c_lessequals @ SV662 @ SV87 @ ( tc_fun @ SV1437 @ tc_bool ) )
| ~ ( c_lessequals @ SV87 @ SV662 @ ( tc_fun @ SV1437 @ tc_bool ) ) )
= $true )
| ( ( SV87 = SV662 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3433]) ).
thf(3934,plain,
! [SV1438: $i,SV88: $i,SV663: $i] :
( ( ( ~ ( c_lessequals @ SV663 @ SV88 @ ( tc_fun @ SV1438 @ tc_bool ) )
| ~ ( c_lessequals @ SV88 @ SV663 @ ( tc_fun @ SV1438 @ tc_bool ) ) )
= $true )
| ( ( SV88 = SV663 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3434]) ).
thf(3935,plain,
! [SV89: $i,SV1439: $i] :
( ( ( ! [SY4233: $i] :
( ( SV1439 = SY4233 )
| ~ ( c_lessequals @ SY4233 @ SV1439 @ SV89 )
| ~ ( c_lessequals @ SV1439 @ SY4233 @ SV89 ) ) )
= $true )
| ( ( class_Orderings_Oorder @ SV89 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3435]) ).
thf(3936,plain,
! [SV90: $i,SV1440: $i] :
( ( ( ! [SY4234: $i] :
( ( SV1440 = SY4234 )
| ~ ( c_lessequals @ SY4234 @ SV1440 @ SV90 )
| ~ ( c_lessequals @ SV1440 @ SY4234 @ SV90 ) ) )
= $true )
| ( ( class_Orderings_Oorder @ SV90 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3436]) ).
thf(3937,plain,
! [SV91: $i,SV1441: $i] :
( ( ( ! [SY4235: $i] :
( ( SV1441 = SY4235 )
| ~ ( c_lessequals @ SV1441 @ SY4235 @ SV91 )
| ~ ( c_lessequals @ SY4235 @ SV1441 @ SV91 ) ) )
= $true )
| ( ( class_Orderings_Oorder @ SV91 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3437]) ).
thf(3938,plain,
! [SV92: $i,SV1442: $i] :
( ( ( ! [SY4236: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1442 @ SY4236 @ SV92 )
= SV1442 )
| ~ ( c_lessequals @ SY4236 @ SV1442 @ SV92 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV92 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3438]) ).
thf(3939,plain,
! [SV93: $i,SV1443: $i] :
( ( ( ! [SY4237: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1443 @ SY4237 @ SV93 )
!= SY4237 )
| ( c_lessequals @ SV1443 @ SY4237 @ SV93 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV93 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3439]) ).
thf(3940,plain,
! [SV94: $i,SV1444: $i] :
( ( ( ! [SY4238: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1444 @ SY4238 @ SV94 )
= SY4238 )
| ~ ( c_lessequals @ SV1444 @ SY4238 @ SV94 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV94 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3440]) ).
thf(3941,plain,
! [SV1142: $i,SV664: $i,SV95: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV95 @ SV664 @ ( tc_fun @ SV1142 @ tc_bool ) )
= SV664 )
= $true )
| ( ( ~ ( c_lessequals @ SV95 @ SV664 @ ( tc_fun @ SV1142 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3441]) ).
thf(3942,plain,
! [SV1143: $i,SV665: $i,SV96: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV96 @ SV665 @ ( tc_fun @ SV1143 @ tc_bool ) )
= SV96 )
= $true )
| ( ( ~ ( c_lessequals @ SV665 @ SV96 @ ( tc_fun @ SV1143 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3442]) ).
thf(3943,plain,
! [SV1144: $i,SV666: $i,SV97: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV97 @ SV666 @ ( tc_fun @ SV1144 @ tc_bool ) )
!= SV666 )
= $true )
| ( ( c_lessequals @ SV97 @ SV666 @ ( tc_fun @ SV1144 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3443]) ).
thf(3944,plain,
! [SV670: $i,SV101: $i] :
( ( ( ( c_Message_Omsg_OHash @ SV101 )
= ( c_Message_Omsg_OHash @ SV670 ) )
= $false )
| ( ( SV101 = SV670 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3446]) ).
thf(3945,plain,
! [SV1445: $i,SV1147: $i,SV671: $i,SV102: $i] :
( ( ! [SY4239: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV102 @ SV671 @ SV1147 @ SV1445 ) @ ( c_Set_Oimage @ SV102 @ SY4239 @ SV1147 @ SV1445 ) @ ( tc_fun @ SV1445 @ tc_bool ) )
= ( c_Set_Oimage @ SV102 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV671 @ SY4239 @ ( tc_fun @ SV1147 @ tc_bool ) ) @ SV1147 @ SV1445 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3447]) ).
thf(3946,plain,
! [SV1446: $i,SV1148: $i,SV672: $i,SV103: $i] :
( ( ! [SY4240: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV103 @ SV672 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1446 @ SY4240 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( tc_fun @ SV1148 @ tc_bool ) )
| ~ ( c_lessequals @ SV672 @ SY4240 @ ( tc_fun @ SV1148 @ tc_bool ) )
| ~ ( c_lessequals @ SV103 @ SV1446 @ ( tc_fun @ SV1148 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3448]) ).
thf(3947,plain,
! [SV105: $i,SV1447: $i] :
( ( ( c_lessequals @ SV1447 @ ( c_Orderings_Otop__class_Otop @ SV105 ) @ SV105 )
= $true )
| ( ( class_Orderings_Otop @ SV105 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3449]) ).
thf(3948,plain,
! [SV1448: $i,SV1149: $i,SV674: $i,SV106: $i] :
( ( ( c_lessequals @ ( c_Set_Oinsert @ SV106 @ SV674 @ SV1149 ) @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) )
| ~ ( c_lessequals @ SV674 @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) )
| ~ ( c_in @ SV106 @ SV1448 @ SV1149 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3450]) ).
thf(3949,plain,
! [SV675: $i,SV108: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV108 )
= $false )
| ( ( ! [SY3274: $i] :
( ( c_lessequals @ SV675 @ SY3274 @ SV108 )
| ! [SY3275: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3275 @ SV675 @ SV108 ) @ SY3274 @ SV108 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3451]) ).
thf(3950,plain,
! [SV676: $i,SV109: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV109 )
= $false )
| ( ( ! [SY3276: $i] :
( ( c_lessequals @ SV676 @ SY3276 @ SV109 )
| ! [SY3277: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV676 @ SY3277 @ SV109 ) @ SY3276 @ SV109 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3452]) ).
thf(3951,plain,
! [SV677: $i,SV110: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV110 )
= $false )
| ( ( ! [SY3278: $i,SY3279: $i] :
( ( c_lessequals @ SV677 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3278 @ SY3279 @ SV110 ) @ SV110 )
| ~ ( c_lessequals @ SV677 @ SY3279 @ SV110 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3453]) ).
thf(3952,plain,
! [SV678: $i,SV111: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV111 )
= $false )
| ( ( ! [SY3280: $i] :
( ! [SY3281: $i] : ( c_lessequals @ SV678 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3280 @ SY3281 @ SV111 ) @ SV111 )
| ~ ( c_lessequals @ SV678 @ SY3280 @ SV111 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3454]) ).
thf(3953,plain,
! [SV679: $i,SV112: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV112 )
= $false )
| ( ( ! [SY3282: $i] :
( ( c_lessequals @ SV679 @ SY3282 @ SV112 )
| ! [SY3283: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3283 @ SV679 @ SV112 ) @ SY3282 @ SV112 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3455]) ).
thf(3954,plain,
! [SV680: $i,SV113: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV113 )
= $false )
| ( ( ! [SY3284: $i] :
( ( c_lessequals @ SV680 @ SY3284 @ SV113 )
| ! [SY3285: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV680 @ SY3285 @ SV113 ) @ SY3284 @ SV113 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3456]) ).
thf(3955,plain,
! [SV1150: $i,SV681: $i,SV114: $i] :
( ( ( c_lessequals @ SV114 @ SV681 @ ( tc_fun @ SV1150 @ tc_bool ) )
= $true )
| ( ( ! [SY3935: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV114 @ SY3935 @ ( tc_fun @ SV1150 @ tc_bool ) ) @ SV681 @ ( tc_fun @ SV1150 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3457]) ).
thf(3956,plain,
! [SV1151: $i,SV682: $i,SV115: $i] :
( ( ( c_lessequals @ SV115 @ SV682 @ ( tc_fun @ SV1151 @ tc_bool ) )
= $true )
| ( ( ! [SY3936: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3936 @ SV115 @ ( tc_fun @ SV1151 @ tc_bool ) ) @ SV682 @ ( tc_fun @ SV1151 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3458]) ).
thf(3957,plain,
! [SV683: $i,SV116: $i] :
( ( ( class_Orderings_Oorder @ SV116 )
= $false )
| ( ( ! [SY3290: $i] :
( ( c_lessequals @ SV683 @ SY3290 @ SV116 )
| ! [SY3291: $i] :
( ~ ( c_lessequals @ SV683 @ SY3291 @ SV116 )
| ~ ( c_lessequals @ SY3291 @ SY3290 @ SV116 ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3459]) ).
thf(3958,plain,
! [SV684: $i,SV117: $i] :
( ( ( class_Orderings_Opreorder @ SV117 )
= $false )
| ( ( ! [SY3292: $i] :
( ( c_lessequals @ SV684 @ SY3292 @ SV117 )
| ! [SY3293: $i] :
( ~ ( c_lessequals @ SY3293 @ SY3292 @ SV117 )
| ~ ( c_lessequals @ SV684 @ SY3293 @ SV117 ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3460]) ).
thf(3959,plain,
! [SV1152: $i,SV687: $i,SV120: $i] :
( ( ( c_lessequals @ SV120 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
= $true )
| ( ( ! [SY3937: $i] :
( ~ ( c_lessequals @ SY3937 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
| ~ ( c_lessequals @ SV120 @ SY3937 @ ( tc_fun @ SV1152 @ tc_bool ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3461]) ).
thf(3960,plain,
! [SV121: $i,SV688: $i,SV1449: $i] :
( ( ( ~ ( hBOOL @ ( hAPP @ SV1449 @ SV688 ) )
| ! [SY4241: $i] :
~ ( c_lessequals @ SV1449 @ SV121 @ ( tc_fun @ SY4241 @ tc_bool ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV121 @ SV688 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3462]) ).
thf(3961,plain,
! [SV122: $i,SV1450: $i] :
( ( ( c_lessequals @ SV1450 @ SV1450 @ SV122 )
= $true )
| ( ( class_Orderings_Oorder @ SV122 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3463]) ).
thf(3962,plain,
! [SV123: $i,SV1451: $i] :
( ( ( c_lessequals @ SV1451 @ SV1451 @ SV123 )
= $true )
| ( ( class_Orderings_Opreorder @ SV123 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3464]) ).
thf(3963,plain,
! [SV689: $i,SV124: $i,SV1452: $i] :
( ( ( ! [SY4242: $i] :
~ ( c_lessequals @ SV1452 @ SV124 @ ( tc_fun @ SY4242 @ tc_bool ) )
| ~ ( hBOOL @ ( hAPP @ SV1452 @ SV689 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV124 @ SV689 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3465]) ).
thf(3964,plain,
! [SV1153: $i,SV691: $i,SV126: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV126 @ SV691 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV1153 ) @ ( c_Message_Oparts @ SV691 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_in @ SV126 @ SV1153 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3466]) ).
thf(3965,plain,
! [SV1453: $i,SV1154: $i,SV692: $i,SV127: $i] :
( ( ! [SY4243: $i] :
( ( c_lessequals @ ( c_Set_Oimage @ SV127 @ SV692 @ SV1154 @ SV1453 ) @ ( c_Set_Oimage @ SV127 @ SY4243 @ SV1154 @ SV1453 ) @ ( tc_fun @ SV1453 @ tc_bool ) )
| ~ ( c_lessequals @ SV692 @ SY4243 @ ( tc_fun @ SV1154 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3467]) ).
thf(3966,plain,
! [SV1155: $i,SV693: $i,SV128: $i] :
( ( ( ~ ( c_lessequals @ SV128 @ SV693 @ ( tc_fun @ SV1155 @ tc_bool ) ) )
= $true )
| ( ( ! [SY3940: $i,SY3941: $i] : ( c_lessequals @ ( c_Set_Oimage @ SY3940 @ SV128 @ SV1155 @ SY3941 ) @ ( c_Set_Oimage @ SY3940 @ SV693 @ SV1155 @ SY3941 ) @ ( tc_fun @ SY3941 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3468]) ).
thf(3967,plain,
! [SV1454: $i,SV1156: $i,SV694: $i,SV129: $i] :
( ( ( c_lessequals @ ( c_Set_Oinsert @ SV129 @ SV694 @ SV1156 ) @ ( c_Set_Oinsert @ SV129 @ SV1454 @ SV1156 ) @ ( tc_fun @ SV1156 @ tc_bool ) )
| ~ ( c_lessequals @ SV694 @ SV1454 @ ( tc_fun @ SV1156 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3469]) ).
thf(3968,plain,
! [SV1455: $i,SV1157: $i,SV695: $i,SV130: $i] :
( ( ! [SY4244: $i] :
( ( c_Set_Oimage @ SV130 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV695 @ SV1157 @ ( tc_fun @ SV1455 @ tc_bool ) ) @ SV1455 @ SY4244 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV130 @ SV695 @ SV1455 @ SY4244 ) @ ( c_Set_Oimage @ SV130 @ SV1157 @ SV1455 @ SY4244 ) @ ( tc_fun @ SY4244 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3470]) ).
thf(3969,plain,
! [SV1456: $i,SV1158: $i,SV697: $i,SV132: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV132 @ SV697 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1158 @ SV1456 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV697 ) @ ( c_Message_Oanalz @ SV1456 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV132 ) @ ( c_Message_Oanalz @ SV1158 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3471]) ).
thf(3970,plain,
! [SV133: $i,SV1457: $i] :
( ( ( ! [SY4245: $i] :
( ( c_lessequals @ SV1457 @ SY4245 @ SV133 )
| ( c_lessequals @ SY4245 @ SV1457 @ SV133 ) ) )
= $true )
| ( ( class_Orderings_Olinorder @ SV133 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3472]) ).
thf(3971,plain,
! [SV1458: $i,SV1159: $i,SV698: $i,SV134: $i] :
( ( ( c_in @ ( hAPP @ SV134 @ SV698 ) @ SV1159 @ SV1458 )
| ! [SY4246: $i,SY4247: $i] :
( ~ ( c_in @ SV698 @ SY4246 @ SY4247 )
| ~ ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SY4246 @ SY4247 @ SV1458 ) @ SV1159 @ ( tc_fun @ SV1458 @ tc_bool ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3473]) ).
thf(3972,plain,
! [SV700: $i,SV1459: $i,SV136: $i] :
( ( ( ( c_in @ SV136 @ ( c_Message_Oparts @ SV1459 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV136 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1459 @ SV700 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV136 @ ( c_Message_Oparts @ SV700 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3475]) ).
thf(3973,plain,
! [SV137: $i,SV701: $i,SV1460: $i] :
( ( ( ~ ( c_lessequals @ SV1460 @ ( c_Message_Oparts @ SV701 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV137 @ ( c_Message_Oparts @ SV1460 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV137 @ ( c_Message_Oparts @ SV701 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3476]) ).
thf(3974,plain,
! [SV1161: $i,SV702: $i,SV138: $i] :
( ( ( c_in @ SV138 @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV702 @ SV1161 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV138 @ ( c_Message_Oanalz @ SV1161 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3477]) ).
thf(3975,plain,
! [SV139: $i,SV703: $i,SV1461: $i] :
( ( ( ~ ( c_lessequals @ SV1461 @ ( c_Message_Oanalz @ SV703 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV139 @ ( c_Message_Oanalz @ SV1461 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV139 @ ( c_Message_Oanalz @ SV703 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3478]) ).
thf(3976,plain,
! [SV704: $i,SV141: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ SV704 @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ ( c_Message_Osynth @ SV704 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV141 @ ( c_Message_Osynth @ SV704 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3479]) ).
thf(3977,plain,
! [SV142: $i,SV705: $i,SV1462: $i] :
( ( ( ~ ( c_lessequals @ SV1462 @ ( c_Message_Osynth @ SV705 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV142 @ ( c_Message_Osynth @ SV1462 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV142 @ ( c_Message_Osynth @ SV705 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3480]) ).
thf(3978,plain,
! [SV706: $i,SV143: $i] :
( ( ( c_in @ SV143 @ ( c_Message_Osynth @ SV706 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OHash @ SV143 ) @ ( c_Message_Osynth @ SV706 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3481]) ).
thf(3979,plain,
! [SV707: $i,SV145: $i] :
( ( ( c_lessequals @ SV145 @ SV707 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV145 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV707 ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3482]) ).
thf(3980,plain,
! [SV1463: $i,SV1163: $i,SV712: $i,SV151: $i] :
( ( ( c_lessequals @ SV151 @ ( c_Set_Oinsert @ SV712 @ SV1163 @ SV1463 ) @ ( tc_fun @ SV1463 @ tc_bool ) )
| ~ ( c_lessequals @ SV151 @ SV1163 @ ( tc_fun @ SV1463 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3484]) ).
thf(3981,plain,
! [SV1164: $i,SV713: $i,SV152: $i] :
( ( ( c_lessequals @ SV152 @ SV713 @ ( tc_fun @ SV1164 @ tc_bool ) )
= $true )
| ( ( ! [SY3950: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ SY3950 @ SV152 @ SV1164 ) @ SV713 @ ( tc_fun @ SV1164 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3485]) ).
thf(3982,plain,
! [SV154: $i,SV1464: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1464 @ SV1464 @ SV154 )
= SV1464 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV154 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3486]) ).
thf(3983,plain,
! [SV717: $i,SV157: $i] :
( ( ( c_lessequals @ SV157 @ ( c_Message_Osynth @ SV717 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_Osynth @ SV157 ) @ ( c_Message_Osynth @ SV717 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3487]) ).
thf(3984,plain,
! [SV718: $i,SV158: $i] :
( ( ( c_lessequals @ ( c_Message_Osynth @ SV158 ) @ ( c_Message_Osynth @ SV718 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV158 @ ( c_Message_Osynth @ SV718 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3488]) ).
thf(3985,plain,
! [SV1165: $i,SV719: $i,SV159: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV159 @ SV719 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1165 ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1165 @ SV719 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_in @ SV159 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1165 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3489]) ).
thf(3986,plain,
! [SV1465: $i,SV1166: $i,SV720: $i,SV160: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV160 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV720 @ SV1166 @ ( tc_fun @ SV1465 @ tc_bool ) ) @ ( tc_fun @ SV1465 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV720 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV160 @ SV1166 @ ( tc_fun @ SV1465 @ tc_bool ) ) @ ( tc_fun @ SV1465 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3490]) ).
thf(3987,plain,
! [SV1466: $i,SV1167: $i,SV721: $i,SV161: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV161 @ SV721 @ ( tc_fun @ SV1167 @ tc_bool ) ) @ SV1466 @ ( tc_fun @ SV1167 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV161 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV721 @ SV1466 @ ( tc_fun @ SV1167 @ tc_bool ) ) @ ( tc_fun @ SV1167 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3491]) ).
thf(3988,plain,
! [SV722: $i,SV162: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV162 )
= $false )
| ( ( ! [SY3334: $i,SY3335: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ SY3334 @ SV162 ) @ SY3335 @ SV162 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3334 @ SY3335 @ SV162 ) @ SV162 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3492]) ).
thf(3989,plain,
! [SV723: $i,SV163: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV163 )
= $false )
| ( ( ! [SY3336: $i,SY3337: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3336 @ SY3337 @ SV163 ) @ SV163 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY3336 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ SY3337 @ SV163 ) @ SV163 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3493]) ).
thf(3990,plain,
! [SV1467: $i,SV1168: $i,SV724: $i,SV164: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV164 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV724 @ SV1168 @ ( tc_fun @ SV1467 @ tc_bool ) ) @ ( tc_fun @ SV1467 @ tc_bool ) )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV164 @ SV724 @ ( tc_fun @ SV1467 @ tc_bool ) ) @ SV1168 @ ( tc_fun @ SV1467 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3494]) ).
thf(3991,plain,
! [SV725: $i,SV165: $i] :
( ( ( class_Lattices_Olattice @ SV165 )
= $false )
| ( ( ! [SY3340: $i,SY3341: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3340 @ SY3341 @ SV165 ) @ SV165 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY3340 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ SY3341 @ SV165 ) @ SV165 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3495]) ).
thf(3992,plain,
! [SV726: $i,SV166: $i] :
( ( ( class_Lattices_Olattice @ SV166 )
= $false )
| ( ( ! [SY3342: $i,SY3343: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ SY3342 @ SV166 ) @ SY3343 @ SV166 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3342 @ SY3343 @ SV166 ) @ SV166 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3496]) ).
thf(3993,plain,
! [SV727: $i,SV167: $i] :
( ( ( c_in @ SV167 @ SV727 @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV167 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ SV727 @ tc_nat @ tc_nat ) @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3497]) ).
thf(3994,plain,
! [SV728: $i,SV168: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV168 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ SV728 @ tc_nat @ tc_nat ) @ tc_nat )
= $false )
| ( ( c_in @ SV168 @ SV728 @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3498]) ).
thf(3995,plain,
! [SV1468: $i,SV1169: $i,SV729: $i,SV169: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV169 @ SV729 @ ( tc_fun @ SV1169 @ tc_bool ) ) @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
| ~ ( c_lessequals @ SV729 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
| ~ ( c_lessequals @ SV169 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3499]) ).
thf(3996,plain,
! [SV1469: $i,SV1172: $i,SV732: $i,SV172: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV172 @ SV732 @ ( tc_fun @ SV1172 @ tc_bool ) ) @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
| ~ ( c_lessequals @ SV732 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
| ~ ( c_lessequals @ SV172 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3502]) ).
thf(3997,plain,
! [SV733: $i,SV173: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV173 )
= $false )
| ( ( ! [SY3350: $i,SY3351: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV733 @ SY3350 @ SV173 ) @ SY3351 @ SV173 )
| ~ ( c_lessequals @ SY3350 @ SY3351 @ SV173 )
| ~ ( c_lessequals @ SV733 @ SY3351 @ SV173 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3503]) ).
thf(3998,plain,
! [SV174: $i,SV1470: $i] :
( ( ( ! [SY4248: $i] : ( c_lessequals @ SV1470 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1470 @ SY4248 @ SV174 ) @ SV174 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV174 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3504]) ).
thf(3999,plain,
! [SV175: $i,SV1471: $i] :
( ( ( ! [SY4249: $i] : ( c_lessequals @ SV1471 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY4249 @ SV1471 @ SV175 ) @ SV175 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV175 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3505]) ).
thf(4000,plain,
! [SV734: $i,SV176: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV176 )
= $false )
| ( ( ! [SY3352: $i,SY3353: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV734 @ SY3352 @ SV176 ) @ SY3353 @ SV176 )
| ~ ( c_lessequals @ SY3352 @ SY3353 @ SV176 )
| ~ ( c_lessequals @ SV734 @ SY3353 @ SV176 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3506]) ).
thf(4001,plain,
! [SV735: $i,SV177: $i] :
( ( ( class_Lattices_Oupper__semilattice @ SV177 )
= $false )
| ( ( ! [SY3354: $i,SY3355: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV735 @ SY3354 @ SV177 ) @ SY3355 @ SV177 )
| ~ ( c_lessequals @ SY3354 @ SY3355 @ SV177 )
| ~ ( c_lessequals @ SV735 @ SY3355 @ SV177 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3507]) ).
thf(4002,plain,
! [SV178: $i,SV1472: $i] :
( ( ( ! [SY4250: $i] : ( c_lessequals @ SV1472 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY4250 @ SV1472 @ SV178 ) @ SV178 ) )
= $true )
| ( ( class_Lattices_Olattice @ SV178 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3508]) ).
thf(4003,plain,
! [SV179: $i,SV1473: $i] :
( ( ( ! [SY4251: $i] : ( c_lessequals @ SV1473 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1473 @ SY4251 @ SV179 ) @ SV179 ) )
= $true )
| ( ( class_Lattices_Olattice @ SV179 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3509]) ).
thf(4004,plain,
! [SV182: $i,SV1474: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_HOL_Ouminus__class_Ouminus @ SV1474 @ SV182 ) @ SV1474 @ SV182 )
= ( c_Orderings_Otop__class_Otop @ SV182 ) )
= $true )
| ( ( class_Lattices_Oboolean__algebra @ SV182 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3510]) ).
thf(4005,plain,
! [SV183: $i,SV1475: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1475 @ ( c_HOL_Ouminus__class_Ouminus @ SV1475 @ SV183 ) @ SV183 )
= ( c_Orderings_Otop__class_Otop @ SV183 ) )
= $true )
| ( ( class_Lattices_Oboolean__algebra @ SV183 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3511]) ).
thf(4006,plain,
! [SV1173: $i,SV739: $i,SV185: $i] :
( ( ( c_in @ SV185 @ SV739 @ SV1173 )
= $true )
| ( ( ! [SY3956: $i] :
~ ( c_lessequals @ ( c_Set_Oinsert @ SV185 @ SY3956 @ SV1173 ) @ SV739 @ ( tc_fun @ SV1173 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3512]) ).
thf(4007,plain,
! [SV1476: $i,SV1174: $i,SV740: $i,SV186: $i] :
( ( ( c_lessequals @ SV186 @ ( c_Set_Oinsert @ SV740 @ SV1174 @ SV1476 ) @ ( tc_fun @ SV1476 @ tc_bool ) )
| ~ ( c_lessequals @ SV186 @ SV1174 @ ( tc_fun @ SV1476 @ tc_bool ) )
| ( c_in @ SV740 @ SV186 @ SV1476 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3513]) ).
thf(4008,plain,
! [SV1175: $i,SV741: $i,SV187: $i] :
( ( ( c_lessequals @ SV187 @ SV741 @ ( tc_fun @ SV1175 @ tc_bool ) )
= $true )
| ( ( ! [SY3958: $i] :
( ( c_in @ SY3958 @ SV187 @ SV1175 )
| ~ ( c_lessequals @ SV187 @ ( c_Set_Oinsert @ SY3958 @ SV741 @ SV1175 ) @ ( tc_fun @ SV1175 @ tc_bool ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3514]) ).
thf(4009,plain,
! [SV1477: $i,SV1176: $i,SV742: $i,SV188: $i] :
( ( ( c_lessequals @ SV188 @ ( c_Set_Oinsert @ SV742 @ SV1176 @ SV1477 ) @ ( tc_fun @ SV1477 @ tc_bool ) )
| ~ ( c_lessequals @ SV188 @ SV1176 @ ( tc_fun @ SV1477 @ tc_bool ) )
| ( c_in @ SV742 @ SV188 @ SV1477 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3515]) ).
thf(4010,plain,
! [SV1177: $i,SV743: $i,SV189: $i] :
( ( ( c_lessequals @ SV189 @ SV743 @ ( tc_fun @ SV1177 @ tc_bool ) )
= $true )
| ( ( ! [SY3960: $i] :
( ~ ( c_lessequals @ SV189 @ ( c_Set_Oinsert @ SY3960 @ SV743 @ SV1177 ) @ ( tc_fun @ SV1177 @ tc_bool ) )
| ( c_in @ SY3960 @ SV189 @ SV1177 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3516]) ).
thf(4011,plain,
! [SV191: $i,SV1478: $i] :
( ( ( ! [SY4252: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1478 @ SY4252 @ SV191 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY4252 @ SV1478 @ SV191 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV191 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3518]) ).
thf(4012,plain,
! [SV192: $i,SV1479: $i] :
( ( ( ! [SY4253: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1479 @ SY4253 @ SV192 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SY4253 @ SV1479 @ SV192 ) ) )
= $true )
| ( ( class_Lattices_Olattice @ SV192 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3519]) ).
thf(4013,plain,
! [SV194: $i,SV1480: $i] :
( ( ( ! [SY4254: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1480 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1480 @ SY4254 @ SV194 ) @ SV194 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1480 @ SY4254 @ SV194 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV194 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3521]) ).
thf(4014,plain,
! [SV195: $i,SV1481: $i] :
( ( ( ! [SY4255: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1481 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1481 @ SY4255 @ SV195 ) @ SV195 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1481 @ SY4255 @ SV195 ) ) )
= $true )
| ( ( class_Lattices_Olattice @ SV195 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3522]) ).
thf(4015,plain,
! [SV747: $i,SV197: $i] :
( ( ( c_lessequals @ SV197 @ SV747 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_OkeysFor @ SV197 ) @ ( c_Message_OkeysFor @ SV747 ) @ ( tc_fun @ tc_nat @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3523]) ).
thf(4016,plain,
! [SV200: $i,SV1482: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SV1482 @ SV200 ) @ SV200 )
= SV1482 )
= $true )
| ( ( class_OrderedGroup_Ogroup__add @ SV200 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3525]) ).
thf(4017,plain,
! [SV201: $i,SV1483: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SV1483 @ SV201 ) @ SV201 )
= SV1483 )
= $true )
| ( ( class_Lattices_Oboolean__algebra @ SV201 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3526]) ).
thf(4018,plain,
! [SV202: $i,SV1484: $i] :
( ( ( SV1484
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SV1484 @ SV202 ) @ SV202 ) )
= $true )
| ( ( class_OrderedGroup_Ogroup__add @ SV202 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3527]) ).
thf(4019,plain,
! [SV203: $i,SV1485: $i] :
( ( ( SV1485
= ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SV1485 @ SV203 ) @ SV203 ) )
= $true )
| ( ( class_OrderedGroup_Ogroup__add @ SV203 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3528]) ).
thf(4020,plain,
! [SV204: $i,SV1486: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ ( c_HOL_Ouminus__class_Ouminus @ SV1486 @ SV204 ) @ SV204 )
= SV1486 )
= $true )
| ( ( class_OrderedGroup_Ogroup__add @ SV204 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3529]) ).
thf(4021,plain,
! [SV1181: $i,SV750: $i,SV205: $i] :
( ( ( ~ ( class_HOL_Oord @ SV205 ) )
= $true )
| ( ( ! [SY3961: $i] :
( ( c_lessequals @ ( hAPP @ SV750 @ SV1181 ) @ ( hAPP @ SY3961 @ SV1181 ) @ SV205 )
| ! [SY3371: $i] :
~ ( c_lessequals @ SV750 @ SY3961 @ ( tc_fun @ SY3371 @ SV205 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3530]) ).
thf(4022,plain,
! [SV206: $i,SV1487: $i] :
( ( ( ! [SY4256: $i] :
( ( c_lessequals @ SV1487 @ ( c_HOL_Ouminus__class_Ouminus @ SY4256 @ SV206 ) @ SV206 )
| ~ ( c_lessequals @ SY4256 @ ( c_HOL_Ouminus__class_Ouminus @ SV1487 @ SV206 ) @ SV206 ) ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV206 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3531]) ).
thf(4023,plain,
! [SV207: $i,SV1488: $i] :
( ( ( ! [SY4257: $i] :
( ( c_lessequals @ SV1488 @ ( c_HOL_Ouminus__class_Ouminus @ SY4257 @ SV207 ) @ SV207 )
| ~ ( c_lessequals @ SY4257 @ ( c_HOL_Ouminus__class_Ouminus @ SV1488 @ SV207 ) @ SV207 ) ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV207 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3532]) ).
thf(4024,plain,
! [SV208: $i,SV1489: $i] :
( ( ( ! [SY4258: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1489 @ SV208 ) @ SY4258 @ SV208 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY4258 @ SV208 ) @ SV1489 @ SV208 ) ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV208 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3533]) ).
thf(4025,plain,
! [SV209: $i,SV1490: $i] :
( ( ( ! [SY4259: $i] :
( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1490 @ SV209 ) @ SY4259 @ SV209 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SY4259 @ SV209 ) @ SV1490 @ SV209 ) ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV209 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3534]) ).
thf(4026,plain,
! [SV1182: $i,SV751: $i,SV210: $i] :
( ( ( c_in @ SV210 @ SV751 @ SV1182 )
= $true )
| ( ( ! [SY3963: $i] :
( ~ ( c_in @ SV210 @ SY3963 @ SV1182 )
| ~ ( c_lessequals @ SY3963 @ SV751 @ ( tc_fun @ SV1182 @ tc_bool ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3535]) ).
thf(4027,plain,
! [SV1183: $i,SV752: $i,SV211: $i] :
( ( ( c_in @ SV211 @ SV752 @ SV1183 )
= $true )
| ( ( ! [SY3964: $i] :
( ~ ( c_lessequals @ SY3964 @ SV752 @ ( tc_fun @ SV1183 @ tc_bool ) )
| ~ ( c_in @ SV211 @ SY3964 @ SV1183 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3536]) ).
thf(4028,plain,
! [SV1184: $i,SV753: $i,SV212: $i] :
( ( ( c_in @ SV212 @ SV753 @ SV1184 )
= $true )
| ( ( ! [SY3965: $i] :
( ~ ( c_in @ SV212 @ SY3965 @ SV1184 )
| ~ ( c_lessequals @ SY3965 @ SV753 @ ( tc_fun @ SV1184 @ tc_bool ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3537]) ).
thf(4029,plain,
! [SV1185: $i,SV754: $i,SV213: $i] :
( ( ( c_in @ SV213 @ SV754 @ SV1185 )
= $true )
| ( ( ! [SY3966: $i] :
( ~ ( c_in @ SV213 @ SY3966 @ SV1185 )
| ~ ( c_lessequals @ SY3966 @ SV754 @ ( tc_fun @ SV1185 @ tc_bool ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3538]) ).
thf(4030,plain,
! [SV1491: $i,SV1186: $i,SV755: $i,SV214: $i] :
( ( ( c_in @ SV214 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV755 @ SV1186 @ ( tc_fun @ SV1491 @ tc_bool ) ) @ SV1491 )
| ~ ( c_in @ SV214 @ SV755 @ SV1491 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3539]) ).
thf(4031,plain,
! [SV1492: $i,SV1187: $i,SV756: $i,SV215: $i] :
( ( ( c_in @ SV215 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV756 @ SV1187 @ ( tc_fun @ SV1492 @ tc_bool ) ) @ SV1492 )
| ~ ( c_in @ SV215 @ SV1187 @ SV1492 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3540]) ).
thf(4032,plain,
! [SV1188: $i,SV757: $i,SV216: $i] :
( ( ( c_in @ SV216 @ SV757 @ SV1188 )
= $true )
| ( ( ! [SY3969: $i] :
( ( c_in @ SV216 @ SY3969 @ SV1188 )
| ~ ( c_in @ SV216 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3969 @ SV757 @ ( tc_fun @ SV1188 @ tc_bool ) ) @ SV1188 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3541]) ).
thf(4033,plain,
! [SV1189: $i,SV758: $i,SV217: $i] :
( ( ( c_in @ SV217 @ ( c_HOL_Ouminus__class_Ouminus @ SV758 @ ( tc_fun @ SV1189 @ tc_bool ) ) @ SV1189 )
= $true )
| ( ( c_in @ SV217 @ SV758 @ SV1189 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3542]) ).
thf(4034,plain,
! [SV1190: $i,SV759: $i,SV218: $i] :
( ( ( ~ ( c_in @ SV218 @ SV759 @ SV1190 ) )
= $true )
| ( ( ~ ( c_in @ SV218 @ ( c_HOL_Ouminus__class_Ouminus @ SV759 @ ( tc_fun @ SV1190 @ tc_bool ) ) @ SV1190 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3543]) ).
thf(4035,plain,
! [SV1191: $i,SV760: $i,SV219: $i] :
( ( ( c_Message_Omsg_OMPair @ SV219 @ SV760 )
= ( c_Message_Omsg_OHash @ SV1191 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3544]) ).
thf(4036,plain,
! [SV1192: $i,SV761: $i,SV220: $i] :
( ( ( c_Message_Omsg_OHash @ SV220 )
= ( c_Message_Omsg_OMPair @ SV761 @ SV1192 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3545]) ).
thf(4037,plain,
! [SV763: $i,SV223: $i] :
( ( ( c_lessequals @ SV223 @ SV763 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_Oparts @ SV223 ) @ ( c_Message_Oparts @ SV763 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3546]) ).
thf(4038,plain,
! [SV764: $i,SV224: $i] :
( ( ( c_lessequals @ SV224 @ ( c_Message_Oparts @ SV764 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_Oparts @ SV224 ) @ ( c_Message_Oparts @ SV764 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3547]) ).
thf(4039,plain,
! [SV765: $i,SV225: $i] :
( ( ( c_lessequals @ ( c_Message_Oparts @ SV225 ) @ ( c_Message_Oparts @ SV765 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV225 @ ( c_Message_Oparts @ SV765 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3548]) ).
thf(4040,plain,
! [SV1193: $i,SV766: $i,SV226: $i] :
( ( ( c_Message_Omsg_OHash @ SV226 )
= ( c_Message_Omsg_OCrypt @ SV766 @ SV1193 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3549]) ).
thf(4041,plain,
! [SV1194: $i,SV767: $i,SV227: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV227 @ SV767 )
= ( c_Message_Omsg_OHash @ SV1194 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3550]) ).
thf(4042,plain,
! [SV770: $i,SV230: $i] :
( ( ( c_lessequals @ SV230 @ SV770 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_Oanalz @ SV230 ) @ ( c_Message_Oanalz @ SV770 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3553]) ).
thf(4043,plain,
! [SV771: $i,SV231: $i] :
( ( ( c_lessequals @ SV231 @ ( c_Message_Oanalz @ SV771 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_Oanalz @ SV231 ) @ ( c_Message_Oanalz @ SV771 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3554]) ).
thf(4044,plain,
! [SV772: $i,SV232: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ SV232 ) @ ( c_Message_Oanalz @ SV772 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV232 @ ( c_Message_Oanalz @ SV772 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3555]) ).
thf(4045,plain,
! [SV774: $i,SV235: $i] :
( ( ( ( c_Message_Oanalz @ SV235 )
= ( c_Message_Oanalz @ SV774 ) )
= $false )
| ( ( ! [SY3392: $i,SY3393: $i] :
( ( ( c_Message_Oanalz @ SY3392 )
!= ( c_Message_Oanalz @ SY3393 ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3392 @ SV235 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY3393 @ SV774 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3556]) ).
thf(4046,plain,
! [SV779: $i,SV241: $i] :
( ( ( c_in @ SV241 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV779 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV241 @ SV779 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV779 ) ) @ ( c_Message_Oparts @ SV779 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3561]) ).
thf(4047,plain,
! [SV1195: $i,SV780: $i,SV242: $i] :
( ( ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV780 @ SV1195 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY3970: $i] :
( ~ ( c_in @ SY3970 @ ( c_Message_Oparts @ SV1195 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY3970 @ SV780 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3562]) ).
thf(4048,plain,
! [SV243: $i,SV781: $i,SV1493: $i] :
( ( ( ~ ( c_lessequals @ SV1493 @ SV781 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV243 @ ( c_Message_Oanalz @ SV1493 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV243 @ SV781 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SV781 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3563]) ).
thf(4049,plain,
! [SV1494: $i,SV1197: $i,SV784: $i,SV246: $i] :
( ( ! [SY4260: $i] : ( c_lessequals @ ( c_Event_Oknows @ SV246 @ SV784 ) @ ( c_Event_Oknows @ SV246 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV1197 @ SV1494 @ SY4260 ) @ SV784 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3566]) ).
thf(4050,plain,
! [SV1495: $i,SV1198: $i,SV786: $i,SV248: $i] :
( ( c_lessequals @ ( c_Event_Oknows @ SV248 @ SV786 ) @ ( c_Event_Oknows @ SV248 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV1198 @ SV1495 ) @ SV786 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3568]) ).
thf(4051,plain,
! [SV1496: $i,SV1199: $i,SV787: $i,SV249: $i] :
( ( c_lessequals @ ( c_Event_Oknows @ SV249 @ SV787 ) @ ( c_Event_Oknows @ SV249 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV1199 @ SV1496 ) @ SV787 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3569]) ).
thf(4052,plain,
! [SV1497: $i,SV1200: $i,SV788: $i,SV250: $i] :
( ( ! [SY4261: $i] :
( ~ ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4262: $i,SY4263: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SV1497 @ ( c_Message_Omsg_OMPair @ SY4261 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4262 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY4263 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3570]) ).
thf(4053,plain,
! [SV1498: $i,SV789: $i,SV251: $i] :
( ( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV251 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV789 @ SV1498 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1498 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV251 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV789 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3571]) ).
thf(4054,plain,
! [SV1499: $i,SV1201: $i,SV790: $i,SV252: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV252 @ SV790 @ SV1201 ) @ SV1499 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1201 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1499 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3572]) ).
thf(4055,plain,
! [SV1500: $i,SV1202: $i,SV253: $i] :
( ( ( ( c_Event_Oknows @ SV253 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV253 @ SV1202 ) @ SV1500 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1202 @ ( c_Event_Oknows @ SV253 @ SV1500 ) @ tc_Message_Omsg ) )
= $true )
| ( ( SV253 = c_Message_Oagent_OSpy )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3573]) ).
thf(4056,plain,
! [SV1501: $i,SV1203: $i,SV791: $i,SV254: $i] :
( ( ~ ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4264: $i,SY4265: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SV1501 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4264 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY4265 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3574]) ).
thf(4057,plain,
! [SV792: $i,SV255: $i] :
( ( ( c_in @ SV255 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV792 ) ) ) @ tc_nat )
= $false )
| ( ( ~ ( c_in @ SV792 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ SV255 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV255 ) @ ( c_Event_Oused @ SV792 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3575]) ).
thf(4058,plain,
! [SV1204: $i,SV793: $i,SV256: $i] :
( ( ( c_lessequals @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SV793 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV793 @ SV1204 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SV793 ) @ SV1204 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV256 ) ) @ ( c_Message_Oanalz @ SV1204 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3576]) ).
thf(4059,plain,
! [SV1205: $i,SV794: $i,SV257: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SV794 ) @ SV1205 @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SV794 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV794 @ SV1205 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV257 ) ) @ ( c_Message_Oanalz @ SV1205 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3577]) ).
thf(4060,plain,
! [SV795: $i,SV258: $i,SV1502: $i] :
( ( ( ! [SY4266: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV1502 ) @ SV258 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY4266 ) @ SV795 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( c_in @ SV258 @ SV795 @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3578]) ).
thf(4061,plain,
! [SV1206: $i,SV796: $i,SV259: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV259 ) @ SV796 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV259 ) @ SV1206 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
= $true )
| ( ( ~ ( c_in @ SV796 @ SV1206 @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3579]) ).
thf(4062,plain,
! [SV1207: $i,SV797: $i,SV260: $i] :
( ( c_in @ ( hAPP @ c_Public_OshrK @ SV260 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV797 ) @ SV1207 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3580]) ).
thf(4063,plain,
! [SV1208: $i,SV798: $i,SV261: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV798 @ tc_nat @ tc_Message_Omsg ) @ SV1208 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ SV1208 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV261 @ SV798 @ tc_nat ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3581]) ).
thf(4064,plain,
! [SV1209: $i,SV799: $i,SV262: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV799 @ tc_nat @ tc_Message_Omsg ) @ SV1209 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV262 @ SV799 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ SV1209 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3582]) ).
thf(4065,plain,
! [SV1210: $i,SV800: $i,SV263: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SV1210 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV263 @ SV800 @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SV1210 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3583]) ).
thf(4066,plain,
! [SV1503: $i,SV801: $i,SV264: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV264 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV801 @ tc_nat @ tc_Message_Omsg ) @ SV1503 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV264 @ SV801 @ tc_nat )
| ~ ( c_in @ SV264 @ SV801 @ tc_nat ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3584]) ).
thf(4067,plain,
! [SV802: $i,SV1504: $i,SV265: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1504 @ SV802 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ! [SY4267: $i] :
( ~ ( c_lessequals @ SY4267 @ SV802 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV1504 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY4267 ) ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SV802 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3585]) ).
thf(4068,plain,
! [SV1211: $i,SV803: $i,SV266: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV803 @ SV1211 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SV1211 ) @ tc_Message_Omsg )
| ! [SY3984: $i] :
( ~ ( c_lessequals @ SY3984 @ SV1211 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV803 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3984 ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3586]) ).
thf(4069,plain,
! [SV267: $i,SV804: $i,SV1505: $i] :
( ( ( ~ ( c_in @ SV1505 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV267 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1505 @ SV804 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ ( c_Message_Oparts @ SV804 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3587]) ).
thf(4070,plain,
! [SV1506: $i,SV1212: $i,SV805: $i,SV268: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV268 @ SV805 @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV268 @ SV805 @ SV1212 @ SV1506 ) ) @ ( c_List_Oset @ SV1506 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_OIssues @ SV268 @ SV805 @ SV1212 @ SV1506 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3588]) ).
thf(4071,plain,
! [SV806: $i,SV1507: $i,SV270: $i] :
( ( ( ! [SY4268: $i] :
~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV270 ) @ SV1507 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV806 ) @ SY4268 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( SV270 = SV806 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3589]) ).
thf(4072,plain,
! [SV1508: $i,SV1213: $i,SV807: $i,SV271: $i] :
( ( ~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV271 ) @ SV807 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1213 ) @ SV1508 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3590]) ).
thf(4073,plain,
! [SV1215: $i,SV273: $i] :
( ( ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SV1215 ) @ SV273 ) @ ( c_List_Oset @ SV1215 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SV1215 ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ SV273 @ SV1215 ) @ SV273 ) @ ( c_List_Oset @ SV1215 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV273 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1215 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV273 @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3592]) ).
thf(4074,plain,
! [SV810: $i,SV1509: $i,SV275: $i] :
( ( ( ( c_in @ SV275 @ SV1509 @ tc_nat )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1509 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ SV1509 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV810 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3594]) ).
thf(4075,plain,
! [SV1217: $i,SV811: $i,SV276: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV276 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV811 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1217 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV276 @ SV811 @ tc_nat )
| ~ ( c_lessequals @ SV811 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV1217 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3595]) ).
thf(4076,plain,
! [SV1510: $i,SV1218: $i,SV812: $i,SV277: $i] :
( ( c_lessequals @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV277 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV812 @ SV1218 @ SV1510 ) @ SV277 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3596]) ).
thf(4077,plain,
! [SV813: $i,SV278: $i] :
( ( ( ~ ( c_in @ SV278 @ c_Message_OsymKeys @ tc_nat ) )
= $true )
| ( ( ! [SY3444: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV278 @ SY3444 ) @ SV813 @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV278 @ ( c_Message_OkeysFor @ SV813 ) @ tc_nat )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3597]) ).
thf(4078,plain,
! [SV1219: $i,SV814: $i,SV280: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV814 @ tc_nat @ tc_Message_Omsg ) @ SV1219 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3598]) ).
thf(4079,plain,
! [SV1220: $i,SV815: $i,SV281: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SV1220 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ SV1220 ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SV1220 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3599]) ).
thf(4080,plain,
! [SV816: $i,SV1511: $i,SV282: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV282 @ SV1511 ) @ SV816 @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV282 ) @ ( c_Message_OkeysFor @ SV816 ) @ tc_nat )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3600]) ).
thf(4081,plain,
! [SV817: $i,SV1512: $i,SV283: $i] :
( ( ( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1512 @ SV817 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
| ! [SY4269: $i] :
( ~ ( c_in @ SY4269 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV817 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY4269 @ SV1512 @ tc_Message_Omsg ) ) ) @ tc_nat ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV283 ) ) @ ( c_Message_Oparts @ SV817 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3601]) ).
thf(4082,plain,
! [SV1221: $i,SV819: $i,SV285: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Oanalz @ SV1221 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1221 ) ) @ tc_Message_Omsg )
| ( c_in @ SV285 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1221 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3603]) ).
thf(4083,plain,
! [SV1222: $i,SV820: $i,SV286: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1222 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Oanalz @ SV1222 ) @ tc_Message_Omsg )
| ( c_in @ SV286 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1222 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3604]) ).
thf(4084,plain,
! [SV1223: $i,SV821: $i,SV287: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV821 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ SV821 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV1223 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3605]) ).
thf(4085,plain,
! [SV1513: $i,SV1224: $i,SV822: $i,SV288: $i] :
( ( ! [SY4270: $i] :
( ( hBOOL @ ( hAPP @ SV288 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ ( c_List_Oappend @ SV822 @ ( c_List_Olist_OCons @ SV1224 @ SV1513 @ SY4270 ) @ SY4270 ) @ SY4270 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ SV822 @ SY4270 ) @ ( c_List_Oset @ SV822 @ SY4270 ) @ SY4270 )
| ~ ( hBOOL @ ( hAPP @ SV288 @ SV1224 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3606]) ).
thf(4086,plain,
! [SV1514: $i,SV1225: $i,SV823: $i,SV289: $i] :
( ( ! [SY4271: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SY4271 ) @ SY4271 ) @ SY4271 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SY4271 ) @ SY4271 ) @ SY4271 ) @ SY4271 )
| ( hBOOL @ ( hAPP @ SV289 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ SV1514 @ SY4271 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV289 @ SV1225 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3607]) ).
thf(4087,plain,
! [SV1515: $i,SV1226: $i,SV824: $i,SV290: $i] :
( ( ! [SY4272: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SY4272 ) @ SY4272 ) @ SY4272 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SY4272 ) @ SY4272 ) @ SY4272 ) @ SY4272 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ SV824 @ SY4272 ) @ ( c_List_Oset @ SV824 @ SY4272 ) @ SY4272 )
| ~ ( hBOOL @ ( hAPP @ SV290 @ SV1226 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3608]) ).
thf(4088,plain,
! [SV1516: $i,SV1227: $i,SV825: $i,SV291: $i] :
( ( ! [SY4273: $i] :
( ( hBOOL @ ( hAPP @ SV291 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ ( c_List_Oappend @ SV825 @ ( c_List_Olist_OCons @ SV1227 @ SV1516 @ SY4273 ) @ SY4273 ) @ SY4273 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ SV1516 @ SY4273 ) @ ( c_List_Oset @ SV1516 @ SY4273 ) @ SY4273 )
| ~ ( hBOOL @ ( hAPP @ SV291 @ SV1227 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3609]) ).
thf(4089,plain,
! [SV1517: $i,SV1228: $i,SV826: $i,SV292: $i] :
( ( ! [SY4274: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SY4274 ) @ SY4274 ) @ SY4274 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SY4274 ) @ SY4274 ) @ SY4274 ) @ SY4274 )
| ( hBOOL @ ( hAPP @ SV292 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ SV826 @ SY4274 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV292 @ SV1228 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3610]) ).
thf(4090,plain,
! [SV1518: $i,SV1229: $i,SV827: $i,SV293: $i] :
( ( ! [SY4275: $i] :
( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SY4275 ) @ SY4275 ) @ SY4275 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SY4275 ) @ SY4275 ) @ SY4275 ) @ SY4275 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ SV1518 @ SY4275 ) @ ( c_List_Oset @ SV1518 @ SY4275 ) @ SY4275 )
| ~ ( hBOOL @ ( hAPP @ SV293 @ SV1229 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3611]) ).
thf(4091,plain,
! [SV1519: $i,SV1231: $i,SV829: $i,SV295: $i] :
( ( ( c_Event_Oknows @ SV295 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV295 @ SV829 @ SV1231 ) @ SV1519 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1231 @ ( c_Event_Oknows @ SV295 @ SV1519 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3613]) ).
thf(4092,plain,
! [SV830: $i,SV296: $i] :
( ( ( c_in @ SV296 @ SV830 @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV296 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV830 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3614]) ).
thf(4093,plain,
! [SV831: $i,SV297: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV297 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV831 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV297 @ SV831 @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3615]) ).
thf(4094,plain,
! [SV832: $i,SV298: $i] :
( ( ( c_in @ SV298 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV832 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV298 @ SV832 @ tc_Message_Omsg ) ) )
= ( c_Message_Osynth @ ( c_Message_Oanalz @ SV832 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3616]) ).
thf(4095,plain,
! [SV1520: $i,SV1232: $i,SV833: $i,SV299: $i] :
( ( ( c_in @ SV299 @ ( c_List_Oset @ ( c_List_Oappend @ SV833 @ ( c_List_Olist_OCons @ SV299 @ SV1232 @ SV1520 ) @ SV1520 ) @ SV1520 ) @ SV1520 )
| ( c_in @ SV299 @ ( c_List_Oset @ SV833 @ SV1520 ) @ SV1520 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3617]) ).
thf(4096,plain,
! [SV1521: $i,SV1233: $i,SV834: $i,SV300: $i] :
( ( ( c_in @ SV300 @ ( c_List_Oset @ ( c_List_Oappend @ SV834 @ ( c_List_Olist_OCons @ SV300 @ SV1233 @ SV1521 ) @ SV1521 ) @ SV1521 ) @ SV1521 )
| ( c_in @ SV300 @ ( c_List_Oset @ SV1233 @ SV1521 ) @ SV1521 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3618]) ).
thf(4097,plain,
! [SV1522: $i,SV1234: $i,SV835: $i,SV301: $i] :
( ( c_in @ SV301 @ ( c_List_Oset @ ( c_List_Oappend @ SV835 @ ( c_List_Olist_OCons @ SV301 @ SV1234 @ SV1522 ) @ SV1522 ) @ SV1522 ) @ SV1522 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3619]) ).
thf(4098,plain,
! [SV1523: $i,SV1235: $i,SV836: $i,SV302: $i] :
( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV302 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV836 @ SV1235 @ SV1523 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1523 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV302 ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3620]) ).
thf(4099,plain,
! [SV1236: $i,SV837: $i,SV303: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV837 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) ) @ tc_Message_Omsg )
| ( c_in @ SV837 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV1236 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3621]) ).
thf(4100,plain,
! [SV838: $i,SV1524: $i,SV304: $i] :
( ( ( ( SV304 = SV1524 )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV1524 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ( c_in @ SV1524 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV838 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3622]) ).
thf(4101,plain,
! [SV305: $i,SV1237: $i] :
( ( ( ~ ( c_in @ SV1237 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1237 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV305 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3623]) ).
thf(4102,plain,
! [SV1525: $i,SV1239: $i,SV841: $i,SV308: $i] :
( ( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV308 @ SV841 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV1239 ) @ SV1525 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_ONonce @ SV1239 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV308 @ SV841 ) @ SV1525 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3625]) ).
thf(4103,plain,
! [SV1526: $i,SV1241: $i,SV845: $i,SV312: $i] :
( ( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV312 @ SV845 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV1241 ) @ SV1526 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OAgent @ SV1241 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV312 @ SV845 ) @ SV1526 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3627]) ).
thf(4104,plain,
! [SV1527: $i,SV1242: $i,SV847: $i,SV314: $i] :
( ( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV314 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV847 @ SV1242 ) @ SV1527 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV847 @ SV1242 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV314 ) @ SV1527 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3628]) ).
thf(4105,plain,
! [SV315: $i,SV848: $i,SV1528: $i] :
( ( ( ~ ( c_in @ SV1528 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV315 @ ( c_Message_Osynth @ ( c_Set_Oinsert @ SV1528 @ SV848 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV315 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3629]) ).
thf(4106,plain,
! [SV317: $i,SV850: $i,SV1529: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1529 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1529 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1529 @ SV317 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV317 @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3630]) ).
thf(4107,plain,
! [SV1530: $i,SV1245: $i,SV853: $i,SV320: $i] :
( ( ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV320 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV853 @ SV1245 ) @ SV1530 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV853 @ SV1245 ) @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV320 ) @ SV1530 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3633]) ).
thf(4108,plain,
! [SV321: $i,SV854: $i,SV1531: $i] :
( ( ( ~ ( c_in @ SV1531 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV321 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1531 @ SV854 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV321 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3634]) ).
thf(4109,plain,
! [SV855: $i,SV322: $i] :
( ( ( c_in @ SV322 @ ( c_Message_Oanalz @ SV855 ) @ tc_Message_Omsg )
= $false )
| ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV322 @ SV855 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SV855 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3635]) ).
thf(4110,plain,
! [SV1246: $i,SV856: $i,SV323: $i] :
( ( ( c_in @ SV323 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV856 @ SV1246 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV323 @ ( c_Message_Oanalz @ SV1246 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3636]) ).
