leopold/inductive-verification-lean
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Simplified proofs in NS_Public
Lean Action CI / build (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Your Name
2026-03-04 00:56:37 +01:00
parent 96e5d59603
commit 7367681bc6
4 changed files with 313 additions and 391 deletions
Download Patch File Download Diff File Expand all files Collapse all files
InductiveVerification/Event.lean
+15
View File
@@ -375,6 +375,21 @@ lemma parts_knows_Spy_subset_used [Bad] :
· simp[used, knows]; split_ifs with ABad
· simp; apply subset_trans; apply ih; simp
· apply subset_trans; apply ih; simp
lemma parts_knows_Spy_subset_used_neg [Bad] :
M ∉ used evs → M ∉ parts (knows Agent.Spy evs) := by
intro h₁ h₂; apply h₁; aapply parts_knows_Spy_subset_used
lemma analz_knows_Spy_subset_used [Bad] [InvKey] :
analz (knows Agent.Spy evs) ⊆ used evs
:= by
apply subset_trans ( b := parts (knows Agent.Spy evs) )
· exact analz_subset_parts
· exact parts_knows_Spy_subset_used
lemma analz_knows_Spy_subset_used_neg [Bad] [InvKey] :
M ∉ used evs → M ∉ analz (knows Agent.Spy evs) := by
intro h₁ h₂; apply h₁; aapply analz_knows_Spy_subset_used
-- Parts of what the Spy knows are a subset of what is used
lemma usedI [Bad] :