doc-src/Intro/gate.thy

Added some more explicit guarantees of key secrecy for agents

Deleted spurious A~=Spy assumptions

Gate = FOL +
consts  nand,xor :: "[o,o] => o"
rules   nand_def "nand(P,Q) == ~(P & Q)"
        xor_def  "xor(P,Q)  == P & ~Q | ~P & Q"
end