thf(4111,plain,
! [SV1532: $i,SV1247: $i,SV857: $i,SV324: $i] :
( ( ! [SY4276: $i] :
( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SV857 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV1247 @ SV1532 ) @ SY4276 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV1247 @ SV1532 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SV857 ) @ SY4276 @ tc_Message_Omsg ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3637]) ).
thf(4112,plain,
! [SV1249: $i,SV859: $i,SV326: $i] :
( ( ( c_in @ SV326 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV859 @ SV1249 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV326 @ ( c_Message_Oparts @ SV1249 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3639]) ).
thf(4113,plain,
! [SV860: $i,SV327: $i] :
( ( ( c_in @ SV327 @ ( c_Message_Oparts @ SV860 ) @ tc_Message_Omsg )
= $false )
| ( ( ( c_Message_Oparts @ ( c_Set_Oinsert @ SV327 @ SV860 @ tc_Message_Omsg ) )
= ( c_Message_Oparts @ SV860 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3640]) ).
thf(4114,plain,
! [SV1533: $i,SV1251: $i,SV862: $i,SV329: $i] :
( ( ! [SY4277: $i] :
( ( ( c_List_Oappend @ SV329 @ ( c_List_Olist_OCons @ SV862 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 )
!= ( c_List_Oappend @ SV1533 @ ( c_List_Olist_OCons @ SY4277 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 ) )
| ( SV862 = SY4277 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3642]) ).
thf(4115,plain,
! [SV1534: $i,SV1252: $i,SV863: $i,SV330: $i] :
( ( ! [SY4278: $i] :
( ( c_List_Oappend @ SV330 @ ( c_List_Olist_OCons @ SV863 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 )
!= ( c_List_Oappend @ SV1534 @ ( c_List_Olist_OCons @ SY4278 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 ) )
| ( SV330 = SV1534 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3643]) ).
thf(4116,plain,
! [SV1535: $i,SV1255: $i,SV866: $i,SV333: $i] :
( ( c_in @ ( hAPP @ SV333 @ SV866 ) @ ( c_Set_Oimage @ SV333 @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ SV1255 @ tc_bool ) ) @ SV1255 @ SV1535 ) @ SV1535 )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3646]) ).
thf(4117,plain,
! [SV1536: $i,SV1256: $i,SV867: $i,SV334: $i] :
( ( ! [SY4279: $i] :
( ( c_Set_Oinsert @ ( hAPP @ SV334 @ SV867 ) @ ( c_Set_Oimage @ SV334 @ SV1256 @ SV1536 @ SY4279 ) @ SY4279 )
= ( c_Set_Oimage @ SV334 @ SV1256 @ SV1536 @ SY4279 ) )
| ~ ( c_in @ SV867 @ SV1256 @ SV1536 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3647]) ).
thf(4118,plain,
! [SV1257: $i,SV868: $i,SV335: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV335 ) @ SV868 ) ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV1257 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3648]) ).
thf(4119,plain,
! [SV1537: $i,SV1258: $i,SV869: $i,SV337: $i] :
( ( ( c_List_Oappend @ SV337 @ ( c_List_Oappend @ SV869 @ SV1258 @ SV1537 ) @ SV1537 )
= ( c_List_Oappend @ ( c_List_Oappend @ SV337 @ SV869 @ SV1537 ) @ SV1258 @ SV1537 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3649]) ).
thf(4120,plain,
! [SV1538: $i,SV1259: $i,SV870: $i,SV338: $i] :
( ( ( c_List_Oappend @ ( c_List_Oappend @ SV338 @ SV870 @ SV1259 ) @ SV1538 @ SV1259 )
= ( c_List_Oappend @ SV338 @ ( c_List_Oappend @ SV870 @ SV1538 @ SV1259 ) @ SV1259 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3650]) ).
thf(4121,plain,
! [SV1539: $i,SV1260: $i,SV871: $i,SV339: $i] :
( ( ( c_List_Oappend @ SV339 @ ( c_List_Oappend @ SV871 @ SV1260 @ SV1539 ) @ SV1539 )
= ( c_List_Oappend @ ( c_List_Oappend @ SV339 @ SV871 @ SV1539 ) @ SV1260 @ SV1539 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3651]) ).
thf(4122,plain,
! [SV1540: $i,SV1261: $i,SV872: $i,SV340: $i] :
( ( ( c_List_Oappend @ ( c_List_Oappend @ SV340 @ SV872 @ SV1261 ) @ SV1540 @ SV1261 )
= ( c_List_Oappend @ SV340 @ ( c_List_Oappend @ SV872 @ SV1540 @ SV1261 ) @ SV1261 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3652]) ).
thf(4123,plain,
! [SV1541: $i,SV1263: $i,SV875: $i,SV343: $i] :
( ( ! [SY4280: $i] :
( ( c_Set_Oimage @ SV343 @ ( c_Set_Oinsert @ SV875 @ SV1263 @ SV1541 ) @ SV1541 @ SY4280 )
= ( c_Set_Oinsert @ ( hAPP @ SV343 @ SV875 ) @ ( c_Set_Oimage @ SV343 @ SV1263 @ SV1541 @ SY4280 ) @ SY4280 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3655]) ).
thf(4124,plain,
! [SV348: $i,SV877: $i,SV1542: $i] :
( ( ( ( SV1542 = SV877 )
| ! [SY4281: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV1542 @ SV348 @ SY4281 ) @ SV877 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV348 @ SV877 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3659]) ).
thf(4125,plain,
! [SV1543: $i,SV1265: $i,SV879: $i,SV350: $i] :
( ( ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV350 ) @ SV879 ) ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1265 ) @ SV1543 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3661]) ).
thf(4126,plain,
! [SV1266: $i,SV880: $i,SV351: $i] :
( ( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV351 ) @ SV880 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV351 ) @ SV1266 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true )
| ( ( ~ ( c_in @ SV880 @ SV1266 @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3662]) ).
thf(4127,plain,
! [SV881: $i,SV352: $i,SV1544: $i] :
( ( ( ! [SY4282: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV1544 ) @ SV352 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SY4282 ) @ SV881 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( c_in @ SV352 @ SV881 @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3663]) ).
thf(4128,plain,
! [SV882: $i,SV1545: $i,SV353: $i] :
( ( ( ! [SY4283: $i] :
~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV353 ) @ SV1545 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV882 ) @ SY4283 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( SV353 = SV882 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3664]) ).
thf(4129,plain,
! [SV1546: $i,SV1267: $i,SV883: $i,SV354: $i] :
( ( ( ( c_List_Oappend @ SV354 @ SV883 @ SV1267 )
!= ( c_List_Oappend @ SV354 @ SV1546 @ SV1267 ) )
| ( SV883 = SV1546 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3665]) ).
thf(4130,plain,
! [SV1547: $i,SV1268: $i,SV884: $i,SV355: $i] :
( ( ( ( c_List_Oappend @ SV355 @ SV884 @ SV1268 )
!= ( c_List_Oappend @ SV1547 @ SV884 @ SV1268 ) )
| ( SV355 = SV1547 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3666]) ).
thf(4131,plain,
! [SV1269: $i,SV885: $i,SV356: $i] :
( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV356 ) @ SV885 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV1269 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3667]) ).
thf(4132,plain,
! [SV1548: $i,SV1270: $i,SV886: $i,SV357: $i] :
( ( ( c_Set_Oinsert @ SV357 @ ( c_Set_Oinsert @ SV886 @ SV1270 @ SV1548 ) @ SV1548 )
= ( c_Set_Oinsert @ SV886 @ ( c_Set_Oinsert @ SV357 @ SV1270 @ SV1548 ) @ SV1548 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3668]) ).
thf(4133,plain,
! [SV1549: $i,SV1271: $i,SV887: $i,SV358: $i] :
( ( ( c_List_Oappend @ ( c_List_Olist_OCons @ SV358 @ SV887 @ SV1271 ) @ SV1549 @ SV1271 )
= ( c_List_Olist_OCons @ SV358 @ ( c_List_Oappend @ SV887 @ SV1549 @ SV1271 ) @ SV1271 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3669]) ).
thf(4134,plain,
! [SV1550: $i,SV1272: $i,SV888: $i,SV359: $i] :
( ( ( c_List_Oappend @ ( c_List_Olist_OCons @ SV359 @ SV888 @ SV1272 ) @ SV1550 @ SV1272 )
= ( c_List_Olist_OCons @ SV359 @ ( c_List_Oappend @ SV888 @ SV1550 @ SV1272 ) @ SV1272 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3670]) ).
thf(4135,plain,
! [SV1551: $i,SV1273: $i,SV889: $i,SV360: $i] :
( ( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV360 @ SV889 @ SV1273 ) @ SV1551 ) )
| ~ ( hBOOL @ ( hAPP @ SV889 @ SV1551 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3671]) ).
thf(4136,plain,
! [SV1552: $i,SV1274: $i,SV890: $i,SV361: $i] :
( ( ( c_List_Olist_OCons @ SV361 @ ( c_List_Oappend @ SV890 @ SV1274 @ SV1552 ) @ SV1552 )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ SV361 @ SV890 @ SV1552 ) @ SV1274 @ SV1552 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3672]) ).
thf(4137,plain,
! [SV1553: $i,SV1275: $i,SV891: $i,SV362: $i] :
( ( ( c_List_Olist_OCons @ SV362 @ ( c_List_Oappend @ SV891 @ SV1275 @ SV1553 ) @ SV1553 )
= ( c_List_Oappend @ ( c_List_Olist_OCons @ SV362 @ SV891 @ SV1553 ) @ SV1275 @ SV1553 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3673]) ).
thf(4138,plain,
! [SV1554: $i,SV1276: $i,SV893: $i,SV364: $i] :
( ( ! [SY4284: $i] :
( ( c_Set_Oinsert @ ( hAPP @ SV364 @ SV893 ) @ ( c_Set_Oimage @ SV364 @ SV1276 @ SV1554 @ SY4284 ) @ SY4284 )
= ( c_Set_Oimage @ SV364 @ ( c_Set_Oinsert @ SV893 @ SV1276 @ SV1554 ) @ SV1554 @ SY4284 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3675]) ).
thf(4139,plain,
! [SV1277: $i,SV894: $i,SV365: $i] :
( ( c_in @ ( hAPP @ c_Public_OshrK @ SV365 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV894 ) @ SV1277 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3676]) ).
thf(4140,plain,
! [SV1555: $i,SV366: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV366 ) @ ( c_Event_Oused @ SV1555 ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV366 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3677]) ).
thf(4141,plain,
! [SV1556: $i,SV1278: $i,SV895: $i,SV367: $i] :
( ( ( c_in @ SV367 @ ( c_Set_Oinsert @ SV895 @ SV1278 @ SV1556 ) @ SV1556 )
| ~ ( c_in @ SV367 @ SV1278 @ SV1556 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3678]) ).
thf(4142,plain,
! [SV1557: $i,SV1279: $i,SV896: $i,SV368: $i] :
( ( ( c_in @ SV368 @ ( c_Set_Oinsert @ SV896 @ SV1279 @ SV1557 ) @ SV1557 )
| ~ ( c_in @ SV368 @ SV1279 @ SV1557 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3679]) ).
thf(4143,plain,
! [SV1280: $i,SV897: $i,SV369: $i] :
( ( ( c_in @ SV369 @ SV897 @ SV1280 )
= $true )
| ( ( ! [SY4037: $i] :
( ( SV369 = SY4037 )
| ~ ( c_in @ SV369 @ ( c_Set_Oinsert @ SY4037 @ SV897 @ SV1280 ) @ SV1280 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3680]) ).
thf(4144,plain,
! [SV1558: $i,SV1284: $i,SV902: $i,SV374: $i] :
( ( ( ( c_Set_Oinsert @ SV374 @ SV902 @ SV1284 )
!= ( c_Set_Oinsert @ SV374 @ SV1558 @ SV1284 ) )
| ( c_in @ SV374 @ SV1558 @ SV1284 )
| ( SV902 = SV1558 )
| ( c_in @ SV374 @ SV902 @ SV1284 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3684]) ).
thf(4145,plain,
! [SV1285: $i,SV903: $i,SV375: $i] :
( ( ( ( c_Set_Oinsert @ SV375 @ SV903 @ SV1285 )
= SV903 )
= $true )
| ( ( ~ ( c_in @ SV375 @ SV903 @ SV1285 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3685]) ).
thf(4146,plain,
! [SV1286: $i,SV904: $i,SV377: $i] :
( ( ( SV377
!= ( c_List_Oappend @ SV904 @ SV377 @ SV1286 ) )
= $true )
| ( ( SV904
= ( c_List_Olist_ONil @ SV1286 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3686]) ).
thf(4147,plain,
! [SV1287: $i,SV905: $i,SV378: $i] :
( ( ( ( c_List_Oappend @ SV378 @ SV905 @ SV1287 )
!= SV905 )
= $true )
| ( ( SV378
= ( c_List_Olist_ONil @ SV1287 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3687]) ).
thf(4148,plain,
! [SV1288: $i,SV906: $i,SV379: $i] :
( ( ( SV379
!= ( c_List_Oappend @ SV379 @ SV906 @ SV1288 ) )
= $true )
| ( ( SV906
= ( c_List_Olist_ONil @ SV1288 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3688]) ).
thf(4149,plain,
! [SV1289: $i,SV907: $i,SV380: $i] :
( ( ( ( c_List_Oappend @ SV380 @ SV907 @ SV1289 )
!= SV380 )
= $true )
| ( ( SV907
= ( c_List_Olist_ONil @ SV1289 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3689]) ).
thf(4150,plain,
! [SV1290: $i,SV908: $i,SV381: $i] :
( ( ( ( c_List_Oappend @ SV381 @ SV908 @ SV1290 )
!= ( c_List_Olist_ONil @ SV1290 ) )
= $true )
| ( ( SV908
= ( c_List_Olist_ONil @ SV1290 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3690]) ).
thf(4151,plain,
! [SV1291: $i,SV909: $i,SV382: $i] :
( ( ( ( c_List_Oappend @ SV382 @ SV909 @ SV1291 )
!= ( c_List_Olist_ONil @ SV1291 ) )
= $true )
| ( ( SV382
= ( c_List_Olist_ONil @ SV1291 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3691]) ).
thf(4152,plain,
! [SV1292: $i,SV910: $i,SV383: $i] :
( ( ( ( c_List_Olist_ONil @ SV383 )
!= ( c_List_Oappend @ SV910 @ SV1292 @ SV383 ) )
= $true )
| ( ( SV1292
= ( c_List_Olist_ONil @ SV383 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3692]) ).
thf(4153,plain,
! [SV1559: $i,SV911: $i,SV384: $i] :
( ( ( ( c_List_Olist_ONil @ SV384 )
!= ( c_List_Oappend @ SV911 @ SV1559 @ SV384 ) )
= $true )
| ( ( SV911
= ( c_List_Olist_ONil @ SV384 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3693]) ).
thf(4154,plain,
! [SV917: $i,SV391: $i] :
( ( ( ( c_Message_Oanalz @ SV391 )
= ( c_Message_Oanalz @ SV917 ) )
= $false )
| ( ( ! [SY3583: $i] :
( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3583 @ SV391 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ ( c_Set_Oinsert @ SY3583 @ SV917 @ tc_Message_Omsg ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3694]) ).
thf(4155,plain,
! [SV918: $i,SV392: $i] :
( ( ( c_in @ SV392 @ SV918 @ tc_Message_Oagent )
= $false )
| ( ( c_in @ ( hAPP @ c_Public_OshrK @ SV392 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV918 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3695]) ).
thf(4156,plain,
! [SV919: $i,SV393: $i] :
( ( ( c_in @ ( hAPP @ c_Public_OshrK @ SV393 ) @ ( c_Set_Oimage @ c_Public_OshrK @ SV919 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( c_in @ SV393 @ SV919 @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3696]) ).
thf(4157,plain,
! [SV1293: $i,SV920: $i,SV394: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV394 @ SV920 ) @ SV1293 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV394 @ SV920 ) @ ( c_Message_Oanalz @ SV1293 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV394 ) ) @ ( c_Message_Oanalz @ SV1293 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3697]) ).
thf(4158,plain,
! [SV1294: $i,SV921: $i,SV395: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SV921 ) @ SV1294 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SV921 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV921 @ SV1294 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV395 ) ) @ ( c_Message_Oanalz @ SV1294 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3698]) ).
thf(4159,plain,
! [SV1560: $i,SV1295: $i,SV922: $i,SV396: $i] :
( ( ! [SY4285: $i] :
( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4286: $i,SY4287: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SY4285 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4285 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4286 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4287 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3699]) ).
thf(4160,plain,
! [SV1561: $i,SV1297: $i,SV924: $i,SV398: $i] :
( ( ! [SY4288: $i,SY4289: $i,SY4290: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SY4288 @ tc_Event_Oevent ) )
| ! [SY4047: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4289 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4290 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SY4047 ) ) ) ) ) @ ( c_List_Oset @ SY4288 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4292: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4292 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SY4288 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY4288 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3701]) ).
thf(4161,plain,
! [SV1562: $i,SV1298: $i,SV925: $i,SV399: $i] :
( ( ! [SY4293: $i,SY4294: $i,SY4295: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SY4293 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4053: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4294 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4295 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SY4053 ) ) ) ) ) @ ( c_List_Oset @ SY4293 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4297: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4297 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SY4293 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SY4293 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3702]) ).
thf(4162,plain,
! [SV1563: $i,SV1299: $i,SV400: $i] :
( ( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV400 @ SV1299 ) @ SV1563 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1299 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1563 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV400 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3703]) ).
thf(4163,plain,
! [SV1564: $i,SV1300: $i,SV926: $i,SV401: $i] :
( ( ! [SY4298: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SY4298 @ tc_Event_Oevent ) )
| ! [SY4058: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4058 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SY4298 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SY4298 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY4298 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3704]) ).
thf(4164,plain,
! [SV1565: $i,SV1301: $i,SV927: $i,SV402: $i] :
( ( ! [SY4300: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SY4300 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4061: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4061 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SY4300 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SY4300 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY4300 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3705]) ).
thf(4165,plain,
! [SV1566: $i,SV1302: $i,SV928: $i,SV403: $i] :
( ( ! [SY4302: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SY4302 @ tc_Event_Oevent ) )
| ! [SY4064: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4064 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SY4302 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SY4302 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SY4302 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3706]) ).
thf(4166,plain,
! [SV1567: $i,SV929: $i,SV404: $i] :
( ( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV404 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV929 @ SV1567 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV404 ) )
= $true )
| ( ( c_in @ SV929 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3707]) ).
thf(4167,plain,
! [SV1568: $i,SV1303: $i,SV930: $i,SV405: $i] :
( ( ! [SY4304: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SY4304 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4067: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4067 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SY4304 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SY4304 ) @ tc_Message_Omsg )
| ~ ( c_in @ SY4304 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3708]) ).
thf(4168,plain,
! [SV1569: $i,SV406: $i,SV931: $i] :
( ( ( ( c_in @ ( c_Event_Oevent_ONotes @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OGets @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ SV931 @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ SV931 @ SV406 @ SV1569 ) @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV931 = c_Message_Oagent_OSpy )
| ~ ( c_in @ SV406 @ ( c_Event_Oknows @ SV931 @ SV1569 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV406 @ ( c_Event_OinitState @ SV931 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3709]) ).
thf(4169,plain,
! [SV1570: $i,SV1304: $i,SV932: $i,SV407: $i] :
( ( ! [SY4306: $i] :
( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4306 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SY4306 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4307: $i,SY4308: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SY4307 @ ( c_Message_Omsg_OMPair @ SY4306 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4308 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3710]) ).
thf(4170,plain,
! [SV1305: $i,SV933: $i,SV408: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4072: $i] :
( ( c_in @ SY4072 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4073: $i] :
( ( c_in @ SY4073 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4073 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4073 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY4073 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3711]) ).
thf(4171,plain,
! [SV934: $i,SV409: $i,SV1571: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV1571 @ SV409 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV934 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV409 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV934 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3712]) ).
thf(4172,plain,
! [SV1306: $i,SV935: $i,SV410: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV410 @ SV935 ) @ ( c_Message_Oparts @ ( c_Event_OinitState @ SV1306 ) ) @ tc_Message_Omsg )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3713]) ).
thf(4173,plain,
! [SV1572: $i,SV1307: $i,SV936: $i,SV411: $i] :
( ( ! [SY4309: $i] :
( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ ( c_Message_Omsg_OAgent @ SV1572 ) ) ) )
| ~ ( c_in @ SY4309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4310: $i,SY4311: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1572 @ ( c_Message_Omsg_OCrypt @ SY4310 @ ( c_Message_Omsg_OMPair @ SY4311 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SY4309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3714]) ).
thf(4174,plain,
! [SV1573: $i,SV1308: $i,SV937: $i,SV412: $i] :
( ( ! [SY4312: $i,SY4313: $i,SY4314: $i,SY4315: $i] :
( ( SV412 = SV937 )
| ~ ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SY4312 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4313 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4314 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4083: $i,SY4084: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4315 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4315 ) @ ( c_Message_Omsg_OMPair @ SY4083 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4084 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4314 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3715]) ).
thf(4175,plain,
! [SV1574: $i,SV1309: $i,SV938: $i,SV413: $i] :
( ( ! [SY4318: $i,SY4319: $i,SY4320: $i,SY4321: $i] :
( ( SV413 = SV938 )
| ~ ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SY4318 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4319 ) @ SY4320 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4090: $i,SY4091: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4321 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4321 ) @ ( c_Message_Omsg_OMPair @ SY4090 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4319 ) @ SY4091 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3716]) ).
thf(4176,plain,
! [SV1575: $i,SV1310: $i,SV939: $i,SV414: $i] :
( ( ! [SY4324: $i,SY4325: $i,SY4326: $i,SY4327: $i] :
( ( SV414 = SV939 )
| ~ ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4324 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4325 ) @ SY4326 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4097: $i,SY4098: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4327 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4327 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4097 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4325 ) @ SY4098 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3717]) ).
thf(4177,plain,
! [SV1576: $i,SV1311: $i,SV940: $i,SV415: $i] :
( ( ! [SY4330: $i,SY4331: $i,SY4332: $i,SY4333: $i] :
( ( SV415 = SV940 )
| ~ ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4330 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4331 ) @ SY4332 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4104: $i,SY4105: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SY4333 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4104 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4331 ) @ SY4105 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3718]) ).
thf(4178,plain,
! [SV1577: $i,SV1312: $i,SV941: $i,SV416: $i] :
( ( ! [SY4336: $i] :
( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
| ~ ( c_in @ SV1312 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4337: $i,SY4338: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SV1577 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4336 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4337 ) @ SY4338 ) ) ) ) ) @ ( c_List_Oset @ SV1312 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3719]) ).
thf(4179,plain,
! [SV1578: $i,SV1313: $i,SV942: $i,SV417: $i] :
( ( ! [SY4339: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
| ! [SY4340: $i] :
( ! [SY4341: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4339 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4339 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4340 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SY4341 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY4340 @ SY4339 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3720]) ).
thf(4180,plain,
! [SV1579: $i,SV1314: $i,SV943: $i,SV419: $i] :
( ( ! [SY4342: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SY4342 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4343: $i,SY4344: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4343 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4342 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4344 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3721]) ).
thf(4181,plain,
! [SV1580: $i,SV1315: $i,SV420: $i] :
( ( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV420 @ SV1315 ) @ SV1580 @ tc_Event_Oevent ) )
= ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1580 ) )
= $true )
| ( ( c_in @ SV420 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3722]) ).
thf(4182,plain,
! [SV1581: $i,SV1316: $i,SV944: $i,SV421: $i] :
( ( ! [SY4345: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4346: $i] :
( ! [SY4347: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4345 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4345 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4346 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SY4347 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY4346 @ SY4345 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3723]) ).
thf(4183,plain,
! [SV945: $i,SV422: $i] :
( ( ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV945 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ! [SY3691: $i,SY3692: $i] : ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SY3691 @ SY3692 ) @ SV945 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3724]) ).
thf(4184,plain,
! [SV946: $i,SV423: $i] :
( ( ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV946 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ! [SY3693: $i,SY3694: $i] : ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SY3693 @ SY3694 ) @ SV946 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3725]) ).
thf(4185,plain,
! [SV947: $i,SV425: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV425 ) @ ( c_Message_Osynth @ SV947 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_ONonce @ SV425 ) @ SV947 @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3726]) ).
thf(4186,plain,
! [SV948: $i,SV426: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV426 ) @ ( c_Message_Osynth @ SV948 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_ONonce @ SV426 ) @ SV948 @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3727]) ).
thf(4187,plain,
! [SV949: $i,SV427: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV427 ) @ SV949 @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_ONonce @ SV427 ) @ ( c_Message_Osynth @ SV949 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3728]) ).
thf(4188,plain,
! [SV952: $i,SV431: $i,SV1582: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1582 @ SV431 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1582 ) ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1582 ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3729]) ).
thf(4189,plain,
! [SV1317: $i,SV953: $i,SV432: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV432 @ SV953 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV953 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV432 ) ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV432 ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3730]) ).
thf(4190,plain,
! [SV954: $i,SV433: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV433 ) @ ( c_Message_Osynth @ SV954 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV433 ) @ SV954 @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3731]) ).
thf(4191,plain,
! [SV955: $i,SV434: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV434 ) @ SV955 @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV434 ) @ ( c_Message_Osynth @ SV955 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3732]) ).
thf(4192,plain,
! [SV956: $i,SV435: $i,SV1583: $i] :
( ( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1583 @ SV435 ) @ SV956 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1583 @ SV435 ) @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV435 @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3733]) ).
thf(4193,plain,
! [SV957: $i,SV1584: $i,SV436: $i] :
( ( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SV1584 ) @ SV957 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SV1584 ) @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV436 @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3734]) ).
thf(4194,plain,
! [SV958: $i,SV437: $i,SV1585: $i] :
( ( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV1585 @ SV437 ) @ SV958 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV1585 @ SV437 ) @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV437 @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3735]) ).
thf(4195,plain,
! [SV1318: $i,SV959: $i,SV438: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV438 @ SV959 ) @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV959 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV438 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3736]) ).
thf(4196,plain,
! [SV960: $i,SV1586: $i,SV439: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV439 @ SV1586 ) @ ( c_Event_Oused @ SV960 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV439 @ ( c_Event_Oused @ SV960 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3737]) ).
thf(4197,plain,
! [SV961: $i,SV440: $i,SV1587: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV1587 @ SV440 ) @ ( c_Event_Oused @ SV961 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV440 @ ( c_Event_Oused @ SV961 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3738]) ).
thf(4198,plain,
! [SV1319: $i,SV962: $i,SV441: $i] :
( ( ( c_in @ SV441 @ ( c_List_Oset @ SV962 @ SV1319 ) @ SV1319 )
= $true )
| ( ( ! [SY4123: $i] :
( ( SV441 = SY4123 )
| ~ ( c_in @ SV441 @ ( c_List_Oset @ ( c_List_Olist_OCons @ SY4123 @ SV962 @ SV1319 ) @ SV1319 ) @ SV1319 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3739]) ).
thf(4199,plain,
! [SV1320: $i,SV963: $i,SV442: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV442 @ SV963 ) @ SV1320 @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV963 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1320 ) ) ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1320 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3740]) ).
thf(4200,plain,
! [SV964: $i,SV443: $i,SV1588: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_ONotes @ SV1588 @ SV443 ) @ ( c_List_Oset @ SV964 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV443 @ ( c_Event_Oused @ SV964 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3741]) ).
thf(4201,plain,
! [SV1321: $i,SV965: $i,SV444: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV444 @ SV965 ) @ SV1321 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV965 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1321 ) ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1321 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3742]) ).
thf(4202,plain,
! [SV1589: $i,SV1322: $i,SV966: $i,SV445: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV445 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV445 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV966 ) @ ( c_Message_Omsg_ONonce @ SV1322 ) ) ) ) @ SV1589 @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1322 ) @ ( c_Event_Oused @ SV1589 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1589 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3743]) ).
thf(4203,plain,
! [SV1323: $i,SV967: $i,SV447: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ SV447 ) @ SV967 )
= ( hAPP @ c_Public_OshrK @ SV1323 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3744]) ).
thf(4204,plain,
! [SV1324: $i,SV968: $i,SV448: $i] :
( ( ( hAPP @ c_Public_OshrK @ SV448 )
= ( hAPP @ ( c_Public_OpublicKey @ SV968 ) @ SV1324 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3745]) ).
thf(4205,plain,
! [SV1590: $i,SV1325: $i,SV969: $i,SV449: $i] :
( ( ! [SY4348: $i] :
( ( c_Event_Oevent_ONotes @ SV449 @ SV969 )
!= ( c_Event_Oevent_OSays @ SV1325 @ SV1590 @ SY4348 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3746]) ).
thf(4206,plain,
! [SV1591: $i,SV1326: $i,SV970: $i,SV450: $i] :
( ( ! [SY4349: $i] :
( ( c_Event_Oevent_OGets @ SV450 @ SV970 )
!= ( c_Event_Oevent_OSays @ SV1326 @ SV1591 @ SY4349 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3747]) ).
thf(4207,plain,
! [SV1592: $i,SV1327: $i,SV971: $i,SV451: $i] :
( ( ! [SY4350: $i] :
( ( c_Event_Oevent_OSays @ SV451 @ SV971 @ SV1327 )
!= ( c_Event_Oevent_ONotes @ SV1592 @ SY4350 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3748]) ).
thf(4208,plain,
! [SV1593: $i,SV1328: $i,SV972: $i,SV452: $i] :
( ( ! [SY4351: $i] :
( ( c_Event_Oevent_OSays @ SV452 @ SV972 @ SV1328 )
!= ( c_Event_Oevent_OGets @ SV1593 @ SY4351 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3749]) ).
thf(4209,plain,
! [SV1594: $i,SV1330: $i,SV974: $i,SV454: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV454 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV454 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV974 ) @ ( c_Message_Omsg_ONonce @ SV1330 ) ) ) ) @ SV1594 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1330 ) @ ( c_Event_Oused @ SV1594 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1594 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3751]) ).
thf(4210,plain,
! [SV1333: $i,SV1595: $i,SV457: $i] :
( ( ( ~ ( c_in @ SV457 @ ( c_Message_Oparts @ ( c_Event_OinitState @ SV1595 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV457 @ ( c_Event_Oused @ SV1333 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3754]) ).
thf(4211,plain,
! [SV1334: $i,SV977: $i,SV458: $i] :
( ( ( c_List_Olist_OCons @ SV458 @ SV977 @ SV1334 )
= ( c_List_Olist_ONil @ SV1334 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3755]) ).
thf(4212,plain,
! [SV1335: $i,SV978: $i,SV459: $i] :
( ( ( c_List_Olist_OCons @ SV459 @ SV978 @ SV1335 )
= ( c_List_Olist_ONil @ SV1335 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3756]) ).
thf(4213,plain,
! [SV1336: $i,SV979: $i,SV460: $i] :
( ( ( c_List_Olist_ONil @ SV460 )
= ( c_List_Olist_OCons @ SV979 @ SV1336 @ SV460 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3757]) ).
thf(4214,plain,
! [SV980: $i,SV461: $i] :
( ( ( c_in @ SV461 @ ( c_Message_Osynth @ ( c_Message_Osynth @ SV980 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV461 @ ( c_Message_Osynth @ SV980 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3758]) ).
thf(4215,plain,
! [SV981: $i,SV462: $i] :
( ( ( c_in @ SV462 @ SV981 @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV462 @ ( c_Message_Osynth @ SV981 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3759]) ).
thf(4216,plain,
! [SV1596: $i,SV1337: $i,SV982: $i,SV463: $i] :
( ( ! [SY4352: $i] : ( c_in @ ( hAPP @ SV463 @ SV982 ) @ ( c_Set_Oimage @ SV463 @ SV1337 @ SV1596 @ SY4352 ) @ SY4352 )
| ~ ( c_in @ SV982 @ SV1337 @ SV1596 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3760]) ).
thf(4217,plain,
! [SV1597: $i,SV1338: $i,SV983: $i,SV464: $i] :
( ( ! [SY4353: $i] : ( c_in @ ( hAPP @ SV464 @ SV983 ) @ ( c_Set_Oimage @ SV464 @ SV1338 @ SV1597 @ SY4353 ) @ SY4353 )
| ~ ( c_in @ SV983 @ SV1338 @ SV1597 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3761]) ).
thf(4218,plain,
! [SV1339: $i,SV984: $i,SV465: $i] :
( ( ( ~ ( c_in @ SV465 @ SV984 @ SV1339 ) )
= $true )
| ( ( ! [SY4138: $i,SY4139: $i] : ( c_in @ ( hAPP @ SY4138 @ SV465 ) @ ( c_Set_Oimage @ SY4138 @ SV984 @ SV1339 @ SY4139 ) @ SY4139 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3762]) ).
thf(4219,plain,
! [SV1340: $i,SV985: $i,SV466: $i] :
( ( ( ~ ( c_in @ SV466 @ SV985 @ SV1340 ) )
= $true )
| ( ( ! [SY4140: $i,SY4141: $i] : ( c_in @ ( hAPP @ SY4140 @ SV466 ) @ ( c_Set_Oimage @ SY4140 @ SV985 @ SV1340 @ SY4141 ) @ SY4141 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3763]) ).
thf(4220,plain,
! [SV1342: $i,SV987: $i,SV468: $i] :
( ( SV468
= ( c_List_Olist_OCons @ SV987 @ SV468 @ SV1342 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3765]) ).
thf(4221,plain,
! [SV1343: $i,SV988: $i,SV469: $i] :
( ( ( c_List_Olist_OCons @ SV469 @ SV988 @ SV1343 )
= SV988 )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3766]) ).
thf(4222,plain,
! [SV1344: $i,SV990: $i,SV472: $i] :
( ( ( ! [SY4142: $i] :
( ( hAPP @ ( c_Public_OpublicKey @ SV472 ) @ SV990 )
!= ( hAPP @ ( c_Public_OpublicKey @ SV1344 ) @ SY4142 ) ) )
= $true )
| ( ( SV472 = SV1344 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3767]) ).
thf(4223,plain,
! [SV1598: $i,SV1345: $i,SV991: $i,SV473: $i] :
( ( ( ( hAPP @ ( c_Public_OpublicKey @ SV473 ) @ SV991 )
!= ( hAPP @ ( c_Public_OpublicKey @ SV1345 ) @ SV1598 ) )
| ( SV991 = SV1598 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3768]) ).
thf(4224,plain,
! [SV1599: $i,SV1346: $i,SV992: $i,SV474: $i] :
( ( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV474 ) @ SV992 ) )
!= ( hAPP @ ( c_Public_OpublicKey @ SV1346 ) @ SV1599 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3769]) ).
thf(4225,plain,
! [SV993: $i,SV475: $i] :
( ( ( ( hAPP @ c_Message_OinvKey @ SV475 )
= ( hAPP @ c_Message_OinvKey @ SV993 ) )
= $false )
| ( ( SV475 = SV993 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3770]) ).
thf(4226,plain,
! [SV1600: $i,SV1347: $i,SV994: $i,SV476: $i] :
( ( ( ( c_Event_Oevent_OGets @ SV476 @ SV994 )
!= ( c_Event_Oevent_OGets @ SV1347 @ SV1600 ) )
| ( SV994 = SV1600 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3771]) ).
thf(4227,plain,
! [SV1348: $i,SV995: $i,SV477: $i] :
( ( ( ! [SY4146: $i] :
( ( c_Event_Oevent_OGets @ SV477 @ SV995 )
!= ( c_Event_Oevent_OGets @ SV1348 @ SY4146 ) ) )
= $true )
| ( ( SV477 = SV1348 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3772]) ).
thf(4228,plain,
! [SV1601: $i,SV1349: $i,SV996: $i,SV478: $i] :
( ( ( c_Event_Oevent_OGets @ SV478 @ SV996 )
!= ( c_Event_Oevent_ONotes @ SV1349 @ SV1601 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3773]) ).
thf(4229,plain,
! [SV1602: $i,SV1350: $i,SV997: $i,SV479: $i] :
( ( ( ( c_Event_Oevent_ONotes @ SV479 @ SV997 )
!= ( c_Event_Oevent_ONotes @ SV1350 @ SV1602 ) )
| ( SV997 = SV1602 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3774]) ).
thf(4230,plain,
! [SV1351: $i,SV998: $i,SV480: $i] :
( ( ( ! [SY4149: $i] :
( ( c_Event_Oevent_ONotes @ SV480 @ SV998 )
!= ( c_Event_Oevent_ONotes @ SV1351 @ SY4149 ) ) )
= $true )
| ( ( SV480 = SV1351 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3775]) ).
thf(4231,plain,
! [SV1603: $i,SV1352: $i,SV999: $i,SV482: $i] :
( ( ( c_Event_Oevent_ONotes @ SV482 @ SV999 )
!= ( c_Event_Oevent_OGets @ SV1352 @ SV1603 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3776]) ).
thf(4232,plain,
! [SV1604: $i,SV1353: $i,SV1000: $i,SV483: $i] :
( ( ! [SY4354: $i] :
( ( c_List_Olist_OCons @ SV483 @ SV1000 @ SV1353 )
!= ( c_List_Olist_OCons @ SV1604 @ SY4354 @ SV1353 ) )
| ( SV483 = SV1604 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3777]) ).
thf(4233,plain,
! [SV1605: $i,SV1354: $i,SV1001: $i,SV484: $i] :
( ( ! [SY4355: $i] :
( ( ( c_List_Olist_OCons @ SV484 @ SV1001 @ SV1354 )
!= ( c_List_Olist_OCons @ SV1605 @ SY4355 @ SV1354 ) )
| ( SV1001 = SY4355 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3778]) ).
thf(4234,plain,
! [SV1355: $i,SV1002: $i,SV485: $i] :
( ( ( hAPP @ c_Public_OshrK @ SV485 )
= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV1002 ) @ SV1355 ) ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3779]) ).
thf(4235,plain,
! [SV1357: $i,SV1004: $i,SV487: $i] :
( ( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV487 ) @ SV1004 ) )
= ( hAPP @ c_Public_OshrK @ SV1357 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3781]) ).
thf(4236,plain,
! [SV1606: $i,SV1358: $i,SV1005: $i,SV488: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ SV488 ) @ SV1005 )
!= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV1358 ) @ SV1606 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3782]) ).
thf(4237,plain,
! [SV1006: $i,SV1607: $i,SV489: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV489 @ SV1607 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1006 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV489 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1006 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3783]) ).
thf(4238,plain,
! [SV1359: $i,SV1007: $i,SV490: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV490 @ SV1007 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV1007 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV490 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3784]) ).
thf(4239,plain,
! [SV1360: $i,SV1008: $i,SV491: $i] :
( ( c_in @ ( c_Message_Omsg_OCrypt @ SV491 @ SV1008 ) @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1360 @ tc_nat @ tc_Message_Omsg ) @ tc_Message_Omsg )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3785]) ).
thf(4240,plain,
! [SV1361: $i,SV1009: $i,SV492: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ ( c_Message_Osynth @ SV1361 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ SV1361 @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV492 ) @ SV1361 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3786]) ).
thf(4241,plain,
! [SV1362: $i,SV1010: $i,SV493: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ SV1362 @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ ( c_Message_Osynth @ SV1362 ) @ tc_Message_Omsg )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV493 ) @ SV1362 @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3787]) ).
thf(4242,plain,
! [SV1011: $i,SV1608: $i,SV494: $i] :
( ( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SV1608 ) @ SV1011 @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SV1608 ) @ ( c_Message_Osynth @ SV1011 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV494 ) @ SV1011 @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3788]) ).
thf(4243,plain,
! [SV1363: $i,SV1012: $i,SV495: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV495 @ SV1012 ) @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV495 ) @ SV1363 @ tc_Message_Omsg )
| ~ ( c_in @ SV1012 @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3789]) ).
thf(4244,plain,
! [SV1609: $i,SV1364: $i,SV1017: $i,SV501: $i] :
( ( ! [SY4356: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SY4356 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4357: $i,SY4358: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4357 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4356 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4358 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3792]) ).
thf(4245,plain,
! [SV1610: $i,SV1365: $i,SV1018: $i,SV502: $i] :
( ( ! [SY4359: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SY4359 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4359 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SY4359 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SY4359 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SY4359 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4359 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4359 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3793]) ).
thf(4246,plain,
! [SV1611: $i,SV1019: $i,SV503: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV503 ) @ SV1019 ) ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1611 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV1019 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3794]) ).
thf(4247,plain,
! [SV1612: $i,SV1366: $i,SV1021: $i,SV506: $i] :
( ( ! [SY4360: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SY4360 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ! [SY4361: $i,SY4362: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4361 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4361 ) @ ( c_Message_Omsg_OMPair @ SY4362 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3796]) ).
thf(4248,plain,
! [SV1613: $i,SV1367: $i,SV1022: $i,SV507: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV507 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV507 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ SV507 @ SV1022 @ SV1367 @ SV1613 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1613 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1613 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1022 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1613 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3797]) ).
thf(4249,plain,
! [SV1614: $i,SV1368: $i,SV1023: $i,SV508: $i] :
( ( ! [SY4363: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SY4363 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4363 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4364: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4364 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SY4364 @ SY4363 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SY4363 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4170: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SY4364 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4170 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4363 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4363 ) ) @ tc_Message_Omsg ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3798]) ).
thf(4250,plain,
! [SV509: $i,SV1024: $i,SV1615: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1615 ) ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1615 @ SV509 ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV509 @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3799]) ).
thf(4251,plain,
! [SV1025: $i,SV510: $i] :
( ( ( c_in @ SV510 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1025 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV510 @ ( c_Event_Oused @ SV1025 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3800]) ).
thf(4252,plain,
! [SV1027: $i,SV512: $i] :
( ( ( ~ ( c_in @ SV512 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( ~ ( c_in @ SV1027 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV512 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1027 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3802]) ).
thf(4253,plain,
! [SV1370: $i,SV513: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV513 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1370 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV1370 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV513 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3803]) ).
thf(4254,plain,
! [SV1371: $i,SV1028: $i,SV514: $i] :
( ( ( c_in @ SV514 @ ( c_Event_Oknows @ SV1028 @ SV1371 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_ONotes @ SV1028 @ SV514 ) @ ( c_List_Oset @ SV1371 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3804]) ).
thf(4255,plain,
! [SV1372: $i,SV515: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV515 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1372 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV1372 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV515 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3805]) ).
thf(4256,plain,
! [SV1029: $i,SV516: $i] :
( ( ( ~ ( c_in @ SV516 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( ~ ( c_in @ SV1029 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV516 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1029 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3806]) ).
thf(4257,plain,
! [SV1030: $i,SV517: $i,SV1616: $i] :
( ( ( ! [SY4366: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1616 @ SY4366 @ SV517 ) @ ( c_List_Oset @ SV1030 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV517 @ ( c_Event_Oused @ SV1030 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3807]) ).
thf(4258,plain,
! [SV1617: $i,SV1373: $i,SV1031: $i,SV518: $i] :
( ( ! [SY4367: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) @ SY4367 )
| ~ ( c_in @ SY4367 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4367 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) ) @ ( c_List_Oset @ SY4367 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3808]) ).
thf(4259,plain,
! [SV1618: $i,SV1374: $i,SV1032: $i,SV519: $i] :
( ( ! [SY4368: $i] :
( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SY4368 )
| ~ ( c_in @ SY4368 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4368 ) ) @ tc_Message_Omsg )
| ! [SY4175: $i,SY4176: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4175 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4176 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4368 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4368 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3809]) ).
thf(4260,plain,
! [SV1619: $i,SV1375: $i,SV1033: $i,SV520: $i] :
( ( ! [SY4371: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SY4371 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4371 ) ) @ tc_Message_Omsg )
| ! [SY4179: $i,SY4180: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SY4179 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SY4180 ) ) ) ) ) @ ( c_List_Oset @ SY4371 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4371 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY4371 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3810]) ).
thf(4261,plain,
! [SV1620: $i,SV1376: $i,SV1034: $i,SV521: $i] :
( ( ! [SY4374: $i,SY4375: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SY4374 ) ) ) ) ) @ ( c_List_Oset @ SY4375 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4375 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SY4374 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4375 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3811]) ).
thf(4262,plain,
! [SV1378: $i,SV1036: $i,SV523: $i] :
( ( ( ~ ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1036 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ! [SY4184: $i,SY4185: $i] : ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV1378 @ SY4184 @ SY4185 ) @ SV1036 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3813]) ).
thf(4263,plain,
! [SV1379: $i,SV1037: $i,SV524: $i] :
( ( ( c_in @ SV524 @ ( c_Event_Oknows @ SV1037 @ SV1379 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OGets @ SV1037 @ SV524 ) @ ( c_List_Oset @ SV1379 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV1037 = c_Message_Oagent_OSpy ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3814]) ).
thf(4264,plain,
! [SV1621: $i,SV1380: $i,SV1038: $i,SV525: $i] :
( ( ! [SY4376: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SY4376 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4376 ) ) @ tc_Message_Omsg )
| ! [SY4188: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SY4188 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SY4376 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4376 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SY4376 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3815]) ).
thf(4265,plain,
! [SV1622: $i,SV1381: $i,SV1039: $i,SV526: $i] :
( ( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ ( c_Message_Omsg_OAgent @ SV1622 ) ) ) )
| ! [SY4378: $i] :
( ~ ( c_in @ SY4378 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1622 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4379: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1622 ) @ ( c_Message_Omsg_OMPair @ SY4379 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4378 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3816]) ).
thf(4266,plain,
! [SV1623: $i,SV1382: $i,SV1040: $i,SV527: $i] :
( ( ! [SY4380: $i] :
( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
| ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ ( c_Message_Omsg_OAgent @ SY4380 ) ) ) )
| ~ ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4381: $i,SY4382: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4381 @ SY4380 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4380 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4382 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3817]) ).
thf(4267,plain,
! [SV1041: $i,SV528: $i,SV1624: $i] :
( ( ( ~ ( c_in @ SV1624 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_ONotes @ SV1624 @ SV528 ) @ ( c_List_Oset @ SV1041 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV528 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1041 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3818]) ).
thf(4268,plain,
! [SV1625: $i,SV1383: $i,SV1042: $i,SV529: $i] :
( ( ( c_in @ SV529 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1042 ) ) @ tc_Message_Omsg )
| ! [SY4383: $i,SY4384: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1383 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1383 ) @ ( c_Message_Omsg_OMPair @ SV1625 @ ( c_Message_Omsg_OMPair @ SY4383 @ ( c_Message_Omsg_OMPair @ SV529 @ SY4384 ) ) ) ) ) @ ( c_List_Oset @ SV1042 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3819]) ).
thf(4269,plain,
! [SV1043: $i,SV530: $i] :
( ( ( ( c_Message_Omsg_OAgent @ SV530 )
= ( c_Message_Omsg_OAgent @ SV1043 ) )
= $false )
| ( ( SV530 = SV1043 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3820]) ).
thf(4270,plain,
! [SV1384: $i,SV1044: $i,SV532: $i] :
( ( ( c_in @ SV532 @ ( c_Event_Oknows @ SV1044 @ SV1384 ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY4199: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1044 @ SY4199 @ SV532 ) @ ( c_List_Oset @ SV1384 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3821]) ).
thf(4271,plain,
! [SV1045: $i,SV534: $i,SV1626: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV1626 @ SV534 ) @ ( c_Message_Oanalz @ SV1045 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV534 @ ( c_Message_Oanalz @ SV1045 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3822]) ).
thf(4272,plain,
! [SV1046: $i,SV1627: $i,SV535: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV535 @ SV1627 ) @ ( c_Message_Oanalz @ SV1046 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV535 @ ( c_Message_Oanalz @ SV1046 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3823]) ).
thf(4273,plain,
! [SV1047: $i,SV536: $i,SV1628: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV1628 @ SV536 ) @ ( c_Message_Oparts @ SV1047 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV536 @ ( c_Message_Oparts @ SV1047 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3824]) ).
thf(4274,plain,
! [SV1048: $i,SV1629: $i,SV537: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV537 @ SV1629 ) @ ( c_Message_Oparts @ SV1048 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV537 @ ( c_Message_Oparts @ SV1048 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3825]) ).
thf(4275,plain,
! [SV1385: $i,SV1049: $i,SV538: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV538 @ SV1049 )
= ( c_Message_Omsg_ONonce @ SV1385 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3826]) ).
thf(4276,plain,
! [SV1630: $i,SV1386: $i,SV1052: $i,SV541: $i] :
( ( ! [SY4385: $i,SY4386: $i] :
( ( c_Event_Oevent_OSays @ SV541 @ SV1052 @ SV1386 )
!= ( c_Event_Oevent_OSays @ SV1630 @ SY4385 @ SY4386 ) )
| ( SV541 = SV1630 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3829]) ).
thf(4277,plain,
! [SV1631: $i,SV1387: $i,SV1053: $i,SV542: $i] :
( ( ! [SY4387: $i] :
( ! [SY4388: $i] :
( ( c_Event_Oevent_OSays @ SV542 @ SV1053 @ SV1387 )
!= ( c_Event_Oevent_OSays @ SV1631 @ SY4387 @ SY4388 ) )
| ( SV1053 = SY4387 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3830]) ).
thf(4278,plain,
! [SV1632: $i,SV1388: $i,SV1054: $i,SV543: $i] :
( ( ! [SY4389: $i,SY4390: $i] :
( ( ( c_Event_Oevent_OSays @ SV543 @ SV1054 @ SV1388 )
!= ( c_Event_Oevent_OSays @ SV1632 @ SY4389 @ SY4390 ) )
| ( SV1388 = SY4390 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3831]) ).
thf(4279,plain,
! [SV1055: $i,SV544: $i] :
( ( ( c_in @ SV544 @ SV1055 @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV544 @ ( c_Message_Oparts @ SV1055 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3832]) ).
thf(4280,plain,
! [SV1056: $i,SV545: $i] :
( ( ( c_in @ SV545 @ SV1056 @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV545 @ ( c_Message_Oanalz @ SV1056 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3833]) ).
thf(4281,plain,
! [SV1057: $i,SV546: $i,SV1633: $i] :
( ( ( ! [SY4391: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1633 @ SY4391 @ SV546 ) @ ( c_List_Oset @ SV1057 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV546 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1057 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3834]) ).
thf(4282,plain,
! [SV1058: $i,SV547: $i,SV1634: $i] :
( ( ( ! [SY4392: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1634 @ SY4392 @ SV547 ) @ ( c_List_Oset @ SV1058 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV547 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1058 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3835]) ).
thf(4283,plain,
! [SV1635: $i,SV1389: $i,SV1059: $i,SV548: $i] :
( ( ! [SY4393: $i,SY4394: $i] :
( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1059 ) ) @ tc_Message_Omsg )
| ! [SY4395: $i,SY4396: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1389 @ SV1635 @ ( c_Message_Omsg_OCrypt @ SY4393 @ ( c_Message_Omsg_OMPair @ SY4394 @ ( c_Message_Omsg_OMPair @ SY4395 @ ( c_Message_Omsg_OMPair @ SY4396 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SV1059 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3836]) ).
thf(4284,plain,
! [SV1390: $i,SV1060: $i,SV549: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV549 @ SV1060 )
= ( hAPP @ c_Message_Omsg_OKey @ SV1390 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3837]) ).
thf(4285,plain,
! [SV1391: $i,SV1062: $i,SV553: $i] :
( ( ( c_Message_Omsg_OMPair @ SV553 @ SV1062 )
= ( c_Message_Omsg_OAgent @ SV1391 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3839]) ).
thf(4286,plain,
! [SV1064: $i,SV555: $i,SV1636: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1636 @ SV555 ) @ ( c_Message_Oparts @ SV1064 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV555 @ ( c_Message_Oparts @ SV1064 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3841]) ).
thf(4287,plain,
! [SV556: $i,SV1065: $i,SV1637: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV1637 ) ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1637 ) @ SV556 ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV556 @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3842]) ).
thf(4288,plain,
! [SV1066: $i,SV557: $i,SV1638: $i] :
( ( ( ! [SY4397: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1638 @ SY4397 @ SV557 ) @ ( c_List_Oset @ SV1066 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV557 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1066 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3843]) ).
thf(4289,plain,
! [SV1067: $i,SV558: $i] :
( ( ( c_in @ SV558 @ ( c_Message_Oparts @ ( c_Message_Oparts @ SV1067 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV558 @ ( c_Message_Oparts @ SV1067 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3844]) ).
thf(4290,plain,
! [SV1068: $i,SV559: $i] :
( ( ( ( hAPP @ c_Message_Omsg_OKey @ SV559 )
= ( hAPP @ c_Message_Omsg_OKey @ SV1068 ) )
= $false )
| ( ( SV559 = SV1068 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3845]) ).
thf(4291,plain,
! [SV1392: $i,SV1069: $i,SV560: $i] :
( ( ( c_Message_Omsg_OAgent @ SV560 )
= ( c_Message_Omsg_OMPair @ SV1069 @ SV1392 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3846]) ).
thf(4292,plain,
! [SV1393: $i,SV561: $i] :
( ( ( c_in @ SV561 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV561 ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1393 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3847]) ).
thf(4293,plain,
! [SV1394: $i,SV1070: $i,SV562: $i] :
( ( ( c_Message_Omsg_OAgent @ SV562 )
= ( c_Message_Omsg_OCrypt @ SV1070 @ SV1394 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3848]) ).
thf(4294,plain,
! [SV1395: $i,SV1071: $i,SV563: $i] :
( ( ( c_Message_Omsg_ONonce @ SV563 )
= ( c_Message_Omsg_OMPair @ SV1071 @ SV1395 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3849]) ).
thf(4295,plain,
! [SV1639: $i,SV1396: $i,SV1072: $i,SV564: $i] :
( ( ( c_Message_Omsg_OMPair @ SV564 @ SV1072 )
!= ( c_Message_Omsg_OCrypt @ SV1396 @ SV1639 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3850]) ).
thf(4296,plain,
! [SV1397: $i,SV1073: $i,SV565: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV565 @ SV1073 )
= ( c_Message_Omsg_OAgent @ SV1397 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3851]) ).
thf(4297,plain,
! [SV1076: $i,SV568: $i] :
( ( ( c_in @ SV568 @ ( c_Message_Oanalz @ ( c_Message_Oanalz @ SV1076 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV568 @ ( c_Message_Oanalz @ SV1076 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3853]) ).
thf(4298,plain,
! [SV1077: $i,SV569: $i] :
( ( ( ( c_Message_Omsg_ONonce @ SV569 )
= ( c_Message_Omsg_ONonce @ SV1077 ) )
= $false )
| ( ( SV569 = SV1077 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3854]) ).
thf(4299,plain,
! [SV1640: $i,SV1078: $i,SV570: $i] :
( ( ( c_in @ SV570 @ SV1078 @ SV1640 )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV1078 @ SV570 ) ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3855]) ).
thf(4300,plain,
! [SV1641: $i,SV571: $i,SV1079: $i] :
( ( ( ~ ( c_in @ SV1079 @ SV571 @ SV1641 ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV571 @ SV1079 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3856]) ).
thf(4301,plain,
! [SV1398: $i,SV1080: $i,SV572: $i] :
( ( ( c_Message_Omsg_ONonce @ SV572 )
= ( c_Message_Omsg_OCrypt @ SV1080 @ SV1398 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3857]) ).
thf(4302,plain,
! [SV1399: $i,SV1081: $i,SV573: $i] :
( ( ( ! [SY4215: $i] :
( ( c_Message_Omsg_OCrypt @ SV573 @ SV1081 )
!= ( c_Message_Omsg_OCrypt @ SV1399 @ SY4215 ) ) )
= $true )
| ( ( SV573 = SV1399 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3858]) ).
thf(4303,plain,
! [SV1642: $i,SV1400: $i,SV1082: $i,SV574: $i] :
( ( ( ( c_Message_Omsg_OCrypt @ SV574 @ SV1082 )
!= ( c_Message_Omsg_OCrypt @ SV1400 @ SV1642 ) )
| ( SV1082 = SV1642 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3859]) ).
