type proof: theory_ref instead of theory (make proof contexts independent entities);
added transfer_proof;
\index{model checking example|(}%
\index{lfp@{\texttt{lfp}}!applications of|see{CTL}}
\input{CTL/document/Base.tex}
\input{CTL/document/PDL.tex}
\input{CTL/document/CTL.tex}
\index{model checking example|)}