src/HOLCF/IOA/Modelcheck/Ring3.ML
author wenzelm
Thu, 15 Feb 2001 17:18:54 +0100
changeset 11145 3e47692e3a3e
parent 7310 298b0dcadf2e
permissions -rw-r--r--
eliminate get_def;


val aut_simps = [Greater_def,one_leader_def,
  one_leader_asig_def,one_leader_trans_def,one_leader_initial_def,
  ring_def,aut0_asig_def,aut0_trans_def,aut0_initial_def,aut0_def,
  aut1_asig_def,aut1_trans_def,aut1_initial_def,aut1_def,
  aut2_asig_def,aut2_trans_def,aut2_initial_def,aut2_def];

(* property to prove: at most one (of 3) members of the ring will
	declare itself to leader *)
Goal "ring =<| one_leader";
by (is_sim_tac aut_simps 1); 
by Auto_tac;
qed"at_most_one_leader";