thf(4304,plain,
! [SV1401: $i,SV1084: $i,SV576: $i] :
( ( ( ! [SY4217: $i] :
( ( c_Message_Omsg_OMPair @ SV576 @ SV1084 )
!= ( c_Message_Omsg_OMPair @ SV1401 @ SY4217 ) ) )
= $true )
| ( ( SV576 = SV1401 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3861]) ).
thf(4305,plain,
! [SV1643: $i,SV1402: $i,SV1085: $i,SV577: $i] :
( ( ( ( c_Message_Omsg_OMPair @ SV577 @ SV1085 )
!= ( c_Message_Omsg_OMPair @ SV1402 @ SV1643 ) )
| ( SV1085 = SV1643 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3862]) ).
thf(4306,plain,
! [SV1086: $i,SV578: $i,SV1644: $i] :
( ( ( ~ ( c_in @ SV1644 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1644 ) @ SV578 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV578 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3863]) ).
thf(4307,plain,
! [SV1403: $i,SV1087: $i,SV579: $i] :
( ( ( c_Message_Omsg_OMPair @ SV579 @ SV1087 )
= ( c_Message_Omsg_ONonce @ SV1403 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3864]) ).
thf(4308,plain,
! [SV1645: $i,SV1404: $i,SV1088: $i,SV580: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV580 @ SV1088 )
!= ( c_Message_Omsg_OMPair @ SV1404 @ SV1645 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3865]) ).
thf(4309,plain,
! [SV1405: $i,SV1089: $i,SV581: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV581 )
= ( c_Message_Omsg_OMPair @ SV1089 @ SV1405 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3866]) ).
thf(4310,plain,
! [SV1406: $i,SV1090: $i,SV582: $i] :
( ( ( c_Message_Omsg_OMPair @ SV582 @ SV1090 )
= ( hAPP @ c_Message_Omsg_OKey @ SV1406 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3867]) ).
thf(4311,plain,
! [SV1407: $i,SV1091: $i,SV583: $i] :
( ( ( hAPP @ c_Message_Omsg_OKey @ SV583 )
= ( c_Message_Omsg_OCrypt @ SV1091 @ SV1407 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[3868]) ).
thf(4312,plain,
! [SV1092: $i,SV584: $i] :
( ( ( ( hAPP @ c_Public_OshrK @ SV584 )
= ( hAPP @ c_Public_OshrK @ SV1092 ) )
= $false )
| ( ( SV584 = SV1092 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3869]) ).
thf(4313,plain,
! [SV1093: $i,SV585: $i] :
( ( ( c_in @ SV585 @ ( c_Message_Oanalz @ SV1093 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV585 @ ( c_Message_Oparts @ SV1093 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3870]) ).
thf(4314,plain,
! [SV1094: $i,SV586: $i] :
( ( ( c_in @ SV586 @ ( c_Message_Oanalz @ SV1094 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV586 @ ( c_Message_Oparts @ SV1094 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3871]) ).
thf(4315,plain,
! [SV1095: $i,SV587: $i] :
( ( ( c_in @ SV587 @ ( c_Message_Oanalz @ SV1095 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV587 @ ( c_Message_Oparts @ SV1095 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3872]) ).
thf(4316,plain,
! [SV588: $i,SV1096: $i] :
( ( ( class_Lattices_Olattice @ SV1096 )
= $false )
| ( ( class_Lattices_Oupper__semilattice @ ( tc_fun @ SV588 @ SV1096 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3873]) ).
thf(4317,plain,
! [SV589: $i,SV1097: $i] :
( ( ( class_Lattices_Obounded__lattice @ SV1097 )
= $false )
| ( ( class_Lattices_Obounded__lattice @ ( tc_fun @ SV589 @ SV1097 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3874]) ).
thf(4318,plain,
! [SV590: $i,SV1098: $i] :
( ( ( class_Lattices_Oboolean__algebra @ SV1098 )
= $false )
| ( ( class_Lattices_Oboolean__algebra @ ( tc_fun @ SV590 @ SV1098 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3875]) ).
thf(4319,plain,
! [SV591: $i,SV1099: $i] :
( ( ( class_Orderings_Opreorder @ SV1099 )
= $false )
| ( ( class_Orderings_Opreorder @ ( tc_fun @ SV591 @ SV1099 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3876]) ).
thf(4320,plain,
! [SV592: $i,SV1100: $i] :
( ( ( class_Lattices_Olattice @ SV1100 )
= $false )
| ( ( class_Lattices_Olattice @ ( tc_fun @ SV592 @ SV1100 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3877]) ).
thf(4321,plain,
! [SV593: $i,SV1101: $i] :
( ( ( class_Orderings_Oorder @ SV1101 )
= $false )
| ( ( class_Orderings_Oorder @ ( tc_fun @ SV593 @ SV1101 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3878]) ).
thf(4322,plain,
! [SV594: $i,SV1102: $i] :
( ( ( class_Orderings_Otop @ SV1102 )
= $false )
| ( ( class_Orderings_Otop @ ( tc_fun @ SV594 @ SV1102 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3879]) ).
thf(4323,plain,
! [SV595: $i,SV1103: $i] :
( ( ( class_Orderings_Obot @ SV1103 )
= $false )
| ( ( class_Orderings_Obot @ ( tc_fun @ SV595 @ SV1103 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3880]) ).
thf(4324,plain,
! [SV596: $i,SV1104: $i] :
( ( ( class_HOL_Oord @ SV1104 )
= $false )
| ( ( class_HOL_Oord @ ( tc_fun @ SV596 @ SV1104 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3881]) ).
thf(4325,plain,
! [SV1646: $i,SV1106: $i,SV598: $i] :
( ( ( ~ ( c_fequal @ SV598 @ SV1106 @ SV1646 ) )
= $true )
| ( ( SV598 = SV1106 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3882]) ).
thf(4326,plain,
! [SV1409: $i,SV1109: $i,SV602: $i,SV4: $i] :
( ( ( c_in @ SV4 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV602 @ SV1109 @ SV4 @ SV1409 ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_NS__Shared__Mirabelle_OIssues @ SV602 @ SV1109 @ SV4 @ SV1409 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3885]) ).
thf(4327,plain,
! [SV5: $i,SV603: $i,SV1410: $i] :
( ( ( ~ ( c_in @ SV1410 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV5 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1410 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV5 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ ( c_Message_Oparts @ SV603 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3886]) ).
thf(4328,plain,
! [SV7: $i,SV1647: $i,SV605: $i] :
( ( ( ~ ( c_in @ SV605 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1647 @ tc_bool ) ) @ SV1647 ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV7 @ SV605 ) )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3887]) ).
thf(4329,plain,
! [SV10: $i,SV1411: $i,SV608: $i] :
( ( ( c_in @ SV608 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1411 @ tc_bool ) ) @ SV1411 )
= $false )
| ( ( hBOOL @ ( hAPP @ SV10 @ SV608 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3888]) ).
thf(4330,plain,
! [SV14: $i,SV1648: $i,SV1412: $i] :
( ( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1412 @ SV1648 @ SV14 )
!= ( c_Orderings_Obot__class_Obot @ SV14 ) )
| ( SV1648
= ( c_Orderings_Obot__class_Obot @ SV14 ) ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV14 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3889]) ).
thf(4331,plain,
! [SV15: $i,SV1413: $i] :
( ( ( ! [SY4221: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1413 @ SY4221 @ SV15 )
!= ( c_Orderings_Obot__class_Obot @ SV15 ) ) )
= $true )
| ( ( SV1413
= ( c_Orderings_Obot__class_Obot @ SV15 ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV15 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[3890]) ).
thf(4332,plain,
! [SV1112: $i,SV612: $i,SV16: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV16 @ SV612 @ ( tc_fun @ SV1112 @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1112 @ tc_bool ) ) )
= $false )
| ( ( SV16
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1112 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3891]) ).
thf(4333,plain,
! [SV1113: $i,SV613: $i,SV17: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV17 @ SV613 @ ( tc_fun @ SV1113 @ tc_bool ) )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1113 @ tc_bool ) ) )
= $false )
| ( ( SV613
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1113 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3892]) ).
thf(4334,plain,
! [SV1114: $i,SV614: $i,SV18: $i] :
( ( ( ( c_Set_Oinsert @ SV18 @ SV614 @ SV1114 )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1114 @ tc_bool ) ) )
= $false )
| ( ( c_in @ SV18 @ SV614 @ SV1114 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3893]) ).
thf(4335,plain,
! [SV1115: $i,SV615: $i,SV19: $i] :
( ( ( ( c_Set_Oinsert @ SV19 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV615 @ tc_bool ) ) @ SV615 )
= ( c_Set_Oinsert @ SV1115 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV615 @ tc_bool ) ) @ SV615 ) )
= $false )
| ( ( SV19 = SV1115 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3894]) ).
thf(4336,plain,
! [SV1414: $i,SV619: $i,SV23: $i] :
( ( ( c_in @ SV23 @ ( c_Set_Oinsert @ SV619 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1414 @ tc_bool ) ) @ SV1414 ) @ SV1414 )
= $false )
| ( ( SV23 = SV619 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3895]) ).
thf(4337,plain,
! [SV1415: $i,SV1119: $i,SV621: $i,SV25: $i] :
( ( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV25 @ tc_bool ) )
!= ( c_Set_Oimage @ SV621 @ SV1119 @ SV1415 @ SV25 ) )
= $true )
| ( ( SV1119
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1415 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3897]) ).
thf(4338,plain,
! [SV1649: $i,SV1419: $i,SV1122: $i,SV628: $i,SV39: $i] :
( ( ( ( c_Set_Oinsert @ SV39 @ ( c_Set_Oinsert @ SV628 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 )
!= ( c_Set_Oinsert @ SV1419 @ ( c_Set_Oinsert @ SV1649 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 ) )
| ( SV39 = SV1649 )
| ( SV39 = SV1419 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3902]) ).
thf(4339,plain,
! [SV1420: $i,SV1123: $i,SV629: $i,SV40: $i] :
( ( ( ! [SY4223: $i] :
( ( c_Set_Oinsert @ SV40 @ ( c_Set_Oinsert @ SV629 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 )
!= ( c_Set_Oinsert @ SV1420 @ ( c_Set_Oinsert @ SY4223 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 ) ) )
= $true )
| ( ( ( SV629 = SV1420 )
| ( SV40 = SV1420 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3903]) ).
thf(4340,plain,
! [SV1650: $i,SV1421: $i,SV1124: $i,SV630: $i,SV41: $i] :
( ( ( ( c_Set_Oinsert @ SV41 @ ( c_Set_Oinsert @ SV630 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 )
!= ( c_Set_Oinsert @ SV1421 @ ( c_Set_Oinsert @ SV1650 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 ) )
| ( SV41 = SV1650 )
| ( SV630 = SV1650 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3904]) ).
thf(4341,plain,
! [SV1651: $i,SV1422: $i,SV1125: $i,SV631: $i,SV42: $i] :
( ( ( ( c_Set_Oinsert @ SV42 @ ( c_Set_Oinsert @ SV631 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 )
!= ( c_Set_Oinsert @ SV1422 @ ( c_Set_Oinsert @ SV1651 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 ) )
| ( SV631 = SV1422 )
| ( SV631 = SV1651 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3905]) ).
thf(4342,plain,
! [SV1652: $i,SV1127: $i,SV634: $i,SV48: $i] :
( ( ( ( c_Set_Oimage @ SV48 @ SV634 @ SV1127 @ SV1652 )
!= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1652 @ tc_bool ) ) )
= $true )
| ( ( SV634
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1127 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3908]) ).
thf(4343,plain,
! [SV638: $i,SV1128: $i,SV52: $i] :
( ( ( SV52
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ SV52 @ ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) @ SV1128 ) @ ( tc_fun @ SV1128 @ tc_bool ) ) )
= $true )
| ( ( SV52
= ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) @ SV1128 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3910]) ).
thf(4344,plain,
! [SV1129: $i,SV59: $i] :
( ( ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OEncryption ) )
= $false )
| ( ( ~ ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OSignature ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV59 @ SV1129 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3913]) ).
thf(4345,plain,
! [SV62: $i,SV1653: $i,SV1425: $i] :
( ( ( ( c_lessequals @ SV1425 @ SV1653 @ SV62 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1653 @ SV62 ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1425 @ SV62 ) @ SV62 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV62 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3916]) ).
thf(4346,plain,
! [SV1654: $i,SV63: $i,SV1426: $i] :
( ( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1426 @ SV63 ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1654 @ SV63 ) @ SV63 )
| ~ ( c_lessequals @ SV1654 @ SV1426 @ SV63 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV63 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3917]) ).
thf(4347,plain,
! [SV643: $i,SV64: $i,SV1132: $i] :
( ( ( c_lessequals @ SV1132 @ SV64 @ ( tc_fun @ SV643 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV64 @ ( tc_fun @ SV643 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1132 @ ( tc_fun @ SV643 @ tc_bool ) ) @ ( tc_fun @ SV643 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3918]) ).
thf(4348,plain,
! [SV65: $i,SV1133: $i,SV644: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV644 @ ( tc_fun @ SV1133 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV65 @ ( tc_fun @ SV1133 @ tc_bool ) ) @ ( tc_fun @ SV1133 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV65 @ SV644 @ ( tc_fun @ SV1133 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3919]) ).
thf(4349,plain,
! [SV645: $i,SV66: $i,SV1134: $i] :
( ( ( c_lessequals @ SV1134 @ SV66 @ ( tc_fun @ SV645 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV66 @ ( tc_fun @ SV645 @ tc_bool ) ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1134 @ ( tc_fun @ SV645 @ tc_bool ) ) @ ( tc_fun @ SV645 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3920]) ).
thf(4350,plain,
! [SV1655: $i,SV1427: $i,SV1135: $i,SV647: $i,SV68: $i] :
( ( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ ( c_List_Oappend @ SV647 @ ( c_List_Olist_OCons @ SV1135 @ SV1427 @ SV1655 ) @ SV1655 ) @ SV1655 ) ) )
| ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ SV1427 @ SV1655 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV68 @ SV1135 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3922]) ).
thf(4351,plain,
! [SV1656: $i,SV1431: $i,SV1138: $i,SV654: $i,SV77: $i] :
( ( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ ( c_List_Oappend @ SV654 @ ( c_List_Olist_OCons @ SV1138 @ SV1431 @ SV1656 ) @ SV1656 ) @ SV1656 ) ) )
| ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ SV654 @ SV1656 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV77 @ SV1138 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3926]) ).
thf(4352,plain,
! [SV79: $i,SV656: $i,SV1432: $i] :
( ( ( hBOOL @ ( hAPP @ SV1432 @ SV656 ) )
= $true )
| ( ( ! [SY4230: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1432 @ SV79 @ ( tc_fun @ SY4230 @ tc_bool ) ) @ SV656 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV79 @ SV656 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3927]) ).
thf(4353,plain,
! [SV1433: $i,SV1139: $i,SV657: $i,SV80: $i] :
( ( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV80 @ SV657 @ ( tc_fun @ SV1139 @ tc_bool ) ) @ SV1433 ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV657 @ SV1433 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3928]) ).
thf(4354,plain,
! [SV1434: $i,SV1140: $i,SV658: $i,SV81: $i] :
( ( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV81 @ SV658 @ ( tc_fun @ SV1140 @ tc_bool ) ) @ SV1434 ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV81 @ SV1434 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3929]) ).
thf(4355,plain,
! [SV1657: $i,SV84: $i,SV1435: $i] :
( ( ( ( ( c_HOL_Ouminus__class_Ouminus @ SV1435 @ SV84 )
!= ( c_HOL_Ouminus__class_Ouminus @ SV1657 @ SV84 ) )
| ( SV1435 = SV1657 ) )
= $true )
| ( ( class_Lattices_Oboolean__algebra @ SV84 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3930]) ).
thf(4356,plain,
! [SV1658: $i,SV85: $i,SV1436: $i] :
( ( ( ( ( c_HOL_Ouminus__class_Ouminus @ SV1436 @ SV85 )
!= ( c_HOL_Ouminus__class_Ouminus @ SV1658 @ SV85 ) )
| ( SV1436 = SV1658 ) )
= $true )
| ( ( class_OrderedGroup_Ogroup__add @ SV85 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3931]) ).
thf(4357,plain,
! [SV1141: $i,SV661: $i,SV86: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ SV86 @ ( tc_fun @ SV661 @ tc_bool ) )
= ( c_HOL_Ouminus__class_Ouminus @ SV1141 @ ( tc_fun @ SV661 @ tc_bool ) ) )
= $false )
| ( ( SV86 = SV1141 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3932]) ).
thf(4358,plain,
! [SV1437: $i,SV87: $i,SV662: $i] :
( ( ( ~ ( c_lessequals @ SV662 @ SV87 @ ( tc_fun @ SV1437 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ SV87 @ SV662 @ ( tc_fun @ SV1437 @ tc_bool ) ) )
= $true )
| ( ( SV87 = SV662 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3933]) ).
thf(4359,plain,
! [SV1438: $i,SV88: $i,SV663: $i] :
( ( ( ~ ( c_lessequals @ SV663 @ SV88 @ ( tc_fun @ SV1438 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ SV88 @ SV663 @ ( tc_fun @ SV1438 @ tc_bool ) ) )
= $true )
| ( ( SV88 = SV663 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3934]) ).
thf(4360,plain,
! [SV89: $i,SV1659: $i,SV1439: $i] :
( ( ( ( SV1439 = SV1659 )
| ~ ( c_lessequals @ SV1659 @ SV1439 @ SV89 )
| ~ ( c_lessequals @ SV1439 @ SV1659 @ SV89 ) )
= $true )
| ( ( class_Orderings_Oorder @ SV89 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3935]) ).
thf(4361,plain,
! [SV90: $i,SV1660: $i,SV1440: $i] :
( ( ( ( SV1440 = SV1660 )
| ~ ( c_lessequals @ SV1660 @ SV1440 @ SV90 )
| ~ ( c_lessequals @ SV1440 @ SV1660 @ SV90 ) )
= $true )
| ( ( class_Orderings_Oorder @ SV90 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3936]) ).
thf(4362,plain,
! [SV91: $i,SV1661: $i,SV1441: $i] :
( ( ( ( SV1441 = SV1661 )
| ~ ( c_lessequals @ SV1441 @ SV1661 @ SV91 )
| ~ ( c_lessequals @ SV1661 @ SV1441 @ SV91 ) )
= $true )
| ( ( class_Orderings_Oorder @ SV91 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3937]) ).
thf(4363,plain,
! [SV92: $i,SV1662: $i,SV1442: $i] :
( ( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1442 @ SV1662 @ SV92 )
= SV1442 )
| ~ ( c_lessequals @ SV1662 @ SV1442 @ SV92 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV92 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3938]) ).
thf(4364,plain,
! [SV93: $i,SV1663: $i,SV1443: $i] :
( ( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1443 @ SV1663 @ SV93 )
!= SV1663 )
| ( c_lessequals @ SV1443 @ SV1663 @ SV93 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV93 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3939]) ).
thf(4365,plain,
! [SV94: $i,SV1664: $i,SV1444: $i] :
( ( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1444 @ SV1664 @ SV94 )
= SV1664 )
| ~ ( c_lessequals @ SV1444 @ SV1664 @ SV94 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV94 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3940]) ).
thf(4366,plain,
! [SV1142: $i,SV664: $i,SV95: $i] :
( ( ( c_lessequals @ SV95 @ SV664 @ ( tc_fun @ SV1142 @ tc_bool ) )
= $false )
| ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV95 @ SV664 @ ( tc_fun @ SV1142 @ tc_bool ) )
= SV664 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3941]) ).
thf(4367,plain,
! [SV1143: $i,SV96: $i,SV665: $i] :
( ( ( c_lessequals @ SV665 @ SV96 @ ( tc_fun @ SV1143 @ tc_bool ) )
= $false )
| ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV96 @ SV665 @ ( tc_fun @ SV1143 @ tc_bool ) )
= SV96 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3942]) ).
thf(4368,plain,
! [SV1144: $i,SV666: $i,SV97: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV97 @ SV666 @ ( tc_fun @ SV1144 @ tc_bool ) )
= SV666 )
= $false )
| ( ( c_lessequals @ SV97 @ SV666 @ ( tc_fun @ SV1144 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3943]) ).
thf(4369,plain,
! [SV1665: $i,SV1445: $i,SV1147: $i,SV671: $i,SV102: $i] :
( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV102 @ SV671 @ SV1147 @ SV1445 ) @ ( c_Set_Oimage @ SV102 @ SV1665 @ SV1147 @ SV1445 ) @ ( tc_fun @ SV1445 @ tc_bool ) )
= ( c_Set_Oimage @ SV102 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV671 @ SV1665 @ ( tc_fun @ SV1147 @ tc_bool ) ) @ SV1147 @ SV1445 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3945]) ).
thf(4370,plain,
! [SV1666: $i,SV1446: $i,SV1148: $i,SV672: $i,SV103: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV103 @ SV672 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1446 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( tc_fun @ SV1148 @ tc_bool ) )
| ~ ( c_lessequals @ SV672 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) )
| ~ ( c_lessequals @ SV103 @ SV1446 @ ( tc_fun @ SV1148 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3946]) ).
thf(4371,plain,
! [SV1448: $i,SV1149: $i,SV674: $i,SV106: $i] :
( ( ( c_lessequals @ ( c_Set_Oinsert @ SV106 @ SV674 @ SV1149 ) @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV674 @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) )
| ~ ( c_in @ SV106 @ SV1448 @ SV1149 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3948]) ).
thf(4372,plain,
! [SV108: $i,SV1667: $i,SV675: $i] :
( ( ( ( c_lessequals @ SV675 @ SV1667 @ SV108 )
| ! [SY4398: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY4398 @ SV675 @ SV108 ) @ SV1667 @ SV108 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV108 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3949]) ).
thf(4373,plain,
! [SV109: $i,SV1668: $i,SV676: $i] :
( ( ( ( c_lessequals @ SV676 @ SV1668 @ SV109 )
| ! [SY4399: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV676 @ SY4399 @ SV109 ) @ SV1668 @ SV109 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV109 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3950]) ).
thf(4374,plain,
! [SV110: $i,SV1669: $i,SV677: $i] :
( ( ( ! [SY4400: $i] :
( ( c_lessequals @ SV677 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1669 @ SY4400 @ SV110 ) @ SV110 )
| ~ ( c_lessequals @ SV677 @ SY4400 @ SV110 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV110 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3951]) ).
thf(4375,plain,
! [SV111: $i,SV1670: $i,SV678: $i] :
( ( ( ! [SY4401: $i] : ( c_lessequals @ SV678 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1670 @ SY4401 @ SV111 ) @ SV111 )
| ~ ( c_lessequals @ SV678 @ SV1670 @ SV111 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV111 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3952]) ).
thf(4376,plain,
! [SV112: $i,SV1671: $i,SV679: $i] :
( ( ( ( c_lessequals @ SV679 @ SV1671 @ SV112 )
| ! [SY4402: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY4402 @ SV679 @ SV112 ) @ SV1671 @ SV112 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV112 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3953]) ).
thf(4377,plain,
! [SV113: $i,SV1672: $i,SV680: $i] :
( ( ( ( c_lessequals @ SV680 @ SV1672 @ SV113 )
| ! [SY4403: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV680 @ SY4403 @ SV113 ) @ SV1672 @ SV113 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV113 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3954]) ).
thf(4378,plain,
! [SV681: $i,SV1150: $i,SV1673: $i,SV114: $i] :
( ( ( ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV114 @ SV1673 @ ( tc_fun @ SV1150 @ tc_bool ) ) @ SV681 @ ( tc_fun @ SV1150 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ SV114 @ SV681 @ ( tc_fun @ SV1150 @ tc_bool ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3955]) ).
thf(4379,plain,
! [SV682: $i,SV1151: $i,SV115: $i,SV1674: $i] :
( ( ( ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1674 @ SV115 @ ( tc_fun @ SV1151 @ tc_bool ) ) @ SV682 @ ( tc_fun @ SV1151 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ SV115 @ SV682 @ ( tc_fun @ SV1151 @ tc_bool ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3956]) ).
thf(4380,plain,
! [SV116: $i,SV1675: $i,SV683: $i] :
( ( ( ( c_lessequals @ SV683 @ SV1675 @ SV116 )
| ! [SY4404: $i] :
( ~ ( c_lessequals @ SV683 @ SY4404 @ SV116 )
| ~ ( c_lessequals @ SY4404 @ SV1675 @ SV116 ) ) )
= $true )
| ( ( class_Orderings_Oorder @ SV116 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3957]) ).
thf(4381,plain,
! [SV117: $i,SV1676: $i,SV684: $i] :
( ( ( ( c_lessequals @ SV684 @ SV1676 @ SV117 )
| ! [SY4405: $i] :
( ~ ( c_lessequals @ SY4405 @ SV1676 @ SV117 )
| ~ ( c_lessequals @ SV684 @ SY4405 @ SV117 ) ) )
= $true )
| ( ( class_Orderings_Opreorder @ SV117 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3958]) ).
thf(4382,plain,
! [SV120: $i,SV1152: $i,SV687: $i,SV1677: $i] :
( ( ( ~ ( c_lessequals @ SV1677 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
| ~ ( c_lessequals @ SV120 @ SV1677 @ ( tc_fun @ SV1152 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ SV120 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3959]) ).
thf(4383,plain,
! [SV121: $i,SV688: $i,SV1449: $i] :
( ( ( ~ ( hBOOL @ ( hAPP @ SV1449 @ SV688 ) ) )
= $true )
| ( ( ! [SY4241: $i] :
~ ( c_lessequals @ SV1449 @ SV121 @ ( tc_fun @ SY4241 @ tc_bool ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV121 @ SV688 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3960]) ).
thf(4384,plain,
! [SV689: $i,SV124: $i,SV1452: $i] :
( ( ( ! [SY4242: $i] :
~ ( c_lessequals @ SV1452 @ SV124 @ ( tc_fun @ SY4242 @ tc_bool ) ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV1452 @ SV689 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV124 @ SV689 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3963]) ).
thf(4385,plain,
! [SV691: $i,SV1153: $i,SV126: $i] :
( ( ( c_in @ SV126 @ SV1153 @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV126 @ SV691 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Oparts @ SV1153 ) @ ( c_Message_Oparts @ SV691 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3964]) ).
thf(4386,plain,
! [SV1678: $i,SV1453: $i,SV1154: $i,SV692: $i,SV127: $i] :
( ( ( c_lessequals @ ( c_Set_Oimage @ SV127 @ SV692 @ SV1154 @ SV1453 ) @ ( c_Set_Oimage @ SV127 @ SV1678 @ SV1154 @ SV1453 ) @ ( tc_fun @ SV1453 @ tc_bool ) )
| ~ ( c_lessequals @ SV692 @ SV1678 @ ( tc_fun @ SV1154 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3965]) ).
thf(4387,plain,
! [SV1155: $i,SV693: $i,SV128: $i] :
( ( ( c_lessequals @ SV128 @ SV693 @ ( tc_fun @ SV1155 @ tc_bool ) )
= $false )
| ( ( ! [SY3940: $i,SY3941: $i] : ( c_lessequals @ ( c_Set_Oimage @ SY3940 @ SV128 @ SV1155 @ SY3941 ) @ ( c_Set_Oimage @ SY3940 @ SV693 @ SV1155 @ SY3941 ) @ ( tc_fun @ SY3941 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3966]) ).
thf(4388,plain,
! [SV1454: $i,SV1156: $i,SV694: $i,SV129: $i] :
( ( ( c_lessequals @ ( c_Set_Oinsert @ SV129 @ SV694 @ SV1156 ) @ ( c_Set_Oinsert @ SV129 @ SV1454 @ SV1156 ) @ ( tc_fun @ SV1156 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV694 @ SV1454 @ ( tc_fun @ SV1156 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3967]) ).
thf(4389,plain,
! [SV1679: $i,SV1455: $i,SV1157: $i,SV695: $i,SV130: $i] :
( ( ( c_Set_Oimage @ SV130 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV695 @ SV1157 @ ( tc_fun @ SV1455 @ tc_bool ) ) @ SV1455 @ SV1679 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ SV130 @ SV695 @ SV1455 @ SV1679 ) @ ( c_Set_Oimage @ SV130 @ SV1157 @ SV1455 @ SV1679 ) @ ( tc_fun @ SV1679 @ tc_bool ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[3968]) ).
thf(4390,plain,
! [SV1456: $i,SV1158: $i,SV697: $i,SV132: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV132 @ SV697 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1158 @ SV1456 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ ( c_Message_Oanalz @ SV697 ) @ ( c_Message_Oanalz @ SV1456 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_lessequals @ ( c_Message_Oanalz @ SV132 ) @ ( c_Message_Oanalz @ SV1158 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3969]) ).
thf(4391,plain,
! [SV133: $i,SV1680: $i,SV1457: $i] :
( ( ( ( c_lessequals @ SV1457 @ SV1680 @ SV133 )
| ( c_lessequals @ SV1680 @ SV1457 @ SV133 ) )
= $true )
| ( ( class_Orderings_Olinorder @ SV133 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3970]) ).
thf(4392,plain,
! [SV1458: $i,SV1159: $i,SV698: $i,SV134: $i] :
( ( ( c_in @ ( hAPP @ SV134 @ SV698 ) @ SV1159 @ SV1458 )
= $true )
| ( ( ! [SY4246: $i,SY4247: $i] :
( ~ ( c_in @ SV698 @ SY4246 @ SY4247 )
| ~ ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SY4246 @ SY4247 @ SV1458 ) @ SV1159 @ ( tc_fun @ SV1458 @ tc_bool ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3971]) ).
thf(4393,plain,
! [SV700: $i,SV1459: $i,SV136: $i] :
( ( ( c_in @ SV136 @ ( c_Message_Oparts @ SV1459 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV136 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1459 @ SV700 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV136 @ ( c_Message_Oparts @ SV700 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3972]) ).
thf(4394,plain,
! [SV137: $i,SV701: $i,SV1460: $i] :
( ( ( ~ ( c_lessequals @ SV1460 @ ( c_Message_Oparts @ SV701 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV137 @ ( c_Message_Oparts @ SV1460 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV137 @ ( c_Message_Oparts @ SV701 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3973]) ).
thf(4395,plain,
! [SV702: $i,SV1161: $i,SV138: $i] :
( ( ( c_in @ SV138 @ ( c_Message_Oanalz @ SV1161 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV138 @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV702 @ SV1161 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3974]) ).
thf(4396,plain,
! [SV139: $i,SV703: $i,SV1461: $i] :
( ( ( ~ ( c_lessequals @ SV1461 @ ( c_Message_Oanalz @ SV703 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV139 @ ( c_Message_Oanalz @ SV1461 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV139 @ ( c_Message_Oanalz @ SV703 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3975]) ).
thf(4397,plain,
! [SV704: $i,SV141: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ ( c_Message_Osynth @ SV704 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OHash @ SV141 ) @ SV704 @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV141 @ ( c_Message_Osynth @ SV704 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3976]) ).
thf(4398,plain,
! [SV142: $i,SV705: $i,SV1462: $i] :
( ( ( ~ ( c_lessequals @ SV1462 @ ( c_Message_Osynth @ SV705 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV142 @ ( c_Message_Osynth @ SV1462 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV142 @ ( c_Message_Osynth @ SV705 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3977]) ).
thf(4399,plain,
! [SV1463: $i,SV1163: $i,SV712: $i,SV151: $i] :
( ( ( c_lessequals @ SV151 @ ( c_Set_Oinsert @ SV712 @ SV1163 @ SV1463 ) @ ( tc_fun @ SV1463 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV151 @ SV1163 @ ( tc_fun @ SV1463 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3980]) ).
thf(4400,plain,
! [SV713: $i,SV1164: $i,SV152: $i,SV1681: $i] :
( ( ( ~ ( c_lessequals @ ( c_Set_Oinsert @ SV1681 @ SV152 @ SV1164 ) @ SV713 @ ( tc_fun @ SV1164 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ SV152 @ SV713 @ ( tc_fun @ SV1164 @ tc_bool ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[3981]) ).
thf(4401,plain,
! [SV719: $i,SV1165: $i,SV159: $i] :
( ( ( c_in @ SV159 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1165 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV159 @ SV719 @ tc_Message_Omsg ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1165 ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1165 @ SV719 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[3985]) ).
thf(4402,plain,
! [SV162: $i,SV1682: $i,SV722: $i] :
( ( ( ! [SY4406: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ SV1682 @ SV162 ) @ SY4406 @ SV162 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1682 @ SY4406 @ SV162 ) @ SV162 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV162 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3988]) ).
thf(4403,plain,
! [SV163: $i,SV1683: $i,SV723: $i] :
( ( ( ! [SY4407: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1683 @ SY4407 @ SV163 ) @ SV163 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1683 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ SY4407 @ SV163 ) @ SV163 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV163 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3989]) ).
thf(4404,plain,
! [SV165: $i,SV1684: $i,SV725: $i] :
( ( ( ! [SY4408: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1684 @ SY4408 @ SV165 ) @ SV165 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1684 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ SY4408 @ SV165 ) @ SV165 ) ) )
= $true )
| ( ( class_Lattices_Olattice @ SV165 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3991]) ).
thf(4405,plain,
! [SV166: $i,SV1685: $i,SV726: $i] :
( ( ( ! [SY4409: $i] :
( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ SV1685 @ SV166 ) @ SY4409 @ SV166 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1685 @ SY4409 @ SV166 ) @ SV166 ) ) )
= $true )
| ( ( class_Lattices_Olattice @ SV166 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3992]) ).
thf(4406,plain,
! [SV1468: $i,SV1169: $i,SV729: $i,SV169: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV169 @ SV729 @ ( tc_fun @ SV1169 @ tc_bool ) ) @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV729 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
| ~ ( c_lessequals @ SV169 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3995]) ).
thf(4407,plain,
! [SV1469: $i,SV1172: $i,SV732: $i,SV172: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV172 @ SV732 @ ( tc_fun @ SV1172 @ tc_bool ) ) @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV732 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
| ~ ( c_lessequals @ SV172 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[3996]) ).
thf(4408,plain,
! [SV173: $i,SV1686: $i,SV733: $i] :
( ( ( ! [SY4410: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV733 @ SV1686 @ SV173 ) @ SY4410 @ SV173 )
| ~ ( c_lessequals @ SV1686 @ SY4410 @ SV173 )
| ~ ( c_lessequals @ SV733 @ SY4410 @ SV173 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV173 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3997]) ).
thf(4409,plain,
! [SV174: $i,SV1687: $i,SV1470: $i] :
( ( ( c_lessequals @ SV1470 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1470 @ SV1687 @ SV174 ) @ SV174 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV174 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3998]) ).
thf(4410,plain,
! [SV175: $i,SV1688: $i,SV1471: $i] :
( ( ( c_lessequals @ SV1471 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1688 @ SV1471 @ SV175 ) @ SV175 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV175 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[3999]) ).
thf(4411,plain,
! [SV176: $i,SV1689: $i,SV734: $i] :
( ( ( ! [SY4411: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV734 @ SV1689 @ SV176 ) @ SY4411 @ SV176 )
| ~ ( c_lessequals @ SV1689 @ SY4411 @ SV176 )
| ~ ( c_lessequals @ SV734 @ SY4411 @ SV176 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV176 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4000]) ).
thf(4412,plain,
! [SV177: $i,SV1690: $i,SV735: $i] :
( ( ( ! [SY4412: $i] :
( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV735 @ SV1690 @ SV177 ) @ SY4412 @ SV177 )
| ~ ( c_lessequals @ SV1690 @ SY4412 @ SV177 )
| ~ ( c_lessequals @ SV735 @ SY4412 @ SV177 ) ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV177 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4001]) ).
thf(4413,plain,
! [SV178: $i,SV1691: $i,SV1472: $i] :
( ( ( c_lessequals @ SV1472 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1691 @ SV1472 @ SV178 ) @ SV178 )
= $true )
| ( ( class_Lattices_Olattice @ SV178 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4002]) ).
thf(4414,plain,
! [SV179: $i,SV1692: $i,SV1473: $i] :
( ( ( c_lessequals @ SV1473 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1473 @ SV1692 @ SV179 ) @ SV179 )
= $true )
| ( ( class_Lattices_Olattice @ SV179 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4003]) ).
thf(4415,plain,
! [SV739: $i,SV1173: $i,SV1693: $i,SV185: $i] :
( ( ( ~ ( c_lessequals @ ( c_Set_Oinsert @ SV185 @ SV1693 @ SV1173 ) @ SV739 @ ( tc_fun @ SV1173 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV185 @ SV739 @ SV1173 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4006]) ).
thf(4416,plain,
! [SV1476: $i,SV1174: $i,SV740: $i,SV186: $i] :
( ( ( c_lessequals @ SV186 @ ( c_Set_Oinsert @ SV740 @ SV1174 @ SV1476 ) @ ( tc_fun @ SV1476 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV186 @ SV1174 @ ( tc_fun @ SV1476 @ tc_bool ) )
| ( c_in @ SV740 @ SV186 @ SV1476 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4007]) ).
thf(4417,plain,
! [SV741: $i,SV1175: $i,SV187: $i,SV1694: $i] :
( ( ( ( c_in @ SV1694 @ SV187 @ SV1175 )
| ~ ( c_lessequals @ SV187 @ ( c_Set_Oinsert @ SV1694 @ SV741 @ SV1175 ) @ ( tc_fun @ SV1175 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ SV187 @ SV741 @ ( tc_fun @ SV1175 @ tc_bool ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4008]) ).
thf(4418,plain,
! [SV1477: $i,SV1176: $i,SV742: $i,SV188: $i] :
( ( ( c_lessequals @ SV188 @ ( c_Set_Oinsert @ SV742 @ SV1176 @ SV1477 ) @ ( tc_fun @ SV1477 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV188 @ SV1176 @ ( tc_fun @ SV1477 @ tc_bool ) )
| ( c_in @ SV742 @ SV188 @ SV1477 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4009]) ).
thf(4419,plain,
! [SV1177: $i,SV743: $i,SV1695: $i,SV189: $i] :
( ( ( ~ ( c_lessequals @ SV189 @ ( c_Set_Oinsert @ SV1695 @ SV743 @ SV1177 ) @ ( tc_fun @ SV1177 @ tc_bool ) )
| ( c_in @ SV1695 @ SV189 @ SV1177 ) )
= $true )
| ( ( c_lessequals @ SV189 @ SV743 @ ( tc_fun @ SV1177 @ tc_bool ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4010]) ).
thf(4420,plain,
! [SV191: $i,SV1696: $i,SV1478: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1478 @ SV1696 @ SV191 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1696 @ SV1478 @ SV191 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV191 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4011]) ).
thf(4421,plain,
! [SV192: $i,SV1697: $i,SV1479: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1479 @ SV1697 @ SV192 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1697 @ SV1479 @ SV192 ) )
= $true )
| ( ( class_Lattices_Olattice @ SV192 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4012]) ).
thf(4422,plain,
! [SV194: $i,SV1698: $i,SV1480: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1480 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1480 @ SV1698 @ SV194 ) @ SV194 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1480 @ SV1698 @ SV194 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV194 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4013]) ).
thf(4423,plain,
! [SV195: $i,SV1699: $i,SV1481: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1481 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1481 @ SV1699 @ SV195 ) @ SV195 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1481 @ SV1699 @ SV195 ) )
= $true )
| ( ( class_Lattices_Olattice @ SV195 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4014]) ).
thf(4424,plain,
! [SV1181: $i,SV750: $i,SV205: $i] :
( ( ( class_HOL_Oord @ SV205 )
= $false )
| ( ( ! [SY3961: $i] :
( ( c_lessequals @ ( hAPP @ SV750 @ SV1181 ) @ ( hAPP @ SY3961 @ SV1181 ) @ SV205 )
| ! [SY3371: $i] :
~ ( c_lessequals @ SV750 @ SY3961 @ ( tc_fun @ SY3371 @ SV205 ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4021]) ).
thf(4425,plain,
! [SV206: $i,SV1700: $i,SV1487: $i] :
( ( ( ( c_lessequals @ SV1487 @ ( c_HOL_Ouminus__class_Ouminus @ SV1700 @ SV206 ) @ SV206 )
| ~ ( c_lessequals @ SV1700 @ ( c_HOL_Ouminus__class_Ouminus @ SV1487 @ SV206 ) @ SV206 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV206 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4022]) ).
thf(4426,plain,
! [SV207: $i,SV1701: $i,SV1488: $i] :
( ( ( ( c_lessequals @ SV1488 @ ( c_HOL_Ouminus__class_Ouminus @ SV1701 @ SV207 ) @ SV207 )
| ~ ( c_lessequals @ SV1701 @ ( c_HOL_Ouminus__class_Ouminus @ SV1488 @ SV207 ) @ SV207 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV207 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4023]) ).
thf(4427,plain,
! [SV1702: $i,SV208: $i,SV1489: $i] :
( ( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1489 @ SV208 ) @ SV1702 @ SV208 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1702 @ SV208 ) @ SV1489 @ SV208 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV208 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4024]) ).
thf(4428,plain,
! [SV1703: $i,SV209: $i,SV1490: $i] :
( ( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1490 @ SV209 ) @ SV1703 @ SV209 )
| ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1703 @ SV209 ) @ SV1490 @ SV209 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV209 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4025]) ).
thf(4429,plain,
! [SV751: $i,SV1182: $i,SV1704: $i,SV210: $i] :
( ( ( ~ ( c_in @ SV210 @ SV1704 @ SV1182 )
| ~ ( c_lessequals @ SV1704 @ SV751 @ ( tc_fun @ SV1182 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV210 @ SV751 @ SV1182 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4026]) ).
thf(4430,plain,
! [SV211: $i,SV1183: $i,SV752: $i,SV1705: $i] :
( ( ( ~ ( c_lessequals @ SV1705 @ SV752 @ ( tc_fun @ SV1183 @ tc_bool ) )
| ~ ( c_in @ SV211 @ SV1705 @ SV1183 ) )
= $true )
| ( ( c_in @ SV211 @ SV752 @ SV1183 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4027]) ).
thf(4431,plain,
! [SV753: $i,SV1184: $i,SV1706: $i,SV212: $i] :
( ( ( ~ ( c_in @ SV212 @ SV1706 @ SV1184 )
| ~ ( c_lessequals @ SV1706 @ SV753 @ ( tc_fun @ SV1184 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV212 @ SV753 @ SV1184 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4028]) ).
thf(4432,plain,
! [SV754: $i,SV1185: $i,SV1707: $i,SV213: $i] :
( ( ( ~ ( c_in @ SV213 @ SV1707 @ SV1185 )
| ~ ( c_lessequals @ SV1707 @ SV754 @ ( tc_fun @ SV1185 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV213 @ SV754 @ SV1185 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4029]) ).
thf(4433,plain,
! [SV1491: $i,SV1186: $i,SV755: $i,SV214: $i] :
( ( ( c_in @ SV214 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV755 @ SV1186 @ ( tc_fun @ SV1491 @ tc_bool ) ) @ SV1491 )
= $true )
| ( ( ~ ( c_in @ SV214 @ SV755 @ SV1491 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4030]) ).
thf(4434,plain,
! [SV1492: $i,SV1187: $i,SV756: $i,SV215: $i] :
( ( ( c_in @ SV215 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV756 @ SV1187 @ ( tc_fun @ SV1492 @ tc_bool ) ) @ SV1492 )
= $true )
| ( ( ~ ( c_in @ SV215 @ SV1187 @ SV1492 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4031]) ).
thf(4435,plain,
! [SV757: $i,SV1188: $i,SV1708: $i,SV216: $i] :
( ( ( ( c_in @ SV216 @ SV1708 @ SV1188 )
| ~ ( c_in @ SV216 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1708 @ SV757 @ ( tc_fun @ SV1188 @ tc_bool ) ) @ SV1188 ) )
= $true )
| ( ( c_in @ SV216 @ SV757 @ SV1188 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4032]) ).
thf(4436,plain,
! [SV1190: $i,SV759: $i,SV218: $i] :
( ( ( c_in @ SV218 @ SV759 @ SV1190 )
= $false )
| ( ( ~ ( c_in @ SV218 @ ( c_HOL_Ouminus__class_Ouminus @ SV759 @ ( tc_fun @ SV1190 @ tc_bool ) ) @ SV1190 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4034]) ).
thf(4437,plain,
! [SV774: $i,SV235: $i,SV1709: $i] :
( ( ( ! [SY4413: $i] :
( ( ( c_Message_Oanalz @ SV1709 )
!= ( c_Message_Oanalz @ SY4413 ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1709 @ SV235 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY4413 @ SV774 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) ) )
= $true )
| ( ( ( c_Message_Oanalz @ SV235 )
= ( c_Message_Oanalz @ SV774 ) )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4045]) ).
thf(4438,plain,
! [SV780: $i,SV242: $i,SV1195: $i,SV1710: $i] :
( ( ( ~ ( c_in @ SV1710 @ ( c_Message_Oparts @ SV1195 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1710 @ SV780 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV780 @ SV1195 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4047]) ).
thf(4439,plain,
! [SV243: $i,SV781: $i,SV1493: $i] :
( ( ( ~ ( c_lessequals @ SV1493 @ SV781 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV243 @ ( c_Message_Oanalz @ SV1493 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV243 @ SV781 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SV781 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4048]) ).
thf(4440,plain,
! [SV1711: $i,SV1494: $i,SV1197: $i,SV784: $i,SV246: $i] :
( ( c_lessequals @ ( c_Event_Oknows @ SV246 @ SV784 ) @ ( c_Event_Oknows @ SV246 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV1197 @ SV1494 @ SV1711 ) @ SV784 @ tc_Event_Oevent ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4049]) ).
thf(4441,plain,
! [SV1712: $i,SV1497: $i,SV1200: $i,SV788: $i,SV250: $i] :
( ( ~ ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4414: $i,SY4415: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SV1497 @ ( c_Message_Omsg_OMPair @ SV1712 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4414 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY4415 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4052]) ).
thf(4442,plain,
! [SV1498: $i,SV251: $i,SV789: $i] :
( ( ( c_in @ SV789 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Oappend @ SV251 @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV789 @ SV1498 ) @ ( c_List_Olist_ONil @ tc_Event_Oevent ) @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1498 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV251 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4053]) ).
thf(4443,plain,
! [SV1501: $i,SV1203: $i,SV791: $i,SV254: $i] :
( ( ( ~ ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( ~ ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4264: $i,SY4265: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SV1501 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4264 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY4265 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4056]) ).
thf(4444,plain,
! [SV255: $i,SV792: $i] :
( ( ( ~ ( c_in @ SV792 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ~ ( c_in @ SV255 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV255 ) @ ( c_Event_Oused @ SV792 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV255 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV792 ) ) ) @ tc_nat )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4057]) ).
thf(4445,plain,
! [SV793: $i,SV1204: $i,SV256: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV256 ) ) @ ( c_Message_Oanalz @ SV1204 ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SV793 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV793 @ SV1204 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV256 @ SV793 ) @ SV1204 @ tc_Message_Omsg ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4058]) ).
thf(4446,plain,
! [SV794: $i,SV1205: $i,SV257: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV257 ) ) @ ( c_Message_Oanalz @ SV1205 ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SV794 ) @ SV1205 @ tc_Message_Omsg ) ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV257 @ SV794 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV794 @ SV1205 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4059]) ).
thf(4447,plain,
! [SV795: $i,SV1713: $i,SV258: $i,SV1502: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV1502 ) @ SV258 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1713 ) @ SV795 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( c_in @ SV258 @ SV795 @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4060]) ).
thf(4448,plain,
! [SV259: $i,SV1206: $i,SV796: $i] :
( ( ( c_in @ SV796 @ SV1206 @ tc_Message_Oagent )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV259 ) @ SV796 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV259 ) @ SV1206 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4061]) ).
thf(4449,plain,
! [SV798: $i,SV1208: $i,SV261: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ SV1208 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV261 @ SV798 @ tc_nat ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV798 @ tc_nat @ tc_Message_Omsg ) @ SV1208 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4063]) ).
thf(4450,plain,
! [SV1209: $i,SV799: $i,SV262: $i] :
( ( ( ~ ( c_in @ SV262 @ SV799 @ tc_nat ) )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ SV1209 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV799 @ tc_nat @ tc_Message_Omsg ) @ SV1209 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4064]) ).
thf(4451,plain,
! [SV1210: $i,SV800: $i,SV263: $i] :
( ( ( ~ ( c_in @ SV263 @ SV800 @ tc_nat ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SV1210 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SV1210 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4065]) ).
thf(4452,plain,
! [SV1503: $i,SV801: $i,SV264: $i] :
( ( ( ~ ( c_in @ SV264 @ SV801 @ tc_nat ) )
= $true )
| ( ( ~ ( c_in @ SV264 @ SV801 @ tc_nat ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV264 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV801 @ tc_nat @ tc_Message_Omsg ) @ SV1503 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4066]) ).
thf(4453,plain,
! [SV802: $i,SV1504: $i,SV265: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1504 @ SV802 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ! [SY4267: $i] :
( ~ ( c_lessequals @ SY4267 @ SV802 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV1504 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY4267 ) ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SV802 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4067]) ).
thf(4454,plain,
! [SV803: $i,SV1211: $i,SV266: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SV1211 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ! [SY3984: $i] :
( ~ ( c_lessequals @ SY3984 @ SV1211 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV803 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3984 ) ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV803 @ SV1211 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4068]) ).
thf(4455,plain,
! [SV267: $i,SV804: $i,SV1505: $i] :
( ( ( ~ ( c_in @ SV1505 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV267 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1505 @ SV804 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ ( c_Message_Oparts @ SV804 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4069]) ).
thf(4456,plain,
! [SV1506: $i,SV1212: $i,SV805: $i,SV268: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV268 @ SV805 @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV268 @ SV805 @ SV1212 @ SV1506 ) ) @ ( c_List_Oset @ SV1506 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_NS__Shared__Mirabelle_OIssues @ SV268 @ SV805 @ SV1212 @ SV1506 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4070]) ).
thf(4457,plain,
! [SV1714: $i,SV806: $i,SV1507: $i,SV270: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV270 ) @ SV1507 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV806 ) @ SV1714 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( SV270 = SV806 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4071]) ).
thf(4458,plain,
! [SV1508: $i,SV1213: $i,SV807: $i,SV271: $i] :
( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV271 ) @ SV807 ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1213 ) @ SV1508 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4072]) ).
thf(4459,plain,
! [SV1215: $i,SV273: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SV1215 ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ SV273 @ SV1215 ) @ SV273 ) @ ( c_List_Oset @ SV1215 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ SV273 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1215 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SV1215 ) @ SV273 ) @ ( c_List_Oset @ SV1215 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV273 @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4073]) ).
thf(4460,plain,
! [SV810: $i,SV1509: $i,SV275: $i] :
( ( ( c_in @ SV275 @ SV1509 @ tc_nat )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1509 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
| ~ ( c_lessequals @ SV1509 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV810 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4074]) ).
thf(4461,plain,
! [SV1217: $i,SV811: $i,SV276: $i] :
( ( ( ~ ( c_in @ SV276 @ SV811 @ tc_nat ) )
= $true )
| ( ( ~ ( c_lessequals @ SV811 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV1217 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV276 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV811 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1217 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4075]) ).
thf(4462,plain,
! [SV813: $i,SV278: $i] :
( ( ( c_in @ SV278 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( ! [SY3444: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV278 @ SY3444 ) @ SV813 @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV278 @ ( c_Message_OkeysFor @ SV813 ) @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4077]) ).
thf(4463,plain,
! [SV814: $i,SV1219: $i,SV280: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV814 @ tc_nat @ tc_Message_Omsg ) @ SV1219 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4078]) ).
thf(4464,plain,
! [SV815: $i,SV1220: $i,SV281: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ SV1220 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SV1220 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SV1220 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4079]) ).
thf(4465,plain,
! [SV816: $i,SV1511: $i,SV282: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV282 @ SV1511 ) @ SV816 @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_OinvKey @ SV282 ) @ ( c_Message_OkeysFor @ SV816 ) @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4080]) ).
thf(4466,plain,
! [SV817: $i,SV1512: $i,SV283: $i] :
( ( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1512 @ SV817 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
= $true )
| ( ( ! [SY4269: $i] :
( ~ ( c_in @ SY4269 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV817 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SY4269 @ SV1512 @ tc_Message_Omsg ) ) ) @ tc_nat ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV283 ) ) @ ( c_Message_Oparts @ SV817 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4081]) ).
thf(4467,plain,
! [SV1221: $i,SV819: $i,SV285: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1221 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV285 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1221 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Oanalz @ SV1221 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4082]) ).
thf(4468,plain,
! [SV1222: $i,SV820: $i,SV286: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Oanalz @ SV1222 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV286 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1222 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1222 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4083]) ).
thf(4469,plain,
! [SV821: $i,SV1223: $i,SV287: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_lessequals @ SV821 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV1223 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV821 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4084]) ).
thf(4470,plain,
! [SV1715: $i,SV1513: $i,SV1224: $i,SV822: $i,SV288: $i] :
( ( ( hBOOL @ ( hAPP @ SV288 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ ( c_List_Oappend @ SV822 @ ( c_List_Olist_OCons @ SV1224 @ SV1513 @ SV1715 ) @ SV1715 ) @ SV1715 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ SV822 @ SV1715 ) @ ( c_List_Oset @ SV822 @ SV1715 ) @ SV1715 )
| ~ ( hBOOL @ ( hAPP @ SV288 @ SV1224 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4085]) ).
thf(4471,plain,
! [SV1716: $i,SV1514: $i,SV1225: $i,SV823: $i,SV289: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SV1716 ) @ SV1716 ) @ SV1716 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SV1716 ) @ SV1716 ) @ SV1716 ) @ SV1716 )
| ( hBOOL @ ( hAPP @ SV289 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ SV1514 @ SV1716 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV289 @ SV1225 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4086]) ).
thf(4472,plain,
! [SV1717: $i,SV1515: $i,SV1226: $i,SV824: $i,SV290: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SV1717 ) @ SV1717 ) @ SV1717 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SV1717 ) @ SV1717 ) @ SV1717 ) @ SV1717 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ SV824 @ SV1717 ) @ ( c_List_Oset @ SV824 @ SV1717 ) @ SV1717 )
| ~ ( hBOOL @ ( hAPP @ SV290 @ SV1226 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4087]) ).
thf(4473,plain,
! [SV1718: $i,SV1516: $i,SV1227: $i,SV825: $i,SV291: $i] :
( ( ( hBOOL @ ( hAPP @ SV291 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ ( c_List_Oappend @ SV825 @ ( c_List_Olist_OCons @ SV1227 @ SV1516 @ SV1718 ) @ SV1718 ) @ SV1718 ) ) )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ SV1516 @ SV1718 ) @ ( c_List_Oset @ SV1516 @ SV1718 ) @ SV1718 )
| ~ ( hBOOL @ ( hAPP @ SV291 @ SV1227 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4088]) ).
thf(4474,plain,
! [SV1719: $i,SV1517: $i,SV1228: $i,SV826: $i,SV292: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SV1719 ) @ SV1719 ) @ SV1719 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SV1719 ) @ SV1719 ) @ SV1719 ) @ SV1719 )
| ( hBOOL @ ( hAPP @ SV292 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ SV826 @ SV1719 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV292 @ SV1228 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4089]) ).
thf(4475,plain,
! [SV1720: $i,SV1518: $i,SV1229: $i,SV827: $i,SV293: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SV1720 ) @ SV1720 ) @ SV1720 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SV1720 ) @ SV1720 ) @ SV1720 ) @ SV1720 )
| ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ SV1518 @ SV1720 ) @ ( c_List_Oset @ SV1518 @ SV1720 ) @ SV1720 )
| ~ ( hBOOL @ ( hAPP @ SV293 @ SV1229 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4090]) ).
thf(4476,plain,
! [SV1520: $i,SV1232: $i,SV833: $i,SV299: $i] :
( ( ( c_in @ SV299 @ ( c_List_Oset @ ( c_List_Oappend @ SV833 @ ( c_List_Olist_OCons @ SV299 @ SV1232 @ SV1520 ) @ SV1520 ) @ SV1520 ) @ SV1520 )
= $true )
| ( ( c_in @ SV299 @ ( c_List_Oset @ SV833 @ SV1520 ) @ SV1520 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4095]) ).
thf(4477,plain,
! [SV1521: $i,SV1233: $i,SV834: $i,SV300: $i] :
( ( ( c_in @ SV300 @ ( c_List_Oset @ ( c_List_Oappend @ SV834 @ ( c_List_Olist_OCons @ SV300 @ SV1233 @ SV1521 ) @ SV1521 ) @ SV1521 ) @ SV1521 )
= $true )
| ( ( c_in @ SV300 @ ( c_List_Oset @ SV1233 @ SV1521 ) @ SV1521 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4096]) ).
thf(4478,plain,
! [SV837: $i,SV1236: $i,SV303: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ( c_in @ SV837 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV1236 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV837 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4099]) ).
thf(4479,plain,
! [SV838: $i,SV1524: $i,SV304: $i] :
( ( ( SV304 = SV1524 )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV1524 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
| ( c_in @ SV1524 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV838 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4100]) ).
thf(4480,plain,
! [SV305: $i,SV1237: $i] :
( ( ( c_in @ SV1237 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV305 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1237 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV305 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4101]) ).
thf(4481,plain,
! [SV315: $i,SV848: $i,SV1528: $i] :
( ( ( ~ ( c_in @ SV1528 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV315 @ ( c_Message_Osynth @ ( c_Set_Oinsert @ SV1528 @ SV848 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV315 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4105]) ).
thf(4482,plain,
! [SV317: $i,SV850: $i,SV1529: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1529 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV1529 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1529 @ SV317 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV317 @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4106]) ).
thf(4483,plain,
! [SV321: $i,SV854: $i,SV1531: $i] :
( ( ( ~ ( c_in @ SV1531 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV321 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1531 @ SV854 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV321 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4108]) ).
thf(4484,plain,
! [SV856: $i,SV1246: $i,SV323: $i] :
( ( ( c_in @ SV323 @ ( c_Message_Oanalz @ SV1246 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV323 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV856 @ SV1246 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4110]) ).
thf(4485,plain,
! [SV1721: $i,SV1532: $i,SV1247: $i,SV857: $i,SV324: $i] :
( ( ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SV857 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV1247 @ SV1532 ) @ SV1721 @ tc_Message_Omsg ) @ tc_Message_Omsg )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OMPair @ SV1247 @ SV1532 ) @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV324 @ SV857 ) @ SV1721 @ tc_Message_Omsg ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4111]) ).
thf(4486,plain,
! [SV859: $i,SV1249: $i,SV326: $i] :
( ( ( c_in @ SV326 @ ( c_Message_Oparts @ SV1249 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV326 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV859 @ SV1249 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4112]) ).
thf(4487,plain,
! [SV1722: $i,SV1533: $i,SV1251: $i,SV862: $i,SV329: $i] :
( ( ( ( c_List_Oappend @ SV329 @ ( c_List_Olist_OCons @ SV862 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 )
!= ( c_List_Oappend @ SV1533 @ ( c_List_Olist_OCons @ SV1722 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 ) )
| ( SV862 = SV1722 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4114]) ).
thf(4488,plain,
! [SV1534: $i,SV1252: $i,SV863: $i,SV330: $i] :
( ( ( ! [SY4278: $i] :
( ( c_List_Oappend @ SV330 @ ( c_List_Olist_OCons @ SV863 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 )
!= ( c_List_Oappend @ SV1534 @ ( c_List_Olist_OCons @ SY4278 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 ) ) )
= $true )
| ( ( SV330 = SV1534 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4115]) ).
thf(4489,plain,
! [SV1536: $i,SV1256: $i,SV867: $i,SV334: $i] :
( ( ( ! [SY4279: $i] :
( ( c_Set_Oinsert @ ( hAPP @ SV334 @ SV867 ) @ ( c_Set_Oimage @ SV334 @ SV1256 @ SV1536 @ SY4279 ) @ SY4279 )
= ( c_Set_Oimage @ SV334 @ SV1256 @ SV1536 @ SY4279 ) ) )
= $true )
| ( ( ~ ( c_in @ SV867 @ SV1256 @ SV1536 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4117]) ).
thf(4490,plain,
! [SV1723: $i,SV1541: $i,SV1263: $i,SV875: $i,SV343: $i] :
( ( ( c_Set_Oimage @ SV343 @ ( c_Set_Oinsert @ SV875 @ SV1263 @ SV1541 ) @ SV1541 @ SV1723 )
= ( c_Set_Oinsert @ ( hAPP @ SV343 @ SV875 ) @ ( c_Set_Oimage @ SV343 @ SV1263 @ SV1541 @ SV1723 ) @ SV1723 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4123]) ).
thf(4491,plain,
! [SV348: $i,SV877: $i,SV1542: $i] :
( ( ( SV1542 = SV877 )
= $true )
| ( ( ! [SY4281: $i] :
~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV1542 @ SV348 @ SY4281 ) @ SV877 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV348 @ SV877 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4124]) ).
thf(4492,plain,
! [SV1543: $i,SV1265: $i,SV879: $i,SV350: $i] :
( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV350 ) @ SV879 ) ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1265 ) @ SV1543 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4125]) ).
thf(4493,plain,
! [SV351: $i,SV1266: $i,SV880: $i] :
( ( ( c_in @ SV880 @ SV1266 @ tc_Message_Oagent )
= $false )
| ( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV351 ) @ SV880 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV351 ) @ SV1266 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4126]) ).
thf(4494,plain,
! [SV881: $i,SV1724: $i,SV352: $i,SV1544: $i] :
( ( ( ~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV1544 ) @ SV352 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1724 ) @ SV881 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( c_in @ SV352 @ SV881 @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4127]) ).
thf(4495,plain,
! [SV1725: $i,SV882: $i,SV1545: $i,SV353: $i] :
( ( ( ~ ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV353 ) @ SV1545 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV882 ) @ SV1725 @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( SV353 = SV882 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4128]) ).
thf(4496,plain,
! [SV1546: $i,SV1267: $i,SV883: $i,SV354: $i] :
( ( ( ( c_List_Oappend @ SV354 @ SV883 @ SV1267 )
!= ( c_List_Oappend @ SV354 @ SV1546 @ SV1267 ) )
= $true )
| ( ( SV883 = SV1546 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4129]) ).
thf(4497,plain,
! [SV1547: $i,SV1268: $i,SV884: $i,SV355: $i] :
( ( ( ( c_List_Oappend @ SV355 @ SV884 @ SV1268 )
!= ( c_List_Oappend @ SV1547 @ SV884 @ SV1268 ) )
= $true )
| ( ( SV355 = SV1547 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4130]) ).
thf(4498,plain,
! [SV1551: $i,SV1273: $i,SV889: $i,SV360: $i] :
( ( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV360 @ SV889 @ SV1273 ) @ SV1551 ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV889 @ SV1551 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4135]) ).
thf(4499,plain,
! [SV1726: $i,SV1554: $i,SV1276: $i,SV893: $i,SV364: $i] :
( ( ( c_Set_Oinsert @ ( hAPP @ SV364 @ SV893 ) @ ( c_Set_Oimage @ SV364 @ SV1276 @ SV1554 @ SV1726 ) @ SV1726 )
= ( c_Set_Oimage @ SV364 @ ( c_Set_Oinsert @ SV893 @ SV1276 @ SV1554 ) @ SV1554 @ SV1726 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4138]) ).
thf(4500,plain,
! [SV1556: $i,SV1278: $i,SV895: $i,SV367: $i] :
( ( ( c_in @ SV367 @ ( c_Set_Oinsert @ SV895 @ SV1278 @ SV1556 ) @ SV1556 )
= $true )
| ( ( ~ ( c_in @ SV367 @ SV1278 @ SV1556 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4141]) ).
thf(4501,plain,
! [SV1557: $i,SV1279: $i,SV896: $i,SV368: $i] :
( ( ( c_in @ SV368 @ ( c_Set_Oinsert @ SV896 @ SV1279 @ SV1557 ) @ SV1557 )
= $true )
| ( ( ~ ( c_in @ SV368 @ SV1279 @ SV1557 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4142]) ).
thf(4502,plain,
! [SV1280: $i,SV897: $i,SV1727: $i,SV369: $i] :
( ( ( ( SV369 = SV1727 )
| ~ ( c_in @ SV369 @ ( c_Set_Oinsert @ SV1727 @ SV897 @ SV1280 ) @ SV1280 ) )
= $true )
| ( ( c_in @ SV369 @ SV897 @ SV1280 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4143]) ).
thf(4503,plain,
! [SV1558: $i,SV1284: $i,SV902: $i,SV374: $i] :
( ( ( ( c_Set_Oinsert @ SV374 @ SV902 @ SV1284 )
!= ( c_Set_Oinsert @ SV374 @ SV1558 @ SV1284 ) )
= $true )
| ( ( ( c_in @ SV374 @ SV1558 @ SV1284 )
| ( SV902 = SV1558 )
| ( c_in @ SV374 @ SV902 @ SV1284 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4144]) ).
thf(4504,plain,
! [SV1285: $i,SV903: $i,SV375: $i] :
( ( ( c_in @ SV375 @ SV903 @ SV1285 )
= $false )
| ( ( ( c_Set_Oinsert @ SV375 @ SV903 @ SV1285 )
= SV903 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4145]) ).
thf(4505,plain,
! [SV1286: $i,SV904: $i,SV377: $i] :
( ( ( SV377
= ( c_List_Oappend @ SV904 @ SV377 @ SV1286 ) )
= $false )
| ( ( SV904
= ( c_List_Olist_ONil @ SV1286 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4146]) ).
thf(4506,plain,
! [SV1287: $i,SV905: $i,SV378: $i] :
( ( ( ( c_List_Oappend @ SV378 @ SV905 @ SV1287 )
= SV905 )
= $false )
| ( ( SV378
= ( c_List_Olist_ONil @ SV1287 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4147]) ).
thf(4507,plain,
! [SV1288: $i,SV906: $i,SV379: $i] :
( ( ( SV379
= ( c_List_Oappend @ SV379 @ SV906 @ SV1288 ) )
= $false )
| ( ( SV906
= ( c_List_Olist_ONil @ SV1288 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4148]) ).
thf(4508,plain,
! [SV1289: $i,SV907: $i,SV380: $i] :
( ( ( ( c_List_Oappend @ SV380 @ SV907 @ SV1289 )
= SV380 )
= $false )
| ( ( SV907
= ( c_List_Olist_ONil @ SV1289 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4149]) ).
thf(4509,plain,
! [SV1290: $i,SV908: $i,SV381: $i] :
( ( ( ( c_List_Oappend @ SV381 @ SV908 @ SV1290 )
= ( c_List_Olist_ONil @ SV1290 ) )
= $false )
| ( ( SV908
= ( c_List_Olist_ONil @ SV1290 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4150]) ).
thf(4510,plain,
! [SV1291: $i,SV909: $i,SV382: $i] :
( ( ( ( c_List_Oappend @ SV382 @ SV909 @ SV1291 )
= ( c_List_Olist_ONil @ SV1291 ) )
= $false )
| ( ( SV382
= ( c_List_Olist_ONil @ SV1291 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4151]) ).
thf(4511,plain,
! [SV1292: $i,SV910: $i,SV383: $i] :
( ( ( ( c_List_Olist_ONil @ SV383 )
= ( c_List_Oappend @ SV910 @ SV1292 @ SV383 ) )
= $false )
| ( ( SV1292
= ( c_List_Olist_ONil @ SV383 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4152]) ).
thf(4512,plain,
! [SV1559: $i,SV911: $i,SV384: $i] :
( ( ( ( c_List_Olist_ONil @ SV384 )
= ( c_List_Oappend @ SV911 @ SV1559 @ SV384 ) )
= $false )
| ( ( SV911
= ( c_List_Olist_ONil @ SV384 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4153]) ).
thf(4513,plain,
! [SV917: $i,SV391: $i,SV1728: $i] :
( ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1728 @ SV391 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1728 @ SV917 @ tc_Message_Omsg ) ) )
= $true )
| ( ( ( c_Message_Oanalz @ SV391 )
= ( c_Message_Oanalz @ SV917 ) )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4154]) ).
thf(4514,plain,
! [SV921: $i,SV1294: $i,SV395: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV395 ) ) @ ( c_Message_Oanalz @ SV1294 ) @ tc_Message_Omsg )
= $false )
| ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SV921 ) @ SV1294 @ tc_Message_Omsg ) )
= ( c_Set_Oinsert @ ( c_Message_Omsg_OCrypt @ SV395 @ SV921 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV921 @ SV1294 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4158]) ).
thf(4515,plain,
! [SV1729: $i,SV1560: $i,SV1295: $i,SV922: $i,SV396: $i] :
( ( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4416: $i,SY4417: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SV1729 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1729 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4416 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4417 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4159]) ).
thf(4516,plain,
! [SV1730: $i,SV1561: $i,SV1297: $i,SV924: $i,SV398: $i] :
( ( ! [SY4418: $i,SY4419: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
| ! [SY4420: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4418 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SY4420 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4421: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4421 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4160]) ).
thf(4517,plain,
! [SV1731: $i,SV1562: $i,SV1298: $i,SV925: $i,SV399: $i] :
( ( ! [SY4422: $i,SY4423: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4424: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4422 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4423 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SY4424 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4425: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4425 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4161]) ).
thf(4518,plain,
! [SV1563: $i,SV1299: $i,SV400: $i] :
( ( ( c_in @ SV400 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV400 @ SV1299 ) @ SV1563 @ tc_Event_Oevent ) )
= ( c_Set_Oinsert @ SV1299 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1563 ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4162]) ).
thf(4519,plain,
! [SV1732: $i,SV1564: $i,SV1300: $i,SV926: $i,SV401: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SV1732 @ tc_Event_Oevent ) )
| ! [SY4426: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4426 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SV1732 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SV1732 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1732 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4163]) ).
thf(4520,plain,
! [SV1733: $i,SV1565: $i,SV1301: $i,SV927: $i,SV402: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SV1733 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4427: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4427 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SV1733 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SV1733 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1733 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4164]) ).
thf(4521,plain,
! [SV1734: $i,SV1566: $i,SV1302: $i,SV928: $i,SV403: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SV1734 @ tc_Event_Oevent ) )
| ! [SY4428: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4428 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SV1734 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SV1734 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1734 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4165]) ).
thf(4522,plain,
! [SV1735: $i,SV1568: $i,SV1303: $i,SV930: $i,SV405: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SV1735 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4429: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4429 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SV1735 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SV1735 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1735 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4167]) ).
thf(4523,plain,
! [SV1569: $i,SV406: $i,SV931: $i] :
( ( ( c_in @ ( c_Event_Oevent_ONotes @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ( c_in @ ( c_Event_Oevent_OGets @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( c_Event_Oevent_OSays @ SV931 @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ SV931 @ SV406 @ SV1569 ) @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV931 = c_Message_Oagent_OSpy )
| ~ ( c_in @ SV406 @ ( c_Event_Oknows @ SV931 @ SV1569 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV406 @ ( c_Event_OinitState @ SV931 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4168]) ).
thf(4524,plain,
! [SV1736: $i,SV1570: $i,SV1304: $i,SV932: $i,SV407: $i] :
( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4430: $i,SY4431: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SY4430 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4431 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4169]) ).
thf(4525,plain,
! [SV1305: $i,SV933: $i,SV408: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4072: $i] :
( ( c_in @ SY4072 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4073: $i] :
( ( c_in @ SY4073 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4073 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4073 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY4073 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4170]) ).
thf(4526,plain,
! [SV934: $i,SV409: $i,SV1571: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV1571 @ SV409 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV934 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV409 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV934 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4171]) ).
thf(4527,plain,
! [SV1737: $i,SV1572: $i,SV1307: $i,SV936: $i,SV411: $i] :
( ( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ ( c_Message_Omsg_OAgent @ SV1572 ) ) ) )
| ~ ( c_in @ SV1737 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4432: $i,SY4433: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1572 @ ( c_Message_Omsg_OCrypt @ SY4432 @ ( c_Message_Omsg_OMPair @ SY4433 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SV1737 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4173]) ).
thf(4528,plain,
! [SV1738: $i,SV1573: $i,SV1308: $i,SV937: $i,SV412: $i] :
( ( ! [SY4434: $i,SY4435: $i,SY4436: $i] :
( ( SV412 = SV937 )
| ~ ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4434 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4435 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4083: $i,SY4084: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4436 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4436 ) @ ( c_Message_Omsg_OMPair @ SY4083 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4084 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4435 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4174]) ).
thf(4529,plain,
! [SV1739: $i,SV1574: $i,SV1309: $i,SV938: $i,SV413: $i] :
( ( ! [SY4439: $i,SY4440: $i,SY4441: $i] :
( ( SV413 = SV938 )
| ~ ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4439 ) @ SY4440 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4090: $i,SY4091: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4441 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4441 ) @ ( c_Message_Omsg_OMPair @ SY4090 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4439 ) @ SY4091 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4175]) ).
thf(4530,plain,
! [SV1740: $i,SV1575: $i,SV1310: $i,SV939: $i,SV414: $i] :
( ( ! [SY4444: $i,SY4445: $i,SY4446: $i] :
( ( SV414 = SV939 )
| ~ ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4444 ) @ SY4445 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4097: $i,SY4098: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4446 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4446 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4097 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4444 ) @ SY4098 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4176]) ).
thf(4531,plain,
! [SV1741: $i,SV1576: $i,SV1311: $i,SV940: $i,SV415: $i] :
( ( ! [SY4449: $i,SY4450: $i,SY4451: $i] :
( ( SV415 = SV940 )
| ~ ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4449 ) @ SY4450 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4104: $i,SY4105: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SY4451 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4104 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4449 ) @ SY4105 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4177]) ).
thf(4532,plain,
! [SV1742: $i,SV1577: $i,SV1312: $i,SV941: $i,SV416: $i] :
( ( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
| ~ ( c_in @ SV1312 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4454: $i,SY4455: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SV1577 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1742 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4454 ) @ SY4455 ) ) ) ) ) @ ( c_List_Oset @ SV1312 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4178]) ).
thf(4533,plain,
! [SV1743: $i,SV1578: $i,SV1313: $i,SV942: $i,SV417: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
| ! [SY4456: $i] :
( ! [SY4457: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1743 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1743 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4456 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SY4457 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY4456 @ SV1743 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4179]) ).
thf(4534,plain,
! [SV1744: $i,SV1579: $i,SV1314: $i,SV943: $i,SV419: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4458: $i,SY4459: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4458 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4459 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4180]) ).
thf(4535,plain,
! [SV1745: $i,SV1581: $i,SV1316: $i,SV944: $i,SV421: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4460: $i] :
( ! [SY4461: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1745 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1745 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4460 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SY4461 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY4460 @ SV1745 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4182]) ).
thf(4536,plain,
! [SV945: $i,SV1746: $i,SV422: $i] :
( ( ( ! [SY4462: $i] : ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV1746 @ SY4462 ) @ SV945 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV945 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4183]) ).
thf(4537,plain,
! [SV946: $i,SV1747: $i,SV423: $i] :
( ( ( ! [SY4463: $i] : ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV1747 @ SY4463 ) @ SV946 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV946 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4184]) ).
thf(4538,plain,
! [SV952: $i,SV431: $i,SV1582: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1582 @ SV431 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1582 ) ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1582 ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4188]) ).
thf(4539,plain,
! [SV432: $i,SV1317: $i,SV953: $i] :
( ( ( ~ ( c_in @ SV953 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV432 ) ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV432 ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV432 @ SV953 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4189]) ).
thf(4540,plain,
! [SV956: $i,SV435: $i,SV1583: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1583 @ SV435 ) @ SV956 @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1583 @ SV435 ) @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV435 @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4192]) ).
thf(4541,plain,
! [SV957: $i,SV1584: $i,SV436: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SV1584 ) @ SV957 @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SV1584 ) @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV436 @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4193]) ).
thf(4542,plain,
! [SV958: $i,SV437: $i,SV1585: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV1585 @ SV437 ) @ SV958 @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OMPair @ SV1585 @ SV437 ) @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV437 @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4194]) ).
thf(4543,plain,
! [SV438: $i,SV1318: $i,SV959: $i] :
( ( ( ~ ( c_in @ SV959 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV438 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OMPair @ SV438 @ SV959 ) @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4195]) ).
thf(4544,plain,
! [SV960: $i,SV1586: $i,SV439: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV439 @ SV1586 ) @ ( c_Event_Oused @ SV960 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV439 @ ( c_Event_Oused @ SV960 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4196]) ).
thf(4545,plain,
! [SV961: $i,SV440: $i,SV1587: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV1587 @ SV440 ) @ ( c_Event_Oused @ SV961 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV440 @ ( c_Event_Oused @ SV961 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4197]) ).
thf(4546,plain,
! [SV1319: $i,SV962: $i,SV1748: $i,SV441: $i] :
( ( ( ( SV441 = SV1748 )
| ~ ( c_in @ SV441 @ ( c_List_Oset @ ( c_List_Olist_OCons @ SV1748 @ SV962 @ SV1319 ) @ SV1319 ) @ SV1319 ) )
= $true )
| ( ( c_in @ SV441 @ ( c_List_Oset @ SV962 @ SV1319 ) @ SV1319 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4198]) ).
thf(4547,plain,
! [SV442: $i,SV1320: $i,SV963: $i] :
( ( ( ~ ( c_in @ SV963 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1320 ) ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1320 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV442 @ SV963 ) @ SV1320 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4199]) ).
thf(4548,plain,
! [SV964: $i,SV443: $i,SV1588: $i] :
( ( ( c_in @ ( c_Event_Oevent_ONotes @ SV1588 @ SV443 ) @ ( c_List_Oset @ SV964 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV443 @ ( c_Event_Oused @ SV964 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4200]) ).
thf(4549,plain,
! [SV444: $i,SV1321: $i,SV965: $i] :
( ( ( ~ ( c_in @ SV965 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1321 ) ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV1321 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV444 @ SV965 ) @ SV1321 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4201]) ).
thf(4550,plain,
! [SV1589: $i,SV1322: $i,SV966: $i,SV445: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV445 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV445 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV966 ) @ ( c_Message_Omsg_ONonce @ SV1322 ) ) ) ) @ SV1589 @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1322 ) @ ( c_Event_Oused @ SV1589 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1589 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4202]) ).
thf(4551,plain,
! [SV1749: $i,SV1590: $i,SV1325: $i,SV969: $i,SV449: $i] :
( ( ( c_Event_Oevent_ONotes @ SV449 @ SV969 )
!= ( c_Event_Oevent_OSays @ SV1325 @ SV1590 @ SV1749 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4205]) ).
thf(4552,plain,
! [SV1750: $i,SV1591: $i,SV1326: $i,SV970: $i,SV450: $i] :
( ( ( c_Event_Oevent_OGets @ SV450 @ SV970 )
!= ( c_Event_Oevent_OSays @ SV1326 @ SV1591 @ SV1750 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4206]) ).
thf(4553,plain,
! [SV1751: $i,SV1592: $i,SV1327: $i,SV971: $i,SV451: $i] :
( ( ( c_Event_Oevent_OSays @ SV451 @ SV971 @ SV1327 )
!= ( c_Event_Oevent_ONotes @ SV1592 @ SV1751 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4207]) ).
thf(4554,plain,
! [SV1752: $i,SV1593: $i,SV1328: $i,SV972: $i,SV452: $i] :
( ( ( c_Event_Oevent_OSays @ SV452 @ SV972 @ SV1328 )
!= ( c_Event_Oevent_OGets @ SV1593 @ SV1752 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4208]) ).
thf(4555,plain,
! [SV1594: $i,SV1330: $i,SV974: $i,SV454: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV454 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV454 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV974 ) @ ( c_Message_Omsg_ONonce @ SV1330 ) ) ) ) @ SV1594 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1330 ) @ ( c_Event_Oused @ SV1594 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1594 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4209]) ).
thf(4556,plain,
! [SV1333: $i,SV1595: $i,SV457: $i] :
( ( ( c_in @ SV457 @ ( c_Message_Oparts @ ( c_Event_OinitState @ SV1595 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV457 @ ( c_Event_Oused @ SV1333 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4210]) ).
thf(4557,plain,
! [SV1596: $i,SV1337: $i,SV982: $i,SV463: $i] :
( ( ( ! [SY4352: $i] : ( c_in @ ( hAPP @ SV463 @ SV982 ) @ ( c_Set_Oimage @ SV463 @ SV1337 @ SV1596 @ SY4352 ) @ SY4352 ) )
= $true )
| ( ( ~ ( c_in @ SV982 @ SV1337 @ SV1596 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4216]) ).
thf(4558,plain,
! [SV1597: $i,SV1338: $i,SV983: $i,SV464: $i] :
( ( ( ! [SY4353: $i] : ( c_in @ ( hAPP @ SV464 @ SV983 ) @ ( c_Set_Oimage @ SV464 @ SV1338 @ SV1597 @ SY4353 ) @ SY4353 ) )
= $true )
| ( ( ~ ( c_in @ SV983 @ SV1338 @ SV1597 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4217]) ).
thf(4559,plain,
! [SV1339: $i,SV984: $i,SV465: $i] :
( ( ( c_in @ SV465 @ SV984 @ SV1339 )
= $false )
| ( ( ! [SY4138: $i,SY4139: $i] : ( c_in @ ( hAPP @ SY4138 @ SV465 ) @ ( c_Set_Oimage @ SY4138 @ SV984 @ SV1339 @ SY4139 ) @ SY4139 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4218]) ).
thf(4560,plain,
! [SV1340: $i,SV985: $i,SV466: $i] :
( ( ( c_in @ SV466 @ SV985 @ SV1340 )
= $false )
| ( ( ! [SY4140: $i,SY4141: $i] : ( c_in @ ( hAPP @ SY4140 @ SV466 ) @ ( c_Set_Oimage @ SY4140 @ SV985 @ SV1340 @ SY4141 ) @ SY4141 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4219]) ).
thf(4561,plain,
! [SV1753: $i,SV1344: $i,SV990: $i,SV472: $i] :
( ( ( ( hAPP @ ( c_Public_OpublicKey @ SV472 ) @ SV990 )
!= ( hAPP @ ( c_Public_OpublicKey @ SV1344 ) @ SV1753 ) )
= $true )
| ( ( SV472 = SV1344 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4222]) ).
thf(4562,plain,
! [SV1598: $i,SV1345: $i,SV991: $i,SV473: $i] :
( ( ( ( hAPP @ ( c_Public_OpublicKey @ SV473 ) @ SV991 )
!= ( hAPP @ ( c_Public_OpublicKey @ SV1345 ) @ SV1598 ) )
= $true )
| ( ( SV991 = SV1598 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4223]) ).
thf(4563,plain,
! [SV1599: $i,SV1346: $i,SV992: $i,SV474: $i] :
( ( ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV474 ) @ SV992 ) )
= ( hAPP @ ( c_Public_OpublicKey @ SV1346 ) @ SV1599 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4224]) ).
thf(4564,plain,
! [SV1600: $i,SV1347: $i,SV994: $i,SV476: $i] :
( ( ( ( c_Event_Oevent_OGets @ SV476 @ SV994 )
!= ( c_Event_Oevent_OGets @ SV1347 @ SV1600 ) )
= $true )
| ( ( SV994 = SV1600 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4226]) ).
thf(4565,plain,
! [SV1754: $i,SV1348: $i,SV995: $i,SV477: $i] :
( ( ( ( c_Event_Oevent_OGets @ SV477 @ SV995 )
!= ( c_Event_Oevent_OGets @ SV1348 @ SV1754 ) )
= $true )
| ( ( SV477 = SV1348 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4227]) ).
thf(4566,plain,
! [SV1601: $i,SV1349: $i,SV996: $i,SV478: $i] :
( ( ( c_Event_Oevent_OGets @ SV478 @ SV996 )
= ( c_Event_Oevent_ONotes @ SV1349 @ SV1601 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4228]) ).
thf(4567,plain,
! [SV1602: $i,SV1350: $i,SV997: $i,SV479: $i] :
( ( ( ( c_Event_Oevent_ONotes @ SV479 @ SV997 )
!= ( c_Event_Oevent_ONotes @ SV1350 @ SV1602 ) )
= $true )
| ( ( SV997 = SV1602 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4229]) ).
thf(4568,plain,
! [SV1755: $i,SV1351: $i,SV998: $i,SV480: $i] :
( ( ( ( c_Event_Oevent_ONotes @ SV480 @ SV998 )
!= ( c_Event_Oevent_ONotes @ SV1351 @ SV1755 ) )
= $true )
| ( ( SV480 = SV1351 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4230]) ).
thf(4569,plain,
! [SV1603: $i,SV1352: $i,SV999: $i,SV482: $i] :
( ( ( c_Event_Oevent_ONotes @ SV482 @ SV999 )
= ( c_Event_Oevent_OGets @ SV1352 @ SV1603 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4231]) ).
thf(4570,plain,
! [SV1604: $i,SV1353: $i,SV1000: $i,SV483: $i] :
( ( ( ! [SY4354: $i] :
( ( c_List_Olist_OCons @ SV483 @ SV1000 @ SV1353 )
!= ( c_List_Olist_OCons @ SV1604 @ SY4354 @ SV1353 ) ) )
= $true )
| ( ( SV483 = SV1604 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4232]) ).
thf(4571,plain,
! [SV1756: $i,SV1605: $i,SV1354: $i,SV1001: $i,SV484: $i] :
( ( ( ( c_List_Olist_OCons @ SV484 @ SV1001 @ SV1354 )
!= ( c_List_Olist_OCons @ SV1605 @ SV1756 @ SV1354 ) )
| ( SV1001 = SV1756 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4233]) ).
thf(4572,plain,
! [SV1606: $i,SV1358: $i,SV1005: $i,SV488: $i] :
( ( ( hAPP @ ( c_Public_OpublicKey @ SV488 ) @ SV1005 )
= ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV1358 ) @ SV1606 ) ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4236]) ).
thf(4573,plain,
! [SV1006: $i,SV1607: $i,SV489: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV489 @ SV1607 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1006 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV489 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1006 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4237]) ).
thf(4574,plain,
! [SV490: $i,SV1359: $i,SV1007: $i] :
( ( ( ~ ( c_in @ SV1007 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV490 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OMPair @ SV490 @ SV1007 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4238]) ).
thf(4575,plain,
! [SV1361: $i,SV1009: $i,SV492: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ SV1361 @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV492 ) @ SV1361 @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ ( c_Message_Osynth @ SV1361 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4240]) ).
thf(4576,plain,
! [SV1362: $i,SV1010: $i,SV493: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ ( c_Message_Osynth @ SV1362 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV493 ) @ SV1362 @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ SV1362 @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4241]) ).
thf(4577,plain,
! [SV1011: $i,SV1608: $i,SV494: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SV1608 ) @ SV1011 @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SV1608 ) @ ( c_Message_Osynth @ SV1011 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV494 ) @ SV1011 @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4242]) ).
thf(4578,plain,
! [SV1012: $i,SV1363: $i,SV495: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV495 ) @ SV1363 @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV1012 @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV495 @ SV1012 ) @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4243]) ).
thf(4579,plain,
! [SV1757: $i,SV1609: $i,SV1364: $i,SV1017: $i,SV501: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4464: $i,SY4465: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4464 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4465 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4244]) ).
thf(4580,plain,
! [SV1758: $i,SV1610: $i,SV1365: $i,SV1018: $i,SV502: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4245]) ).
thf(4581,plain,
! [SV1611: $i,SV503: $i,SV1019: $i] :
( ( ( c_in @ SV1019 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV503 ) @ SV1019 ) ) ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1611 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4246]) ).
thf(4582,plain,
! [SV1759: $i,SV1612: $i,SV1366: $i,SV1021: $i,SV506: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ! [SY4361: $i,SY4362: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4361 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4361 ) @ ( c_Message_Omsg_OMPair @ SY4362 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4247]) ).
thf(4583,plain,
! [SV1613: $i,SV1367: $i,SV1022: $i,SV507: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV507 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV507 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ SV507 @ SV1022 @ SV1367 @ SV1613 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1613 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ SV1613 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1022 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1613 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4248]) ).
thf(4584,plain,
! [SV1760: $i,SV1614: $i,SV1368: $i,SV1023: $i,SV508: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4468: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SY4468 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4469: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4469 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4249]) ).
thf(4585,plain,
! [SV509: $i,SV1024: $i,SV1615: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1615 ) ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1615 @ SV509 ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV509 @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4250]) ).
thf(4586,plain,
! [SV1027: $i,SV512: $i] :
( ( ( c_in @ SV512 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( ~ ( c_in @ SV1027 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV512 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1027 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4252]) ).
thf(4587,plain,
! [SV1370: $i,SV513: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV513 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1370 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV1370 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV513 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4253]) ).
thf(4588,plain,
! [SV1371: $i,SV514: $i,SV1028: $i] :
( ( ( c_in @ ( c_Event_Oevent_ONotes @ SV1028 @ SV514 ) @ ( c_List_Oset @ SV1371 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV514 @ ( c_Event_Oknows @ SV1028 @ SV1371 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4254]) ).
thf(4589,plain,
! [SV1372: $i,SV515: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV515 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1372 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV1372 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV515 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4255]) ).
thf(4590,plain,
! [SV1029: $i,SV516: $i] :
( ( ( c_in @ SV516 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( ~ ( c_in @ SV1029 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV516 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1029 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4256]) ).
thf(4591,plain,
! [SV1030: $i,SV517: $i,SV1761: $i,SV1616: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1616 @ SV1761 @ SV517 ) @ ( c_List_Oset @ SV1030 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV517 @ ( c_Event_Oused @ SV1030 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4257]) ).
thf(4592,plain,
! [SV1762: $i,SV1617: $i,SV1373: $i,SV1031: $i,SV518: $i] :
( ( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) @ SV1762 )
| ~ ( c_in @ SV1762 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1762 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) ) @ ( c_List_Oset @ SV1762 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4258]) ).
thf(4593,plain,
! [SV1763: $i,SV1618: $i,SV1374: $i,SV1032: $i,SV519: $i] :
( ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
| ~ ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ! [SY4470: $i,SY4471: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4470 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4471 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4259]) ).
thf(4594,plain,
! [SV1764: $i,SV1619: $i,SV1375: $i,SV1033: $i,SV520: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ! [SY4472: $i,SY4473: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SY4472 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SY4473 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4260]) ).
thf(4595,plain,
! [SV1765: $i,SV1620: $i,SV1376: $i,SV1034: $i,SV521: $i] :
( ( ! [SY4474: $i] :
( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) ) @ ( c_List_Oset @ SY4474 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SY4474 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4474 ) ) @ tc_Message_Omsg ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4261]) ).
thf(4596,plain,
! [SV1378: $i,SV1036: $i,SV523: $i] :
( ( ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1036 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ! [SY4184: $i,SY4185: $i] : ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV1378 @ SY4184 @ SY4185 ) @ SV1036 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4262]) ).
thf(4597,plain,
! [SV1379: $i,SV524: $i,SV1037: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OGets @ SV1037 @ SV524 ) @ ( c_List_Oset @ SV1379 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV1037 = c_Message_Oagent_OSpy )
= $true )
| ( ( c_in @ SV524 @ ( c_Event_Oknows @ SV1037 @ SV1379 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4263]) ).
thf(4598,plain,
! [SV1766: $i,SV1621: $i,SV1380: $i,SV1038: $i,SV525: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
| ! [SY4475: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SY4475 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4264]) ).
thf(4599,plain,
! [SV1622: $i,SV1381: $i,SV1039: $i,SV526: $i] :
( ( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ ( c_Message_Omsg_OAgent @ SV1622 ) ) ) )
= $true )
| ( ( ! [SY4378: $i] :
( ~ ( c_in @ SY4378 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1622 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4379: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1622 ) @ ( c_Message_Omsg_OMPair @ SY4379 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SY4378 ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4265]) ).
thf(4600,plain,
! [SV1767: $i,SV1623: $i,SV1382: $i,SV1040: $i,SV527: $i] :
( ( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
| ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ ( c_Message_Omsg_OAgent @ SV1767 ) ) ) )
| ~ ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4476: $i,SY4477: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4476 @ SV1767 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1767 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4477 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4266]) ).
thf(4601,plain,
! [SV1041: $i,SV528: $i,SV1624: $i] :
( ( ( ~ ( c_in @ SV1624 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_ONotes @ SV1624 @ SV528 ) @ ( c_List_Oset @ SV1041 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV528 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1041 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4267]) ).
thf(4602,plain,
! [SV1625: $i,SV1383: $i,SV1042: $i,SV529: $i] :
( ( ( c_in @ SV529 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1042 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY4383: $i,SY4384: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1383 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1383 ) @ ( c_Message_Omsg_OMPair @ SV1625 @ ( c_Message_Omsg_OMPair @ SY4383 @ ( c_Message_Omsg_OMPair @ SV529 @ SY4384 ) ) ) ) ) @ ( c_List_Oset @ SV1042 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4268]) ).
thf(4603,plain,
! [SV1384: $i,SV532: $i,SV1768: $i,SV1044: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1044 @ SV1768 @ SV532 ) @ ( c_List_Oset @ SV1384 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV532 @ ( c_Event_Oknows @ SV1044 @ SV1384 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4270]) ).
thf(4604,plain,
! [SV1045: $i,SV534: $i,SV1626: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV1626 @ SV534 ) @ ( c_Message_Oanalz @ SV1045 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV534 @ ( c_Message_Oanalz @ SV1045 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4271]) ).
thf(4605,plain,
! [SV1046: $i,SV1627: $i,SV535: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV535 @ SV1627 ) @ ( c_Message_Oanalz @ SV1046 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV535 @ ( c_Message_Oanalz @ SV1046 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4272]) ).
thf(4606,plain,
! [SV1047: $i,SV536: $i,SV1628: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV1628 @ SV536 ) @ ( c_Message_Oparts @ SV1047 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV536 @ ( c_Message_Oparts @ SV1047 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4273]) ).
thf(4607,plain,
! [SV1048: $i,SV1629: $i,SV537: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV537 @ SV1629 ) @ ( c_Message_Oparts @ SV1048 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV537 @ ( c_Message_Oparts @ SV1048 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4274]) ).
thf(4608,plain,
! [SV1630: $i,SV1386: $i,SV1052: $i,SV541: $i] :
( ( ( ! [SY4385: $i,SY4386: $i] :
( ( c_Event_Oevent_OSays @ SV541 @ SV1052 @ SV1386 )
!= ( c_Event_Oevent_OSays @ SV1630 @ SY4385 @ SY4386 ) ) )
= $true )
| ( ( SV541 = SV1630 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4276]) ).
thf(4609,plain,
! [SV1769: $i,SV1631: $i,SV1387: $i,SV1053: $i,SV542: $i] :
( ( ! [SY4478: $i] :
( ( c_Event_Oevent_OSays @ SV542 @ SV1053 @ SV1387 )
!= ( c_Event_Oevent_OSays @ SV1631 @ SV1769 @ SY4478 ) )
| ( SV1053 = SV1769 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4277]) ).
thf(4610,plain,
! [SV1770: $i,SV1632: $i,SV1388: $i,SV1054: $i,SV543: $i] :
( ( ! [SY4479: $i] :
( ( ( c_Event_Oevent_OSays @ SV543 @ SV1054 @ SV1388 )
!= ( c_Event_Oevent_OSays @ SV1632 @ SV1770 @ SY4479 ) )
| ( SV1388 = SY4479 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4278]) ).
thf(4611,plain,
! [SV1057: $i,SV546: $i,SV1771: $i,SV1633: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1633 @ SV1771 @ SV546 ) @ ( c_List_Oset @ SV1057 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV546 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1057 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4281]) ).
thf(4612,plain,
! [SV1058: $i,SV547: $i,SV1772: $i,SV1634: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1634 @ SV1772 @ SV547 ) @ ( c_List_Oset @ SV1058 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV547 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1058 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4282]) ).
thf(4613,plain,
! [SV1773: $i,SV1635: $i,SV1389: $i,SV1059: $i,SV548: $i] :
( ( ! [SY4480: $i] :
( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1059 ) ) @ tc_Message_Omsg )
| ! [SY4481: $i,SY4482: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1389 @ SV1635 @ ( c_Message_Omsg_OCrypt @ SV1773 @ ( c_Message_Omsg_OMPair @ SY4480 @ ( c_Message_Omsg_OMPair @ SY4481 @ ( c_Message_Omsg_OMPair @ SY4482 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SV1059 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4283]) ).
thf(4614,plain,
! [SV1064: $i,SV555: $i,SV1636: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1636 @ SV555 ) @ ( c_Message_Oparts @ SV1064 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV555 @ ( c_Message_Oparts @ SV1064 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4286]) ).
thf(4615,plain,
! [SV556: $i,SV1065: $i,SV1637: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV1637 ) ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1637 ) @ SV556 ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV556 @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4287]) ).
thf(4616,plain,
! [SV1066: $i,SV557: $i,SV1774: $i,SV1638: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1638 @ SV1774 @ SV557 ) @ ( c_List_Oset @ SV1066 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV557 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1066 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4288]) ).
thf(4617,plain,
! [SV1639: $i,SV1396: $i,SV1072: $i,SV564: $i] :
( ( ( c_Message_Omsg_OMPair @ SV564 @ SV1072 )
= ( c_Message_Omsg_OCrypt @ SV1396 @ SV1639 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4295]) ).
thf(4618,plain,
! [SV1640: $i,SV570: $i,SV1078: $i] :
( ( ( hBOOL @ ( hAPP @ SV1078 @ SV570 ) )
= $false )
| ( ( c_in @ SV570 @ SV1078 @ SV1640 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4299]) ).
thf(4619,plain,
! [SV1641: $i,SV571: $i,SV1079: $i] :
( ( ( c_in @ SV1079 @ SV571 @ SV1641 )
= $false )
| ( ( hBOOL @ ( hAPP @ SV571 @ SV1079 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4300]) ).
thf(4620,plain,
! [SV1775: $i,SV1399: $i,SV1081: $i,SV573: $i] :
( ( ( ( c_Message_Omsg_OCrypt @ SV573 @ SV1081 )
!= ( c_Message_Omsg_OCrypt @ SV1399 @ SV1775 ) )
= $true )
| ( ( SV573 = SV1399 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4302]) ).
thf(4621,plain,
! [SV1642: $i,SV1400: $i,SV1082: $i,SV574: $i] :
( ( ( ( c_Message_Omsg_OCrypt @ SV574 @ SV1082 )
!= ( c_Message_Omsg_OCrypt @ SV1400 @ SV1642 ) )
= $true )
| ( ( SV1082 = SV1642 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4303]) ).
thf(4622,plain,
! [SV1776: $i,SV1401: $i,SV1084: $i,SV576: $i] :
( ( ( ( c_Message_Omsg_OMPair @ SV576 @ SV1084 )
!= ( c_Message_Omsg_OMPair @ SV1401 @ SV1776 ) )
= $true )
| ( ( SV576 = SV1401 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4304]) ).
thf(4623,plain,
! [SV1643: $i,SV1402: $i,SV1085: $i,SV577: $i] :
( ( ( ( c_Message_Omsg_OMPair @ SV577 @ SV1085 )
!= ( c_Message_Omsg_OMPair @ SV1402 @ SV1643 ) )
= $true )
| ( ( SV1085 = SV1643 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4305]) ).
thf(4624,plain,
! [SV1086: $i,SV578: $i,SV1644: $i] :
( ( ( ~ ( c_in @ SV1644 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1644 ) @ SV578 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV578 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4306]) ).
thf(4625,plain,
! [SV1645: $i,SV1404: $i,SV1088: $i,SV580: $i] :
( ( ( c_Message_Omsg_OCrypt @ SV580 @ SV1088 )
= ( c_Message_Omsg_OMPair @ SV1404 @ SV1645 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4308]) ).
thf(4626,plain,
! [SV1646: $i,SV1106: $i,SV598: $i] :
( ( ( c_fequal @ SV598 @ SV1106 @ SV1646 )
= $false )
| ( ( SV598 = SV1106 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4325]) ).
thf(4627,plain,
! [SV1409: $i,SV4: $i,SV1109: $i,SV602: $i] :
( ( ( c_NS__Shared__Mirabelle_OIssues @ SV602 @ SV1109 @ SV4 @ SV1409 )
= $false )
| ( ( c_in @ SV4 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV602 @ SV1109 @ SV4 @ SV1409 ) @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4326]) ).
thf(4628,plain,
! [SV5: $i,SV603: $i,SV1410: $i] :
( ( ( c_in @ SV1410 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV5 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1410 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV5 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ ( c_Message_Oparts @ SV603 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4327]) ).
thf(4629,plain,
! [SV7: $i,SV1647: $i,SV605: $i] :
( ( ( c_in @ SV605 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1647 @ tc_bool ) ) @ SV1647 )
= $false )
| ( ( hBOOL @ ( hAPP @ SV7 @ SV605 ) )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4328]) ).
thf(4630,plain,
! [SV14: $i,SV1648: $i,SV1412: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1412 @ SV1648 @ SV14 )
!= ( c_Orderings_Obot__class_Obot @ SV14 ) )
= $true )
| ( ( SV1648
= ( c_Orderings_Obot__class_Obot @ SV14 ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV14 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4330]) ).
thf(4631,plain,
! [SV15: $i,SV1777: $i,SV1413: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1413 @ SV1777 @ SV15 )
!= ( c_Orderings_Obot__class_Obot @ SV15 ) )
= $true )
| ( ( SV1413
= ( c_Orderings_Obot__class_Obot @ SV15 ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV15 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4331]) ).
thf(4632,plain,
! [SV1415: $i,SV1119: $i,SV621: $i,SV25: $i] :
( ( ( ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV25 @ tc_bool ) )
= ( c_Set_Oimage @ SV621 @ SV1119 @ SV1415 @ SV25 ) )
= $false )
| ( ( SV1119
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1415 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4337]) ).
thf(4633,plain,
! [SV1649: $i,SV1419: $i,SV1122: $i,SV628: $i,SV39: $i] :
( ( ( ( c_Set_Oinsert @ SV39 @ ( c_Set_Oinsert @ SV628 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 )
!= ( c_Set_Oinsert @ SV1419 @ ( c_Set_Oinsert @ SV1649 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 ) )
= $true )
| ( ( ( SV39 = SV1649 )
| ( SV39 = SV1419 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4338]) ).
thf(4634,plain,
! [SV1778: $i,SV1420: $i,SV1123: $i,SV629: $i,SV40: $i] :
( ( ( ( c_Set_Oinsert @ SV40 @ ( c_Set_Oinsert @ SV629 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 )
!= ( c_Set_Oinsert @ SV1420 @ ( c_Set_Oinsert @ SV1778 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 ) )
= $true )
| ( ( ( SV629 = SV1420 )
| ( SV40 = SV1420 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4339]) ).
thf(4635,plain,
! [SV1650: $i,SV1421: $i,SV1124: $i,SV630: $i,SV41: $i] :
( ( ( ( c_Set_Oinsert @ SV41 @ ( c_Set_Oinsert @ SV630 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 )
!= ( c_Set_Oinsert @ SV1421 @ ( c_Set_Oinsert @ SV1650 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 ) )
= $true )
| ( ( ( SV41 = SV1650 )
| ( SV630 = SV1650 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4340]) ).
thf(4636,plain,
! [SV1651: $i,SV1422: $i,SV1125: $i,SV631: $i,SV42: $i] :
( ( ( ( c_Set_Oinsert @ SV42 @ ( c_Set_Oinsert @ SV631 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 )
!= ( c_Set_Oinsert @ SV1422 @ ( c_Set_Oinsert @ SV1651 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 ) )
= $true )
| ( ( ( SV631 = SV1422 )
| ( SV631 = SV1651 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4341]) ).
thf(4637,plain,
! [SV1652: $i,SV1127: $i,SV634: $i,SV48: $i] :
( ( ( ( c_Set_Oimage @ SV48 @ SV634 @ SV1127 @ SV1652 )
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1652 @ tc_bool ) ) )
= $false )
| ( ( SV634
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1127 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4342]) ).
thf(4638,plain,
! [SV1128: $i,SV638: $i,SV52: $i] :
( ( ( c_lessequals @ SV52 @ ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) @ SV1128 ) @ ( tc_fun @ SV1128 @ tc_bool ) )
= $false )
| ( ( SV52
= ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) )
= $true )
| ( ( SV52
= ( c_Set_Oinsert @ SV638 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1128 @ tc_bool ) ) @ SV1128 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4343]) ).
thf(4639,plain,
! [SV1129: $i,SV59: $i] :
( ( ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OSignature ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV59 @ c_Public_Okeymode_OEncryption ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV59 @ SV1129 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4344]) ).
thf(4640,plain,
! [SV62: $i,SV1653: $i,SV1425: $i] :
( ( ( c_lessequals @ SV1425 @ SV1653 @ SV62 )
= $true )
| ( ( ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1653 @ SV62 ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1425 @ SV62 ) @ SV62 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV62 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4345]) ).
thf(4641,plain,
! [SV1654: $i,SV63: $i,SV1426: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1426 @ SV63 ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1654 @ SV63 ) @ SV63 )
= $true )
| ( ( ~ ( c_lessequals @ SV1654 @ SV1426 @ SV63 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV63 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4346]) ).
thf(4642,plain,
! [SV1655: $i,SV1427: $i,SV1135: $i,SV647: $i,SV68: $i] :
( ( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ ( c_List_Oappend @ SV647 @ ( c_List_Olist_OCons @ SV1135 @ SV1427 @ SV1655 ) @ SV1655 ) @ SV1655 ) ) )
= $true )
| ( ( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ SV1427 @ SV1655 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV68 @ SV1135 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4350]) ).
thf(4643,plain,
! [SV1656: $i,SV1431: $i,SV1138: $i,SV654: $i,SV77: $i] :
( ( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ ( c_List_Oappend @ SV654 @ ( c_List_Olist_OCons @ SV1138 @ SV1431 @ SV1656 ) @ SV1656 ) @ SV1656 ) ) )
= $true )
| ( ( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ SV654 @ SV1656 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV77 @ SV1138 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4351]) ).
thf(4644,plain,
! [SV656: $i,SV1779: $i,SV79: $i,SV1432: $i] :
( ( ( ~ ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1432 @ SV79 @ ( tc_fun @ SV1779 @ tc_bool ) ) @ SV656 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV1432 @ SV656 ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV79 @ SV656 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4352]) ).
thf(4645,plain,
! [SV1139: $i,SV80: $i,SV1433: $i,SV657: $i] :
( ( ( hBOOL @ ( hAPP @ SV657 @ SV1433 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV80 @ SV657 @ ( tc_fun @ SV1139 @ tc_bool ) ) @ SV1433 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4353]) ).
thf(4646,plain,
! [SV1140: $i,SV658: $i,SV1434: $i,SV81: $i] :
( ( ( hBOOL @ ( hAPP @ SV81 @ SV1434 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV81 @ SV658 @ ( tc_fun @ SV1140 @ tc_bool ) ) @ SV1434 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4354]) ).
thf(4647,plain,
! [SV1657: $i,SV84: $i,SV1435: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ SV1435 @ SV84 )
!= ( c_HOL_Ouminus__class_Ouminus @ SV1657 @ SV84 ) )
= $true )
| ( ( SV1435 = SV1657 )
= $true )
| ( ( class_Lattices_Oboolean__algebra @ SV84 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4355]) ).
thf(4648,plain,
! [SV1658: $i,SV85: $i,SV1436: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ SV1436 @ SV85 )
!= ( c_HOL_Ouminus__class_Ouminus @ SV1658 @ SV85 ) )
= $true )
| ( ( SV1436 = SV1658 )
= $true )
| ( ( class_OrderedGroup_Ogroup__add @ SV85 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4356]) ).
thf(4649,plain,
! [SV1437: $i,SV87: $i,SV662: $i] :
( ( ( c_lessequals @ SV662 @ SV87 @ ( tc_fun @ SV1437 @ tc_bool ) )
= $false )
| ( ( ~ ( c_lessequals @ SV87 @ SV662 @ ( tc_fun @ SV1437 @ tc_bool ) ) )
= $true )
| ( ( SV87 = SV662 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4358]) ).
thf(4650,plain,
! [SV1438: $i,SV88: $i,SV663: $i] :
( ( ( c_lessequals @ SV663 @ SV88 @ ( tc_fun @ SV1438 @ tc_bool ) )
= $false )
| ( ( ~ ( c_lessequals @ SV88 @ SV663 @ ( tc_fun @ SV1438 @ tc_bool ) ) )
= $true )
| ( ( SV88 = SV663 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4359]) ).
thf(4651,plain,
! [SV89: $i,SV1659: $i,SV1439: $i] :
( ( ( SV1439 = SV1659 )
= $true )
| ( ( ~ ( c_lessequals @ SV1659 @ SV1439 @ SV89 )
| ~ ( c_lessequals @ SV1439 @ SV1659 @ SV89 ) )
= $true )
| ( ( class_Orderings_Oorder @ SV89 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4360]) ).
thf(4652,plain,
! [SV90: $i,SV1660: $i,SV1440: $i] :
( ( ( SV1440 = SV1660 )
= $true )
| ( ( ~ ( c_lessequals @ SV1660 @ SV1440 @ SV90 )
| ~ ( c_lessequals @ SV1440 @ SV1660 @ SV90 ) )
= $true )
| ( ( class_Orderings_Oorder @ SV90 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4361]) ).
thf(4653,plain,
! [SV91: $i,SV1661: $i,SV1441: $i] :
( ( ( SV1441 = SV1661 )
= $true )
| ( ( ~ ( c_lessequals @ SV1441 @ SV1661 @ SV91 )
| ~ ( c_lessequals @ SV1661 @ SV1441 @ SV91 ) )
= $true )
| ( ( class_Orderings_Oorder @ SV91 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4362]) ).
thf(4654,plain,
! [SV92: $i,SV1662: $i,SV1442: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1442 @ SV1662 @ SV92 )
= SV1442 )
= $true )
| ( ( ~ ( c_lessequals @ SV1662 @ SV1442 @ SV92 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV92 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4363]) ).
thf(4655,plain,
! [SV93: $i,SV1663: $i,SV1443: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1443 @ SV1663 @ SV93 )
!= SV1663 )
= $true )
| ( ( c_lessequals @ SV1443 @ SV1663 @ SV93 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV93 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4364]) ).
thf(4656,plain,
! [SV94: $i,SV1664: $i,SV1444: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1444 @ SV1664 @ SV94 )
= SV1664 )
= $true )
| ( ( ~ ( c_lessequals @ SV1444 @ SV1664 @ SV94 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV94 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4365]) ).
thf(4657,plain,
! [SV1666: $i,SV1446: $i,SV1148: $i,SV672: $i,SV103: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV103 @ SV672 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1446 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( tc_fun @ SV1148 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV672 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) )
| ~ ( c_lessequals @ SV103 @ SV1446 @ ( tc_fun @ SV1148 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4370]) ).
thf(4658,plain,
! [SV106: $i,SV1149: $i,SV1448: $i,SV674: $i] :
( ( ( ~ ( c_lessequals @ SV674 @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV106 @ SV1448 @ SV1149 ) )
= $true )
| ( ( c_lessequals @ ( c_Set_Oinsert @ SV106 @ SV674 @ SV1149 ) @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4371]) ).
thf(4659,plain,
! [SV108: $i,SV1667: $i,SV675: $i] :
( ( ( c_lessequals @ SV675 @ SV1667 @ SV108 )
= $true )
| ( ( ! [SY4398: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY4398 @ SV675 @ SV108 ) @ SV1667 @ SV108 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV108 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4372]) ).
thf(4660,plain,
! [SV109: $i,SV1668: $i,SV676: $i] :
( ( ( c_lessequals @ SV676 @ SV1668 @ SV109 )
= $true )
| ( ( ! [SY4399: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV676 @ SY4399 @ SV109 ) @ SV1668 @ SV109 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV109 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4373]) ).
thf(4661,plain,
! [SV110: $i,SV1780: $i,SV1669: $i,SV677: $i] :
( ( ( ( c_lessequals @ SV677 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1669 @ SV1780 @ SV110 ) @ SV110 )
| ~ ( c_lessequals @ SV677 @ SV1780 @ SV110 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV110 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4374]) ).
thf(4662,plain,
! [SV111: $i,SV1670: $i,SV678: $i] :
( ( ( ! [SY4401: $i] : ( c_lessequals @ SV678 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1670 @ SY4401 @ SV111 ) @ SV111 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV678 @ SV1670 @ SV111 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV111 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4375]) ).
thf(4663,plain,
! [SV112: $i,SV1671: $i,SV679: $i] :
( ( ( c_lessequals @ SV679 @ SV1671 @ SV112 )
= $true )
| ( ( ! [SY4402: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SY4402 @ SV679 @ SV112 ) @ SV1671 @ SV112 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV112 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4376]) ).
thf(4664,plain,
! [SV113: $i,SV1672: $i,SV680: $i] :
( ( ( c_lessequals @ SV680 @ SV1672 @ SV113 )
= $true )
| ( ( ! [SY4403: $i] :
~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV680 @ SY4403 @ SV113 ) @ SV1672 @ SV113 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV113 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4377]) ).
thf(4665,plain,
! [SV681: $i,SV1150: $i,SV1673: $i,SV114: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV114 @ SV1673 @ ( tc_fun @ SV1150 @ tc_bool ) ) @ SV681 @ ( tc_fun @ SV1150 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV114 @ SV681 @ ( tc_fun @ SV1150 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4378]) ).
thf(4666,plain,
! [SV682: $i,SV1151: $i,SV115: $i,SV1674: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1674 @ SV115 @ ( tc_fun @ SV1151 @ tc_bool ) ) @ SV682 @ ( tc_fun @ SV1151 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV115 @ SV682 @ ( tc_fun @ SV1151 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4379]) ).
thf(4667,plain,
! [SV116: $i,SV1675: $i,SV683: $i] :
( ( ( c_lessequals @ SV683 @ SV1675 @ SV116 )
= $true )
| ( ( ! [SY4404: $i] :
( ~ ( c_lessequals @ SV683 @ SY4404 @ SV116 )
| ~ ( c_lessequals @ SY4404 @ SV1675 @ SV116 ) ) )
= $true )
| ( ( class_Orderings_Oorder @ SV116 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4380]) ).
thf(4668,plain,
! [SV117: $i,SV1676: $i,SV684: $i] :
( ( ( c_lessequals @ SV684 @ SV1676 @ SV117 )
= $true )
| ( ( ! [SY4405: $i] :
( ~ ( c_lessequals @ SY4405 @ SV1676 @ SV117 )
| ~ ( c_lessequals @ SV684 @ SY4405 @ SV117 ) ) )
= $true )
| ( ( class_Orderings_Opreorder @ SV117 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4381]) ).
thf(4669,plain,
! [SV120: $i,SV1152: $i,SV687: $i,SV1677: $i] :
( ( ( ~ ( c_lessequals @ SV1677 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ SV120 @ SV1677 @ ( tc_fun @ SV1152 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ SV120 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4382]) ).
thf(4670,plain,
! [SV121: $i,SV688: $i,SV1449: $i] :
( ( ( hBOOL @ ( hAPP @ SV1449 @ SV688 ) )
= $false )
| ( ( ! [SY4241: $i] :
~ ( c_lessequals @ SV1449 @ SV121 @ ( tc_fun @ SY4241 @ tc_bool ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV121 @ SV688 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4383]) ).
thf(4671,plain,
! [SV689: $i,SV1781: $i,SV124: $i,SV1452: $i] :
( ( ( ~ ( c_lessequals @ SV1452 @ SV124 @ ( tc_fun @ SV1781 @ tc_bool ) ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV1452 @ SV689 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV124 @ SV689 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4384]) ).
thf(4672,plain,
! [SV1678: $i,SV1453: $i,SV1154: $i,SV692: $i,SV127: $i] :
( ( ( c_lessequals @ ( c_Set_Oimage @ SV127 @ SV692 @ SV1154 @ SV1453 ) @ ( c_Set_Oimage @ SV127 @ SV1678 @ SV1154 @ SV1453 ) @ ( tc_fun @ SV1453 @ tc_bool ) )
= $true )
| ( ( ~ ( c_lessequals @ SV692 @ SV1678 @ ( tc_fun @ SV1154 @ tc_bool ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4386]) ).
thf(4673,plain,
! [SV693: $i,SV1155: $i,SV128: $i,SV1782: $i] :
( ( ( ! [SY4483: $i] : ( c_lessequals @ ( c_Set_Oimage @ SV1782 @ SV128 @ SV1155 @ SY4483 ) @ ( c_Set_Oimage @ SV1782 @ SV693 @ SV1155 @ SY4483 ) @ ( tc_fun @ SY4483 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ SV128 @ SV693 @ ( tc_fun @ SV1155 @ tc_bool ) )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4387]) ).
thf(4674,plain,
! [SV129: $i,SV1156: $i,SV1454: $i,SV694: $i] :
( ( ( c_lessequals @ SV694 @ SV1454 @ ( tc_fun @ SV1156 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Set_Oinsert @ SV129 @ SV694 @ SV1156 ) @ ( c_Set_Oinsert @ SV129 @ SV1454 @ SV1156 ) @ ( tc_fun @ SV1156 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4388]) ).
thf(4675,plain,
! [SV1158: $i,SV132: $i,SV1456: $i,SV697: $i] :
( ( ( ~ ( c_lessequals @ ( c_Message_Oanalz @ SV697 ) @ ( c_Message_Oanalz @ SV1456 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ ( c_Message_Oanalz @ SV132 ) @ ( c_Message_Oanalz @ SV1158 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV132 @ SV697 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1158 @ SV1456 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4390]) ).
thf(4676,plain,
! [SV133: $i,SV1680: $i,SV1457: $i] :
( ( ( c_lessequals @ SV1457 @ SV1680 @ SV133 )
= $true )
| ( ( c_lessequals @ SV1680 @ SV1457 @ SV133 )
= $true )
| ( ( class_Orderings_Olinorder @ SV133 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4391]) ).
thf(4677,plain,
! [SV1159: $i,SV1458: $i,SV134: $i,SV1783: $i,SV698: $i] :
( ( ( ! [SY4484: $i] :
( ~ ( c_in @ SV698 @ SV1783 @ SY4484 )
| ~ ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SV1783 @ SY4484 @ SV1458 ) @ SV1159 @ ( tc_fun @ SV1458 @ tc_bool ) ) ) )
= $true )
| ( ( c_in @ ( hAPP @ SV134 @ SV698 ) @ SV1159 @ SV1458 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4392]) ).
thf(4678,plain,
! [SV700: $i,SV1459: $i,SV136: $i] :
( ( ( c_in @ SV136 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1459 @ SV700 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV136 @ ( c_Message_Oparts @ SV1459 ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV136 @ ( c_Message_Oparts @ SV700 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4393]) ).
thf(4679,plain,
! [SV137: $i,SV701: $i,SV1460: $i] :
( ( ( c_lessequals @ SV1460 @ ( c_Message_Oparts @ SV701 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV137 @ ( c_Message_Oparts @ SV1460 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV137 @ ( c_Message_Oparts @ SV701 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4394]) ).
thf(4680,plain,
! [SV139: $i,SV703: $i,SV1461: $i] :
( ( ( c_lessequals @ SV1461 @ ( c_Message_Oanalz @ SV703 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV139 @ ( c_Message_Oanalz @ SV1461 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV139 @ ( c_Message_Oanalz @ SV703 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4396]) ).
thf(4681,plain,
! [SV142: $i,SV705: $i,SV1462: $i] :
( ( ( c_lessequals @ SV1462 @ ( c_Message_Osynth @ SV705 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV142 @ ( c_Message_Osynth @ SV1462 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV142 @ ( c_Message_Osynth @ SV705 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4398]) ).
thf(4682,plain,
! [SV712: $i,SV1463: $i,SV1163: $i,SV151: $i] :
( ( ( c_lessequals @ SV151 @ SV1163 @ ( tc_fun @ SV1463 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV151 @ ( c_Set_Oinsert @ SV712 @ SV1163 @ SV1463 ) @ ( tc_fun @ SV1463 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4399]) ).
thf(4683,plain,
! [SV713: $i,SV1164: $i,SV152: $i,SV1681: $i] :
( ( ( c_lessequals @ ( c_Set_Oinsert @ SV1681 @ SV152 @ SV1164 ) @ SV713 @ ( tc_fun @ SV1164 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV152 @ SV713 @ ( tc_fun @ SV1164 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4400]) ).
thf(4684,plain,
! [SV1784: $i,SV162: $i,SV1682: $i,SV722: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ SV1682 @ SV162 ) @ SV1784 @ SV162 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV722 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1682 @ SV1784 @ SV162 ) @ SV162 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV162 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4402]) ).
thf(4685,plain,
! [SV163: $i,SV1785: $i,SV1683: $i,SV723: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1683 @ SV1785 @ SV163 ) @ SV163 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1683 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV723 @ SV1785 @ SV163 ) @ SV163 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV163 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4403]) ).
thf(4686,plain,
! [SV165: $i,SV1786: $i,SV1684: $i,SV725: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1684 @ SV1786 @ SV165 ) @ SV165 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV1684 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV725 @ SV1786 @ SV165 ) @ SV165 ) )
= $true )
| ( ( class_Lattices_Olattice @ SV165 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4404]) ).
thf(4687,plain,
! [SV1787: $i,SV166: $i,SV1685: $i,SV726: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ SV1685 @ SV166 ) @ SV1787 @ SV166 )
= ( c_Lattices_Oupper__semilattice__class_Osup @ SV726 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1685 @ SV1787 @ SV166 ) @ SV166 ) )
= $true )
| ( ( class_Lattices_Olattice @ SV166 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4405]) ).
thf(4688,plain,
! [SV169: $i,SV1169: $i,SV1468: $i,SV729: $i] :
( ( ( ~ ( c_lessequals @ SV729 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ SV169 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV169 @ SV729 @ ( tc_fun @ SV1169 @ tc_bool ) ) @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4406]) ).
thf(4689,plain,
! [SV172: $i,SV1172: $i,SV1469: $i,SV732: $i] :
( ( ( ~ ( c_lessequals @ SV732 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ SV172 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV172 @ SV732 @ ( tc_fun @ SV1172 @ tc_bool ) ) @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4407]) ).
thf(4690,plain,
! [SV1788: $i,SV173: $i,SV1686: $i,SV733: $i] :
( ( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV733 @ SV1686 @ SV173 ) @ SV1788 @ SV173 )
| ~ ( c_lessequals @ SV1686 @ SV1788 @ SV173 )
| ~ ( c_lessequals @ SV733 @ SV1788 @ SV173 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV173 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4408]) ).
thf(4691,plain,
! [SV1789: $i,SV176: $i,SV1689: $i,SV734: $i] :
( ( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV734 @ SV1689 @ SV176 ) @ SV1789 @ SV176 )
| ~ ( c_lessequals @ SV1689 @ SV1789 @ SV176 )
| ~ ( c_lessequals @ SV734 @ SV1789 @ SV176 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV176 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4411]) ).
thf(4692,plain,
! [SV1790: $i,SV177: $i,SV1690: $i,SV735: $i] :
( ( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV735 @ SV1690 @ SV177 ) @ SV1790 @ SV177 )
| ~ ( c_lessequals @ SV1690 @ SV1790 @ SV177 )
| ~ ( c_lessequals @ SV735 @ SV1790 @ SV177 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV177 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4412]) ).
thf(4693,plain,
! [SV739: $i,SV1173: $i,SV1693: $i,SV185: $i] :
( ( ( c_lessequals @ ( c_Set_Oinsert @ SV185 @ SV1693 @ SV1173 ) @ SV739 @ ( tc_fun @ SV1173 @ tc_bool ) )
= $false )
| ( ( c_in @ SV185 @ SV739 @ SV1173 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4415]) ).
thf(4694,plain,
! [SV740: $i,SV1476: $i,SV1174: $i,SV186: $i] :
( ( ( ~ ( c_lessequals @ SV186 @ SV1174 @ ( tc_fun @ SV1476 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV740 @ SV186 @ SV1476 )
= $true )
| ( ( c_lessequals @ SV186 @ ( c_Set_Oinsert @ SV740 @ SV1174 @ SV1476 ) @ ( tc_fun @ SV1476 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4416]) ).
thf(4695,plain,
! [SV741: $i,SV1175: $i,SV187: $i,SV1694: $i] :
( ( ( c_in @ SV1694 @ SV187 @ SV1175 )
= $true )
| ( ( ~ ( c_lessequals @ SV187 @ ( c_Set_Oinsert @ SV1694 @ SV741 @ SV1175 ) @ ( tc_fun @ SV1175 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ SV187 @ SV741 @ ( tc_fun @ SV1175 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4417]) ).
thf(4696,plain,
! [SV742: $i,SV1477: $i,SV1176: $i,SV188: $i] :
( ( ( ~ ( c_lessequals @ SV188 @ SV1176 @ ( tc_fun @ SV1477 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV742 @ SV188 @ SV1477 )
= $true )
| ( ( c_lessequals @ SV188 @ ( c_Set_Oinsert @ SV742 @ SV1176 @ SV1477 ) @ ( tc_fun @ SV1477 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4418]) ).
thf(4697,plain,
! [SV1177: $i,SV743: $i,SV1695: $i,SV189: $i] :
( ( ( ~ ( c_lessequals @ SV189 @ ( c_Set_Oinsert @ SV1695 @ SV743 @ SV1177 ) @ ( tc_fun @ SV1177 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV1695 @ SV189 @ SV1177 )
= $true )
| ( ( c_lessequals @ SV189 @ SV743 @ ( tc_fun @ SV1177 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4419]) ).
thf(4698,plain,
! [SV205: $i,SV1791: $i,SV1181: $i,SV750: $i] :
( ( ( ( c_lessequals @ ( hAPP @ SV750 @ SV1181 ) @ ( hAPP @ SV1791 @ SV1181 ) @ SV205 )
| ! [SY4485: $i] :
~ ( c_lessequals @ SV750 @ SV1791 @ ( tc_fun @ SY4485 @ SV205 ) ) )
= $true )
| ( ( class_HOL_Oord @ SV205 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4424]) ).
thf(4699,plain,
! [SV206: $i,SV1700: $i,SV1487: $i] :
( ( ( c_lessequals @ SV1487 @ ( c_HOL_Ouminus__class_Ouminus @ SV1700 @ SV206 ) @ SV206 )
= $true )
| ( ( ~ ( c_lessequals @ SV1700 @ ( c_HOL_Ouminus__class_Ouminus @ SV1487 @ SV206 ) @ SV206 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV206 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4425]) ).
thf(4700,plain,
! [SV207: $i,SV1701: $i,SV1488: $i] :
( ( ( c_lessequals @ SV1488 @ ( c_HOL_Ouminus__class_Ouminus @ SV1701 @ SV207 ) @ SV207 )
= $true )
| ( ( ~ ( c_lessequals @ SV1701 @ ( c_HOL_Ouminus__class_Ouminus @ SV1488 @ SV207 ) @ SV207 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV207 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4426]) ).
thf(4701,plain,
! [SV1702: $i,SV208: $i,SV1489: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1489 @ SV208 ) @ SV1702 @ SV208 )
= $true )
| ( ( ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1702 @ SV208 ) @ SV1489 @ SV208 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV208 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4427]) ).
thf(4702,plain,
! [SV1703: $i,SV209: $i,SV1490: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1490 @ SV209 ) @ SV1703 @ SV209 )
= $true )
| ( ( ~ ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1703 @ SV209 ) @ SV1490 @ SV209 ) )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV209 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4428]) ).
thf(4703,plain,
! [SV751: $i,SV1182: $i,SV1704: $i,SV210: $i] :
( ( ( ~ ( c_in @ SV210 @ SV1704 @ SV1182 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1704 @ SV751 @ ( tc_fun @ SV1182 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV210 @ SV751 @ SV1182 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4429]) ).
thf(4704,plain,
! [SV211: $i,SV1183: $i,SV752: $i,SV1705: $i] :
( ( ( ~ ( c_lessequals @ SV1705 @ SV752 @ ( tc_fun @ SV1183 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV211 @ SV1705 @ SV1183 ) )
= $true )
| ( ( c_in @ SV211 @ SV752 @ SV1183 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4430]) ).
thf(4705,plain,
! [SV753: $i,SV1184: $i,SV1706: $i,SV212: $i] :
( ( ( ~ ( c_in @ SV212 @ SV1706 @ SV1184 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1706 @ SV753 @ ( tc_fun @ SV1184 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV212 @ SV753 @ SV1184 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4431]) ).
thf(4706,plain,
! [SV754: $i,SV1185: $i,SV1707: $i,SV213: $i] :
( ( ( ~ ( c_in @ SV213 @ SV1707 @ SV1185 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1707 @ SV754 @ ( tc_fun @ SV1185 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV213 @ SV754 @ SV1185 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4432]) ).
thf(4707,plain,
! [SV1186: $i,SV1491: $i,SV755: $i,SV214: $i] :
( ( ( c_in @ SV214 @ SV755 @ SV1491 )
= $false )
| ( ( c_in @ SV214 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV755 @ SV1186 @ ( tc_fun @ SV1491 @ tc_bool ) ) @ SV1491 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4433]) ).
thf(4708,plain,
! [SV756: $i,SV1492: $i,SV1187: $i,SV215: $i] :
( ( ( c_in @ SV215 @ SV1187 @ SV1492 )
= $false )
| ( ( c_in @ SV215 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV756 @ SV1187 @ ( tc_fun @ SV1492 @ tc_bool ) ) @ SV1492 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4434]) ).
thf(4709,plain,
! [SV757: $i,SV1188: $i,SV1708: $i,SV216: $i] :
( ( ( c_in @ SV216 @ SV1708 @ SV1188 )
= $true )
| ( ( ~ ( c_in @ SV216 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1708 @ SV757 @ ( tc_fun @ SV1188 @ tc_bool ) ) @ SV1188 ) )
= $true )
| ( ( c_in @ SV216 @ SV757 @ SV1188 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4435]) ).
thf(4710,plain,
! [SV1190: $i,SV759: $i,SV218: $i] :
( ( ( c_in @ SV218 @ ( c_HOL_Ouminus__class_Ouminus @ SV759 @ ( tc_fun @ SV1190 @ tc_bool ) ) @ SV1190 )
= $false )
| ( ( c_in @ SV218 @ SV759 @ SV1190 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4436]) ).
thf(4711,plain,
! [SV774: $i,SV235: $i,SV1792: $i,SV1709: $i] :
( ( ( ( ( c_Message_Oanalz @ SV1709 )
!= ( c_Message_Oanalz @ SV1792 ) )
| ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1709 @ SV235 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1792 @ SV774 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) )
= $true )
| ( ( ( c_Message_Oanalz @ SV235 )
= ( c_Message_Oanalz @ SV774 ) )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4437]) ).
thf(4712,plain,
! [SV780: $i,SV242: $i,SV1195: $i,SV1710: $i] :
( ( ( ~ ( c_in @ SV1710 @ ( c_Message_Oparts @ SV1195 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1710 @ SV780 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV780 @ SV1195 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4438]) ).
thf(4713,plain,
! [SV243: $i,SV781: $i,SV1493: $i] :
( ( ( c_lessequals @ SV1493 @ SV781 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV243 @ ( c_Message_Oanalz @ SV1493 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV243 @ SV781 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SV781 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4439]) ).
thf(4714,plain,
! [SV1712: $i,SV1497: $i,SV1200: $i,SV788: $i,SV250: $i] :
( ( ( ~ ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( ~ ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4414: $i,SY4415: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SV1497 @ ( c_Message_Omsg_OMPair @ SV1712 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4414 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY4415 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4441]) ).
thf(4715,plain,
! [SV1501: $i,SV1203: $i,SV791: $i,SV254: $i] :
( ( ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( ~ ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4264: $i,SY4265: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SV1501 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4264 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY4265 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4443]) ).
thf(4716,plain,
! [SV255: $i,SV792: $i] :
( ( ( c_in @ SV792 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ~ ( c_in @ SV255 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV255 ) @ ( c_Event_Oused @ SV792 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV255 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV792 ) ) ) @ tc_nat )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4444]) ).
thf(4717,plain,
! [SV795: $i,SV1713: $i,SV258: $i,SV1502: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV1502 ) @ SV258 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1713 ) @ SV795 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
= $false )
| ( ( c_in @ SV258 @ SV795 @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4447]) ).
thf(4718,plain,
! [SV798: $i,SV1208: $i,SV261: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ SV1208 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV261 @ SV798 @ tc_nat ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV798 @ tc_nat @ tc_Message_Omsg ) @ SV1208 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4449]) ).
thf(4719,plain,
! [SV1209: $i,SV799: $i,SV262: $i] :
( ( ( c_in @ SV262 @ SV799 @ tc_nat )
= $false )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ SV1209 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV799 @ tc_nat @ tc_Message_Omsg ) @ SV1209 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4450]) ).
thf(4720,plain,
! [SV1210: $i,SV800: $i,SV263: $i] :
( ( ( c_in @ SV263 @ SV800 @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SV1210 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV263 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV800 @ tc_nat @ tc_Message_Omsg ) @ SV1210 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4451]) ).
thf(4721,plain,
! [SV1503: $i,SV801: $i,SV264: $i] :
( ( ( c_in @ SV264 @ SV801 @ tc_nat )
= $false )
| ( ( ~ ( c_in @ SV264 @ SV801 @ tc_nat ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV264 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV801 @ tc_nat @ tc_Message_Omsg ) @ SV1503 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4452]) ).
thf(4722,plain,
! [SV802: $i,SV1504: $i,SV265: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1504 @ SV802 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( ! [SY4267: $i] :
( ~ ( c_lessequals @ SY4267 @ SV802 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV1504 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY4267 ) ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SV802 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4453]) ).
thf(4723,plain,
! [SV803: $i,SV1211: $i,SV266: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SV1211 ) @ tc_Message_Omsg )
= $false )
| ( ( ! [SY3984: $i] :
( ~ ( c_lessequals @ SY3984 @ SV1211 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV803 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SY3984 ) ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV803 @ SV1211 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4454]) ).
thf(4724,plain,
! [SV267: $i,SV804: $i,SV1505: $i] :
( ( ( c_in @ SV1505 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV267 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1505 @ SV804 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ ( c_Message_Oparts @ SV804 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4455]) ).
thf(4725,plain,
! [SV1506: $i,SV1212: $i,SV805: $i,SV268: $i] :
( ( ( c_NS__Shared__Mirabelle_OIssues @ SV268 @ SV805 @ SV1212 @ SV1506 )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV268 @ SV805 @ ( v_sko__NS__Shared__Mirabelle__XIssues__def__1 @ SV268 @ SV805 @ SV1212 @ SV1506 ) ) @ ( c_List_Oset @ SV1506 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4456]) ).
thf(4726,plain,
! [SV1714: $i,SV806: $i,SV1507: $i,SV270: $i] :
( ( ( c_in @ ( hAPP @ c_Message_OinvKey @ ( hAPP @ ( c_Public_OpublicKey @ SV270 ) @ SV1507 ) ) @ ( c_Set_Oimage @ c_Message_OinvKey @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV806 ) @ SV1714 @ tc_Message_Oagent @ tc_nat ) @ tc_nat @ tc_nat ) @ tc_nat )
= $false )
| ( ( SV270 = SV806 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4457]) ).
thf(4727,plain,
! [SV1215: $i,SV273: $i] :
( ( ( c_in @ SV273 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1215 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SV1215 ) @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__2 @ SV273 @ SV1215 ) @ SV273 ) @ ( c_List_Oset @ SV1215 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ ( c_Event_Osko__Event__Xknows__Spy__imp__Says__Notes__initState__1__1 @ SV273 @ SV1215 ) @ SV273 ) @ ( c_List_Oset @ SV1215 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV273 @ ( c_Event_OinitState @ c_Message_Oagent_OSpy ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4459]) ).
thf(4728,plain,
! [SV810: $i,SV1509: $i,SV275: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1509 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1509 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV810 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV275 @ SV1509 @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4460]) ).
thf(4729,plain,
! [SV1217: $i,SV811: $i,SV276: $i] :
( ( ( c_in @ SV276 @ SV811 @ tc_nat )
= $false )
| ( ( ~ ( c_lessequals @ SV811 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV1217 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV276 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV811 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1217 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4461]) ).
thf(4730,plain,
! [SV813: $i,SV1793: $i,SV278: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV278 @ SV1793 ) @ SV813 @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV278 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ SV278 @ ( c_Message_OkeysFor @ SV813 ) @ tc_nat )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4462]) ).
thf(4731,plain,
! [SV814: $i,SV1219: $i,SV280: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV814 @ tc_nat @ tc_Message_Omsg ) @ SV1219 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4463]) ).
thf(4732,plain,
! [SV815: $i,SV1220: $i,SV281: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ SV1220 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SV1220 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV281 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV815 @ tc_nat @ tc_Message_Omsg ) @ SV1220 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4464]) ).
thf(4733,plain,
! [SV1512: $i,SV283: $i,SV817: $i,SV1794: $i] :
( ( ( ~ ( c_in @ SV1794 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV817 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1794 @ SV1512 @ tc_Message_Omsg ) ) ) @ tc_nat ) )
= $true )
| ( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1512 @ SV817 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV283 ) ) @ ( c_Message_Oparts @ SV817 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4466]) ).
thf(4734,plain,
! [SV1221: $i,SV819: $i,SV285: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1221 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV285 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1221 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV285 @ SV819 ) ) @ ( c_Message_Oanalz @ SV1221 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4467]) ).
thf(4735,plain,
! [SV1222: $i,SV820: $i,SV286: $i] :
( ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Oanalz @ SV1222 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV286 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1222 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OHash @ ( c_Message_Omsg_OMPair @ SV286 @ SV820 ) ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1222 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4468]) ).
thf(4736,plain,
! [SV821: $i,SV1223: $i,SV287: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_lessequals @ SV821 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV1223 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV821 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4469]) ).
thf(4737,plain,
! [SV1715: $i,SV1513: $i,SV1224: $i,SV822: $i,SV288: $i] :
( ( ( hBOOL @ ( hAPP @ SV288 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ ( c_List_Oappend @ SV822 @ ( c_List_Olist_OCons @ SV1224 @ SV1513 @ SV1715 ) @ SV1715 ) @ SV1715 ) ) )
= $true )
| ( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ SV822 @ SV1715 ) @ ( c_List_Oset @ SV822 @ SV1715 ) @ SV1715 )
| ~ ( hBOOL @ ( hAPP @ SV288 @ SV1224 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4470]) ).
thf(4738,plain,
! [SV1716: $i,SV1514: $i,SV1225: $i,SV823: $i,SV289: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SV1716 ) @ SV1716 ) @ SV1716 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SV1716 ) @ SV1716 ) @ SV1716 ) @ SV1716 )
= $true )
| ( ( ( hBOOL @ ( hAPP @ SV289 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ SV1514 @ SV1716 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV289 @ SV1225 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4471]) ).
thf(4739,plain,
! [SV1717: $i,SV1515: $i,SV1226: $i,SV824: $i,SV290: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SV1717 ) @ SV1717 ) @ SV1717 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SV1717 ) @ SV1717 ) @ SV1717 ) @ SV1717 )
= $true )
| ( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ SV824 @ SV1717 ) @ ( c_List_Oset @ SV824 @ SV1717 ) @ SV1717 )
| ~ ( hBOOL @ ( hAPP @ SV290 @ SV1226 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4472]) ).
thf(4740,plain,
! [SV1718: $i,SV1516: $i,SV1227: $i,SV825: $i,SV291: $i] :
( ( ( hBOOL @ ( hAPP @ SV291 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ ( c_List_Oappend @ SV825 @ ( c_List_Olist_OCons @ SV1227 @ SV1516 @ SV1718 ) @ SV1718 ) @ SV1718 ) ) )
= $true )
| ( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ SV1516 @ SV1718 ) @ ( c_List_Oset @ SV1516 @ SV1718 ) @ SV1718 )
| ~ ( hBOOL @ ( hAPP @ SV291 @ SV1227 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4473]) ).
thf(4741,plain,
! [SV1719: $i,SV1517: $i,SV1228: $i,SV826: $i,SV292: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SV1719 ) @ SV1719 ) @ SV1719 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SV1719 ) @ SV1719 ) @ SV1719 ) @ SV1719 )
= $true )
| ( ( ( hBOOL @ ( hAPP @ SV292 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ SV826 @ SV1719 ) ) )
| ~ ( hBOOL @ ( hAPP @ SV292 @ SV1228 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4474]) ).
thf(4742,plain,
! [SV1720: $i,SV1518: $i,SV1229: $i,SV827: $i,SV293: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SV1720 ) @ SV1720 ) @ SV1720 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SV1720 ) @ SV1720 ) @ SV1720 ) @ SV1720 )
= $true )
| ( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ SV1518 @ SV1720 ) @ ( c_List_Oset @ SV1518 @ SV1720 ) @ SV1720 )
| ~ ( hBOOL @ ( hAPP @ SV293 @ SV1229 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4475]) ).
thf(4743,plain,
! [SV837: $i,SV1236: $i,SV303: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ( c_in @ SV837 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV1236 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV837 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4478]) ).
thf(4744,plain,
! [SV838: $i,SV1524: $i,SV304: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV1524 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ( c_in @ SV1524 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV838 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( SV304 = SV1524 )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4479]) ).
thf(4745,plain,
! [SV315: $i,SV848: $i,SV1528: $i] :
( ( ( c_in @ SV1528 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV315 @ ( c_Message_Osynth @ ( c_Set_Oinsert @ SV1528 @ SV848 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV315 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4481]) ).
thf(4746,plain,
! [SV317: $i,SV850: $i,SV1529: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1529 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV1529 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1529 @ SV317 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV317 @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4482]) ).
thf(4747,plain,
! [SV321: $i,SV854: $i,SV1531: $i] :
( ( ( c_in @ SV1531 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV321 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1531 @ SV854 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV321 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4483]) ).
thf(4748,plain,
! [SV1722: $i,SV1533: $i,SV1251: $i,SV862: $i,SV329: $i] :
( ( ( ( c_List_Oappend @ SV329 @ ( c_List_Olist_OCons @ SV862 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 )
!= ( c_List_Oappend @ SV1533 @ ( c_List_Olist_OCons @ SV1722 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 ) )
= $true )
| ( ( SV862 = SV1722 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4487]) ).
thf(4749,plain,
! [SV1795: $i,SV1534: $i,SV1252: $i,SV863: $i,SV330: $i] :
( ( ( ( c_List_Oappend @ SV330 @ ( c_List_Olist_OCons @ SV863 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 )
!= ( c_List_Oappend @ SV1534 @ ( c_List_Olist_OCons @ SV1795 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 ) )
= $true )
| ( ( SV330 = SV1534 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4488]) ).
thf(4750,plain,
! [SV1796: $i,SV1536: $i,SV1256: $i,SV867: $i,SV334: $i] :
( ( ( ( c_Set_Oinsert @ ( hAPP @ SV334 @ SV867 ) @ ( c_Set_Oimage @ SV334 @ SV1256 @ SV1536 @ SV1796 ) @ SV1796 )
= ( c_Set_Oimage @ SV334 @ SV1256 @ SV1536 @ SV1796 ) )
= $true )
| ( ( ~ ( c_in @ SV867 @ SV1256 @ SV1536 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4489]) ).
thf(4751,plain,
! [SV877: $i,SV1797: $i,SV348: $i,SV1542: $i] :
( ( ( ~ ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV1542 @ SV348 @ SV1797 ) @ SV877 ) ) )
= $true )
| ( ( SV1542 = SV877 )
= $true )
| ( ( hBOOL @ ( hAPP @ SV348 @ SV877 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4491]) ).
thf(4752,plain,
! [SV881: $i,SV1724: $i,SV352: $i,SV1544: $i] :
( ( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV1544 ) @ SV352 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV1724 ) @ SV881 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( c_in @ SV352 @ SV881 @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4494]) ).
thf(4753,plain,
! [SV1725: $i,SV882: $i,SV1545: $i,SV353: $i] :
( ( ( c_in @ ( hAPP @ ( c_Public_OpublicKey @ SV353 ) @ SV1545 ) @ ( c_Set_Oimage @ ( c_Public_OpublicKey @ SV882 ) @ SV1725 @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( SV353 = SV882 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4495]) ).
thf(4754,plain,
! [SV1546: $i,SV1267: $i,SV883: $i,SV354: $i] :
( ( ( ( c_List_Oappend @ SV354 @ SV883 @ SV1267 )
= ( c_List_Oappend @ SV354 @ SV1546 @ SV1267 ) )
= $false )
| ( ( SV883 = SV1546 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4496]) ).
thf(4755,plain,
! [SV1547: $i,SV1268: $i,SV884: $i,SV355: $i] :
( ( ( ( c_List_Oappend @ SV355 @ SV884 @ SV1268 )
= ( c_List_Oappend @ SV1547 @ SV884 @ SV1268 ) )
= $false )
| ( ( SV355 = SV1547 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4497]) ).
thf(4756,plain,
! [SV1273: $i,SV360: $i,SV1551: $i,SV889: $i] :
( ( ( hBOOL @ ( hAPP @ SV889 @ SV1551 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV360 @ SV889 @ SV1273 ) @ SV1551 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4498]) ).
thf(4757,plain,
! [SV895: $i,SV1556: $i,SV1278: $i,SV367: $i] :
( ( ( c_in @ SV367 @ SV1278 @ SV1556 )
= $false )
| ( ( c_in @ SV367 @ ( c_Set_Oinsert @ SV895 @ SV1278 @ SV1556 ) @ SV1556 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4500]) ).
thf(4758,plain,
! [SV896: $i,SV1557: $i,SV1279: $i,SV368: $i] :
( ( ( c_in @ SV368 @ SV1279 @ SV1557 )
= $false )
| ( ( c_in @ SV368 @ ( c_Set_Oinsert @ SV896 @ SV1279 @ SV1557 ) @ SV1557 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4501]) ).
thf(4759,plain,
! [SV1280: $i,SV897: $i,SV1727: $i,SV369: $i] :
( ( ( SV369 = SV1727 )
= $true )
| ( ( ~ ( c_in @ SV369 @ ( c_Set_Oinsert @ SV1727 @ SV897 @ SV1280 ) @ SV1280 ) )
= $true )
| ( ( c_in @ SV369 @ SV897 @ SV1280 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4502]) ).
thf(4760,plain,
! [SV1558: $i,SV1284: $i,SV902: $i,SV374: $i] :
( ( ( ( c_Set_Oinsert @ SV374 @ SV902 @ SV1284 )
= ( c_Set_Oinsert @ SV374 @ SV1558 @ SV1284 ) )
= $false )
| ( ( ( c_in @ SV374 @ SV1558 @ SV1284 )
| ( SV902 = SV1558 )
| ( c_in @ SV374 @ SV902 @ SV1284 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4503]) ).
thf(4761,plain,
! [SV1729: $i,SV1560: $i,SV1295: $i,SV922: $i,SV396: $i] :
( ( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4416: $i,SY4417: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SV1729 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1729 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4416 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4417 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4515]) ).
thf(4762,plain,
! [SV1798: $i,SV1730: $i,SV1561: $i,SV1297: $i,SV924: $i,SV398: $i] :
( ( ! [SY4486: $i] :
( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
| ! [SY4487: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4486 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SY4487 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4421: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4421 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4516]) ).
thf(4763,plain,
! [SV1799: $i,SV1731: $i,SV1562: $i,SV1298: $i,SV925: $i,SV399: $i] :
( ( ! [SY4489: $i] :
( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4490: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4489 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SY4490 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4425: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4425 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4517]) ).
thf(4764,plain,
! [SV1732: $i,SV1564: $i,SV1300: $i,SV926: $i,SV401: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SV1732 @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4426: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4426 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SV1732 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SV1732 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1732 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4519]) ).
thf(4765,plain,
! [SV1733: $i,SV1565: $i,SV1301: $i,SV927: $i,SV402: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SV1733 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4427: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4427 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SV1733 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SV1733 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1733 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4520]) ).
thf(4766,plain,
! [SV1734: $i,SV1566: $i,SV1302: $i,SV928: $i,SV403: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SV1734 @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4428: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4428 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SV1734 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SV1734 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1734 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4521]) ).
thf(4767,plain,
! [SV1735: $i,SV1568: $i,SV1303: $i,SV930: $i,SV405: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SV1735 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4429: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4429 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SV1735 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SV1735 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1735 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4522]) ).
thf(4768,plain,
! [SV1569: $i,SV406: $i,SV931: $i] :
( ( ( c_in @ ( c_Event_Oevent_OGets @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ( c_in @ ( c_Event_Oevent_OSays @ SV931 @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ SV931 @ SV406 @ SV1569 ) @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV931 = c_Message_Oagent_OSpy )
| ~ ( c_in @ SV406 @ ( c_Event_Oknows @ SV931 @ SV1569 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV406 @ ( c_Event_OinitState @ SV931 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4523]) ).
thf(4769,plain,
! [SV1736: $i,SV1570: $i,SV1304: $i,SV932: $i,SV407: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4430: $i,SY4431: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SY4430 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4431 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4524]) ).
thf(4770,plain,
! [SV933: $i,SV408: $i,SV1305: $i] :
( ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4072: $i] :
( ( c_in @ SY4072 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4073: $i] :
( ( c_in @ SY4073 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4073 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4073 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY4073 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4525]) ).
thf(4771,plain,
! [SV1737: $i,SV1572: $i,SV1307: $i,SV936: $i,SV411: $i] :
( ( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ ( c_Message_Omsg_OAgent @ SV1572 ) ) ) )
= $true )
| ( ( ~ ( c_in @ SV1737 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4432: $i,SY4433: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1572 @ ( c_Message_Omsg_OCrypt @ SY4432 @ ( c_Message_Omsg_OMPair @ SY4433 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SV1737 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4527]) ).
thf(4772,plain,
! [SV1800: $i,SV1738: $i,SV1573: $i,SV1308: $i,SV937: $i,SV412: $i] :
( ( ! [SY4492: $i,SY4493: $i] :
( ( SV412 = SV937 )
| ~ ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4492 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4083: $i,SY4084: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4493 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4493 ) @ ( c_Message_Omsg_OMPair @ SY4083 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4084 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4492 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4528]) ).
thf(4773,plain,
! [SV1801: $i,SV1739: $i,SV1574: $i,SV1309: $i,SV938: $i,SV413: $i] :
( ( ! [SY4496: $i,SY4497: $i] :
( ( SV413 = SV938 )
| ~ ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4496 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4498: $i,SY4499: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4497 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4497 ) @ ( c_Message_Omsg_OMPair @ SY4498 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4499 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4529]) ).
thf(4774,plain,
! [SV1802: $i,SV1740: $i,SV1575: $i,SV1310: $i,SV939: $i,SV414: $i] :
( ( ! [SY4500: $i,SY4501: $i] :
( ( SV414 = SV939 )
| ~ ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4500 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4502: $i,SY4503: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4501 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4502 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4503 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4530]) ).
thf(4775,plain,
! [SV1803: $i,SV1741: $i,SV1576: $i,SV1311: $i,SV940: $i,SV415: $i] :
( ( ! [SY4504: $i,SY4505: $i] :
( ( SV415 = SV940 )
| ~ ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4504 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4506: $i,SY4507: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SY4505 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4507 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4531]) ).
thf(4776,plain,
! [SV1742: $i,SV1577: $i,SV1312: $i,SV941: $i,SV416: $i] :
( ( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
= $true )
| ( ( ~ ( c_in @ SV1312 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4454: $i,SY4455: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SV1577 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1742 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4454 ) @ SY4455 ) ) ) ) ) @ ( c_List_Oset @ SV1312 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4532]) ).
thf(4777,plain,
! [SV1743: $i,SV1578: $i,SV1313: $i,SV942: $i,SV417: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4456: $i] :
( ! [SY4457: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1743 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1743 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4456 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SY4457 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY4456 @ SV1743 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4533]) ).
thf(4778,plain,
! [SV1744: $i,SV1579: $i,SV1314: $i,SV943: $i,SV419: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4458: $i,SY4459: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4458 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4459 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4534]) ).
thf(4779,plain,
! [SV1745: $i,SV1581: $i,SV1316: $i,SV944: $i,SV421: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4460: $i] :
( ! [SY4461: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1745 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1745 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4460 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SY4461 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SY4460 @ SV1745 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4535]) ).
thf(4780,plain,
! [SV945: $i,SV1804: $i,SV1746: $i,SV422: $i] :
( ( ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OGets @ SV1746 @ SV1804 ) @ SV945 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV422 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV945 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4536]) ).
thf(4781,plain,
! [SV946: $i,SV1805: $i,SV1747: $i,SV423: $i] :
( ( ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ SV1747 @ SV1805 ) @ SV946 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV423 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV946 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4537]) ).
thf(4782,plain,
! [SV952: $i,SV431: $i,SV1582: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1582 @ SV431 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1582 ) ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1582 ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4538]) ).
thf(4783,plain,
! [SV432: $i,SV1317: $i,SV953: $i] :
( ( ( c_in @ SV953 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV432 ) ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg )
| ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV432 ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV432 @ SV953 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4539]) ).
thf(4784,plain,
! [SV956: $i,SV435: $i,SV1583: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1583 @ SV435 ) @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1583 @ SV435 ) @ SV956 @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV435 @ ( c_Message_Osynth @ SV956 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4540]) ).
thf(4785,plain,
! [SV957: $i,SV1584: $i,SV436: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SV1584 ) @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OMPair @ SV436 @ SV1584 ) @ SV957 @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV436 @ ( c_Message_Osynth @ SV957 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4541]) ).
thf(4786,plain,
! [SV958: $i,SV437: $i,SV1585: $i] :
( ( ( c_in @ ( c_Message_Omsg_OMPair @ SV1585 @ SV437 ) @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OMPair @ SV1585 @ SV437 ) @ SV958 @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV437 @ ( c_Message_Osynth @ SV958 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4542]) ).
thf(4787,plain,
! [SV438: $i,SV1318: $i,SV959: $i] :
( ( ( c_in @ SV959 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV438 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OMPair @ SV438 @ SV959 ) @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4543]) ).
thf(4788,plain,
! [SV1319: $i,SV962: $i,SV1748: $i,SV441: $i] :
( ( ( SV441 = SV1748 )
= $true )
| ( ( ~ ( c_in @ SV441 @ ( c_List_Oset @ ( c_List_Olist_OCons @ SV1748 @ SV962 @ SV1319 ) @ SV1319 ) @ SV1319 ) )
= $true )
| ( ( c_in @ SV441 @ ( c_List_Oset @ SV962 @ SV1319 ) @ SV1319 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4546]) ).
thf(4789,plain,
! [SV442: $i,SV1320: $i,SV963: $i] :
( ( ( c_in @ SV963 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1320 ) ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1320 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV442 @ SV963 ) @ SV1320 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4547]) ).
thf(4790,plain,
! [SV444: $i,SV1321: $i,SV965: $i] :
( ( ( c_in @ SV965 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1321 ) ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV1321 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV444 @ SV965 ) @ SV1321 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4549]) ).
thf(4791,plain,
! [SV966: $i,SV445: $i,SV1589: $i,SV1322: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1322 ) @ ( c_Event_Oused @ SV1589 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1589 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV445 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV445 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV966 ) @ ( c_Message_Omsg_ONonce @ SV1322 ) ) ) ) @ SV1589 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4550]) ).
thf(4792,plain,
! [SV1749: $i,SV1590: $i,SV1325: $i,SV969: $i,SV449: $i] :
( ( ( c_Event_Oevent_ONotes @ SV449 @ SV969 )
= ( c_Event_Oevent_OSays @ SV1325 @ SV1590 @ SV1749 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4551]) ).
thf(4793,plain,
! [SV1750: $i,SV1591: $i,SV1326: $i,SV970: $i,SV450: $i] :
( ( ( c_Event_Oevent_OGets @ SV450 @ SV970 )
= ( c_Event_Oevent_OSays @ SV1326 @ SV1591 @ SV1750 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4552]) ).
thf(4794,plain,
! [SV1751: $i,SV1592: $i,SV1327: $i,SV971: $i,SV451: $i] :
( ( ( c_Event_Oevent_OSays @ SV451 @ SV971 @ SV1327 )
= ( c_Event_Oevent_ONotes @ SV1592 @ SV1751 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4553]) ).
thf(4795,plain,
! [SV1752: $i,SV1593: $i,SV1328: $i,SV972: $i,SV452: $i] :
( ( ( c_Event_Oevent_OSays @ SV452 @ SV972 @ SV1328 )
= ( c_Event_Oevent_OGets @ SV1593 @ SV1752 ) )
= $false ),
inference(extcnf_not_pos,[status(thm)],[4554]) ).
thf(4796,plain,
! [SV974: $i,SV454: $i,SV1594: $i,SV1330: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1330 ) @ ( c_Event_Oused @ SV1594 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV1594 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV454 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV454 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV974 ) @ ( c_Message_Omsg_ONonce @ SV1330 ) ) ) ) @ SV1594 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4555]) ).
thf(4797,plain,
! [SV1806: $i,SV1596: $i,SV1337: $i,SV982: $i,SV463: $i] :
( ( ( c_in @ ( hAPP @ SV463 @ SV982 ) @ ( c_Set_Oimage @ SV463 @ SV1337 @ SV1596 @ SV1806 ) @ SV1806 )
= $true )
| ( ( ~ ( c_in @ SV982 @ SV1337 @ SV1596 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4557]) ).
thf(4798,plain,
! [SV1807: $i,SV1597: $i,SV1338: $i,SV983: $i,SV464: $i] :
( ( ( c_in @ ( hAPP @ SV464 @ SV983 ) @ ( c_Set_Oimage @ SV464 @ SV1338 @ SV1597 @ SV1807 ) @ SV1807 )
= $true )
| ( ( ~ ( c_in @ SV983 @ SV1338 @ SV1597 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4558]) ).
thf(4799,plain,
! [SV1339: $i,SV984: $i,SV465: $i,SV1808: $i] :
( ( ( ! [SY4508: $i] : ( c_in @ ( hAPP @ SV1808 @ SV465 ) @ ( c_Set_Oimage @ SV1808 @ SV984 @ SV1339 @ SY4508 ) @ SY4508 ) )
= $true )
| ( ( c_in @ SV465 @ SV984 @ SV1339 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4559]) ).
thf(4800,plain,
! [SV1340: $i,SV985: $i,SV466: $i,SV1809: $i] :
( ( ( ! [SY4509: $i] : ( c_in @ ( hAPP @ SV1809 @ SV466 ) @ ( c_Set_Oimage @ SV1809 @ SV985 @ SV1340 @ SY4509 ) @ SY4509 ) )
= $true )
| ( ( c_in @ SV466 @ SV985 @ SV1340 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4560]) ).
thf(4801,plain,
! [SV1753: $i,SV1344: $i,SV990: $i,SV472: $i] :
( ( ( ( hAPP @ ( c_Public_OpublicKey @ SV472 ) @ SV990 )
= ( hAPP @ ( c_Public_OpublicKey @ SV1344 ) @ SV1753 ) )
= $false )
| ( ( SV472 = SV1344 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4561]) ).
thf(4802,plain,
! [SV1598: $i,SV1345: $i,SV991: $i,SV473: $i] :
( ( ( ( hAPP @ ( c_Public_OpublicKey @ SV473 ) @ SV991 )
= ( hAPP @ ( c_Public_OpublicKey @ SV1345 ) @ SV1598 ) )
= $false )
| ( ( SV991 = SV1598 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4562]) ).
thf(4803,plain,
! [SV1600: $i,SV1347: $i,SV994: $i,SV476: $i] :
( ( ( ( c_Event_Oevent_OGets @ SV476 @ SV994 )
= ( c_Event_Oevent_OGets @ SV1347 @ SV1600 ) )
= $false )
| ( ( SV994 = SV1600 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4564]) ).
thf(4804,plain,
! [SV1754: $i,SV1348: $i,SV995: $i,SV477: $i] :
( ( ( ( c_Event_Oevent_OGets @ SV477 @ SV995 )
= ( c_Event_Oevent_OGets @ SV1348 @ SV1754 ) )
= $false )
| ( ( SV477 = SV1348 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4565]) ).
thf(4805,plain,
! [SV1602: $i,SV1350: $i,SV997: $i,SV479: $i] :
( ( ( ( c_Event_Oevent_ONotes @ SV479 @ SV997 )
= ( c_Event_Oevent_ONotes @ SV1350 @ SV1602 ) )
= $false )
| ( ( SV997 = SV1602 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4567]) ).
thf(4806,plain,
! [SV1755: $i,SV1351: $i,SV998: $i,SV480: $i] :
( ( ( ( c_Event_Oevent_ONotes @ SV480 @ SV998 )
= ( c_Event_Oevent_ONotes @ SV1351 @ SV1755 ) )
= $false )
| ( ( SV480 = SV1351 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4568]) ).
thf(4807,plain,
! [SV1810: $i,SV1604: $i,SV1353: $i,SV1000: $i,SV483: $i] :
( ( ( ( c_List_Olist_OCons @ SV483 @ SV1000 @ SV1353 )
!= ( c_List_Olist_OCons @ SV1604 @ SV1810 @ SV1353 ) )
= $true )
| ( ( SV483 = SV1604 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4570]) ).
thf(4808,plain,
! [SV1756: $i,SV1605: $i,SV1354: $i,SV1001: $i,SV484: $i] :
( ( ( ( c_List_Olist_OCons @ SV484 @ SV1001 @ SV1354 )
!= ( c_List_Olist_OCons @ SV1605 @ SV1756 @ SV1354 ) )
= $true )
| ( ( SV1001 = SV1756 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4571]) ).
thf(4809,plain,
! [SV490: $i,SV1359: $i,SV1007: $i] :
( ( ( c_in @ SV1007 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV490 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OMPair @ SV490 @ SV1007 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4574]) ).
thf(4810,plain,
! [SV1361: $i,SV1009: $i,SV492: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ SV1361 @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV492 ) @ SV1361 @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV492 @ SV1009 ) @ ( c_Message_Osynth @ SV1361 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4575]) ).
thf(4811,plain,
! [SV1362: $i,SV1010: $i,SV493: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ ( c_Message_Osynth @ SV1362 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV493 ) @ SV1362 @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV493 @ SV1010 ) @ SV1362 @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4576]) ).
thf(4812,plain,
! [SV1011: $i,SV1608: $i,SV494: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SV1608 ) @ ( c_Message_Osynth @ SV1011 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV494 @ SV1608 ) @ SV1011 @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV494 ) @ SV1011 @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4577]) ).
thf(4813,plain,
! [SV1012: $i,SV1363: $i,SV495: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV495 ) @ SV1363 @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV1012 @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV495 @ SV1012 ) @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4578]) ).
thf(4814,plain,
! [SV1757: $i,SV1609: $i,SV1364: $i,SV1017: $i,SV501: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4464: $i,SY4465: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4464 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4465 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4579]) ).
thf(4815,plain,
! [SV1758: $i,SV1610: $i,SV1365: $i,SV1018: $i,SV502: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4580]) ).
thf(4816,plain,
! [SV1759: $i,SV1612: $i,SV1366: $i,SV1021: $i,SV506: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ! [SY4361: $i,SY4362: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4361 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4361 ) @ ( c_Message_Omsg_OMPair @ SY4362 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4582]) ).
thf(4817,plain,
! [SV507: $i,SV1367: $i,SV1022: $i,SV1613: $i] :
( ( ( ~ ( c_in @ SV1613 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ( c_in @ SV1022 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1613 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV507 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV507 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ SV507 @ SV1022 @ SV1367 @ SV1613 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1613 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4583]) ).
thf(4818,plain,
! [SV1760: $i,SV1614: $i,SV1368: $i,SV1023: $i,SV508: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4468: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SY4468 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4469: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4469 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4584]) ).
thf(4819,plain,
! [SV509: $i,SV1024: $i,SV1615: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1615 ) ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1615 @ SV509 ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV509 @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4585]) ).
thf(4820,plain,
! [SV512: $i,SV1027: $i] :
( ( ( c_in @ SV1027 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV512 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV512 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1027 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4586]) ).
thf(4821,plain,
! [SV513: $i,SV1370: $i] :
( ( ( c_in @ SV1370 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV513 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1370 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV513 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4587]) ).
thf(4822,plain,
! [SV515: $i,SV1372: $i] :
( ( ( c_in @ SV1372 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV515 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1372 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV515 @ c_Event_Obad @ tc_Message_Oagent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4589]) ).
thf(4823,plain,
! [SV516: $i,SV1029: $i] :
( ( ( c_in @ SV1029 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV516 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV516 ) ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1029 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4590]) ).
thf(4824,plain,
! [SV1030: $i,SV517: $i,SV1761: $i,SV1616: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1616 @ SV1761 @ SV517 ) @ ( c_List_Oset @ SV1030 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV517 @ ( c_Event_Oused @ SV1030 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4591]) ).
thf(4825,plain,
! [SV1762: $i,SV1617: $i,SV1373: $i,SV1031: $i,SV518: $i] :
( ( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) @ SV1762 )
= $true )
| ( ( ~ ( c_in @ SV1762 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1762 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) ) @ ( c_List_Oset @ SV1762 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4592]) ).
thf(4826,plain,
! [SV1763: $i,SV1618: $i,SV1374: $i,SV1032: $i,SV519: $i] :
( ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true )
| ( ( ~ ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ! [SY4470: $i,SY4471: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4470 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4471 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4593]) ).
thf(4827,plain,
! [SV1764: $i,SV1619: $i,SV1375: $i,SV1033: $i,SV520: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ! [SY4472: $i,SY4473: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SY4472 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SY4473 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4594]) ).
thf(4828,plain,
! [SV1811: $i,SV1765: $i,SV1620: $i,SV1376: $i,SV1034: $i,SV521: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) ) @ ( c_List_Oset @ SV1811 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1811 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1811 ) ) @ tc_Message_Omsg ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4595]) ).
thf(4829,plain,
! [SV1036: $i,SV1812: $i,SV1378: $i,SV523: $i] :
( ( ( ! [SY4510: $i] : ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV1378 @ SV1812 @ SY4510 ) @ SV1036 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1036 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4596]) ).
thf(4830,plain,
! [SV1379: $i,SV524: $i,SV1037: $i] :
( ( ( c_in @ ( c_Event_Oevent_OGets @ SV1037 @ SV524 ) @ ( c_List_Oset @ SV1379 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( SV1037 = c_Message_Oagent_OSpy )
= $true )
| ( ( c_in @ SV524 @ ( c_Event_Oknows @ SV1037 @ SV1379 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4597]) ).
thf(4831,plain,
! [SV1766: $i,SV1621: $i,SV1380: $i,SV1038: $i,SV525: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
| ! [SY4475: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SY4475 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4598]) ).
thf(4832,plain,
! [SV526: $i,SV1381: $i,SV1039: $i,SV1622: $i,SV1813: $i] :
( ( ( ~ ( c_in @ SV1813 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1622 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4511: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1622 ) @ ( c_Message_Omsg_OMPair @ SY4511 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1813 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ ( c_Message_Omsg_OAgent @ SV1622 ) ) ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4599]) ).
thf(4833,plain,
! [SV1767: $i,SV1623: $i,SV1382: $i,SV1040: $i,SV527: $i] :
( ( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ ( c_Message_Omsg_OAgent @ SV1767 ) ) ) )
| ~ ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4476: $i,SY4477: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4476 @ SV1767 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1767 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4477 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4600]) ).
thf(4834,plain,
! [SV1041: $i,SV528: $i,SV1624: $i] :
( ( ( c_in @ SV1624 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( ~ ( c_in @ ( c_Event_Oevent_ONotes @ SV1624 @ SV528 ) @ ( c_List_Oset @ SV1041 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV528 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1041 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4601]) ).
thf(4835,plain,
! [SV1042: $i,SV529: $i,SV1814: $i,SV1625: $i,SV1383: $i] :
( ( ( ! [SY4512: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1383 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1383 ) @ ( c_Message_Omsg_OMPair @ SV1625 @ ( c_Message_Omsg_OMPair @ SV1814 @ ( c_Message_Omsg_OMPair @ SV529 @ SY4512 ) ) ) ) ) @ ( c_List_Oset @ SV1042 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV529 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1042 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4602]) ).
thf(4836,plain,
! [SV1384: $i,SV532: $i,SV1768: $i,SV1044: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1044 @ SV1768 @ SV532 ) @ ( c_List_Oset @ SV1384 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV532 @ ( c_Event_Oknows @ SV1044 @ SV1384 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4603]) ).
thf(4837,plain,
! [SV1815: $i,SV1630: $i,SV1386: $i,SV1052: $i,SV541: $i] :
( ( ( ! [SY4513: $i] :
( ( c_Event_Oevent_OSays @ SV541 @ SV1052 @ SV1386 )
!= ( c_Event_Oevent_OSays @ SV1630 @ SV1815 @ SY4513 ) ) )
= $true )
| ( ( SV541 = SV1630 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4608]) ).
thf(4838,plain,
! [SV1769: $i,SV1631: $i,SV1387: $i,SV1053: $i,SV542: $i] :
( ( ( ! [SY4478: $i] :
( ( c_Event_Oevent_OSays @ SV542 @ SV1053 @ SV1387 )
!= ( c_Event_Oevent_OSays @ SV1631 @ SV1769 @ SY4478 ) ) )
= $true )
| ( ( SV1053 = SV1769 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4609]) ).
thf(4839,plain,
! [SV1816: $i,SV1770: $i,SV1632: $i,SV1388: $i,SV1054: $i,SV543: $i] :
( ( ( ( c_Event_Oevent_OSays @ SV543 @ SV1054 @ SV1388 )
!= ( c_Event_Oevent_OSays @ SV1632 @ SV1770 @ SV1816 ) )
| ( SV1388 = SV1816 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4610]) ).
thf(4840,plain,
! [SV1057: $i,SV546: $i,SV1771: $i,SV1633: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1633 @ SV1771 @ SV546 ) @ ( c_List_Oset @ SV1057 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV546 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1057 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4611]) ).
thf(4841,plain,
! [SV1058: $i,SV547: $i,SV1772: $i,SV1634: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1634 @ SV1772 @ SV547 ) @ ( c_List_Oset @ SV1058 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV547 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1058 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4612]) ).
thf(4842,plain,
! [SV1817: $i,SV1773: $i,SV1635: $i,SV1389: $i,SV1059: $i,SV548: $i] :
( ( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1059 ) ) @ tc_Message_Omsg )
| ! [SY4514: $i,SY4515: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1389 @ SV1635 @ ( c_Message_Omsg_OCrypt @ SV1773 @ ( c_Message_Omsg_OMPair @ SV1817 @ ( c_Message_Omsg_OMPair @ SY4514 @ ( c_Message_Omsg_OMPair @ SY4515 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SV1059 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4613]) ).
thf(4843,plain,
! [SV556: $i,SV1065: $i,SV1637: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV1637 ) ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1637 ) @ SV556 ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV556 @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4615]) ).
thf(4844,plain,
! [SV1066: $i,SV557: $i,SV1774: $i,SV1638: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1638 @ SV1774 @ SV557 ) @ ( c_List_Oset @ SV1066 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV557 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1066 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4616]) ).
thf(4845,plain,
! [SV1775: $i,SV1399: $i,SV1081: $i,SV573: $i] :
( ( ( ( c_Message_Omsg_OCrypt @ SV573 @ SV1081 )
= ( c_Message_Omsg_OCrypt @ SV1399 @ SV1775 ) )
= $false )
| ( ( SV573 = SV1399 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4620]) ).
thf(4846,plain,
! [SV1642: $i,SV1400: $i,SV1082: $i,SV574: $i] :
( ( ( ( c_Message_Omsg_OCrypt @ SV574 @ SV1082 )
= ( c_Message_Omsg_OCrypt @ SV1400 @ SV1642 ) )
= $false )
| ( ( SV1082 = SV1642 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4621]) ).
thf(4847,plain,
! [SV1776: $i,SV1401: $i,SV1084: $i,SV576: $i] :
( ( ( ( c_Message_Omsg_OMPair @ SV576 @ SV1084 )
= ( c_Message_Omsg_OMPair @ SV1401 @ SV1776 ) )
= $false )
| ( ( SV576 = SV1401 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4622]) ).
thf(4848,plain,
! [SV1643: $i,SV1402: $i,SV1085: $i,SV577: $i] :
( ( ( ( c_Message_Omsg_OMPair @ SV577 @ SV1085 )
= ( c_Message_Omsg_OMPair @ SV1402 @ SV1643 ) )
= $false )
| ( ( SV1085 = SV1643 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4623]) ).
thf(4849,plain,
! [SV1086: $i,SV578: $i,SV1644: $i] :
( ( ( c_in @ SV1644 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1644 ) @ SV578 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV578 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4624]) ).
thf(4850,plain,
! [SV603: $i,SV1410: $i,SV5: $i] :
( ( ( c_in @ SV5 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1410 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1410 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV5 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV603 ) ) @ ( c_Message_Oparts @ SV603 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4628]) ).
thf(4851,plain,
! [SV14: $i,SV1648: $i,SV1412: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1412 @ SV1648 @ SV14 )
= ( c_Orderings_Obot__class_Obot @ SV14 ) )
= $false )
| ( ( SV1648
= ( c_Orderings_Obot__class_Obot @ SV14 ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV14 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4630]) ).
thf(4852,plain,
! [SV15: $i,SV1777: $i,SV1413: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1413 @ SV1777 @ SV15 )
= ( c_Orderings_Obot__class_Obot @ SV15 ) )
= $false )
| ( ( SV1413
= ( c_Orderings_Obot__class_Obot @ SV15 ) )
= $true )
| ( ( class_Lattices_Obounded__lattice @ SV15 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4631]) ).
thf(4853,plain,
! [SV1649: $i,SV1419: $i,SV1122: $i,SV628: $i,SV39: $i] :
( ( ( ( c_Set_Oinsert @ SV39 @ ( c_Set_Oinsert @ SV628 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 )
= ( c_Set_Oinsert @ SV1419 @ ( c_Set_Oinsert @ SV1649 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 ) )
= $false )
| ( ( ( SV39 = SV1649 )
| ( SV39 = SV1419 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4633]) ).
thf(4854,plain,
! [SV1778: $i,SV1420: $i,SV1123: $i,SV629: $i,SV40: $i] :
( ( ( ( c_Set_Oinsert @ SV40 @ ( c_Set_Oinsert @ SV629 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 )
= ( c_Set_Oinsert @ SV1420 @ ( c_Set_Oinsert @ SV1778 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 ) )
= $false )
| ( ( ( SV629 = SV1420 )
| ( SV40 = SV1420 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4634]) ).
thf(4855,plain,
! [SV1650: $i,SV1421: $i,SV1124: $i,SV630: $i,SV41: $i] :
( ( ( ( c_Set_Oinsert @ SV41 @ ( c_Set_Oinsert @ SV630 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 )
= ( c_Set_Oinsert @ SV1421 @ ( c_Set_Oinsert @ SV1650 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 ) )
= $false )
| ( ( ( SV41 = SV1650 )
| ( SV630 = SV1650 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4635]) ).
thf(4856,plain,
! [SV1651: $i,SV1422: $i,SV1125: $i,SV631: $i,SV42: $i] :
( ( ( ( c_Set_Oinsert @ SV42 @ ( c_Set_Oinsert @ SV631 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 )
= ( c_Set_Oinsert @ SV1422 @ ( c_Set_Oinsert @ SV1651 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 ) )
= $false )
| ( ( ( SV631 = SV1422 )
| ( SV631 = SV1651 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4636]) ).
thf(4857,plain,
! [SV1425: $i,SV62: $i,SV1653: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1653 @ SV62 ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1425 @ SV62 ) @ SV62 )
= $false )
| ( ( c_lessequals @ SV1425 @ SV1653 @ SV62 )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV62 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4640]) ).
thf(4858,plain,
! [SV63: $i,SV1426: $i,SV1654: $i] :
( ( ( c_lessequals @ SV1654 @ SV1426 @ SV63 )
= $false )
| ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1426 @ SV63 ) @ ( c_HOL_Ouminus__class_Ouminus @ SV1654 @ SV63 ) @ SV63 )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV63 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4641]) ).
thf(4859,plain,
! [SV647: $i,SV1135: $i,SV1655: $i,SV1427: $i,SV68: $i] :
( ( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ SV1427 @ SV1655 ) ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV68 @ SV1135 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ ( c_List_Oappend @ SV647 @ ( c_List_Olist_OCons @ SV1135 @ SV1427 @ SV1655 ) @ SV1655 ) @ SV1655 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4642]) ).
thf(4860,plain,
! [SV1431: $i,SV1138: $i,SV1656: $i,SV654: $i,SV77: $i] :
( ( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ SV654 @ SV1656 ) ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV77 @ SV1138 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ ( c_List_Oappend @ SV654 @ ( c_List_Olist_OCons @ SV1138 @ SV1431 @ SV1656 ) @ SV1656 ) @ SV1656 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4643]) ).
thf(4861,plain,
! [SV656: $i,SV1779: $i,SV79: $i,SV1432: $i] :
( ( ( hBOOL @ ( hAPP @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1432 @ SV79 @ ( tc_fun @ SV1779 @ tc_bool ) ) @ SV656 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV1432 @ SV656 ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV79 @ SV656 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4644]) ).
thf(4862,plain,
! [SV1657: $i,SV84: $i,SV1435: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ SV1435 @ SV84 )
= ( c_HOL_Ouminus__class_Ouminus @ SV1657 @ SV84 ) )
= $false )
| ( ( SV1435 = SV1657 )
= $true )
| ( ( class_Lattices_Oboolean__algebra @ SV84 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4647]) ).
thf(4863,plain,
! [SV1658: $i,SV85: $i,SV1436: $i] :
( ( ( ( c_HOL_Ouminus__class_Ouminus @ SV1436 @ SV85 )
= ( c_HOL_Ouminus__class_Ouminus @ SV1658 @ SV85 ) )
= $false )
| ( ( SV1436 = SV1658 )
= $true )
| ( ( class_OrderedGroup_Ogroup__add @ SV85 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4648]) ).
thf(4864,plain,
! [SV1437: $i,SV662: $i,SV87: $i] :
( ( ( c_lessequals @ SV87 @ SV662 @ ( tc_fun @ SV1437 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV662 @ SV87 @ ( tc_fun @ SV1437 @ tc_bool ) )
= $false )
| ( ( SV87 = SV662 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4649]) ).
thf(4865,plain,
! [SV1438: $i,SV663: $i,SV88: $i] :
( ( ( c_lessequals @ SV88 @ SV663 @ ( tc_fun @ SV1438 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV663 @ SV88 @ ( tc_fun @ SV1438 @ tc_bool ) )
= $false )
| ( ( SV88 = SV663 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4650]) ).
thf(4866,plain,
! [SV89: $i,SV1439: $i,SV1659: $i] :
( ( ( ~ ( c_lessequals @ SV1659 @ SV1439 @ SV89 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1439 @ SV1659 @ SV89 ) )
= $true )
| ( ( SV1439 = SV1659 )
= $true )
| ( ( class_Orderings_Oorder @ SV89 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4651]) ).
thf(4867,plain,
! [SV90: $i,SV1440: $i,SV1660: $i] :
( ( ( ~ ( c_lessequals @ SV1660 @ SV1440 @ SV90 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1440 @ SV1660 @ SV90 ) )
= $true )
| ( ( SV1440 = SV1660 )
= $true )
| ( ( class_Orderings_Oorder @ SV90 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4652]) ).
thf(4868,plain,
! [SV91: $i,SV1661: $i,SV1441: $i] :
( ( ( ~ ( c_lessequals @ SV1441 @ SV1661 @ SV91 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1661 @ SV1441 @ SV91 ) )
= $true )
| ( ( SV1441 = SV1661 )
= $true )
| ( ( class_Orderings_Oorder @ SV91 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4653]) ).
thf(4869,plain,
! [SV92: $i,SV1442: $i,SV1662: $i] :
( ( ( c_lessequals @ SV1662 @ SV1442 @ SV92 )
= $false )
| ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1442 @ SV1662 @ SV92 )
= SV1442 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV92 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4654]) ).
thf(4870,plain,
! [SV93: $i,SV1663: $i,SV1443: $i] :
( ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1443 @ SV1663 @ SV93 )
= SV1663 )
= $false )
| ( ( c_lessequals @ SV1443 @ SV1663 @ SV93 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV93 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4655]) ).
thf(4871,plain,
! [SV94: $i,SV1664: $i,SV1444: $i] :
( ( ( c_lessequals @ SV1444 @ SV1664 @ SV94 )
= $false )
| ( ( ( c_Lattices_Oupper__semilattice__class_Osup @ SV1444 @ SV1664 @ SV94 )
= SV1664 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV94 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4656]) ).
thf(4872,plain,
! [SV1446: $i,SV103: $i,SV1148: $i,SV1666: $i,SV672: $i] :
( ( ( ~ ( c_lessequals @ SV672 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_lessequals @ SV103 @ SV1446 @ ( tc_fun @ SV1148 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV103 @ SV672 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1446 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( tc_fun @ SV1148 @ tc_bool ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4657]) ).
thf(4873,plain,
! [SV106: $i,SV1149: $i,SV1448: $i,SV674: $i] :
( ( ( c_lessequals @ SV674 @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV106 @ SV1448 @ SV1149 ) )
= $true )
| ( ( c_lessequals @ ( c_Set_Oinsert @ SV106 @ SV674 @ SV1149 ) @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4658]) ).
thf(4874,plain,
! [SV1667: $i,SV108: $i,SV675: $i,SV1818: $i] :
( ( ( ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1818 @ SV675 @ SV108 ) @ SV1667 @ SV108 ) )
= $true )
| ( ( c_lessequals @ SV675 @ SV1667 @ SV108 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV108 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4659]) ).
thf(4875,plain,
! [SV1668: $i,SV109: $i,SV1819: $i,SV676: $i] :
( ( ( ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV676 @ SV1819 @ SV109 ) @ SV1668 @ SV109 ) )
= $true )
| ( ( c_lessequals @ SV676 @ SV1668 @ SV109 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV109 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4660]) ).
thf(4876,plain,
! [SV110: $i,SV1780: $i,SV1669: $i,SV677: $i] :
( ( ( c_lessequals @ SV677 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1669 @ SV1780 @ SV110 ) @ SV110 )
= $true )
| ( ( ~ ( c_lessequals @ SV677 @ SV1780 @ SV110 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV110 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4661]) ).
thf(4877,plain,
! [SV111: $i,SV1820: $i,SV1670: $i,SV678: $i] :
( ( ( c_lessequals @ SV678 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1670 @ SV1820 @ SV111 ) @ SV111 )
= $true )
| ( ( ~ ( c_lessequals @ SV678 @ SV1670 @ SV111 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV111 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4662]) ).
thf(4878,plain,
! [SV1671: $i,SV112: $i,SV679: $i,SV1821: $i] :
( ( ( ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1821 @ SV679 @ SV112 ) @ SV1671 @ SV112 ) )
= $true )
| ( ( c_lessequals @ SV679 @ SV1671 @ SV112 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV112 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4663]) ).
thf(4879,plain,
! [SV1672: $i,SV113: $i,SV1822: $i,SV680: $i] :
( ( ( ~ ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV680 @ SV1822 @ SV113 ) @ SV1672 @ SV113 ) )
= $true )
| ( ( c_lessequals @ SV680 @ SV1672 @ SV113 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV113 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4664]) ).
thf(4880,plain,
! [SV1675: $i,SV116: $i,SV1823: $i,SV683: $i] :
( ( ( ~ ( c_lessequals @ SV683 @ SV1823 @ SV116 )
| ~ ( c_lessequals @ SV1823 @ SV1675 @ SV116 ) )
= $true )
| ( ( c_lessequals @ SV683 @ SV1675 @ SV116 )
= $true )
| ( ( class_Orderings_Oorder @ SV116 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4667]) ).
thf(4881,plain,
! [SV684: $i,SV117: $i,SV1676: $i,SV1824: $i] :
( ( ( ~ ( c_lessequals @ SV1824 @ SV1676 @ SV117 )
| ~ ( c_lessequals @ SV684 @ SV1824 @ SV117 ) )
= $true )
| ( ( c_lessequals @ SV684 @ SV1676 @ SV117 )
= $true )
| ( ( class_Orderings_Opreorder @ SV117 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4668]) ).
thf(4882,plain,
! [SV120: $i,SV1152: $i,SV687: $i,SV1677: $i] :
( ( ( c_lessequals @ SV1677 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
= $false )
| ( ( ~ ( c_lessequals @ SV120 @ SV1677 @ ( tc_fun @ SV1152 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ SV120 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4669]) ).
thf(4883,plain,
! [SV688: $i,SV1825: $i,SV121: $i,SV1449: $i] :
( ( ( ~ ( c_lessequals @ SV1449 @ SV121 @ ( tc_fun @ SV1825 @ tc_bool ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV1449 @ SV688 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV121 @ SV688 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4670]) ).
thf(4884,plain,
! [SV689: $i,SV1781: $i,SV124: $i,SV1452: $i] :
( ( ( c_lessequals @ SV1452 @ SV124 @ ( tc_fun @ SV1781 @ tc_bool ) )
= $false )
| ( ( ~ ( hBOOL @ ( hAPP @ SV1452 @ SV689 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV124 @ SV689 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4671]) ).
thf(4885,plain,
! [SV1453: $i,SV127: $i,SV1154: $i,SV1678: $i,SV692: $i] :
( ( ( c_lessequals @ SV692 @ SV1678 @ ( tc_fun @ SV1154 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Set_Oimage @ SV127 @ SV692 @ SV1154 @ SV1453 ) @ ( c_Set_Oimage @ SV127 @ SV1678 @ SV1154 @ SV1453 ) @ ( tc_fun @ SV1453 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4672]) ).
thf(4886,plain,
! [SV693: $i,SV1826: $i,SV1155: $i,SV128: $i,SV1782: $i] :
( ( ( c_lessequals @ ( c_Set_Oimage @ SV1782 @ SV128 @ SV1155 @ SV1826 ) @ ( c_Set_Oimage @ SV1782 @ SV693 @ SV1155 @ SV1826 ) @ ( tc_fun @ SV1826 @ tc_bool ) )
= $true )
| ( ( c_lessequals @ SV128 @ SV693 @ ( tc_fun @ SV1155 @ tc_bool ) )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4673]) ).
thf(4887,plain,
! [SV1158: $i,SV132: $i,SV1456: $i,SV697: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ SV697 ) @ ( c_Message_Oanalz @ SV1456 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( ~ ( c_lessequals @ ( c_Message_Oanalz @ SV132 ) @ ( c_Message_Oanalz @ SV1158 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV132 @ SV697 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1158 @ SV1456 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4675]) ).
thf(4888,plain,
! [SV1159: $i,SV1458: $i,SV134: $i,SV1827: $i,SV1783: $i,SV698: $i] :
( ( ( ~ ( c_in @ SV698 @ SV1783 @ SV1827 )
| ~ ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SV1783 @ SV1827 @ SV1458 ) @ SV1159 @ ( tc_fun @ SV1458 @ tc_bool ) ) )
= $true )
| ( ( c_in @ ( hAPP @ SV134 @ SV698 ) @ SV1159 @ SV1458 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4677]) ).
thf(4889,plain,
! [SV701: $i,SV1460: $i,SV137: $i] :
( ( ( c_in @ SV137 @ ( c_Message_Oparts @ SV1460 ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ SV1460 @ ( c_Message_Oparts @ SV701 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_in @ SV137 @ ( c_Message_Oparts @ SV701 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4679]) ).
thf(4890,plain,
! [SV703: $i,SV1461: $i,SV139: $i] :
( ( ( c_in @ SV139 @ ( c_Message_Oanalz @ SV1461 ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ SV1461 @ ( c_Message_Oanalz @ SV703 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_in @ SV139 @ ( c_Message_Oanalz @ SV703 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4680]) ).
thf(4891,plain,
! [SV705: $i,SV1462: $i,SV142: $i] :
( ( ( c_in @ SV142 @ ( c_Message_Osynth @ SV1462 ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ SV1462 @ ( c_Message_Osynth @ SV705 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_in @ SV142 @ ( c_Message_Osynth @ SV705 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4681]) ).
thf(4892,plain,
! [SV169: $i,SV1169: $i,SV1468: $i,SV729: $i] :
( ( ( c_lessequals @ SV729 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
= $false )
| ( ( ~ ( c_lessequals @ SV169 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV169 @ SV729 @ ( tc_fun @ SV1169 @ tc_bool ) ) @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4688]) ).
thf(4893,plain,
! [SV172: $i,SV1172: $i,SV1469: $i,SV732: $i] :
( ( ( c_lessequals @ SV732 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
= $false )
| ( ( ~ ( c_lessequals @ SV172 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV172 @ SV732 @ ( tc_fun @ SV1172 @ tc_bool ) ) @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4689]) ).
thf(4894,plain,
! [SV1788: $i,SV173: $i,SV1686: $i,SV733: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV733 @ SV1686 @ SV173 ) @ SV1788 @ SV173 )
= $true )
| ( ( ~ ( c_lessequals @ SV1686 @ SV1788 @ SV173 )
| ~ ( c_lessequals @ SV733 @ SV1788 @ SV173 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV173 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4690]) ).
thf(4895,plain,
! [SV1789: $i,SV176: $i,SV1689: $i,SV734: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV734 @ SV1689 @ SV176 ) @ SV1789 @ SV176 )
= $true )
| ( ( ~ ( c_lessequals @ SV1689 @ SV1789 @ SV176 )
| ~ ( c_lessequals @ SV734 @ SV1789 @ SV176 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV176 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4691]) ).
thf(4896,plain,
! [SV1790: $i,SV177: $i,SV1690: $i,SV735: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV735 @ SV1690 @ SV177 ) @ SV1790 @ SV177 )
= $true )
| ( ( ~ ( c_lessequals @ SV1690 @ SV1790 @ SV177 )
| ~ ( c_lessequals @ SV735 @ SV1790 @ SV177 ) )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV177 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4692]) ).
thf(4897,plain,
! [SV740: $i,SV1476: $i,SV1174: $i,SV186: $i] :
( ( ( c_lessequals @ SV186 @ SV1174 @ ( tc_fun @ SV1476 @ tc_bool ) )
= $false )
| ( ( c_in @ SV740 @ SV186 @ SV1476 )
= $true )
| ( ( c_lessequals @ SV186 @ ( c_Set_Oinsert @ SV740 @ SV1174 @ SV1476 ) @ ( tc_fun @ SV1476 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4694]) ).
thf(4898,plain,
! [SV1175: $i,SV741: $i,SV1694: $i,SV187: $i] :
( ( ( c_lessequals @ SV187 @ ( c_Set_Oinsert @ SV1694 @ SV741 @ SV1175 ) @ ( tc_fun @ SV1175 @ tc_bool ) )
= $false )
| ( ( c_in @ SV1694 @ SV187 @ SV1175 )
= $true )
| ( ( c_lessequals @ SV187 @ SV741 @ ( tc_fun @ SV1175 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4695]) ).
thf(4899,plain,
! [SV742: $i,SV1477: $i,SV1176: $i,SV188: $i] :
( ( ( c_lessequals @ SV188 @ SV1176 @ ( tc_fun @ SV1477 @ tc_bool ) )
= $false )
| ( ( c_in @ SV742 @ SV188 @ SV1477 )
= $true )
| ( ( c_lessequals @ SV188 @ ( c_Set_Oinsert @ SV742 @ SV1176 @ SV1477 ) @ ( tc_fun @ SV1477 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4696]) ).
thf(4900,plain,
! [SV1177: $i,SV743: $i,SV1695: $i,SV189: $i] :
( ( ( c_lessequals @ SV189 @ ( c_Set_Oinsert @ SV1695 @ SV743 @ SV1177 ) @ ( tc_fun @ SV1177 @ tc_bool ) )
= $false )
| ( ( c_in @ SV1695 @ SV189 @ SV1177 )
= $true )
| ( ( c_lessequals @ SV189 @ SV743 @ ( tc_fun @ SV1177 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4697]) ).
thf(4901,plain,
! [SV205: $i,SV1791: $i,SV1181: $i,SV750: $i] :
( ( ( c_lessequals @ ( hAPP @ SV750 @ SV1181 ) @ ( hAPP @ SV1791 @ SV1181 ) @ SV205 )
= $true )
| ( ( ! [SY4485: $i] :
~ ( c_lessequals @ SV750 @ SV1791 @ ( tc_fun @ SY4485 @ SV205 ) ) )
= $true )
| ( ( class_HOL_Oord @ SV205 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4698]) ).
thf(4902,plain,
! [SV206: $i,SV1487: $i,SV1700: $i] :
( ( ( c_lessequals @ SV1700 @ ( c_HOL_Ouminus__class_Ouminus @ SV1487 @ SV206 ) @ SV206 )
= $false )
| ( ( c_lessequals @ SV1487 @ ( c_HOL_Ouminus__class_Ouminus @ SV1700 @ SV206 ) @ SV206 )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV206 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4699]) ).
thf(4903,plain,
! [SV207: $i,SV1488: $i,SV1701: $i] :
( ( ( c_lessequals @ SV1701 @ ( c_HOL_Ouminus__class_Ouminus @ SV1488 @ SV207 ) @ SV207 )
= $false )
| ( ( c_lessequals @ SV1488 @ ( c_HOL_Ouminus__class_Ouminus @ SV1701 @ SV207 ) @ SV207 )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV207 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4700]) ).
thf(4904,plain,
! [SV1489: $i,SV208: $i,SV1702: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1702 @ SV208 ) @ SV1489 @ SV208 )
= $false )
| ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1489 @ SV208 ) @ SV1702 @ SV208 )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV208 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4701]) ).
thf(4905,plain,
! [SV1490: $i,SV209: $i,SV1703: $i] :
( ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1703 @ SV209 ) @ SV1490 @ SV209 )
= $false )
| ( ( c_lessequals @ ( c_HOL_Ouminus__class_Ouminus @ SV1490 @ SV209 ) @ SV1703 @ SV209 )
= $true )
| ( ( class_OrderedGroup_Opordered__ab__group__add @ SV209 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4702]) ).
thf(4906,plain,
! [SV751: $i,SV1182: $i,SV1704: $i,SV210: $i] :
( ( ( c_in @ SV210 @ SV1704 @ SV1182 )
= $false )
| ( ( ~ ( c_lessequals @ SV1704 @ SV751 @ ( tc_fun @ SV1182 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV210 @ SV751 @ SV1182 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4703]) ).
thf(4907,plain,
! [SV211: $i,SV1183: $i,SV752: $i,SV1705: $i] :
( ( ( c_lessequals @ SV1705 @ SV752 @ ( tc_fun @ SV1183 @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV211 @ SV1705 @ SV1183 ) )
= $true )
| ( ( c_in @ SV211 @ SV752 @ SV1183 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4704]) ).
thf(4908,plain,
! [SV753: $i,SV1184: $i,SV1706: $i,SV212: $i] :
( ( ( c_in @ SV212 @ SV1706 @ SV1184 )
= $false )
| ( ( ~ ( c_lessequals @ SV1706 @ SV753 @ ( tc_fun @ SV1184 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV212 @ SV753 @ SV1184 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4705]) ).
thf(4909,plain,
! [SV754: $i,SV1185: $i,SV1707: $i,SV213: $i] :
( ( ( c_in @ SV213 @ SV1707 @ SV1185 )
= $false )
| ( ( ~ ( c_lessequals @ SV1707 @ SV754 @ ( tc_fun @ SV1185 @ tc_bool ) ) )
= $true )
| ( ( c_in @ SV213 @ SV754 @ SV1185 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4706]) ).
thf(4910,plain,
! [SV1188: $i,SV757: $i,SV1708: $i,SV216: $i] :
( ( ( c_in @ SV216 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1708 @ SV757 @ ( tc_fun @ SV1188 @ tc_bool ) ) @ SV1188 )
= $false )
| ( ( c_in @ SV216 @ SV1708 @ SV1188 )
= $true )
| ( ( c_in @ SV216 @ SV757 @ SV1188 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4709]) ).
thf(4911,plain,
! [SV774: $i,SV235: $i,SV1792: $i,SV1709: $i] :
( ( ( ( c_Message_Oanalz @ SV1709 )
!= ( c_Message_Oanalz @ SV1792 ) )
= $true )
| ( ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1709 @ SV235 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1792 @ SV774 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true )
| ( ( ( c_Message_Oanalz @ SV235 )
= ( c_Message_Oanalz @ SV774 ) )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4711]) ).
thf(4912,plain,
! [SV780: $i,SV242: $i,SV1195: $i,SV1710: $i] :
( ( ( c_in @ SV1710 @ ( c_Message_Oparts @ SV1195 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1710 @ SV780 @ tc_Message_Omsg ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV780 @ SV1195 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4712]) ).
thf(4913,plain,
! [SV781: $i,SV1493: $i,SV243: $i] :
( ( ( c_in @ SV243 @ ( c_Message_Oanalz @ SV1493 ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ SV1493 @ SV781 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV243 @ SV781 @ tc_Message_Omsg ) )
= ( c_Message_Oanalz @ SV781 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4713]) ).
thf(4914,plain,
! [SV1712: $i,SV1497: $i,SV1200: $i,SV788: $i,SV250: $i] :
( ( ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( ~ ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4414: $i,SY4415: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SV1497 @ ( c_Message_Omsg_OMPair @ SV1712 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4414 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY4415 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4714]) ).
thf(4915,plain,
! [SV254: $i,SV1501: $i,SV1203: $i,SV791: $i] :
( ( ( ~ ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4264: $i,SY4265: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SV1501 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4264 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY4265 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4715]) ).
thf(4916,plain,
! [SV792: $i,SV255: $i] :
( ( ( ~ ( c_in @ SV255 @ c_Message_OsymKeys @ tc_nat ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV255 ) @ ( c_Event_Oused @ SV792 ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV792 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV255 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV792 ) ) ) @ tc_nat )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4716]) ).
thf(4917,plain,
! [SV1208: $i,SV798: $i,SV261: $i] :
( ( ( c_in @ SV261 @ SV798 @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ SV1208 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV261 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV798 @ tc_nat @ tc_Message_Omsg ) @ SV1208 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4718]) ).
thf(4918,plain,
! [SV799: $i,SV1209: $i,SV262: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ SV1209 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV262 @ SV799 @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV262 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV799 @ tc_nat @ tc_Message_Omsg ) @ SV1209 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4719]) ).
thf(4919,plain,
! [SV1503: $i,SV801: $i,SV264: $i] :
( ( ( c_in @ SV264 @ SV801 @ tc_nat )
= $false )
| ( ( c_in @ SV264 @ SV801 @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV264 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV801 @ tc_nat @ tc_Message_Omsg ) @ SV1503 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4721]) ).
thf(4920,plain,
! [SV265: $i,SV1504: $i,SV802: $i,SV1828: $i] :
( ( ( ~ ( c_lessequals @ SV1828 @ SV802 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV1504 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1828 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1504 @ SV802 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SV802 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4722]) ).
thf(4921,plain,
! [SV266: $i,SV803: $i,SV1211: $i,SV1829: $i] :
( ( ( ~ ( c_lessequals @ SV1829 @ SV1211 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
| ~ ( c_in @ SV803 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1829 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SV1211 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV803 @ SV1211 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4723]) ).
thf(4922,plain,
! [SV804: $i,SV1505: $i,SV267: $i] :
( ( ( c_in @ SV267 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1505 @ SV804 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1505 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV267 @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV804 ) ) @ ( c_Message_Oparts @ SV804 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4724]) ).
thf(4923,plain,
! [SV810: $i,SV1509: $i,SV275: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1509 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_lessequals @ SV1509 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
| ~ ( c_in @ SV810 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV275 @ SV1509 @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4728]) ).
thf(4924,plain,
! [SV276: $i,SV1217: $i,SV811: $i] :
( ( ( ~ ( c_lessequals @ SV811 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV1217 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV276 @ SV811 @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV276 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV811 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1217 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4729]) ).
thf(4925,plain,
! [SV813: $i,SV1793: $i,SV278: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV278 @ SV1793 ) @ SV813 @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV278 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ SV278 @ ( c_Message_OkeysFor @ SV813 ) @ tc_nat )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4730]) ).
thf(4926,plain,
! [SV814: $i,SV1219: $i,SV280: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ SV1219 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV280 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV814 @ tc_nat @ tc_Message_Omsg ) @ SV1219 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4731]) ).
thf(4927,plain,
! [SV1512: $i,SV283: $i,SV817: $i,SV1794: $i] :
( ( ( ~ ( c_in @ SV1794 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV817 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1794 @ SV1512 @ tc_Message_Omsg ) ) ) @ tc_nat ) )
= $true )
| ( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1512 @ SV817 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV283 ) ) @ ( c_Message_Oparts @ SV817 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4733]) ).
thf(4928,plain,
! [SV287: $i,SV1223: $i,SV821: $i] :
( ( ( ~ ( c_lessequals @ SV821 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV1223 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV821 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4736]) ).
thf(4929,plain,
! [SV1513: $i,SV1224: $i,SV1715: $i,SV822: $i,SV288: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ SV822 @ SV1715 ) @ ( c_List_Oset @ SV822 @ SV1715 ) @ SV1715 )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV288 @ SV1224 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV288 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ ( c_List_Oappend @ SV822 @ ( c_List_Olist_OCons @ SV1224 @ SV1513 @ SV1715 ) @ SV1715 ) @ SV1715 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4737]) ).
thf(4930,plain,
! [SV823: $i,SV1225: $i,SV1716: $i,SV1514: $i,SV289: $i] :
( ( ( hBOOL @ ( hAPP @ SV289 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ SV1514 @ SV1716 ) ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV289 @ SV1225 ) ) )
= $true )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SV1716 ) @ SV1716 ) @ SV1716 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SV1716 ) @ SV1716 ) @ SV1716 ) @ SV1716 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4738]) ).
thf(4931,plain,
! [SV1515: $i,SV1226: $i,SV1717: $i,SV824: $i,SV290: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ SV824 @ SV1717 ) @ ( c_List_Oset @ SV824 @ SV1717 ) @ SV1717 )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV290 @ SV1226 ) ) )
= $true )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SV1717 ) @ SV1717 ) @ SV1717 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SV1717 ) @ SV1717 ) @ SV1717 ) @ SV1717 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4739]) ).
thf(4932,plain,
! [SV825: $i,SV1227: $i,SV1718: $i,SV1516: $i,SV291: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ SV1516 @ SV1718 ) @ ( c_List_Oset @ SV1516 @ SV1718 ) @ SV1718 )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV291 @ SV1227 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV291 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ ( c_List_Oappend @ SV825 @ ( c_List_Olist_OCons @ SV1227 @ SV1516 @ SV1718 ) @ SV1718 ) @ SV1718 ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4740]) ).
thf(4933,plain,
! [SV1517: $i,SV1228: $i,SV1719: $i,SV826: $i,SV292: $i] :
( ( ( hBOOL @ ( hAPP @ SV292 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ SV826 @ SV1719 ) ) )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV292 @ SV1228 ) ) )
= $true )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SV1719 ) @ SV1719 ) @ SV1719 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SV1719 ) @ SV1719 ) @ SV1719 ) @ SV1719 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4741]) ).
thf(4934,plain,
! [SV827: $i,SV1229: $i,SV1720: $i,SV1518: $i,SV293: $i] :
( ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ SV1518 @ SV1720 ) @ ( c_List_Oset @ SV1518 @ SV1720 ) @ SV1720 )
= $true )
| ( ( ~ ( hBOOL @ ( hAPP @ SV293 @ SV1229 ) ) )
= $true )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SV1720 ) @ SV1720 ) @ SV1720 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SV1720 ) @ SV1720 ) @ SV1720 ) @ SV1720 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4742]) ).
thf(4935,plain,
! [SV303: $i,SV1236: $i,SV837: $i] :
( ( ( c_in @ SV837 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true )
| ( ( ~ ( c_in @ SV1236 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV837 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4743]) ).
thf(4936,plain,
! [SV838: $i,SV1524: $i,SV304: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV1524 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( ( c_in @ SV1524 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
| ~ ( c_in @ SV838 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( SV304 = SV1524 )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4744]) ).
thf(4937,plain,
! [SV848: $i,SV1528: $i,SV315: $i] :
( ( ( c_in @ SV315 @ ( c_Message_Osynth @ ( c_Set_Oinsert @ SV1528 @ SV848 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1528 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV315 @ ( c_Message_Osynth @ SV848 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4745]) ).
thf(4938,plain,
! [SV850: $i,SV317: $i,SV1529: $i] :
( ( ( ~ ( c_in @ SV1529 @ c_Message_OsymKeys @ tc_nat ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1529 @ SV317 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1529 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV317 @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4746]) ).
thf(4939,plain,
! [SV854: $i,SV1531: $i,SV321: $i] :
( ( ( c_in @ SV321 @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1531 @ SV854 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1531 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV321 @ ( c_Message_Oanalz @ SV854 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4747]) ).
thf(4940,plain,
! [SV1722: $i,SV1533: $i,SV1251: $i,SV862: $i,SV329: $i] :
( ( ( ( c_List_Oappend @ SV329 @ ( c_List_Olist_OCons @ SV862 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 )
= ( c_List_Oappend @ SV1533 @ ( c_List_Olist_OCons @ SV1722 @ ( c_List_Olist_ONil @ SV1251 ) @ SV1251 ) @ SV1251 ) )
= $false )
| ( ( SV862 = SV1722 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4748]) ).
thf(4941,plain,
! [SV1795: $i,SV1534: $i,SV1252: $i,SV863: $i,SV330: $i] :
( ( ( ( c_List_Oappend @ SV330 @ ( c_List_Olist_OCons @ SV863 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 )
= ( c_List_Oappend @ SV1534 @ ( c_List_Olist_OCons @ SV1795 @ ( c_List_Olist_ONil @ SV1252 ) @ SV1252 ) @ SV1252 ) )
= $false )
| ( ( SV330 = SV1534 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4749]) ).
thf(4942,plain,
! [SV1796: $i,SV334: $i,SV1536: $i,SV1256: $i,SV867: $i] :
( ( ( c_in @ SV867 @ SV1256 @ SV1536 )
= $false )
| ( ( ( c_Set_Oinsert @ ( hAPP @ SV334 @ SV867 ) @ ( c_Set_Oimage @ SV334 @ SV1256 @ SV1536 @ SV1796 ) @ SV1796 )
= ( c_Set_Oimage @ SV334 @ SV1256 @ SV1536 @ SV1796 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4750]) ).
thf(4943,plain,
! [SV877: $i,SV1797: $i,SV348: $i,SV1542: $i] :
( ( ( hBOOL @ ( hAPP @ ( c_Set_Oinsert @ SV1542 @ SV348 @ SV1797 ) @ SV877 ) )
= $false )
| ( ( SV1542 = SV877 )
= $true )
| ( ( hBOOL @ ( hAPP @ SV348 @ SV877 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4751]) ).
thf(4944,plain,
! [SV1280: $i,SV897: $i,SV1727: $i,SV369: $i] :
( ( ( c_in @ SV369 @ ( c_Set_Oinsert @ SV1727 @ SV897 @ SV1280 ) @ SV1280 )
= $false )
| ( ( SV369 = SV1727 )
= $true )
| ( ( c_in @ SV369 @ SV897 @ SV1280 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4759]) ).
thf(4945,plain,
! [SV902: $i,SV1284: $i,SV1558: $i,SV374: $i] :
( ( ( c_in @ SV374 @ SV1558 @ SV1284 )
= $true )
| ( ( ( SV902 = SV1558 )
| ( c_in @ SV374 @ SV902 @ SV1284 ) )
= $true )
| ( ( ( c_Set_Oinsert @ SV374 @ SV902 @ SV1284 )
= ( c_Set_Oinsert @ SV374 @ SV1558 @ SV1284 ) )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4760]) ).
thf(4946,plain,
! [SV396: $i,SV1729: $i,SV1560: $i,SV922: $i,SV1295: $i] :
( ( ( ~ ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat ) )
= $true )
| ( ( ~ ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4416: $i,SY4417: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SV1729 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1729 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4416 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4417 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4761]) ).
thf(4947,plain,
! [SV1830: $i,SV1798: $i,SV1730: $i,SV1561: $i,SV1297: $i,SV924: $i,SV398: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
| ! [SY4516: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SY4516 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4421: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4421 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4762]) ).
thf(4948,plain,
! [SV1831: $i,SV1799: $i,SV1731: $i,SV1562: $i,SV1298: $i,SV925: $i,SV399: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4518: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SY4518 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4425: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4425 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4763]) ).
thf(4949,plain,
! [SV1564: $i,SV1732: $i,SV926: $i,SV1300: $i,SV401: $i] :
( ( ( ! [SY4426: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4426 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SV1732 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SV1732 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1732 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SV1732 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4764]) ).
thf(4950,plain,
! [SV1565: $i,SV1733: $i,SV927: $i,SV1301: $i,SV402: $i] :
( ( ( ! [SY4427: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4427 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SV1733 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SV1733 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1733 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SV1733 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4765]) ).
thf(4951,plain,
! [SV1566: $i,SV1734: $i,SV928: $i,SV1302: $i,SV403: $i] :
( ( ( ! [SY4428: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4428 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SV1734 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SV1734 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1734 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SV1734 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4766]) ).
thf(4952,plain,
! [SV1568: $i,SV1735: $i,SV930: $i,SV1303: $i,SV405: $i] :
( ( ( ! [SY4429: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4429 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SV1735 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SV1735 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1735 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SV1735 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4767]) ).
thf(4953,plain,
! [SV1569: $i,SV406: $i,SV931: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV931 @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ SV931 @ SV406 @ SV1569 ) @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ( SV931 = c_Message_Oagent_OSpy )
| ~ ( c_in @ SV406 @ ( c_Event_Oknows @ SV931 @ SV1569 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OGets @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV406 @ ( c_Event_OinitState @ SV931 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4768]) ).
thf(4954,plain,
! [SV1736: $i,SV1570: $i,SV1304: $i,SV932: $i,SV407: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4430: $i,SY4431: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SY4430 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4431 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4769]) ).
thf(4955,plain,
! [SV408: $i,SV1305: $i,SV933: $i] :
( ( ( ~ ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ! [SY4072: $i] :
( ( c_in @ SY4072 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4073: $i] :
( ( c_in @ SY4073 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4073 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4073 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY4073 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4770]) ).
thf(4956,plain,
! [SV411: $i,SV1307: $i,SV936: $i,SV1572: $i,SV1737: $i] :
( ( ( ~ ( c_in @ SV1737 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ! [SY4432: $i,SY4433: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1572 @ ( c_Message_Omsg_OCrypt @ SY4432 @ ( c_Message_Omsg_OMPair @ SY4433 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SV1737 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ ( c_Message_Omsg_OAgent @ SV1572 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4771]) ).
thf(4957,plain,
! [SV1832: $i,SV1800: $i,SV1738: $i,SV1573: $i,SV1308: $i,SV937: $i,SV412: $i] :
( ( ! [SY4520: $i] :
( ( SV412 = SV937 )
| ~ ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4521: $i,SY4522: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4520 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4520 ) @ ( c_Message_Omsg_OMPair @ SY4521 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4522 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4772]) ).
thf(4958,plain,
! [SV1833: $i,SV1801: $i,SV1739: $i,SV1574: $i,SV1309: $i,SV938: $i,SV413: $i] :
( ( ! [SY4523: $i] :
( ( SV413 = SV938 )
| ~ ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4498: $i,SY4499: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4523 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4523 ) @ ( c_Message_Omsg_OMPair @ SY4498 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4499 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4773]) ).
thf(4959,plain,
! [SV1834: $i,SV1802: $i,SV1740: $i,SV1575: $i,SV1310: $i,SV939: $i,SV414: $i] :
( ( ! [SY4526: $i] :
( ( SV414 = SV939 )
| ~ ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4502: $i,SY4503: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4526 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4526 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4502 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4503 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4774]) ).
thf(4960,plain,
! [SV1835: $i,SV1803: $i,SV1741: $i,SV1576: $i,SV1311: $i,SV940: $i,SV415: $i] :
( ( ! [SY4529: $i] :
( ( SV415 = SV940 )
| ~ ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4506: $i,SY4507: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SY4529 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4507 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4775]) ).
thf(4961,plain,
! [SV1742: $i,SV1577: $i,SV416: $i,SV941: $i,SV1312: $i] :
( ( ( ~ ( c_in @ SV1312 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ! [SY4454: $i,SY4455: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SV1577 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1742 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4454 ) @ SY4455 ) ) ) ) ) @ ( c_List_Oset @ SV1312 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4776]) ).
thf(4962,plain,
! [SV942: $i,SV1578: $i,SV1313: $i,SV1836: $i,SV417: $i,SV1743: $i] :
( ( ( ! [SY4532: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1743 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1743 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1836 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SY4532 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1836 @ SV1743 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4777]) ).
thf(4963,plain,
! [SV1314: $i,SV1579: $i,SV1744: $i,SV943: $i,SV419: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4458: $i,SY4459: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4458 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4459 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4778]) ).
thf(4964,plain,
! [SV944: $i,SV1581: $i,SV1316: $i,SV1837: $i,SV421: $i,SV1745: $i] :
( ( ( ! [SY4533: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1745 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1745 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1837 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SY4533 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1837 @ SV1745 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4779]) ).
thf(4965,plain,
! [SV431: $i,SV952: $i,SV1582: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1582 ) ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1582 ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1582 @ SV431 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4782]) ).
thf(4966,plain,
! [SV953: $i,SV1317: $i,SV432: $i] :
( ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV432 ) ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV432 ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV953 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV432 @ SV953 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4783]) ).
thf(4967,plain,
! [SV959: $i,SV1318: $i,SV438: $i] :
( ( ( c_in @ SV438 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV959 @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OMPair @ SV438 @ SV959 ) @ ( c_Message_Osynth @ SV1318 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4787]) ).
thf(4968,plain,
! [SV1319: $i,SV962: $i,SV1748: $i,SV441: $i] :
( ( ( c_in @ SV441 @ ( c_List_Oset @ ( c_List_Olist_OCons @ SV1748 @ SV962 @ SV1319 ) @ SV1319 ) @ SV1319 )
= $false )
| ( ( SV441 = SV1748 )
= $true )
| ( ( c_in @ SV441 @ ( c_List_Oset @ SV962 @ SV1319 ) @ SV1319 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4788]) ).
thf(4969,plain,
! [SV442: $i,SV963: $i,SV1320: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1320 )
= $false )
| ( ( c_in @ SV963 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1320 ) ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV442 @ SV963 ) @ SV1320 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4789]) ).
thf(4970,plain,
! [SV444: $i,SV965: $i,SV1321: $i] :
( ( ( c_in @ SV1321 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV965 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1321 ) ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OSpy @ SV444 @ SV965 ) @ SV1321 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4790]) ).
thf(4971,plain,
! [SV966: $i,SV445: $i,SV1322: $i,SV1589: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1589 )
= $false )
| ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1322 ) @ ( c_Event_Oused @ SV1589 ) @ tc_Message_Omsg )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV445 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV445 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV966 ) @ ( c_Message_Omsg_ONonce @ SV1322 ) ) ) ) @ SV1589 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4791]) ).
thf(4972,plain,
! [SV974: $i,SV454: $i,SV1330: $i,SV1594: $i] :
( ( ( c_in @ SV1594 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1330 ) @ ( c_Event_Oused @ SV1594 ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV454 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV454 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV974 ) @ ( c_Message_Omsg_ONonce @ SV1330 ) ) ) ) @ SV1594 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4796]) ).
thf(4973,plain,
! [SV1806: $i,SV463: $i,SV1596: $i,SV1337: $i,SV982: $i] :
( ( ( c_in @ SV982 @ SV1337 @ SV1596 )
= $false )
| ( ( c_in @ ( hAPP @ SV463 @ SV982 ) @ ( c_Set_Oimage @ SV463 @ SV1337 @ SV1596 @ SV1806 ) @ SV1806 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4797]) ).
thf(4974,plain,
! [SV1807: $i,SV464: $i,SV1597: $i,SV1338: $i,SV983: $i] :
( ( ( c_in @ SV983 @ SV1338 @ SV1597 )
= $false )
| ( ( c_in @ ( hAPP @ SV464 @ SV983 ) @ ( c_Set_Oimage @ SV464 @ SV1338 @ SV1597 @ SV1807 ) @ SV1807 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4798]) ).
thf(4975,plain,
! [SV1838: $i,SV1339: $i,SV984: $i,SV465: $i,SV1808: $i] :
( ( ( c_in @ ( hAPP @ SV1808 @ SV465 ) @ ( c_Set_Oimage @ SV1808 @ SV984 @ SV1339 @ SV1838 ) @ SV1838 )
= $true )
| ( ( c_in @ SV465 @ SV984 @ SV1339 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4799]) ).
thf(4976,plain,
! [SV1839: $i,SV1340: $i,SV985: $i,SV466: $i,SV1809: $i] :
( ( ( c_in @ ( hAPP @ SV1809 @ SV466 ) @ ( c_Set_Oimage @ SV1809 @ SV985 @ SV1340 @ SV1839 ) @ SV1839 )
= $true )
| ( ( c_in @ SV466 @ SV985 @ SV1340 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4800]) ).
thf(4977,plain,
! [SV1810: $i,SV1604: $i,SV1353: $i,SV1000: $i,SV483: $i] :
( ( ( ( c_List_Olist_OCons @ SV483 @ SV1000 @ SV1353 )
= ( c_List_Olist_OCons @ SV1604 @ SV1810 @ SV1353 ) )
= $false )
| ( ( SV483 = SV1604 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4807]) ).
thf(4978,plain,
! [SV1756: $i,SV1605: $i,SV1354: $i,SV1001: $i,SV484: $i] :
( ( ( ( c_List_Olist_OCons @ SV484 @ SV1001 @ SV1354 )
= ( c_List_Olist_OCons @ SV1605 @ SV1756 @ SV1354 ) )
= $false )
| ( ( SV1001 = SV1756 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4808]) ).
thf(4979,plain,
! [SV1007: $i,SV1359: $i,SV490: $i] :
( ( ( c_in @ SV490 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1007 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OMPair @ SV490 @ SV1007 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1359 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4809]) ).
thf(4980,plain,
! [SV495: $i,SV1363: $i,SV1012: $i] :
( ( ( c_in @ SV1012 @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV495 ) @ SV1363 @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV495 @ SV1012 ) @ ( c_Message_Osynth @ SV1363 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4813]) ).
thf(4981,plain,
! [SV1364: $i,SV1609: $i,SV1757: $i,SV1017: $i,SV501: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4464: $i,SY4465: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4464 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4465 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4814]) ).
thf(4982,plain,
! [SV1610: $i,SV1365: $i,SV502: $i,SV1018: $i,SV1758: $i] :
( ( ( ~ ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4815]) ).
thf(4983,plain,
! [SV1021: $i,SV506: $i,SV1366: $i,SV1759: $i,SV1612: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ! [SY4361: $i,SY4362: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4361 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4361 ) @ ( c_Message_Omsg_OMPair @ SY4362 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4816]) ).
thf(4984,plain,
! [SV507: $i,SV1367: $i,SV1022: $i,SV1613: $i] :
( ( ( c_in @ SV1613 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ( c_in @ SV1022 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1613 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV507 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV507 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ SV507 @ SV1022 @ SV1367 @ SV1613 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1613 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4817]) ).
thf(4985,plain,
! [SV1614: $i,SV1368: $i,SV1023: $i,SV508: $i,SV1760: $i] :
( ( ( ~ ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4468: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SY4468 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4469: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4469 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4818]) ).
thf(4986,plain,
! [SV1024: $i,SV509: $i,SV1615: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1615 @ SV509 ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1615 ) ) @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV509 @ ( c_Message_Oanalz @ SV1024 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4819]) ).
thf(4987,plain,
! [SV1617: $i,SV1373: $i,SV1031: $i,SV518: $i,SV1762: $i] :
( ( ( ~ ( c_in @ SV1762 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1762 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) ) @ ( c_List_Oset @ SV1762 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) @ SV1762 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4825]) ).
thf(4988,plain,
! [SV1618: $i,SV1374: $i,SV1032: $i,SV519: $i,SV1763: $i] :
( ( ( ~ ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ! [SY4470: $i,SY4471: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4470 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4471 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4826]) ).
thf(4989,plain,
! [SV520: $i,SV1033: $i,SV1764: $i,SV1619: $i,SV1375: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ! [SY4472: $i,SY4473: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SY4472 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SY4473 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4827]) ).
thf(4990,plain,
! [SV1811: $i,SV1765: $i,SV1620: $i,SV1376: $i,SV1034: $i,SV521: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) ) @ ( c_List_Oset @ SV1811 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ SV1811 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1811 ) ) @ tc_Message_Omsg ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4828]) ).
thf(4991,plain,
! [SV1036: $i,SV1840: $i,SV1812: $i,SV1378: $i,SV523: $i] :
( ( ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV1378 @ SV1812 @ SV1840 ) @ SV1036 @ tc_Event_Oevent ) ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV523 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1036 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4829]) ).
thf(4992,plain,
! [SV1038: $i,SV525: $i,SV1766: $i,SV1621: $i,SV1380: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ! [SY4475: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SY4475 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4831]) ).
thf(4993,plain,
! [SV526: $i,SV1381: $i,SV1039: $i,SV1622: $i,SV1813: $i] :
( ( ( ~ ( c_in @ SV1813 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ( c_in @ SV1622 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4511: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1622 ) @ ( c_Message_Omsg_OMPair @ SY4511 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1813 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ ( c_Message_Omsg_OAgent @ SV1622 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4832]) ).
thf(4994,plain,
! [SV1040: $i,SV1767: $i,SV1623: $i,SV1382: $i,SV527: $i] :
( ( ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ ( c_Message_Omsg_OAgent @ SV1767 ) ) ) )
= $true )
| ( ( ~ ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4476: $i,SY4477: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4476 @ SV1767 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1767 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4477 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4833]) ).
thf(4995,plain,
! [SV1041: $i,SV528: $i,SV1624: $i] :
( ( ( c_in @ ( c_Event_Oevent_ONotes @ SV1624 @ SV528 ) @ ( c_List_Oset @ SV1041 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1624 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( c_in @ SV528 @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1041 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4834]) ).
thf(4996,plain,
! [SV1042: $i,SV1841: $i,SV529: $i,SV1814: $i,SV1625: $i,SV1383: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1383 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1383 ) @ ( c_Message_Omsg_OMPair @ SV1625 @ ( c_Message_Omsg_OMPair @ SV1814 @ ( c_Message_Omsg_OMPair @ SV529 @ SV1841 ) ) ) ) ) @ ( c_List_Oset @ SV1042 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV529 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1042 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4835]) ).
thf(4997,plain,
! [SV1842: $i,SV1815: $i,SV1630: $i,SV1386: $i,SV1052: $i,SV541: $i] :
( ( ( ( c_Event_Oevent_OSays @ SV541 @ SV1052 @ SV1386 )
!= ( c_Event_Oevent_OSays @ SV1630 @ SV1815 @ SV1842 ) )
= $true )
| ( ( SV541 = SV1630 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4837]) ).
thf(4998,plain,
! [SV1843: $i,SV1769: $i,SV1631: $i,SV1387: $i,SV1053: $i,SV542: $i] :
( ( ( ( c_Event_Oevent_OSays @ SV542 @ SV1053 @ SV1387 )
!= ( c_Event_Oevent_OSays @ SV1631 @ SV1769 @ SV1843 ) )
= $true )
| ( ( SV1053 = SV1769 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4838]) ).
thf(4999,plain,
! [SV1816: $i,SV1770: $i,SV1632: $i,SV1388: $i,SV1054: $i,SV543: $i] :
( ( ( ( c_Event_Oevent_OSays @ SV543 @ SV1054 @ SV1388 )
!= ( c_Event_Oevent_OSays @ SV1632 @ SV1770 @ SV1816 ) )
= $true )
| ( ( SV1388 = SV1816 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4839]) ).
thf(5000,plain,
! [SV1817: $i,SV1773: $i,SV1635: $i,SV1389: $i,SV1059: $i,SV548: $i] :
( ( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1059 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY4514: $i,SY4515: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1389 @ SV1635 @ ( c_Message_Omsg_OCrypt @ SV1773 @ ( c_Message_Omsg_OMPair @ SV1817 @ ( c_Message_Omsg_OMPair @ SY4514 @ ( c_Message_Omsg_OMPair @ SY4515 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SV1059 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4842]) ).
thf(5001,plain,
! [SV1065: $i,SV556: $i,SV1637: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1637 ) @ SV556 ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Public_OshrK @ SV1637 ) ) @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV556 @ ( c_Message_Oanalz @ SV1065 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4843]) ).
thf(5002,plain,
! [SV1086: $i,SV578: $i,SV1644: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1644 ) @ SV578 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1644 @ c_Event_Obad @ tc_Message_Oagent )
= $false )
| ( ( c_in @ SV578 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1086 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4849]) ).
thf(5003,plain,
! [SV1122: $i,SV628: $i,SV1419: $i,SV1649: $i,SV39: $i] :
( ( ( SV39 = SV1649 )
= $true )
| ( ( SV39 = SV1419 )
= $true )
| ( ( ( c_Set_Oinsert @ SV39 @ ( c_Set_Oinsert @ SV628 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 )
= ( c_Set_Oinsert @ SV1419 @ ( c_Set_Oinsert @ SV1649 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1122 @ tc_bool ) ) @ SV1122 ) @ SV1122 ) )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4853]) ).
thf(5004,plain,
! [SV1778: $i,SV1123: $i,SV40: $i,SV1420: $i,SV629: $i] :
( ( ( SV629 = SV1420 )
= $true )
| ( ( SV40 = SV1420 )
= $true )
| ( ( ( c_Set_Oinsert @ SV40 @ ( c_Set_Oinsert @ SV629 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 )
= ( c_Set_Oinsert @ SV1420 @ ( c_Set_Oinsert @ SV1778 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1123 @ tc_bool ) ) @ SV1123 ) @ SV1123 ) )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4854]) ).
thf(5005,plain,
! [SV1421: $i,SV1124: $i,SV630: $i,SV1650: $i,SV41: $i] :
( ( ( SV41 = SV1650 )
= $true )
| ( ( SV630 = SV1650 )
= $true )
| ( ( ( c_Set_Oinsert @ SV41 @ ( c_Set_Oinsert @ SV630 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 )
= ( c_Set_Oinsert @ SV1421 @ ( c_Set_Oinsert @ SV1650 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1124 @ tc_bool ) ) @ SV1124 ) @ SV1124 ) )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4855]) ).
thf(5006,plain,
! [SV1125: $i,SV42: $i,SV1651: $i,SV1422: $i,SV631: $i] :
( ( ( SV631 = SV1422 )
= $true )
| ( ( SV631 = SV1651 )
= $true )
| ( ( ( c_Set_Oinsert @ SV42 @ ( c_Set_Oinsert @ SV631 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 )
= ( c_Set_Oinsert @ SV1422 @ ( c_Set_Oinsert @ SV1651 @ ( c_Orderings_Obot__class_Obot @ ( tc_fun @ SV1125 @ tc_bool ) ) @ SV1125 ) @ SV1125 ) )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4856]) ).
thf(5007,plain,
! [SV647: $i,SV1655: $i,SV1427: $i,SV1135: $i,SV68: $i] :
( ( ( hBOOL @ ( hAPP @ SV68 @ SV1135 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ SV1427 @ SV1655 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV68 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV68 @ ( c_List_Oappend @ SV647 @ ( c_List_Olist_OCons @ SV1135 @ SV1427 @ SV1655 ) @ SV1655 ) @ SV1655 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4859]) ).
thf(5008,plain,
! [SV1431: $i,SV1656: $i,SV654: $i,SV1138: $i,SV77: $i] :
( ( ( hBOOL @ ( hAPP @ SV77 @ SV1138 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ SV654 @ SV1656 ) ) )
= $true )
| ( ( hBOOL @ ( hAPP @ SV77 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV77 @ ( c_List_Oappend @ SV654 @ ( c_List_Olist_OCons @ SV1138 @ SV1431 @ SV1656 ) @ SV1656 ) @ SV1656 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4860]) ).
thf(5009,plain,
! [SV89: $i,SV1439: $i,SV1659: $i] :
( ( ( c_lessequals @ SV1659 @ SV1439 @ SV89 )
= $false )
| ( ( ~ ( c_lessequals @ SV1439 @ SV1659 @ SV89 ) )
= $true )
| ( ( SV1439 = SV1659 )
= $true )
| ( ( class_Orderings_Oorder @ SV89 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4866]) ).
thf(5010,plain,
! [SV90: $i,SV1440: $i,SV1660: $i] :
( ( ( c_lessequals @ SV1660 @ SV1440 @ SV90 )
= $false )
| ( ( ~ ( c_lessequals @ SV1440 @ SV1660 @ SV90 ) )
= $true )
| ( ( SV1440 = SV1660 )
= $true )
| ( ( class_Orderings_Oorder @ SV90 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4867]) ).
thf(5011,plain,
! [SV91: $i,SV1661: $i,SV1441: $i] :
( ( ( c_lessequals @ SV1441 @ SV1661 @ SV91 )
= $false )
| ( ( ~ ( c_lessequals @ SV1661 @ SV1441 @ SV91 ) )
= $true )
| ( ( SV1441 = SV1661 )
= $true )
| ( ( class_Orderings_Oorder @ SV91 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4868]) ).
thf(5012,plain,
! [SV1446: $i,SV103: $i,SV1148: $i,SV1666: $i,SV672: $i] :
( ( ( c_lessequals @ SV672 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) )
= $false )
| ( ( ~ ( c_lessequals @ SV103 @ SV1446 @ ( tc_fun @ SV1148 @ tc_bool ) ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV103 @ SV672 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1446 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( tc_fun @ SV1148 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4872]) ).
thf(5013,plain,
! [SV674: $i,SV1149: $i,SV1448: $i,SV106: $i] :
( ( ( c_in @ SV106 @ SV1448 @ SV1149 )
= $false )
| ( ( c_lessequals @ SV674 @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Set_Oinsert @ SV106 @ SV674 @ SV1149 ) @ SV1448 @ ( tc_fun @ SV1149 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4873]) ).
thf(5014,plain,
! [SV1667: $i,SV108: $i,SV675: $i,SV1818: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1818 @ SV675 @ SV108 ) @ SV1667 @ SV108 )
= $false )
| ( ( c_lessequals @ SV675 @ SV1667 @ SV108 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV108 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4874]) ).
thf(5015,plain,
! [SV1668: $i,SV109: $i,SV1819: $i,SV676: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV676 @ SV1819 @ SV109 ) @ SV1668 @ SV109 )
= $false )
| ( ( c_lessequals @ SV676 @ SV1668 @ SV109 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV109 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4875]) ).
thf(5016,plain,
! [SV1669: $i,SV110: $i,SV1780: $i,SV677: $i] :
( ( ( c_lessequals @ SV677 @ SV1780 @ SV110 )
= $false )
| ( ( c_lessequals @ SV677 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1669 @ SV1780 @ SV110 ) @ SV110 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV110 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4876]) ).
thf(5017,plain,
! [SV1820: $i,SV111: $i,SV1670: $i,SV678: $i] :
( ( ( c_lessequals @ SV678 @ SV1670 @ SV111 )
= $false )
| ( ( c_lessequals @ SV678 @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1670 @ SV1820 @ SV111 ) @ SV111 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV111 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4877]) ).
thf(5018,plain,
! [SV1671: $i,SV112: $i,SV679: $i,SV1821: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1821 @ SV679 @ SV112 ) @ SV1671 @ SV112 )
= $false )
| ( ( c_lessequals @ SV679 @ SV1671 @ SV112 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV112 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4878]) ).
thf(5019,plain,
! [SV1672: $i,SV113: $i,SV1822: $i,SV680: $i] :
( ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV680 @ SV1822 @ SV113 ) @ SV1672 @ SV113 )
= $false )
| ( ( c_lessequals @ SV680 @ SV1672 @ SV113 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV113 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4879]) ).
thf(5020,plain,
! [SV1675: $i,SV116: $i,SV1823: $i,SV683: $i] :
( ( ( ~ ( c_lessequals @ SV683 @ SV1823 @ SV116 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV1823 @ SV1675 @ SV116 ) )
= $true )
| ( ( c_lessequals @ SV683 @ SV1675 @ SV116 )
= $true )
| ( ( class_Orderings_Oorder @ SV116 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4880]) ).
thf(5021,plain,
! [SV684: $i,SV117: $i,SV1676: $i,SV1824: $i] :
( ( ( ~ ( c_lessequals @ SV1824 @ SV1676 @ SV117 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV684 @ SV1824 @ SV117 ) )
= $true )
| ( ( c_lessequals @ SV684 @ SV1676 @ SV117 )
= $true )
| ( ( class_Orderings_Opreorder @ SV117 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4881]) ).
thf(5022,plain,
! [SV687: $i,SV1152: $i,SV1677: $i,SV120: $i] :
( ( ( c_lessequals @ SV120 @ SV1677 @ ( tc_fun @ SV1152 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV1677 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV120 @ SV687 @ ( tc_fun @ SV1152 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4882]) ).
thf(5023,plain,
! [SV688: $i,SV1825: $i,SV121: $i,SV1449: $i] :
( ( ( c_lessequals @ SV1449 @ SV121 @ ( tc_fun @ SV1825 @ tc_bool ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV1449 @ SV688 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV121 @ SV688 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4883]) ).
thf(5024,plain,
! [SV1781: $i,SV124: $i,SV689: $i,SV1452: $i] :
( ( ( hBOOL @ ( hAPP @ SV1452 @ SV689 ) )
= $false )
| ( ( c_lessequals @ SV1452 @ SV124 @ ( tc_fun @ SV1781 @ tc_bool ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV124 @ SV689 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4884]) ).
thf(5025,plain,
! [SV1456: $i,SV697: $i,SV1158: $i,SV132: $i] :
( ( ( c_lessequals @ ( c_Message_Oanalz @ SV132 ) @ ( c_Message_Oanalz @ SV1158 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_Oanalz @ SV697 ) @ ( c_Message_Oanalz @ SV1456 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV132 @ SV697 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1158 @ SV1456 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4887]) ).
thf(5026,plain,
! [SV1159: $i,SV1458: $i,SV134: $i,SV1827: $i,SV1783: $i,SV698: $i] :
( ( ( ~ ( c_in @ SV698 @ SV1783 @ SV1827 ) )
= $true )
| ( ( ~ ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SV1783 @ SV1827 @ SV1458 ) @ SV1159 @ ( tc_fun @ SV1458 @ tc_bool ) ) )
= $true )
| ( ( c_in @ ( hAPP @ SV134 @ SV698 ) @ SV1159 @ SV1458 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4888]) ).
thf(5027,plain,
! [SV729: $i,SV1169: $i,SV1468: $i,SV169: $i] :
( ( ( c_lessequals @ SV169 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV729 @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV169 @ SV729 @ ( tc_fun @ SV1169 @ tc_bool ) ) @ SV1468 @ ( tc_fun @ SV1169 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4892]) ).
thf(5028,plain,
! [SV732: $i,SV1172: $i,SV1469: $i,SV172: $i] :
( ( ( c_lessequals @ SV172 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV732 @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV172 @ SV732 @ ( tc_fun @ SV1172 @ tc_bool ) ) @ SV1469 @ ( tc_fun @ SV1172 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4893]) ).
thf(5029,plain,
! [SV733: $i,SV173: $i,SV1788: $i,SV1686: $i] :
( ( ( ~ ( c_lessequals @ SV1686 @ SV1788 @ SV173 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV733 @ SV1788 @ SV173 ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV733 @ SV1686 @ SV173 ) @ SV1788 @ SV173 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV173 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4894]) ).
thf(5030,plain,
! [SV734: $i,SV176: $i,SV1789: $i,SV1689: $i] :
( ( ( ~ ( c_lessequals @ SV1689 @ SV1789 @ SV176 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV734 @ SV1789 @ SV176 ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV734 @ SV1689 @ SV176 ) @ SV1789 @ SV176 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV176 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4895]) ).
thf(5031,plain,
! [SV735: $i,SV177: $i,SV1790: $i,SV1690: $i] :
( ( ( ~ ( c_lessequals @ SV1690 @ SV1790 @ SV177 ) )
= $true )
| ( ( ~ ( c_lessequals @ SV735 @ SV1790 @ SV177 ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV735 @ SV1690 @ SV177 ) @ SV1790 @ SV177 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV177 )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4896]) ).
thf(5032,plain,
! [SV1181: $i,SV205: $i,SV1844: $i,SV1791: $i,SV750: $i] :
( ( ( ~ ( c_lessequals @ SV750 @ SV1791 @ ( tc_fun @ SV1844 @ SV205 ) ) )
= $true )
| ( ( c_lessequals @ ( hAPP @ SV750 @ SV1181 ) @ ( hAPP @ SV1791 @ SV1181 ) @ SV205 )
= $true )
| ( ( class_HOL_Oord @ SV205 )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[4901]) ).
thf(5033,plain,
! [SV210: $i,SV1182: $i,SV751: $i,SV1704: $i] :
( ( ( c_lessequals @ SV1704 @ SV751 @ ( tc_fun @ SV1182 @ tc_bool ) )
= $false )
| ( ( c_in @ SV210 @ SV1704 @ SV1182 )
= $false )
| ( ( c_in @ SV210 @ SV751 @ SV1182 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4906]) ).
thf(5034,plain,
! [SV752: $i,SV1183: $i,SV1705: $i,SV211: $i] :
( ( ( c_in @ SV211 @ SV1705 @ SV1183 )
= $false )
| ( ( c_lessequals @ SV1705 @ SV752 @ ( tc_fun @ SV1183 @ tc_bool ) )
= $false )
| ( ( c_in @ SV211 @ SV752 @ SV1183 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4907]) ).
thf(5035,plain,
! [SV212: $i,SV1184: $i,SV753: $i,SV1706: $i] :
( ( ( c_lessequals @ SV1706 @ SV753 @ ( tc_fun @ SV1184 @ tc_bool ) )
= $false )
| ( ( c_in @ SV212 @ SV1706 @ SV1184 )
= $false )
| ( ( c_in @ SV212 @ SV753 @ SV1184 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4908]) ).
thf(5036,plain,
! [SV213: $i,SV1185: $i,SV754: $i,SV1707: $i] :
( ( ( c_lessequals @ SV1707 @ SV754 @ ( tc_fun @ SV1185 @ tc_bool ) )
= $false )
| ( ( c_in @ SV213 @ SV1707 @ SV1185 )
= $false )
| ( ( c_in @ SV213 @ SV754 @ SV1185 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4909]) ).
thf(5037,plain,
! [SV774: $i,SV235: $i,SV1792: $i,SV1709: $i] :
( ( ( ( c_Message_Oanalz @ SV1709 )
= ( c_Message_Oanalz @ SV1792 ) )
= $false )
| ( ( ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1709 @ SV235 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1792 @ SV774 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) )
= $true )
| ( ( ( c_Message_Oanalz @ SV235 )
= ( c_Message_Oanalz @ SV774 ) )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4911]) ).
thf(5038,plain,
! [SV1195: $i,SV780: $i,SV1710: $i,SV242: $i] :
( ( ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1710 @ SV780 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1710 @ ( c_Message_Oparts @ SV1195 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV242 @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV780 @ SV1195 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4912]) ).
thf(5039,plain,
! [SV250: $i,SV1712: $i,SV1497: $i,SV1200: $i,SV788: $i] :
( ( ( ~ ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ! [SY4414: $i,SY4415: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SV1497 @ ( c_Message_Omsg_OMPair @ SV1712 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4414 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY4415 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4914]) ).
thf(5040,plain,
! [SV254: $i,SV1501: $i,SV1203: $i,SV791: $i] :
( ( ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4264: $i,SY4265: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SV1501 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4264 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY4265 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4915]) ).
thf(5041,plain,
! [SV792: $i,SV255: $i] :
( ( ( c_in @ SV255 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV255 ) @ ( c_Event_Oused @ SV792 ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV792 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV255 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV792 ) ) ) @ tc_nat )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4916]) ).
thf(5042,plain,
! [SV265: $i,SV1504: $i,SV802: $i,SV1828: $i] :
( ( ( ~ ( c_lessequals @ SV1828 @ SV802 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV1504 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1828 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1504 @ SV802 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SV802 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4920]) ).
thf(5043,plain,
! [SV266: $i,SV803: $i,SV1211: $i,SV1829: $i] :
( ( ( ~ ( c_lessequals @ SV1829 @ SV1211 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV803 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1829 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SV1211 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV803 @ SV1211 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4921]) ).
thf(5044,plain,
! [SV275: $i,SV810: $i,SV1509: $i] :
( ( ( ~ ( c_lessequals @ SV1509 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) ) )
= $true )
| ( ( ~ ( c_in @ SV810 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1509 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV275 @ SV1509 @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4923]) ).
thf(5045,plain,
! [SV276: $i,SV1217: $i,SV811: $i] :
( ( ( c_lessequals @ SV811 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV1217 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV276 @ SV811 @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV276 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV811 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1217 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4924]) ).
thf(5046,plain,
! [SV1512: $i,SV283: $i,SV817: $i,SV1794: $i] :
( ( ( c_in @ SV1794 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV817 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1794 @ SV1512 @ tc_Message_Omsg ) ) ) @ tc_nat ) )
= $true )
| ( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1512 @ SV817 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV283 ) ) @ ( c_Message_Oparts @ SV817 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4927]) ).
thf(5047,plain,
! [SV287: $i,SV1223: $i,SV821: $i] :
( ( ( c_lessequals @ SV821 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV1223 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV821 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4928]) ).
thf(5048,plain,
! [SV1513: $i,SV1715: $i,SV822: $i,SV1224: $i,SV288: $i] :
( ( ( hBOOL @ ( hAPP @ SV288 @ SV1224 ) )
= $false )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ SV822 @ SV1715 ) @ ( c_List_Oset @ SV822 @ SV1715 ) @ SV1715 )
= $true )
| ( ( hBOOL @ ( hAPP @ SV288 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV288 @ ( c_List_Oappend @ SV822 @ ( c_List_Olist_OCons @ SV1224 @ SV1513 @ SV1715 ) @ SV1715 ) @ SV1715 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4929]) ).
thf(5049,plain,
! [SV823: $i,SV1716: $i,SV1514: $i,SV1225: $i,SV289: $i] :
( ( ( hBOOL @ ( hAPP @ SV289 @ SV1225 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV289 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ SV1514 @ SV1716 ) ) )
= $true )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV289 @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SV1716 ) @ SV1716 ) @ SV1716 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV823 @ ( c_List_Olist_OCons @ SV1225 @ SV1514 @ SV1716 ) @ SV1716 ) @ SV1716 ) @ SV1716 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4930]) ).
thf(5050,plain,
! [SV1515: $i,SV1717: $i,SV824: $i,SV1226: $i,SV290: $i] :
( ( ( hBOOL @ ( hAPP @ SV290 @ SV1226 ) )
= $false )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ SV824 @ SV1717 ) @ ( c_List_Oset @ SV824 @ SV1717 ) @ SV1717 )
= $true )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV290 @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SV1717 ) @ SV1717 ) @ SV1717 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV824 @ ( c_List_Olist_OCons @ SV1226 @ SV1515 @ SV1717 ) @ SV1717 ) @ SV1717 ) @ SV1717 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4931]) ).
thf(5051,plain,
! [SV825: $i,SV1718: $i,SV1516: $i,SV1227: $i,SV291: $i] :
( ( ( hBOOL @ ( hAPP @ SV291 @ SV1227 ) )
= $false )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ SV1516 @ SV1718 ) @ ( c_List_Oset @ SV1516 @ SV1718 ) @ SV1718 )
= $true )
| ( ( hBOOL @ ( hAPP @ SV291 @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV291 @ ( c_List_Oappend @ SV825 @ ( c_List_Olist_OCons @ SV1227 @ SV1516 @ SV1718 ) @ SV1718 ) @ SV1718 ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4932]) ).
thf(5052,plain,
! [SV1517: $i,SV1719: $i,SV826: $i,SV1228: $i,SV292: $i] :
( ( ( hBOOL @ ( hAPP @ SV292 @ SV1228 ) )
= $false )
| ( ( hBOOL @ ( hAPP @ SV292 @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ SV826 @ SV1719 ) ) )
= $true )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__first__prop__iff__1__5 @ SV292 @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SV1719 ) @ SV1719 ) @ SV1719 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV826 @ ( c_List_Olist_OCons @ SV1228 @ SV1517 @ SV1719 ) @ SV1719 ) @ SV1719 ) @ SV1719 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4933]) ).
thf(5053,plain,
! [SV827: $i,SV1720: $i,SV1518: $i,SV1229: $i,SV293: $i] :
( ( ( hBOOL @ ( hAPP @ SV293 @ SV1229 ) )
= $false )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ SV1518 @ SV1720 ) @ ( c_List_Oset @ SV1518 @ SV1720 ) @ SV1720 )
= $true )
| ( ( c_in @ ( c_List_Osko__List__Xsplit__list__last__prop__iff__1__5 @ SV293 @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SV1720 ) @ SV1720 ) @ SV1720 ) @ ( c_List_Oset @ ( c_List_Oappend @ SV827 @ ( c_List_Olist_OCons @ SV1229 @ SV1518 @ SV1720 ) @ SV1720 ) @ SV1720 ) @ SV1720 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4934]) ).
thf(5054,plain,
! [SV303: $i,SV837: $i,SV1236: $i] :
( ( ( c_in @ SV1236 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV837 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV303 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV837 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1236 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4935]) ).
thf(5055,plain,
! [SV304: $i,SV838: $i,SV1524: $i] :
( ( ( c_in @ SV1524 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true )
| ( ( ~ ( c_in @ SV838 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV1524 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( SV304 = SV1524 )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4936]) ).
thf(5056,plain,
! [SV850: $i,SV317: $i,SV1529: $i] :
( ( ( c_in @ SV1529 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1529 @ SV317 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1529 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV317 @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4938]) ).
thf(5057,plain,
! [SV1284: $i,SV374: $i,SV1558: $i,SV902: $i] :
( ( ( SV902 = SV1558 )
= $true )
| ( ( c_in @ SV374 @ SV902 @ SV1284 )
= $true )
| ( ( c_in @ SV374 @ SV1558 @ SV1284 )
= $true )
| ( ( ( c_Set_Oinsert @ SV374 @ SV902 @ SV1284 )
= ( c_Set_Oinsert @ SV374 @ SV1558 @ SV1284 ) )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4945]) ).
thf(5058,plain,
! [SV396: $i,SV1729: $i,SV1560: $i,SV922: $i,SV1295: $i] :
( ( ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( ~ ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ! [SY4416: $i,SY4417: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SV1729 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1729 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4416 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4417 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4946]) ).
thf(5059,plain,
! [SV1830: $i,SV1798: $i,SV1730: $i,SV1561: $i,SV1297: $i,SV924: $i,SV398: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4516: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SY4516 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4421: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4421 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4947]) ).
thf(5060,plain,
! [SV1831: $i,SV1799: $i,SV1731: $i,SV1562: $i,SV1298: $i,SV925: $i,SV399: $i] :
( ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4518: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SY4518 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4425: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4425 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4948]) ).
thf(5061,plain,
! [SV1564: $i,SV1732: $i,SV926: $i,SV1300: $i,SV401: $i,SV1845: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1845 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SV1732 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SV1732 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1732 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SV1732 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4949]) ).
thf(5062,plain,
! [SV1565: $i,SV1733: $i,SV927: $i,SV1301: $i,SV402: $i,SV1846: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1846 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SV1733 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SV1733 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1733 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SV1733 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4950]) ).
thf(5063,plain,
! [SV1566: $i,SV1734: $i,SV928: $i,SV1302: $i,SV403: $i,SV1847: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1847 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SV1734 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SV1734 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1734 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SV1734 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4951]) ).
thf(5064,plain,
! [SV1568: $i,SV1735: $i,SV930: $i,SV1303: $i,SV405: $i,SV1848: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1848 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SV1735 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SV1735 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1735 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SV1735 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[4952]) ).
thf(5065,plain,
! [SV1569: $i,SV406: $i,SV931: $i] :
( ( ( SV931 = c_Message_Oagent_OSpy )
= $true )
| ( ( ~ ( c_in @ SV406 @ ( c_Event_Oknows @ SV931 @ SV1569 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV931 @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ SV931 @ SV406 @ SV1569 ) @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OGets @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV406 @ ( c_Event_OinitState @ SV931 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4953]) ).
thf(5066,plain,
! [SV407: $i,SV1736: $i,SV1570: $i,SV1304: $i,SV932: $i] :
( ( ( ~ ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4430: $i,SY4431: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SY4430 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4431 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[4954]) ).
thf(5067,plain,
! [SV408: $i,SV1305: $i,SV933: $i] :
( ( ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ! [SY4072: $i] :
( ( c_in @ SY4072 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4073: $i] :
( ( c_in @ SY4073 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4073 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4073 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4072 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY4073 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[4955]) ).
thf(5068,plain,
! [SV411: $i,SV1307: $i,SV936: $i,SV1572: $i,SV1737: $i] :
( ( ( c_in @ SV1737 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ! [SY4432: $i,SY4433: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1572 @ ( c_Message_Omsg_OCrypt @ SY4432 @ ( c_Message_Omsg_OMPair @ SY4433 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SV1737 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ ( c_Message_Omsg_OAgent @ SV1572 ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4956]) ).
thf(5069,plain,
! [SV1849: $i,SV1832: $i,SV1800: $i,SV1738: $i,SV1573: $i,SV1308: $i,SV937: $i,SV412: $i] :
( ( ( SV412 = SV937 )
| ~ ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4534: $i,SY4535: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1849 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1849 ) @ ( c_Message_Omsg_OMPair @ SY4534 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4535 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4957]) ).
thf(5070,plain,
! [SV1850: $i,SV1833: $i,SV1801: $i,SV1739: $i,SV1574: $i,SV1309: $i,SV938: $i,SV413: $i] :
( ( ( SV413 = SV938 )
| ~ ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4536: $i,SY4537: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1850 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1850 ) @ ( c_Message_Omsg_OMPair @ SY4536 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4537 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4958]) ).
thf(5071,plain,
! [SV1851: $i,SV1834: $i,SV1802: $i,SV1740: $i,SV1575: $i,SV1310: $i,SV939: $i,SV414: $i] :
( ( ( SV414 = SV939 )
| ~ ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4538: $i,SY4539: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1851 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1851 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4538 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4539 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4959]) ).
thf(5072,plain,
! [SV1852: $i,SV1835: $i,SV1803: $i,SV1741: $i,SV1576: $i,SV1311: $i,SV940: $i,SV415: $i] :
( ( ( SV415 = SV940 )
| ~ ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4540: $i,SY4541: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SV1852 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4540 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4541 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ),
inference(extcnf_forall_pos,[status(thm)],[4960]) ).
thf(5073,plain,
! [SV1742: $i,SV1577: $i,SV416: $i,SV941: $i,SV1312: $i] :
( ( ( c_in @ SV1312 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ! [SY4454: $i,SY4455: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SV1577 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1742 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4454 ) @ SY4455 ) ) ) ) ) @ ( c_List_Oset @ SV1312 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4961]) ).
thf(5074,plain,
! [SV942: $i,SV1578: $i,SV1313: $i,SV1836: $i,SV417: $i,SV1743: $i] :
( ( ( ! [SY4532: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1743 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1743 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1836 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SY4532 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1836 @ SV1743 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4962]) ).
thf(5075,plain,
! [SV1314: $i,SV1579: $i,SV1744: $i,SV943: $i,SV419: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ! [SY4458: $i,SY4459: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4458 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4459 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4963]) ).
thf(5076,plain,
! [SV944: $i,SV1581: $i,SV1316: $i,SV1837: $i,SV421: $i,SV1745: $i] :
( ( ( ! [SY4533: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1745 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1745 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1837 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SY4533 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1837 @ SV1745 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4964]) ).
thf(5077,plain,
! [SV431: $i,SV952: $i,SV1582: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1582 ) ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1582 ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1582 @ SV431 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4965]) ).
thf(5078,plain,
! [SV953: $i,SV1317: $i,SV432: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV432 ) ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV432 ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV953 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV432 @ SV953 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4966]) ).
thf(5079,plain,
! [SV1364: $i,SV1609: $i,SV1757: $i,SV1017: $i,SV501: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ! [SY4464: $i,SY4465: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4464 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4465 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4981]) ).
thf(5080,plain,
! [SV1610: $i,SV1365: $i,SV502: $i,SV1018: $i,SV1758: $i] :
( ( ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4982]) ).
thf(5081,plain,
! [SV1021: $i,SV506: $i,SV1366: $i,SV1759: $i,SV1612: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ! [SY4361: $i,SY4362: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4361 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4361 ) @ ( c_Message_Omsg_OMPair @ SY4362 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4983]) ).
thf(5082,plain,
! [SV1613: $i,SV507: $i,SV1367: $i,SV1022: $i] :
( ( ( c_in @ SV1022 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1613 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1613 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV507 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV507 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ SV507 @ SV1022 @ SV1367 @ SV1613 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1613 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4984]) ).
thf(5083,plain,
! [SV1614: $i,SV1368: $i,SV1023: $i,SV508: $i,SV1760: $i] :
( ( ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4468: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SY4468 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4469: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4469 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4985]) ).
thf(5084,plain,
! [SV1617: $i,SV1373: $i,SV1031: $i,SV518: $i,SV1762: $i] :
( ( ( c_in @ SV1762 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1762 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) ) @ ( c_List_Oset @ SV1762 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) @ SV1762 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4987]) ).
thf(5085,plain,
! [SV1618: $i,SV1374: $i,SV1032: $i,SV519: $i,SV1763: $i] :
( ( ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ! [SY4470: $i,SY4471: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4470 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4471 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4988]) ).
thf(5086,plain,
! [SV520: $i,SV1033: $i,SV1764: $i,SV1619: $i,SV1375: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ! [SY4472: $i,SY4473: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SY4472 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SY4473 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4989]) ).
thf(5087,plain,
! [SV1765: $i,SV1620: $i,SV1376: $i,SV1034: $i,SV521: $i,SV1811: $i] :
( ( ( ~ ( c_in @ SV1811 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1811 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) ) @ ( c_List_Oset @ SV1811 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4990]) ).
thf(5088,plain,
! [SV1038: $i,SV525: $i,SV1766: $i,SV1621: $i,SV1380: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ! [SY4475: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SY4475 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4992]) ).
thf(5089,plain,
! [SV526: $i,SV1381: $i,SV1039: $i,SV1622: $i,SV1813: $i] :
( ( ( c_in @ SV1813 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ( c_in @ SV1622 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4511: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1622 ) @ ( c_Message_Omsg_OMPair @ SY4511 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1813 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ ( c_Message_Omsg_OAgent @ SV1622 ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4993]) ).
thf(5090,plain,
! [SV527: $i,SV1623: $i,SV1382: $i,SV1767: $i,SV1040: $i] :
( ( ( ~ ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ! [SY4476: $i,SY4477: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4476 @ SV1767 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1767 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4477 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ ( c_Message_Omsg_OAgent @ SV1767 ) ) ) )
= $true )
| ( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[4994]) ).
thf(5091,plain,
! [SV1042: $i,SV1841: $i,SV529: $i,SV1814: $i,SV1625: $i,SV1383: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1383 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1383 ) @ ( c_Message_Omsg_OMPair @ SV1625 @ ( c_Message_Omsg_OMPair @ SV1814 @ ( c_Message_Omsg_OMPair @ SV529 @ SV1841 ) ) ) ) ) @ ( c_List_Oset @ SV1042 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV529 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1042 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4996]) ).
thf(5092,plain,
! [SV1842: $i,SV1815: $i,SV1630: $i,SV1386: $i,SV1052: $i,SV541: $i] :
( ( ( ( c_Event_Oevent_OSays @ SV541 @ SV1052 @ SV1386 )
= ( c_Event_Oevent_OSays @ SV1630 @ SV1815 @ SV1842 ) )
= $false )
| ( ( SV541 = SV1630 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4997]) ).
thf(5093,plain,
! [SV1843: $i,SV1769: $i,SV1631: $i,SV1387: $i,SV1053: $i,SV542: $i] :
( ( ( ( c_Event_Oevent_OSays @ SV542 @ SV1053 @ SV1387 )
= ( c_Event_Oevent_OSays @ SV1631 @ SV1769 @ SV1843 ) )
= $false )
| ( ( SV1053 = SV1769 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4998]) ).
thf(5094,plain,
! [SV1816: $i,SV1770: $i,SV1632: $i,SV1388: $i,SV1054: $i,SV543: $i] :
( ( ( ( c_Event_Oevent_OSays @ SV543 @ SV1054 @ SV1388 )
= ( c_Event_Oevent_OSays @ SV1632 @ SV1770 @ SV1816 ) )
= $false )
| ( ( SV1388 = SV1816 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[4999]) ).
thf(5095,plain,
! [SV1059: $i,SV548: $i,SV1853: $i,SV1817: $i,SV1773: $i,SV1635: $i,SV1389: $i] :
( ( ( ! [SY4542: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1389 @ SV1635 @ ( c_Message_Omsg_OCrypt @ SV1773 @ ( c_Message_Omsg_OMPair @ SV1817 @ ( c_Message_Omsg_OMPair @ SV1853 @ ( c_Message_Omsg_OMPair @ SY4542 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SV1059 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1059 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5000]) ).
thf(5096,plain,
! [SV89: $i,SV1659: $i,SV1439: $i] :
( ( ( c_lessequals @ SV1439 @ SV1659 @ SV89 )
= $false )
| ( ( c_lessequals @ SV1659 @ SV1439 @ SV89 )
= $false )
| ( ( SV1439 = SV1659 )
= $true )
| ( ( class_Orderings_Oorder @ SV89 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5009]) ).
thf(5097,plain,
! [SV90: $i,SV1660: $i,SV1440: $i] :
( ( ( c_lessequals @ SV1440 @ SV1660 @ SV90 )
= $false )
| ( ( c_lessequals @ SV1660 @ SV1440 @ SV90 )
= $false )
| ( ( SV1440 = SV1660 )
= $true )
| ( ( class_Orderings_Oorder @ SV90 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5010]) ).
thf(5098,plain,
! [SV91: $i,SV1441: $i,SV1661: $i] :
( ( ( c_lessequals @ SV1661 @ SV1441 @ SV91 )
= $false )
| ( ( c_lessequals @ SV1441 @ SV1661 @ SV91 )
= $false )
| ( ( SV1441 = SV1661 )
= $true )
| ( ( class_Orderings_Oorder @ SV91 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5011]) ).
thf(5099,plain,
! [SV1666: $i,SV672: $i,SV1148: $i,SV1446: $i,SV103: $i] :
( ( ( c_lessequals @ SV103 @ SV1446 @ ( tc_fun @ SV1148 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ SV672 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) )
= $false )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV103 @ SV672 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1446 @ SV1666 @ ( tc_fun @ SV1148 @ tc_bool ) ) @ ( tc_fun @ SV1148 @ tc_bool ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5012]) ).
thf(5100,plain,
! [SV1675: $i,SV116: $i,SV1823: $i,SV683: $i] :
( ( ( c_lessequals @ SV683 @ SV1823 @ SV116 )
= $false )
| ( ( ~ ( c_lessequals @ SV1823 @ SV1675 @ SV116 ) )
= $true )
| ( ( c_lessequals @ SV683 @ SV1675 @ SV116 )
= $true )
| ( ( class_Orderings_Oorder @ SV116 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5020]) ).
thf(5101,plain,
! [SV684: $i,SV117: $i,SV1676: $i,SV1824: $i] :
( ( ( c_lessequals @ SV1824 @ SV1676 @ SV117 )
= $false )
| ( ( ~ ( c_lessequals @ SV684 @ SV1824 @ SV117 ) )
= $true )
| ( ( c_lessequals @ SV684 @ SV1676 @ SV117 )
= $true )
| ( ( class_Orderings_Opreorder @ SV117 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5021]) ).
thf(5102,plain,
! [SV1159: $i,SV1458: $i,SV134: $i,SV1827: $i,SV1783: $i,SV698: $i] :
( ( ( c_in @ SV698 @ SV1783 @ SV1827 )
= $false )
| ( ( ~ ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SV1783 @ SV1827 @ SV1458 ) @ SV1159 @ ( tc_fun @ SV1458 @ tc_bool ) ) )
= $true )
| ( ( c_in @ ( hAPP @ SV134 @ SV698 ) @ SV1159 @ SV1458 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5026]) ).
thf(5103,plain,
! [SV733: $i,SV173: $i,SV1788: $i,SV1686: $i] :
( ( ( c_lessequals @ SV1686 @ SV1788 @ SV173 )
= $false )
| ( ( ~ ( c_lessequals @ SV733 @ SV1788 @ SV173 ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV733 @ SV1686 @ SV173 ) @ SV1788 @ SV173 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV173 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5029]) ).
thf(5104,plain,
! [SV734: $i,SV176: $i,SV1789: $i,SV1689: $i] :
( ( ( c_lessequals @ SV1689 @ SV1789 @ SV176 )
= $false )
| ( ( ~ ( c_lessequals @ SV734 @ SV1789 @ SV176 ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV734 @ SV1689 @ SV176 ) @ SV1789 @ SV176 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV176 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5030]) ).
thf(5105,plain,
! [SV735: $i,SV177: $i,SV1790: $i,SV1690: $i] :
( ( ( c_lessequals @ SV1690 @ SV1790 @ SV177 )
= $false )
| ( ( ~ ( c_lessequals @ SV735 @ SV1790 @ SV177 ) )
= $true )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV735 @ SV1690 @ SV177 ) @ SV1790 @ SV177 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV177 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5031]) ).
thf(5106,plain,
! [SV1181: $i,SV205: $i,SV1844: $i,SV1791: $i,SV750: $i] :
( ( ( c_lessequals @ SV750 @ SV1791 @ ( tc_fun @ SV1844 @ SV205 ) )
= $false )
| ( ( c_lessequals @ ( hAPP @ SV750 @ SV1181 ) @ ( hAPP @ SV1791 @ SV1181 ) @ SV205 )
= $true )
| ( ( class_HOL_Oord @ SV205 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5032]) ).
thf(5107,plain,
! [SV250: $i,SV1712: $i,SV1497: $i,SV1200: $i,SV788: $i] :
( ( ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ! [SY4414: $i,SY4415: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SV1497 @ ( c_Message_Omsg_OMPair @ SV1712 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4414 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY4415 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5039]) ).
thf(5108,plain,
! [SV791: $i,SV254: $i,SV1501: $i,SV1203: $i] :
( ( ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ! [SY4264: $i,SY4265: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SV1501 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4264 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY4265 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[5040]) ).
thf(5109,plain,
! [SV265: $i,SV1504: $i,SV802: $i,SV1828: $i] :
( ( ( c_lessequals @ SV1828 @ SV802 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV1504 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1828 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1504 @ SV802 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SV802 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5042]) ).
thf(5110,plain,
! [SV266: $i,SV803: $i,SV1211: $i,SV1829: $i] :
( ( ( c_lessequals @ SV1829 @ SV1211 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV803 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1829 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SV1211 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV803 @ SV1211 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5043]) ).
thf(5111,plain,
! [SV275: $i,SV810: $i,SV1509: $i] :
( ( ( c_lessequals @ SV1509 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
= $false )
| ( ( ~ ( c_in @ SV810 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1509 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV275 @ SV1509 @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5044]) ).
thf(5112,plain,
! [SV276: $i,SV811: $i,SV1217: $i] :
( ( ( c_in @ SV1217 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_lessequals @ SV811 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
= $false )
| ( ( c_in @ SV276 @ SV811 @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV276 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV811 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1217 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5045]) ).
thf(5113,plain,
! [SV817: $i,SV1512: $i,SV1794: $i,SV283: $i] :
( ( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Set_Oinsert @ SV1794 @ SV1512 @ tc_Message_Omsg ) ) ) @ tc_nat )
= $false )
| ( ( c_in @ SV1794 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV817 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV283 @ ( c_Message_OkeysFor @ ( c_Message_Oparts @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV1512 @ SV817 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) ) @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV283 ) ) @ ( c_Message_Oparts @ SV817 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5046]) ).
thf(5114,plain,
! [SV287: $i,SV821: $i,SV1223: $i] :
( ( ( c_in @ SV1223 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_lessequals @ SV821 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV287 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV821 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1223 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5047]) ).
thf(5115,plain,
! [SV304: $i,SV1524: $i,SV838: $i] :
( ( ( c_in @ SV838 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV1524 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ ( hAPP @ c_Message_Omsg_OKey @ SV1524 ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( SV304 = SV1524 )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV304 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV838 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5055]) ).
thf(5116,plain,
! [SV850: $i,SV317: $i,SV1529: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1529 @ SV317 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1529 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1529 ) @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV317 @ ( c_Message_Oanalz @ SV850 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5056]) ).
thf(5117,plain,
! [SV396: $i,SV1295: $i,SV1729: $i,SV1560: $i,SV922: $i] :
( ( ( ~ ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ! [SY4416: $i,SY4417: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SV1729 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1729 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4416 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4417 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5058]) ).
thf(5118,plain,
! [SV1561: $i,SV1730: $i,SV1297: $i,SV924: $i,SV1830: $i,SV398: $i,SV1798: $i] :
( ( ( ! [SY4516: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SY4516 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4421: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4421 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5059]) ).
thf(5119,plain,
! [SV1562: $i,SV1731: $i,SV1298: $i,SV925: $i,SV1831: $i,SV399: $i,SV1799: $i] :
( ( ( ! [SY4518: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SY4518 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4425: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4425 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5060]) ).
thf(5120,plain,
! [SV1564: $i,SV1732: $i,SV926: $i,SV1300: $i,SV401: $i,SV1845: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1845 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SV1732 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SV1732 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1732 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SV1732 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5061]) ).
thf(5121,plain,
! [SV1565: $i,SV1733: $i,SV927: $i,SV1301: $i,SV402: $i,SV1846: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1846 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SV1733 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SV1733 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1733 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SV1733 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5062]) ).
thf(5122,plain,
! [SV1566: $i,SV1734: $i,SV928: $i,SV1302: $i,SV403: $i,SV1847: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1847 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SV1734 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SV1734 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1734 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SV1734 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5063]) ).
thf(5123,plain,
! [SV1568: $i,SV1735: $i,SV930: $i,SV1303: $i,SV405: $i,SV1848: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1848 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SV1735 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SV1735 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1735 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SV1735 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5064]) ).
thf(5124,plain,
! [SV1569: $i,SV931: $i,SV406: $i] :
( ( ( c_in @ SV406 @ ( c_Event_Oknows @ SV931 @ SV1569 ) @ tc_Message_Omsg )
= $false )
| ( ( SV931 = c_Message_Oagent_OSpy )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV931 @ ( c_Event_Osko__Event__Xknows__imp__Says__Gets__Notes__initState__1__1 @ SV931 @ SV406 @ SV1569 ) @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OGets @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ SV931 @ SV406 ) @ ( c_List_Oset @ SV1569 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV406 @ ( c_Event_OinitState @ SV931 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5065]) ).
thf(5125,plain,
! [SV407: $i,SV1736: $i,SV1570: $i,SV1304: $i,SV932: $i] :
( ( ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4430: $i,SY4431: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SY4430 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4431 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5066]) ).
thf(5126,plain,
! [SV933: $i,SV408: $i,SV1305: $i,SV1854: $i] :
( ( ( ( c_in @ SV1854 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4543: $i] :
( ( c_in @ SY4543 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4543 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4543 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY4543 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[5067]) ).
thf(5127,plain,
! [SV1737: $i,SV411: $i,SV1307: $i,SV936: $i,SV1855: $i,SV1572: $i] :
( ( ( ! [SY4544: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1572 @ ( c_Message_Omsg_OCrypt @ SV1855 @ ( c_Message_Omsg_OMPair @ SY4544 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SV1737 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1737 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ ( c_Message_Omsg_OAgent @ SV1572 ) ) ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5068]) ).
thf(5128,plain,
! [SV1849: $i,SV1832: $i,SV1800: $i,SV1738: $i,SV1573: $i,SV1308: $i,SV937: $i,SV412: $i] :
( ( ( SV412 = SV937 )
= $true )
| ( ( ~ ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4534: $i,SY4535: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1849 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1849 ) @ ( c_Message_Omsg_OMPair @ SY4534 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4535 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5069]) ).
thf(5129,plain,
! [SV1850: $i,SV1833: $i,SV1801: $i,SV1739: $i,SV1574: $i,SV1309: $i,SV938: $i,SV413: $i] :
( ( ( SV413 = SV938 )
= $true )
| ( ( ~ ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4536: $i,SY4537: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1850 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1850 ) @ ( c_Message_Omsg_OMPair @ SY4536 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4537 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5070]) ).
thf(5130,plain,
! [SV1851: $i,SV1834: $i,SV1802: $i,SV1740: $i,SV1575: $i,SV1310: $i,SV939: $i,SV414: $i] :
( ( ( SV414 = SV939 )
= $true )
| ( ( ~ ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4538: $i,SY4539: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1851 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1851 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4538 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4539 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5071]) ).
thf(5131,plain,
! [SV1852: $i,SV1835: $i,SV1803: $i,SV1741: $i,SV1576: $i,SV1311: $i,SV940: $i,SV415: $i] :
( ( ( SV415 = SV940 )
= $true )
| ( ( ~ ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4540: $i,SY4541: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SV1852 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4540 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4541 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5072]) ).
thf(5132,plain,
! [SV1312: $i,SV1856: $i,SV1742: $i,SV1577: $i,SV416: $i,SV941: $i] :
( ( ( ! [SY4545: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SV1577 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1742 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1856 ) @ SY4545 ) ) ) ) ) @ ( c_List_Oset @ SV1312 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1312 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5073]) ).
thf(5133,plain,
! [SV942: $i,SV1578: $i,SV1857: $i,SV1313: $i,SV1836: $i,SV417: $i,SV1743: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1743 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1743 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1836 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SV1857 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1836 @ SV1743 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5074]) ).
thf(5134,plain,
! [SV1579: $i,SV1314: $i,SV943: $i,SV1744: $i,SV419: $i] :
( ( ( ! [SY4458: $i,SY4459: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4458 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4459 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5075]) ).
thf(5135,plain,
! [SV944: $i,SV1581: $i,SV1858: $i,SV1316: $i,SV1837: $i,SV421: $i,SV1745: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1745 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1745 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1837 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SV1858 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1837 @ SV1745 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5076]) ).
thf(5136,plain,
! [SV431: $i,SV952: $i,SV1582: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1582 ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV1582 ) ) @ ( c_Message_Oanalz @ SV952 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1582 @ SV431 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV431 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV952 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5077]) ).
thf(5137,plain,
! [SV953: $i,SV1317: $i,SV432: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV432 ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ ( hAPP @ c_Message_OinvKey @ SV432 ) ) @ ( c_Message_Oanalz @ SV1317 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV953 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV432 @ SV953 ) @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1317 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5078]) ).
thf(5138,plain,
! [SV1609: $i,SV1364: $i,SV1017: $i,SV1757: $i,SV501: $i] :
( ( ( ! [SY4464: $i,SY4465: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4464 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4465 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5079]) ).
thf(5139,plain,
! [SV1610: $i,SV1758: $i,SV1365: $i,SV502: $i,SV1018: $i] :
( ( ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5080]) ).
thf(5140,plain,
! [SV1759: $i,SV1366: $i,SV1021: $i,SV1612: $i,SV506: $i] :
( ( ( ! [SY4361: $i,SY4362: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4361 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4361 ) @ ( c_Message_Omsg_OMPair @ SY4362 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5081]) ).
thf(5141,plain,
! [SV1613: $i,SV507: $i,SV1367: $i,SV1022: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1613 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1022 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1613 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV507 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV507 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS3__1 @ SV507 @ SV1022 @ SV1367 @ SV1613 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1022 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1367 ) @ ( c_Message_Omsg_OAgent @ SV507 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1613 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5082]) ).
thf(5142,plain,
! [SV1614: $i,SV1760: $i,SV1368: $i,SV1023: $i,SV508: $i] :
( ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
| ! [SY4468: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SY4468 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4469: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4469 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5083]) ).
thf(5143,plain,
! [SV1617: $i,SV1762: $i,SV1373: $i,SV1031: $i,SV518: $i] :
( ( ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1762 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) ) @ ( c_List_Oset @ SV1762 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1762 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) @ SV1762 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5084]) ).
thf(5144,plain,
! [SV1618: $i,SV1763: $i,SV1374: $i,SV1032: $i,SV519: $i] :
( ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ! [SY4470: $i,SY4471: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4470 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4471 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5085]) ).
thf(5145,plain,
! [SV1619: $i,SV1764: $i,SV1375: $i,SV520: $i,SV1033: $i] :
( ( ( ! [SY4472: $i,SY4473: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SY4472 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SY4473 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5086]) ).
thf(5146,plain,
! [SV1765: $i,SV1620: $i,SV1376: $i,SV1034: $i,SV521: $i,SV1811: $i] :
( ( ( c_in @ SV1811 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1811 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) ) @ ( c_List_Oset @ SV1811 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5087]) ).
thf(5147,plain,
! [SV1621: $i,SV1766: $i,SV1380: $i,SV1038: $i,SV525: $i] :
( ( ( ! [SY4475: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SY4475 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5088]) ).
thf(5148,plain,
! [SV1813: $i,SV526: $i,SV1381: $i,SV1039: $i,SV1622: $i] :
( ( ( c_in @ SV1622 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ! [SY4511: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1622 ) @ ( c_Message_Omsg_OMPair @ SY4511 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1813 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1813 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ ( c_Message_Omsg_OAgent @ SV1622 ) ) ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5089]) ).
thf(5149,plain,
! [SV527: $i,SV1623: $i,SV1382: $i,SV1767: $i,SV1040: $i] :
( ( ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ! [SY4476: $i,SY4477: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4476 @ SV1767 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1767 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4477 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ ( c_Message_Omsg_OAgent @ SV1767 ) ) ) )
= $true )
| ( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5090]) ).
thf(5150,plain,
! [SV1059: $i,SV548: $i,SV1859: $i,SV1853: $i,SV1817: $i,SV1773: $i,SV1635: $i,SV1389: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1389 @ SV1635 @ ( c_Message_Omsg_OCrypt @ SV1773 @ ( c_Message_Omsg_OMPair @ SV1817 @ ( c_Message_Omsg_OMPair @ SV1853 @ ( c_Message_Omsg_OMPair @ SV1859 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SV1059 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1059 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5095]) ).
thf(5151,plain,
! [SV683: $i,SV116: $i,SV1675: $i,SV1823: $i] :
( ( ( c_lessequals @ SV1823 @ SV1675 @ SV116 )
= $false )
| ( ( c_lessequals @ SV683 @ SV1823 @ SV116 )
= $false )
| ( ( c_lessequals @ SV683 @ SV1675 @ SV116 )
= $true )
| ( ( class_Orderings_Oorder @ SV116 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5100]) ).
thf(5152,plain,
! [SV1676: $i,SV117: $i,SV1824: $i,SV684: $i] :
( ( ( c_lessequals @ SV684 @ SV1824 @ SV117 )
= $false )
| ( ( c_lessequals @ SV1824 @ SV1676 @ SV117 )
= $false )
| ( ( c_lessequals @ SV684 @ SV1676 @ SV117 )
= $true )
| ( ( class_Orderings_Opreorder @ SV117 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5101]) ).
thf(5153,plain,
! [SV698: $i,SV1159: $i,SV1458: $i,SV1827: $i,SV1783: $i,SV134: $i] :
( ( ( c_lessequals @ ( c_Set_Oimage @ SV134 @ SV1783 @ SV1827 @ SV1458 ) @ SV1159 @ ( tc_fun @ SV1458 @ tc_bool ) )
= $false )
| ( ( c_in @ SV698 @ SV1783 @ SV1827 )
= $false )
| ( ( c_in @ ( hAPP @ SV134 @ SV698 ) @ SV1159 @ SV1458 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5102]) ).
thf(5154,plain,
! [SV1686: $i,SV173: $i,SV1788: $i,SV733: $i] :
( ( ( c_lessequals @ SV733 @ SV1788 @ SV173 )
= $false )
| ( ( c_lessequals @ SV1686 @ SV1788 @ SV173 )
= $false )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV733 @ SV1686 @ SV173 ) @ SV1788 @ SV173 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV173 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5103]) ).
thf(5155,plain,
! [SV1689: $i,SV176: $i,SV1789: $i,SV734: $i] :
( ( ( c_lessequals @ SV734 @ SV1789 @ SV176 )
= $false )
| ( ( c_lessequals @ SV1689 @ SV1789 @ SV176 )
= $false )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV734 @ SV1689 @ SV176 ) @ SV1789 @ SV176 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV176 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5104]) ).
thf(5156,plain,
! [SV1690: $i,SV177: $i,SV1790: $i,SV735: $i] :
( ( ( c_lessequals @ SV735 @ SV1790 @ SV177 )
= $false )
| ( ( c_lessequals @ SV1690 @ SV1790 @ SV177 )
= $false )
| ( ( c_lessequals @ ( c_Lattices_Oupper__semilattice__class_Osup @ SV735 @ SV1690 @ SV177 ) @ SV1790 @ SV177 )
= $true )
| ( ( class_Lattices_Oupper__semilattice @ SV177 )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5105]) ).
thf(5157,plain,
! [SV788: $i,SV250: $i,SV1860: $i,SV1712: $i,SV1497: $i,SV1200: $i] :
( ( ( ! [SY4546: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SV1497 @ ( c_Message_Omsg_OMPair @ SV1712 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1860 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SY4546 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[5107]) ).
thf(5158,plain,
! [SV791: $i,SV254: $i,SV1861: $i,SV1501: $i,SV1203: $i] :
( ( ( ! [SY4547: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SV1501 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1861 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SY4547 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[5108]) ).
thf(5159,plain,
! [SV265: $i,SV802: $i,SV1828: $i,SV1504: $i] :
( ( ( c_in @ SV1504 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1828 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ SV1828 @ SV802 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV1504 @ SV802 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV265 ) @ ( c_Message_Oanalz @ SV802 ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5109]) ).
thf(5160,plain,
! [SV266: $i,SV1211: $i,SV1829: $i,SV803: $i] :
( ( ( c_in @ SV803 @ ( c_Message_Osynth @ ( c_Message_Oanalz @ SV1829 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_lessequals @ SV1829 @ SV1211 @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ SV1211 ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV266 ) @ ( c_Message_Oanalz @ ( c_Set_Oinsert @ SV803 @ SV1211 @ tc_Message_Omsg ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5110]) ).
thf(5161,plain,
! [SV275: $i,SV1509: $i,SV810: $i] :
( ( ( c_in @ SV810 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_lessequals @ SV1509 @ ( c_HOL_Ouminus__class_Ouminus @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ ( tc_fun @ tc_nat @ tc_bool ) ) @ ( tc_fun @ tc_nat @ tc_bool ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Lattices_Oupper__semilattice__class_Osup @ ( c_Set_Oimage @ c_Message_Omsg_OKey @ SV1509 @ tc_nat @ tc_Message_Omsg ) @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) @ ( tc_fun @ tc_Message_Omsg @ tc_bool ) ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV275 @ SV1509 @ tc_nat )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV275 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV810 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5111]) ).
thf(5162,plain,
! [SV396: $i,SV1295: $i,SV1729: $i,SV1560: $i,SV922: $i] :
( ( ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ! [SY4416: $i,SY4417: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SV1729 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1729 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4416 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4417 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5117]) ).
thf(5163,plain,
! [SV1561: $i,SV1730: $i,SV1862: $i,SV1297: $i,SV924: $i,SV1830: $i,SV398: $i,SV1798: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SV1862 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4421: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4421 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5118]) ).
thf(5164,plain,
! [SV1562: $i,SV1731: $i,SV1863: $i,SV1298: $i,SV925: $i,SV1831: $i,SV399: $i,SV1799: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SV1863 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4425: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4425 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5119]) ).
thf(5165,plain,
! [SV926: $i,SV401: $i,SV1845: $i,SV1732: $i,SV1564: $i,SV1300: $i] :
( ( ( ~ ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat ) )
= $true )
| ( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SV1732 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1732 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1845 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SV1732 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SV1732 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5120]) ).
thf(5166,plain,
! [SV927: $i,SV402: $i,SV1846: $i,SV1733: $i,SV1565: $i,SV1301: $i] :
( ( ( ~ ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat ) )
= $true )
| ( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SV1733 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1733 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1846 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SV1733 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SV1733 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5121]) ).
thf(5167,plain,
! [SV928: $i,SV1302: $i,SV403: $i,SV1847: $i,SV1734: $i,SV1566: $i] :
( ( ( ~ ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SV1734 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1734 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1847 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SV1734 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SV1734 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5122]) ).
thf(5168,plain,
! [SV930: $i,SV1303: $i,SV405: $i,SV1848: $i,SV1735: $i,SV1568: $i] :
( ( ( ~ ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SV1735 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1735 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1848 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SV1735 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SV1735 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5123]) ).
thf(5169,plain,
! [SV932: $i,SV407: $i,SV1736: $i,SV1570: $i,SV1304: $i] :
( ( ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
| ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4430: $i,SY4431: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SY4430 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4431 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[5125]) ).
thf(5170,plain,
! [SV933: $i,SV408: $i,SV1305: $i,SV1854: $i] :
( ( ( c_in @ SV1854 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ! [SY4543: $i] :
( ( c_in @ SY4543 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SY4543 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SY4543 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SY4543 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[5126]) ).
thf(5171,plain,
! [SV1737: $i,SV411: $i,SV1307: $i,SV936: $i,SV1864: $i,SV1855: $i,SV1572: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1572 @ ( c_Message_Omsg_OCrypt @ SV1855 @ ( c_Message_Omsg_OMPair @ SV1864 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SV1737 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1737 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ ( c_Message_Omsg_OAgent @ SV1572 ) ) ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5127]) ).
thf(5172,plain,
! [SV412: $i,SV1849: $i,SV937: $i,SV1832: $i,SV1800: $i,SV1738: $i,SV1573: $i,SV1308: $i] :
( ( ( ~ ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4534: $i,SY4535: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1849 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1849 ) @ ( c_Message_Omsg_OMPair @ SY4534 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4535 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV412 = SV937 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5128]) ).
thf(5173,plain,
! [SV413: $i,SV1850: $i,SV1833: $i,SV1801: $i,SV938: $i,SV1739: $i,SV1574: $i,SV1309: $i] :
( ( ( ~ ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4536: $i,SY4537: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1850 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1850 ) @ ( c_Message_Omsg_OMPair @ SY4536 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4537 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV413 = SV938 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5129]) ).
thf(5174,plain,
! [SV414: $i,SV1851: $i,SV1834: $i,SV1802: $i,SV1740: $i,SV939: $i,SV1575: $i,SV1310: $i] :
( ( ( ~ ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4538: $i,SY4539: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1851 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1851 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4538 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4539 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV414 = SV939 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5130]) ).
thf(5175,plain,
! [SV1852: $i,SV415: $i,SV1835: $i,SV1803: $i,SV1741: $i,SV1576: $i,SV940: $i,SV1311: $i] :
( ( ( ~ ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4540: $i,SY4541: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SV1852 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4540 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4541 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV415 = SV940 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5131]) ).
thf(5176,plain,
! [SV1312: $i,SV1865: $i,SV1856: $i,SV1742: $i,SV1577: $i,SV416: $i,SV941: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SV1577 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1742 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1856 ) @ SV1865 ) ) ) ) ) @ ( c_List_Oset @ SV1312 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1312 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5132]) ).
thf(5177,plain,
! [SV942: $i,SV1578: $i,SV1857: $i,SV1313: $i,SV1836: $i,SV417: $i,SV1743: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1743 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1743 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1836 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SV1857 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1836 @ SV1743 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5133]) ).
thf(5178,plain,
! [SV1579: $i,SV1314: $i,SV943: $i,SV1744: $i,SV419: $i,SV1866: $i] :
( ( ( ! [SY4548: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1866 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4548 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5134]) ).
thf(5179,plain,
! [SV944: $i,SV1581: $i,SV1858: $i,SV1316: $i,SV1837: $i,SV421: $i,SV1745: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1745 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1745 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1837 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SV1858 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1837 @ SV1745 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5135]) ).
thf(5180,plain,
! [SV1609: $i,SV1364: $i,SV1017: $i,SV1757: $i,SV501: $i,SV1867: $i] :
( ( ( ! [SY4549: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1867 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SY4549 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5138]) ).
thf(5181,plain,
! [SV1610: $i,SV1018: $i,SV1758: $i,SV1365: $i,SV502: $i] :
( ( ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5139]) ).
thf(5182,plain,
! [SV1759: $i,SV1366: $i,SV1021: $i,SV1612: $i,SV506: $i,SV1868: $i] :
( ( ( ! [SY4550: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1868 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1868 ) @ ( c_Message_Omsg_OMPair @ SY4550 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5140]) ).
thf(5183,plain,
! [SV1614: $i,SV508: $i,SV1760: $i,SV1368: $i,SV1023: $i] :
( ( ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ! [SY4468: $i] :
( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SY4468 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4469: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SY4468 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4469 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) ) )
= $true )
| ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5142]) ).
thf(5184,plain,
! [SV1617: $i,SV518: $i,SV1762: $i,SV1373: $i,SV1031: $i] :
( ( ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1762 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) ) @ ( c_List_Oset @ SV1762 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1762 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) @ SV1762 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5143]) ).
thf(5185,plain,
! [SV1618: $i,SV519: $i,SV1763: $i,SV1374: $i,SV1032: $i] :
( ( ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ! [SY4470: $i,SY4471: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4470 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4471 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5144]) ).
thf(5186,plain,
! [SV1619: $i,SV1764: $i,SV1375: $i,SV520: $i,SV1869: $i,SV1033: $i] :
( ( ( ! [SY4551: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SV1869 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SY4551 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5145]) ).
thf(5187,plain,
! [SV1811: $i,SV1765: $i,SV1620: $i,SV1376: $i,SV1034: $i,SV521: $i] :
( ( ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1811 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1811 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) ) @ ( c_List_Oset @ SV1811 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5146]) ).
thf(5188,plain,
! [SV1621: $i,SV1766: $i,SV1380: $i,SV1038: $i,SV1870: $i,SV525: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SV1870 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5147]) ).
thf(5189,plain,
! [SV1813: $i,SV526: $i,SV1381: $i,SV1039: $i,SV1871: $i,SV1622: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1622 ) @ ( c_Message_Omsg_OMPair @ SV1871 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1813 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1622 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1813 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ ( c_Message_Omsg_OAgent @ SV1622 ) ) ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5148]) ).
thf(5190,plain,
! [SV1040: $i,SV527: $i,SV1623: $i,SV1382: $i,SV1767: $i,SV1872: $i] :
( ( ( ! [SY4552: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1872 @ SV1767 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1767 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SY4552 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ ( c_Message_Omsg_OAgent @ SV1767 ) ) ) )
= $true )
| ( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5149]) ).
thf(5191,plain,
! [SV1059: $i,SV548: $i,SV1859: $i,SV1853: $i,SV1817: $i,SV1773: $i,SV1635: $i,SV1389: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1389 @ SV1635 @ ( c_Message_Omsg_OCrypt @ SV1773 @ ( c_Message_Omsg_OMPair @ SV1817 @ ( c_Message_Omsg_OMPair @ SV1853 @ ( c_Message_Omsg_OMPair @ SV1859 @ SV548 ) ) ) ) ) @ ( c_List_Oset @ SV1059 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV548 @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1059 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5150]) ).
thf(5192,plain,
! [SV788: $i,SV1873: $i,SV250: $i,SV1860: $i,SV1712: $i,SV1497: $i,SV1200: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SV1497 @ ( c_Message_Omsg_OMPair @ SV1712 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1860 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SV1873 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[5157]) ).
thf(5193,plain,
! [SV791: $i,SV1874: $i,SV254: $i,SV1861: $i,SV1501: $i,SV1203: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SV1501 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1861 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SV1874 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[5158]) ).
thf(5194,plain,
! [SV922: $i,SV396: $i,SV1295: $i,SV1875: $i,SV1729: $i,SV1560: $i] :
( ( ( ! [SY4553: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SV1729 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1729 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1875 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4553 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5162]) ).
thf(5195,plain,
! [SV1561: $i,SV1730: $i,SV1862: $i,SV1297: $i,SV924: $i,SV1830: $i,SV398: $i,SV1798: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SV1862 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ! [SY4421: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4421 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5163]) ).
thf(5196,plain,
! [SV1562: $i,SV1731: $i,SV1863: $i,SV1298: $i,SV925: $i,SV1831: $i,SV399: $i,SV1799: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SV1863 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ! [SY4425: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4425 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5164]) ).
thf(5197,plain,
! [SV926: $i,SV401: $i,SV1845: $i,SV1732: $i,SV1564: $i,SV1300: $i] :
( ( ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SV1732 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1732 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1845 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SV1732 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SV1732 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5165]) ).
thf(5198,plain,
! [SV927: $i,SV402: $i,SV1846: $i,SV1733: $i,SV1565: $i,SV1301: $i] :
( ( ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SV1733 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1733 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1846 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SV1733 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SV1733 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5166]) ).
thf(5199,plain,
! [SV928: $i,SV1302: $i,SV403: $i,SV1847: $i,SV1734: $i,SV1566: $i] :
( ( ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SV1734 ) @ tc_Message_Omsg )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1734 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1847 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SV1734 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SV1734 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5167]) ).
thf(5200,plain,
! [SV930: $i,SV1303: $i,SV405: $i,SV1848: $i,SV1735: $i,SV1568: $i] :
( ( ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SV1735 ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1735 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1848 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SV1735 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SV1735 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5168]) ).
thf(5201,plain,
! [SV1304: $i,SV932: $i,SV407: $i,SV1736: $i,SV1570: $i] :
( ( ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4430: $i,SY4431: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SY4430 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4431 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[5169]) ).
thf(5202,plain,
! [SV933: $i,SV408: $i,SV1854: $i,SV1305: $i,SV1876: $i] :
( ( ( ( c_in @ SV1876 @ c_Event_Obad @ tc_Message_Oagent )
| ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1876 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1876 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SV1876 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1854 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[5170]) ).
thf(5203,plain,
! [SV1737: $i,SV411: $i,SV1307: $i,SV936: $i,SV1864: $i,SV1855: $i,SV1572: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1572 @ ( c_Message_Omsg_OCrypt @ SV1855 @ ( c_Message_Omsg_OMPair @ SV1864 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ SV411 ) ) ) ) ) @ ( c_List_Oset @ SV1737 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1737 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV411
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV936 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1307 ) @ ( c_Message_Omsg_OAgent @ SV1572 ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5171]) ).
thf(5204,plain,
! [SV412: $i,SV1849: $i,SV937: $i,SV1832: $i,SV1800: $i,SV1738: $i,SV1573: $i,SV1308: $i] :
( ( ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4534: $i,SY4535: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1849 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1849 ) @ ( c_Message_Omsg_OMPair @ SY4534 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4535 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV412 = SV937 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5172]) ).
thf(5205,plain,
! [SV413: $i,SV1850: $i,SV1833: $i,SV1801: $i,SV938: $i,SV1739: $i,SV1574: $i,SV1309: $i] :
( ( ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4536: $i,SY4537: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1850 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1850 ) @ ( c_Message_Omsg_OMPair @ SY4536 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4537 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV413 = SV938 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5173]) ).
thf(5206,plain,
! [SV414: $i,SV1851: $i,SV1834: $i,SV1802: $i,SV1740: $i,SV939: $i,SV1575: $i,SV1310: $i] :
( ( ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4538: $i,SY4539: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1851 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1851 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4538 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4539 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV414 = SV939 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5174]) ).
thf(5207,plain,
! [SV1852: $i,SV415: $i,SV1835: $i,SV1803: $i,SV1741: $i,SV1576: $i,SV940: $i,SV1311: $i] :
( ( ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4540: $i,SY4541: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SV1852 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4540 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4541 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( SV415 = SV940 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5175]) ).
thf(5208,plain,
! [SV1312: $i,SV1865: $i,SV1856: $i,SV1742: $i,SV1577: $i,SV416: $i,SV941: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV941 @ ( c_Message_Omsg_OCrypt @ SV416 @ ( c_Message_Omsg_OMPair @ SV1577 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1742 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1856 ) @ SV1865 ) ) ) ) ) @ ( c_List_Oset @ SV1312 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1312 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV416
= ( hAPP @ c_Public_OshrK @ SV941 ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5176]) ).
thf(5209,plain,
! [SV1857: $i,SV417: $i,SV1578: $i,SV942: $i,SV1313: $i,SV1743: $i,SV1836: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1836 @ SV1743 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1743 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1743 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1836 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SV1857 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5177]) ).
thf(5210,plain,
! [SV1579: $i,SV1314: $i,SV1877: $i,SV943: $i,SV1744: $i,SV419: $i,SV1866: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1866 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1877 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5178]) ).
thf(5211,plain,
! [SV1858: $i,SV421: $i,SV1581: $i,SV944: $i,SV1316: $i,SV1745: $i,SV1837: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1837 @ SV1745 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1745 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1745 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1837 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SV1858 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5179]) ).
thf(5212,plain,
! [SV1609: $i,SV1364: $i,SV1878: $i,SV1017: $i,SV1757: $i,SV501: $i,SV1867: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1867 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1878 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5180]) ).
thf(5213,plain,
! [SV1610: $i,SV502: $i,SV1018: $i,SV1758: $i,SV1365: $i] :
( ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5181]) ).
thf(5214,plain,
! [SV1759: $i,SV1366: $i,SV1021: $i,SV1612: $i,SV506: $i,SV1879: $i,SV1868: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1868 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1868 ) @ ( c_Message_Omsg_OMPair @ SV1879 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5182]) ).
thf(5215,plain,
! [SV1614: $i,SV508: $i,SV1023: $i,SV1760: $i,SV1368: $i,SV1880: $i] :
( ( ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SV1880 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
| ! [SY4554: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4554 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5183]) ).
thf(5216,plain,
! [SV1617: $i,SV1031: $i,SV518: $i,SV1762: $i,SV1373: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1762 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) ) @ ( c_List_Oset @ SV1762 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1762 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) @ SV1762 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5184]) ).
thf(5217,plain,
! [SV1618: $i,SV519: $i,SV1032: $i,SV1763: $i,SV1374: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ! [SY4470: $i,SY4471: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4470 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4471 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5185]) ).
thf(5218,plain,
! [SV1619: $i,SV1764: $i,SV1881: $i,SV1375: $i,SV520: $i,SV1869: $i,SV1033: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SV1869 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SV1881 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5186]) ).
thf(5219,plain,
! [SV1811: $i,SV1765: $i,SV1620: $i,SV1376: $i,SV1034: $i,SV521: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1811 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV521 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1811 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV521 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV521 ) @ ( c_Message_Omsg_OMPair @ SV1034 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1376 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1620 ) @ SV1765 ) ) ) ) ) @ ( c_List_Oset @ SV1811 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5187]) ).
thf(5220,plain,
! [SV1621: $i,SV1766: $i,SV1380: $i,SV1038: $i,SV1870: $i,SV525: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SV1870 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5188]) ).
thf(5221,plain,
! [SV1813: $i,SV526: $i,SV1381: $i,SV1039: $i,SV1871: $i,SV1622: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1622 ) @ ( c_Message_Omsg_OMPair @ SV1871 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ SV526 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1813 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1622 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1813 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV526
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1039 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1381 ) @ ( c_Message_Omsg_OAgent @ SV1622 ) ) ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5189]) ).
thf(5222,plain,
! [SV1040: $i,SV527: $i,SV1623: $i,SV1382: $i,SV1882: $i,SV1767: $i,SV1872: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1872 @ SV1767 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1767 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1882 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ ( c_Message_Omsg_OAgent @ SV1767 ) ) ) )
= $true )
| ( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5190]) ).
thf(5223,plain,
! [SV788: $i,SV1873: $i,SV250: $i,SV1860: $i,SV1712: $i,SV1497: $i,SV1200: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1200 @ ( c_Message_Omsg_OCrypt @ SV1497 @ ( c_Message_Omsg_OMPair @ SV1712 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1860 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV250 ) @ SV1873 ) ) ) ) ) @ ( c_List_Oset @ SV788 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV788 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV250 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5192]) ).
thf(5224,plain,
! [SV791: $i,SV1874: $i,SV254: $i,SV1861: $i,SV1501: $i,SV1203: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1203 ) @ ( c_Message_Omsg_OMPair @ SV1501 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1861 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV254 ) @ SV1874 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV791 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ SV1203 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV791 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV254 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5193]) ).
thf(5225,plain,
! [SV922: $i,SV396: $i,SV1295: $i,SV1883: $i,SV1875: $i,SV1729: $i,SV1560: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SV1729 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1729 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1875 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1883 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5194]) ).
thf(5226,plain,
! [SV1862: $i,SV924: $i,SV1830: $i,SV1798: $i,SV1730: $i,SV1561: $i,SV1297: $i,SV398: $i] :
( ( ( ! [SY4421: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4421 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SV1862 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5195]) ).
thf(5227,plain,
! [SV1863: $i,SV925: $i,SV1831: $i,SV1799: $i,SV1731: $i,SV1562: $i,SV1298: $i,SV399: $i] :
( ( ( ! [SY4425: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ SY4425 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SV1863 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5196]) ).
thf(5228,plain,
! [SV926: $i,SV401: $i,SV1845: $i,SV1300: $i,SV1732: $i,SV1564: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SV1732 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1732 ) )
= $true )
| ( ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1845 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SV1732 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SV1732 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5197]) ).
thf(5229,plain,
! [SV927: $i,SV402: $i,SV1846: $i,SV1301: $i,SV1733: $i,SV1565: $i] :
( ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SV1733 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV1733 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1846 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SV1733 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SV1733 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5198]) ).
thf(5230,plain,
! [SV928: $i,SV1302: $i,SV403: $i,SV1847: $i,SV1734: $i,SV1566: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SV1734 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1734 ) )
= $true )
| ( ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1847 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SV1734 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SV1734 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5199]) ).
thf(5231,plain,
! [SV930: $i,SV1303: $i,SV405: $i,SV1848: $i,SV1735: $i,SV1568: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SV1735 ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV1735 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1848 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SV1735 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SV1735 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5200]) ).
thf(5232,plain,
! [SV1304: $i,SV1570: $i,SV932: $i,SV407: $i,SV1736: $i] :
( ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ! [SY4430: $i,SY4431: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SY4430 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4431 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[5201]) ).
thf(5233,plain,
! [SV933: $i,SV408: $i,SV1854: $i,SV1305: $i,SV1876: $i] :
( ( ( c_in @ SV1876 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1876 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1876 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SV1876 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1854 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_or_pos,[status(thm)],[5202]) ).
thf(5234,plain,
! [SV412: $i,SV1849: $i,SV1308: $i,SV937: $i,SV1832: $i,SV1800: $i,SV1738: $i,SV1573: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4534: $i,SY4535: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1849 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1849 ) @ ( c_Message_Omsg_OMPair @ SY4534 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4535 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV412 = SV937 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5204]) ).
thf(5235,plain,
! [SV413: $i,SV1850: $i,SV1309: $i,SV1833: $i,SV1801: $i,SV938: $i,SV1739: $i,SV1574: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4536: $i,SY4537: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1850 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1850 ) @ ( c_Message_Omsg_OMPair @ SY4536 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4537 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV413 = SV938 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5205]) ).
thf(5236,plain,
! [SV414: $i,SV1851: $i,SV1310: $i,SV1834: $i,SV1802: $i,SV1740: $i,SV939: $i,SV1575: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4538: $i,SY4539: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1851 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1851 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4538 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4539 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV414 = SV939 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5206]) ).
thf(5237,plain,
! [SV1852: $i,SV415: $i,SV1311: $i,SV1835: $i,SV1803: $i,SV1741: $i,SV1576: $i,SV940: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ! [SY4540: $i,SY4541: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SV1852 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4540 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4541 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV415 = SV940 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5207]) ).
thf(5238,plain,
! [SV1857: $i,SV417: $i,SV1578: $i,SV942: $i,SV1313: $i,SV1743: $i,SV1836: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1836 @ SV1743 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1743 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1743 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1836 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SV1857 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5209]) ).
thf(5239,plain,
! [SV1579: $i,SV1314: $i,SV1877: $i,SV943: $i,SV1744: $i,SV419: $i,SV1866: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1866 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1877 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ( SV419 = c_Message_Oagent_OServer )
| ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5210]) ).
thf(5240,plain,
! [SV1858: $i,SV421: $i,SV1581: $i,SV944: $i,SV1316: $i,SV1745: $i,SV1837: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1837 @ SV1745 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1745 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1745 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1837 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SV1858 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5211]) ).
thf(5241,plain,
! [SV1609: $i,SV1364: $i,SV1878: $i,SV1017: $i,SV1757: $i,SV501: $i,SV1867: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1867 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1878 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ( SV501 = c_Message_Oagent_OServer )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5212]) ).
thf(5242,plain,
! [SV1610: $i,SV1758: $i,SV502: $i,SV1365: $i,SV1018: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5213]) ).
thf(5243,plain,
! [SV1759: $i,SV1366: $i,SV1021: $i,SV1612: $i,SV506: $i,SV1879: $i,SV1868: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1868 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1868 ) @ ( c_Message_Omsg_OMPair @ SV1879 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5214]) ).
thf(5244,plain,
! [SV1614: $i,SV508: $i,SV1023: $i,SV1760: $i,SV1368: $i,SV1880: $i] :
( ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SV1880 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( ! [SY4554: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4554 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5215]) ).
thf(5245,plain,
! [SV1762: $i,SV1617: $i,SV1373: $i,SV1031: $i,SV518: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) ) @ ( c_List_Oset @ SV1762 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1373 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1762 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1031 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV518 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1762 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV518 @ SV1031 @ ( c_Message_Omsg_OCrypt @ SV1373 @ ( c_Message_Omsg_ONonce @ SV1617 ) ) @ SV1762 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5216]) ).
thf(5246,plain,
! [SV1618: $i,SV1763: $i,SV1374: $i,SV519: $i,SV1032: $i] :
( ( ( ! [SY4470: $i,SY4471: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SY4470 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4471 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5217]) ).
thf(5247,plain,
! [SV1619: $i,SV1764: $i,SV1881: $i,SV1375: $i,SV520: $i,SV1869: $i,SV1033: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SV1869 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SV1881 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
| ~ ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5218]) ).
thf(5248,plain,
! [SV1621: $i,SV1870: $i,SV525: $i,SV1038: $i,SV1766: $i,SV1380: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
| ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SV1870 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5220]) ).
thf(5249,plain,
! [SV1040: $i,SV527: $i,SV1623: $i,SV1382: $i,SV1882: $i,SV1767: $i,SV1872: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1872 @ SV1767 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1767 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1882 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ SV527 ) ) ) ) ) @ ( c_List_Oset @ SV1040 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1040 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV527
= ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1382 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1623 ) @ ( c_Message_Omsg_OAgent @ SV1767 ) ) ) )
= $true )
| ( ( c_in @ SV527 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1040 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5222]) ).
thf(5250,plain,
! [SV922: $i,SV396: $i,SV1295: $i,SV1883: $i,SV1875: $i,SV1729: $i,SV1560: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1560 @ SV1729 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1729 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1875 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1883 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1295 ) @ SV396 ) ) ) ) ) @ ( c_List_Oset @ SV922 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV922 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV1295 @ ( c_Set_Oimage @ c_Public_OshrK @ ( c_Orderings_Otop__class_Otop @ ( tc_fun @ tc_Message_Oagent @ tc_bool ) ) @ tc_Message_Oagent @ tc_nat ) @ tc_nat )
= $false )
| ( ( c_in @ SV396 @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV922 ) ) @ tc_Message_Omsg )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5225]) ).
thf(5251,plain,
! [SV1862: $i,SV924: $i,SV1830: $i,SV1798: $i,SV1730: $i,SV1561: $i,SV1297: $i,SV398: $i,SV1884: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1884 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SV1862 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5226]) ).
thf(5252,plain,
! [SV1863: $i,SV925: $i,SV1831: $i,SV1799: $i,SV1731: $i,SV1562: $i,SV1298: $i,SV399: $i,SV1885: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ SV1885 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SV1863 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5227]) ).
thf(5253,plain,
! [SV926: $i,SV401: $i,SV1845: $i,SV1300: $i,SV1564: $i,SV1732: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1732 )
= $false )
| ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1564 ) @ ( c_Event_Oused @ SV1732 ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1300 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1845 @ SV401 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV401 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1300 ) @ ( c_Message_Omsg_OAgent @ SV926 ) ) ) ) @ ( c_List_Oset @ SV1732 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV401 @ SV926 @ ( c_Message_Omsg_OCrypt @ SV1300 @ ( c_Message_Omsg_ONonce @ SV1564 ) ) ) @ SV1732 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5228]) ).
thf(5254,plain,
! [SV927: $i,SV402: $i,SV1846: $i,SV1301: $i,SV1565: $i,SV1733: $i] :
( ( ( c_in @ SV1733 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Message_Omsg_ONonce @ SV1565 ) @ ( c_Event_Oused @ SV1733 ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1301 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1846 @ SV402 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV402 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1301 ) @ ( c_Message_Omsg_OAgent @ SV927 ) ) ) ) @ ( c_List_Oset @ SV1733 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV402 @ SV927 @ ( c_Message_Omsg_OCrypt @ SV1301 @ ( c_Message_Omsg_ONonce @ SV1565 ) ) ) @ SV1733 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5229]) ).
thf(5255,plain,
! [SV928: $i,SV1302: $i,SV403: $i,SV1847: $i,SV1566: $i,SV1734: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1734 )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Event_Oused @ SV1734 ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1566 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1847 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_ONonce @ SV928 ) ) ) ) @ ( c_List_Oset @ SV1734 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV403 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV403 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV928 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1302 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1566 ) @ ( c_Message_Omsg_OAgent @ SV403 ) ) ) ) ) ) ) ) @ SV1734 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5230]) ).
thf(5256,plain,
! [SV930: $i,SV1303: $i,SV405: $i,SV1848: $i,SV1568: $i,SV1735: $i] :
( ( ( c_in @ SV1735 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Event_Oused @ SV1735 ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1568 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1848 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_ONonce @ SV930 ) ) ) ) @ ( c_List_Oset @ SV1735 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV405 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV405 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV930 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1303 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1568 ) @ ( c_Message_Omsg_OAgent @ SV405 ) ) ) ) ) ) ) ) @ SV1735 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5231]) ).
thf(5257,plain,
! [SV932: $i,SV407: $i,SV1304: $i,SV1736: $i,SV1886: $i,SV1570: $i] :
( ( ( ! [SY4555: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SV1886 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SY4555 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[5232]) ).
thf(5258,plain,
! [SV933: $i,SV408: $i,SV1854: $i,SV1305: $i,SV1876: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1876 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1876 ) @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1854 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Omsg_OAgent @ SV1876 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1876 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1854 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV933 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1305 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__Xsecrecy__lemma__1 @ SV408 @ SV1305 @ SV933 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) ) ) ) @ ( c_List_Oset @ SV933 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV408 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV933 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5233]) ).
thf(5259,plain,
! [SV412: $i,SV1849: $i,SV1308: $i,SV937: $i,SV1832: $i,SV1800: $i,SV1738: $i,SV1573: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ! [SY4534: $i,SY4535: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1849 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1849 ) @ ( c_Message_Omsg_OMPair @ SY4534 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4535 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV412 = SV937 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5234]) ).
thf(5260,plain,
! [SV413: $i,SV1850: $i,SV1309: $i,SV1833: $i,SV1801: $i,SV938: $i,SV1739: $i,SV1574: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ! [SY4536: $i,SY4537: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1850 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1850 ) @ ( c_Message_Omsg_OMPair @ SY4536 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4537 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV413 = SV938 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5235]) ).
thf(5261,plain,
! [SV414: $i,SV1851: $i,SV1310: $i,SV1834: $i,SV1802: $i,SV1740: $i,SV939: $i,SV1575: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ! [SY4538: $i,SY4539: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1851 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1851 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4538 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4539 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV414 = SV939 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5236]) ).
thf(5262,plain,
! [SV1852: $i,SV415: $i,SV1311: $i,SV1835: $i,SV1803: $i,SV1741: $i,SV1576: $i,SV940: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ! [SY4540: $i,SY4541: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SV1852 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4540 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4541 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV415 = SV940 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5237]) ).
thf(5263,plain,
! [SV1857: $i,SV417: $i,SV942: $i,SV1313: $i,SV1743: $i,SV1836: $i,SV1578: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1578 )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1836 @ SV1743 @ ( c_Message_Omsg_OCrypt @ SV1313 @ ( c_Message_Omsg_ONonce @ SV942 ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1743 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1743 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1836 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) @ SV1857 ) ) ) ) ) @ ( c_List_Oset @ SV1578 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV417 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV942 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1313 ) ) ) ) @ SV1578 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5238]) ).
thf(5264,plain,
! [SV1314: $i,SV1877: $i,SV943: $i,SV1744: $i,SV1866: $i,SV1579: $i,SV419: $i] :
( ( ( SV419 = c_Message_Oagent_OServer )
= $true )
| ( ( ~ ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1866 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1877 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5239]) ).
thf(5265,plain,
! [SV1858: $i,SV421: $i,SV944: $i,SV1316: $i,SV1745: $i,SV1837: $i,SV1581: $i] :
( ( ( c_in @ SV1581 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1837 @ SV1745 @ ( c_Message_Omsg_OCrypt @ SV1316 @ ( c_Message_Omsg_ONonce @ SV944 ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1745 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1745 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1837 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) @ SV1858 ) ) ) ) ) @ ( c_List_Oset @ SV1581 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV421 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV944 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1316 ) ) ) ) @ SV1581 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5240]) ).
thf(5266,plain,
! [SV1364: $i,SV1878: $i,SV1017: $i,SV1757: $i,SV1867: $i,SV1609: $i,SV501: $i] :
( ( ( SV501 = c_Message_Oagent_OServer )
= $true )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1867 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1878 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5241]) ).
thf(5267,plain,
! [SV1610: $i,SV1758: $i,SV502: $i,SV1365: $i,SV1018: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5242]) ).
thf(5268,plain,
! [SV1759: $i,SV1021: $i,SV506: $i,SV1879: $i,SV1868: $i,SV1366: $i,SV1612: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1868 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1868 ) @ ( c_Message_Omsg_OMPair @ SV1879 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5243]) ).
thf(5269,plain,
! [SV1614: $i,SV1760: $i,SV1368: $i,SV508: $i,SV1880: $i,SV1023: $i] :
( ( ( ! [SY4554: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SY4554 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SV1880 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5244]) ).
thf(5270,plain,
! [SV1618: $i,SV1763: $i,SV1374: $i,SV519: $i,SV1887: $i,SV1032: $i] :
( ( ( ! [SY4556: $i] :
~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SV1887 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SY4556 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5246]) ).
thf(5271,plain,
! [SV1619: $i,SV1881: $i,SV520: $i,SV1869: $i,SV1033: $i,SV1764: $i,SV1375: $i] :
( ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
= $true )
| ( ( ~ ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SV1869 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SV1881 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5247]) ).
thf(5272,plain,
! [SV1621: $i,SV1870: $i,SV525: $i,SV1380: $i,SV1038: $i,SV1766: $i] :
( ( ( ~ ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SV1870 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5248]) ).
thf(5273,plain,
! [SV1862: $i,SV924: $i,SV1830: $i,SV1798: $i,SV1730: $i,SV1561: $i,SV1297: $i,SV398: $i,SV1884: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1884 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SV1862 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5251]) ).
thf(5274,plain,
! [SV1863: $i,SV925: $i,SV1831: $i,SV1799: $i,SV1731: $i,SV1562: $i,SV1298: $i,SV399: $i,SV1885: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ SV1885 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
| ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SV1863 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5252]) ).
thf(5275,plain,
! [SV932: $i,SV1888: $i,SV407: $i,SV1304: $i,SV1736: $i,SV1886: $i,SV1570: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SV1886 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SV1888 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_forall_pos,[status(thm)],[5257]) ).
thf(5276,plain,
! [SV937: $i,SV1800: $i,SV1738: $i,SV1573: $i,SV1308: $i,SV412: $i,SV1832: $i,SV1889: $i,SV1849: $i] :
( ( ( ! [SY4557: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1849 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1849 ) @ ( c_Message_Omsg_OMPair @ SV1889 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SY4557 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV412 = SV937 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5259]) ).
thf(5277,plain,
! [SV1833: $i,SV938: $i,SV1739: $i,SV1574: $i,SV1309: $i,SV1801: $i,SV413: $i,SV1890: $i,SV1850: $i] :
( ( ( ! [SY4558: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1850 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1850 ) @ ( c_Message_Omsg_OMPair @ SV1890 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SY4558 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV413 = SV938 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5260]) ).
thf(5278,plain,
! [SV1834: $i,SV1740: $i,SV939: $i,SV1575: $i,SV1310: $i,SV1802: $i,SV1891: $i,SV414: $i,SV1851: $i] :
( ( ( ! [SY4559: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1851 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1851 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1891 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SY4559 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV414 = SV939 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5261]) ).
thf(5279,plain,
! [SV1835: $i,SV1741: $i,SV1576: $i,SV940: $i,SV1311: $i,SV1803: $i,SV1892: $i,SV1852: $i,SV415: $i] :
( ( ( ! [SY4560: $i] :
~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SV1852 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1892 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SY4560 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV415 = SV940 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5262]) ).
thf(5280,plain,
! [SV1314: $i,SV1877: $i,SV943: $i,SV1744: $i,SV1866: $i,SV419: $i,SV1579: $i] :
( ( ( c_in @ SV1579 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV419 = c_Message_Oagent_OServer )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1866 @ SV419 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1744 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1877 ) @ SV1314 ) ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV419 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV419 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV943 ) @ ( c_Message_Omsg_ONonce @ SV1744 ) ) ) ) @ ( c_List_Oset @ SV1579 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV419 @ SV943 @ SV1314 ) @ SV1579 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5264]) ).
thf(5281,plain,
! [SV1364: $i,SV1878: $i,SV1017: $i,SV1757: $i,SV1867: $i,SV501: $i,SV1609: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1609 )
= $false )
| ( ( SV501 = c_Message_Oagent_OServer )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1867 @ SV501 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1757 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1878 ) @ SV1364 ) ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV501 @ c_Message_Oagent_OServer @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV501 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1017 ) @ ( c_Message_Omsg_ONonce @ SV1757 ) ) ) ) @ ( c_List_Oset @ SV1609 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV501 @ SV1017 @ SV1364 ) @ SV1609 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5266]) ).
thf(5282,plain,
! [SV502: $i,SV1018: $i,SV1758: $i,SV1610: $i,SV1365: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1018 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) @ ( c_Message_Omsg_OAgent @ SV502 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1758 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__1 @ SV1365 @ SV1758 ) @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XB__trusts__NS5__2 @ SV1365 @ SV1758 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1365 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV502 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1018 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1758 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV502 @ SV1018 @ ( c_Message_Omsg_OCrypt @ SV1365 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1610 ) @ ( c_Message_Omsg_ONonce @ SV1610 ) ) ) ) @ ( c_List_Oset @ SV1758 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5267]) ).
thf(5283,plain,
! [SV1759: $i,SV1021: $i,SV506: $i,SV1879: $i,SV1868: $i,SV1612: $i,SV1366: $i] :
( ( ( c_in @ SV1366 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1868 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1868 ) @ ( c_Message_Omsg_OMPair @ SV1879 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV506 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1612 ) @ SV1021 ) ) ) ) ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1612 @ ( c_Message_Omsg_ONonce @ SV1759 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1366 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ ( v_sko__NS__Shared__Mirabelle__XNS4__implies__NS3__1 @ SV506 @ SV1021 @ SV1366 ) @ SV506 @ SV1021 ) @ ( c_List_Oset @ SV1366 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5268]) ).
thf(5284,plain,
! [SV1614: $i,SV1760: $i,SV1893: $i,SV1368: $i,SV508: $i,SV1880: $i,SV1023: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SV1893 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SV1880 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5269]) ).
thf(5285,plain,
! [SV1618: $i,SV1763: $i,SV1894: $i,SV1374: $i,SV519: $i,SV1887: $i,SV1032: $i] :
( ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SV1887 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SV1894 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5270]) ).
thf(5286,plain,
! [SV1619: $i,SV1881: $i,SV520: $i,SV1869: $i,SV1033: $i,SV1375: $i,SV1764: $i] :
( ( ( c_in @ SV1764 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1033 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1033 ) @ ( c_Message_Omsg_OMPair @ SV1869 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV520 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1375 ) @ SV1881 ) ) ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1764 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV520 @ SV1033 @ ( c_Message_Omsg_OCrypt @ SV1375 @ ( c_Message_Omsg_ONonce @ SV1619 ) ) ) @ ( c_List_Oset @ SV1764 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5271]) ).
thf(5287,plain,
! [SV1621: $i,SV1870: $i,SV525: $i,SV1380: $i,SV1038: $i,SV1766: $i] :
( ( ( c_in @ SV1766 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV1038 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV525 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV525 ) @ ( c_Message_Omsg_OMPair @ SV1870 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1038 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1380 ) @ ( c_Message_Omsg_OAgent @ SV525 ) ) ) ) ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1766 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV525 @ SV1038 @ ( c_Message_Omsg_OCrypt @ SV1380 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1621 ) @ ( c_Message_Omsg_ONonce @ SV1621 ) ) ) ) @ ( c_List_Oset @ SV1766 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5272]) ).
thf(5288,plain,
! [SV1862: $i,SV924: $i,SV1830: $i,SV1798: $i,SV1561: $i,SV398: $i,SV1884: $i,SV1730: $i,SV1297: $i] :
( ( ( ~ ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat ) )
= $true )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1884 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SV1862 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5273]) ).
thf(5289,plain,
! [SV1863: $i,SV925: $i,SV1831: $i,SV1799: $i,SV1562: $i,SV399: $i,SV1885: $i,SV1731: $i,SV1298: $i] :
( ( ( ~ ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat ) )
= $true )
| ( ( ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1885 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SV1863 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_or_pos,[status(thm)],[5274]) ).
thf(5290,plain,
! [SV932: $i,SV1888: $i,SV407: $i,SV1304: $i,SV1736: $i,SV1886: $i,SV1570: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1570 @ ( c_Message_Omsg_OCrypt @ SV1886 @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1304 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ SV1888 ) ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1736 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XSpy__not__see__encrypted__key__1 @ SV407 @ SV1736 @ SV932 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) ) ) ) @ ( c_List_Oset @ SV932 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV1570 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1304 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV932 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV407 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV932 ) ) @ tc_Message_Omsg )
= $false ) ),
inference(extcnf_not_pos,[status(thm)],[5275]) ).
thf(5291,plain,
! [SV937: $i,SV1800: $i,SV1738: $i,SV1573: $i,SV1308: $i,SV412: $i,SV1832: $i,SV1895: $i,SV1889: $i,SV1849: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1849 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1849 ) @ ( c_Message_Omsg_OMPair @ SV1889 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1895 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV412 = SV937 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5276]) ).
thf(5292,plain,
! [SV1833: $i,SV938: $i,SV1739: $i,SV1574: $i,SV1309: $i,SV1896: $i,SV1801: $i,SV413: $i,SV1890: $i,SV1850: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1850 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1850 ) @ ( c_Message_Omsg_OMPair @ SV1890 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1896 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV413 = SV938 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5277]) ).
thf(5293,plain,
! [SV1834: $i,SV1740: $i,SV939: $i,SV1575: $i,SV1310: $i,SV1897: $i,SV1802: $i,SV1891: $i,SV414: $i,SV1851: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1851 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1851 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1891 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1897 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV414 = SV939 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5278]) ).
thf(5294,plain,
! [SV1835: $i,SV1741: $i,SV1576: $i,SV940: $i,SV1311: $i,SV1898: $i,SV1803: $i,SV1892: $i,SV1852: $i,SV415: $i] :
( ( ( ~ ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SV1852 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1892 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1898 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV415 = SV940 )
= $true ) ),
inference(extcnf_forall_pos,[status(thm)],[5279]) ).
thf(5295,plain,
! [SV1614: $i,SV1760: $i,SV1893: $i,SV1368: $i,SV508: $i,SV1880: $i,SV1023: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SV1893 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SV1880 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5284]) ).
thf(5296,plain,
! [SV1618: $i,SV1763: $i,SV1894: $i,SV1374: $i,SV519: $i,SV1887: $i,SV1032: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SV1887 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SV1894 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
= $false )
| ( ( ~ ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg ) )
= $true )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5285]) ).
thf(5297,plain,
! [SV1862: $i,SV924: $i,SV1830: $i,SV1798: $i,SV1561: $i,SV398: $i,SV1884: $i,SV1730: $i,SV1297: $i] :
( ( ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( ~ ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1884 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SV1862 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5288]) ).
thf(5298,plain,
! [SV1863: $i,SV925: $i,SV1831: $i,SV1799: $i,SV1562: $i,SV399: $i,SV1885: $i,SV1731: $i,SV1298: $i] :
( ( ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( ~ ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) ) )
= $true )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1885 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SV1863 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5289]) ).
thf(5299,plain,
! [SV937: $i,SV1800: $i,SV1738: $i,SV1573: $i,SV1308: $i,SV412: $i,SV1832: $i,SV1895: $i,SV1889: $i,SV1849: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1849 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1849 ) @ ( c_Message_Omsg_OMPair @ SV1889 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1895 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV412 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1573 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1573 ) @ ( c_Message_Omsg_OMPair @ SV1738 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1800 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1832 ) @ SV937 ) ) ) ) ) @ ( c_List_Oset @ SV1308 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1308 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV412 = SV937 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5291]) ).
thf(5300,plain,
! [SV1833: $i,SV938: $i,SV1739: $i,SV1574: $i,SV1309: $i,SV1896: $i,SV1801: $i,SV413: $i,SV1890: $i,SV1850: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1850 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1850 ) @ ( c_Message_Omsg_OMPair @ SV1890 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV413 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1896 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1574 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1574 ) @ ( c_Message_Omsg_OMPair @ SV1739 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV938 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1801 ) @ SV1833 ) ) ) ) ) @ ( c_List_Oset @ SV1309 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1309 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV413 = SV938 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5292]) ).
thf(5301,plain,
! [SV1834: $i,SV1740: $i,SV939: $i,SV1575: $i,SV1310: $i,SV1897: $i,SV1802: $i,SV1891: $i,SV414: $i,SV1851: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1851 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1851 ) @ ( c_Message_Omsg_OMPair @ SV414 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1891 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1897 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV1575 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1575 ) @ ( c_Message_Omsg_OMPair @ SV939 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1740 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1802 ) @ SV1834 ) ) ) ) ) @ ( c_List_Oset @ SV1310 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1310 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV414 = SV939 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5293]) ).
thf(5302,plain,
! [SV1835: $i,SV1741: $i,SV1576: $i,SV940: $i,SV1311: $i,SV1898: $i,SV1803: $i,SV1892: $i,SV1852: $i,SV415: $i] :
( ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV415 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV415 ) @ ( c_Message_Omsg_OMPair @ SV1852 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1892 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1898 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ c_Message_Oagent_OServer @ SV940 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV940 ) @ ( c_Message_Omsg_OMPair @ SV1576 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV1741 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1803 ) @ SV1835 ) ) ) ) ) @ ( c_List_Oset @ SV1311 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ SV1311 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( SV415 = SV940 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5294]) ).
thf(5303,plain,
! [SV1893: $i,SV508: $i,SV1880: $i,SV1023: $i,SV1760: $i,SV1614: $i,SV1368: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1023 ) @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV508 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) @ SV1893 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1760 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Event_Oevent_ONotes @ c_Message_Oagent_OSpy @ ( c_Message_Omsg_OMPair @ SV1880 @ ( c_Message_Omsg_OMPair @ ( v_sko__NS__Shared__Mirabelle__XA__trusts__NS4__1 @ SV1368 @ SV1880 @ SV1760 ) @ ( hAPP @ c_Message_Omsg_OKey @ SV1368 ) ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true )
| ( ( c_in @ SV1023 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV508 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1760 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV508 @ SV1023 @ ( c_Message_Omsg_OCrypt @ SV1368 @ ( c_Message_Omsg_ONonce @ SV1614 ) ) ) @ ( c_List_Oset @ SV1760 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5295]) ).
thf(5304,plain,
! [SV1894: $i,SV519: $i,SV1887: $i,SV1032: $i,SV1763: $i,SV1618: $i,SV1374: $i] :
( ( ( c_in @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV1032 ) @ ( c_Message_Omsg_OMPair @ SV1887 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV519 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ SV1894 ) ) ) ) @ ( c_Message_Oparts @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
= $false )
| ( ( c_in @ ( hAPP @ c_Message_Omsg_OKey @ SV1374 ) @ ( c_Message_Oanalz @ ( c_Event_Oknows @ c_Message_Oagent_OSpy @ SV1763 ) ) @ tc_Message_Omsg )
= $true )
| ( ( c_in @ SV1032 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV519 @ c_Event_Obad @ tc_Message_Oagent )
= $true )
| ( ( c_in @ SV1763 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_NS__Shared__Mirabelle_OIssues @ SV519 @ SV1032 @ ( c_Message_Omsg_OCrypt @ SV1374 @ ( c_Message_Omsg_ONonce @ SV1618 ) ) @ SV1763 )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5296]) ).
thf(5305,plain,
! [SV1862: $i,SV924: $i,SV1830: $i,SV1798: $i,SV1561: $i,SV398: $i,SV1884: $i,SV1297: $i,SV1730: $i] :
( ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ SV1730 )
= $false )
| ( ( c_in @ SV1297 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1884 @ SV398 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1798 @ SV398 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV398 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1830 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV924 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1297 ) @ SV1862 ) ) ) ) ) @ ( c_List_Oset @ SV1730 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_NS__Shared__Mirabelle_Ons__sharedp @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV398 @ SV924 @ ( c_Message_Omsg_OCrypt @ SV1297 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1561 ) @ ( c_Message_Omsg_ONonce @ SV1561 ) ) ) ) @ SV1730 @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5297]) ).
thf(5306,plain,
! [SV1863: $i,SV925: $i,SV1831: $i,SV1799: $i,SV1562: $i,SV399: $i,SV1885: $i,SV1298: $i,SV1731: $i] :
( ( ( c_in @ SV1731 @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $false )
| ( ( c_in @ SV1298 @ c_Message_OsymKeys @ tc_nat )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1885 @ SV399 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_Event_Oevent_OSays @ SV1799 @ SV399 @ ( c_Message_Omsg_OCrypt @ ( hAPP @ c_Public_OshrK @ SV399 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1831 ) @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_OAgent @ SV925 ) @ ( c_Message_Omsg_OMPair @ ( hAPP @ c_Message_Omsg_OKey @ SV1298 ) @ SV1863 ) ) ) ) ) @ ( c_List_Oset @ SV1731 @ tc_Event_Oevent ) @ tc_Event_Oevent )
= $false )
| ( ( c_in @ ( c_List_Olist_OCons @ ( c_Event_Oevent_OSays @ SV399 @ SV925 @ ( c_Message_Omsg_OCrypt @ SV1298 @ ( c_Message_Omsg_OMPair @ ( c_Message_Omsg_ONonce @ SV1562 ) @ ( c_Message_Omsg_ONonce @ SV1562 ) ) ) ) @ SV1731 @ tc_Event_Oevent ) @ c_NS__Shared__Mirabelle_Ons__shared @ ( tc_List_Olist @ tc_Event_Oevent ) )
= $true ) ),
inference(extcnf_not_pos,[status(thm)],[5298]) ).
thf(5307,plain,
$false = $true,
inference(fo_atp_e,[status(thm)],[1562,5306,5305,5304,5303,5302,5301,5300,5299,5290,5287,5286,5283,5282,5281,5280,5265,5263,5258,5256,5255,5254,5253,5250,5249,5245,5224,5223,5221,5219,5208,5203,5191,5161,5160,5159,5156,5155,5154,5153,5152,5151,5141,5137,5136,5124,5116,5115,5114,5113,5112,5106,5099,5098,5097,5096,5094,5093,5092,5091,5057,5054,5053,5052,5051,5050,5049,5048,5041,5038,5037,5036,5035,5034,5033,5028,5027,5025,5024,5023,5022,5019,5018,5017,5016,5015,5014,5013,5008,5007,5006,5005,5004,5003,5002,5001,4995,4991,4986,4980,4979,4978,4977,4976,4975,4974,4973,4972,4971,4970,4969,4968,4967,4944,4943,4942,4941,4940,4939,4937,4926,4925,4922,4919,4918,4917,4913,4910,4905,4904,4903,4902,4900,4899,4898,4897,4891,4890,4889,4886,4885,4871,4870,4869,4865,4864,4863,4862,4861,4858,4857,4852,4851,4850,4848,4847,4846,4845,4844,4841,4840,4836,4830,4824,4823,4822,4821,4820,4812,4811,4810,4806,4805,4804,4803,4802,4801,4795,4794,4793,4792,4786,4785,4784,4781,4780,4758,4757,4756,4755,4754,4753,4752,4735,4734,4732,4727,4726,4725,4720,4717,4710,4708,4707,4693,4687,4686,4685,4684,4683,4682,4678,4676,4674,4666,4665,4646,4645,4639,4638,4637,4632,4629,4627,4626,4625,4619,4618,4617,4614,4607,4606,4605,4604,4588,4581,4573,4572,4569,4566,4563,4556,4548,4545,4544,4526,4518,4514,4513,4512,4511,4510,4509,4508,4507,4506,4505,4504,4499,4493,4492,4490,4486,4485,4484,4480,4477,4476,4465,4458,4448,4446,4445,4442,4440,4423,4422,4421,4420,4414,4413,4410,4409,4401,4397,4395,4389,4385,4369,4368,4367,4366,4357,4349,4348,4347,4336,4335,4334,4333,4332,4329,4324,4323,4322,4321,4320,4319,4318,4317,4316,4315,4314,4313,4312,4311,4310,4309,4307,4301,4298,4297,4296,4294,4293,4292,4291,4290,4289,4285,4284,4280,4279,4275,4269,4251,4239,4235,4234,4225,4221,4220,4215,4214,4213,4212,4211,4204,4203,4191,4190,4187,4186,4185,4181,4172,4166,4157,4156,4155,4140,4139,4137,4136,4134,4133,4132,4131,4122,4121,4120,4119,4118,4116,4113,4109,4107,4104,4103,4102,4098,4097,4094,4093,4092,4091,4076,4062,4055,4054,4051,4050,4046,4044,4043,4042,4041,4040,4039,4038,4037,4036,4035,4033,4020,4019,4018,4017,4016,4015,4005,4004,3994,3993,3990,3987,3986,3984,3983,3982,3979,3978,3962,3961,3947,3944,3925,3924,3923,3921,3915,3914,3912,3911,3909,3907,3906,3901,3900,3899,3898,3896,3884,3883,3860,3852,3840,3838,3828,3827,3812,3801,3795,3791,3790,3780,3764,3753,3752,3750,3700,3683,3682,3681,3674,3660,3658,3657,3656,3654,3653,3645,3644,3641,3638,3632,3631,3626,3624,3612,3602,3593,3591,3567,3565,3564,3560,3559,3558,3557,3552,3551,3524,3520,3517,3501,3500,3483,3474,3445,3444,3424,3406,3399,3398,3397,3389,3388,3387,3380,3379,3378,3376,3375,3370,3367,3336,3279,3274,3273,3247,3208,3207,3171,3170,3169,3168,3167,3153,3127,3100,3097,3095,3093,3090,3054,3020,3009,2987,2984,2972,2969,2968,2944,2943,2941,2938,2937,2935,2922,2916,2910,2909,2896,2891,2875,2874,2870,2867,2865,2864,2863,2850,2845,2844,2834,2831,2830,2825,2805,2799,2752,2750,2733,2731,2698,2681,2670,2653,2652,2644,2628,2622,2617,2615,2587,2573,2533,2476,2437,2430,2419,2343,2341,2337,2304,2256,2254,2251,2249,2248,2242,2239,2230,2224,2195,2194,2193,2192,2188,2187,2186,2185,2184,2183,2182,2181,2180,2179,2178,2177,2176,2175,2174,2173,2123,2060,2015,1719,1628,1572,1571,1563]) ).
thf(5308,plain,
$false,
inference(solved_all_splits,[solved_all_splits(join,[])],[5307]) ).
%------------------------------------------------------------------------------
%----ORIGINAL SYSTEM OUTPUT
% 0.00/0.02 % Problem : SWV799-1 : TPTP v9.3.1. Released v4.1.0.
% 0.00/0.04 % Command : leo --cores 7 --timeout 300 --proofoutput 1 --foatp e --atp e=/export/starexec/sandbox2/solver/bin/eprover /export/starexec/sandbox2/benchmark/theBenchmark.p
% 0.08/0.17 % Computer : n007.cluster.edu
% 0.08/0.17 % Model : x86_64 x86_64
% 0.08/0.17 % CPU : Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz
% 0.08/0.17 % Memory : 8046.5625MB
% 0.08/0.17 % OS : Linux 6.8.0-71-generic
% 0.08/0.17 % CPULimit : 300
% 0.08/0.17 % WCLimit : 300
% 0.08/0.18 % DateTime : Tue Oct 6 16:42:30 UTC 2026
% 0.08/0.18 % CPUTime :
% 0.08/0.18 Running leo --cores 7 --timeout 300 --proofoutput 1 --foatp e --atp e=/export/starexec/sandbox2/solver/bin/eprover /export/starexec/sandbox2/benchmark/theBenchmark.p
% 101.33/17.22 ....
% 101.33/17.22
% 101.33/17.22 No.of.Axioms: 632
% 101.33/17.22
% 101.33/17.22 Length.of.Defs: 0
% 101.33/17.22
% 101.33/17.22 Contains.Choice.Funs: false
% 101.33/17.22 .........................................................................................................................................................................................................................................................................................................................
% 101.33/17.22
% 101.33/17.22 ********************************
% 101.33/17.22 * All subproblems solved! *
% 101.33/17.22 ********************************
% 101.33/17.22 % SZS status Unsatisfiable for /export/starexec/sandbox2/benchmark/theBenchmark.p : (rf:2,axioms:632,ps:3,u:5,ude:true,rLeibEQ:true,rAndEQ:true,use_choice:true,use_extuni:true,use_extcnf_combined:true,expand_extuni:false,foatp:e,atp_timeout:72,atp_calls_frequency:5,ordering:none,proof_output:1,protocol_output:false,clause_count:5307,loop_count:0,foatp_calls:1,translation:fof_experiment)
% 101.33/17.22
% 101.33/17.22 %**** Beginning of derivation protocol ****
% 101.33/17.22 % SZS output start CNFRefutation
% See solution above
% 101.33/17.25
% 101.33/17.25 %**** End of derivation protocol ****
% 101.33/17.25 %**** no. of clauses in derivation: 5308 ****
% 101.33/17.25 %**** clause counter: 5307 ****
% 101.33/17.25
% 101.33/17.25 % SZS status Unsatisfiable for /export/starexec/sandbox2/benchmark/theBenchmark.p : (rf:2,axioms:632,ps:3,u:5,ude:true,rLeibEQ:true,rAndEQ:true,use_choice:true,use_extuni:true,use_extcnf_combined:true,expand_extuni:false,foatp:e,atp_timeout:72,atp_calls_frequency:5,ordering:none,proof_output:1,protocol_output:false,clause_count:5307,loop_count:0,foatp_calls:1,translation:fof_experiment)
%------------------------------------------------------------------------------