| Thu, 27 May 1999 11:22:10 +0200 | paulson | removal of Always_StableI | file | diff | annotate |
| Mon, 24 May 1999 15:48:27 +0200 | paulson | expandshort | file | diff | annotate |
| Wed, 19 May 1999 11:22:02 +0200 | paulson | redid proofs to use "always" rather than "reachable" (somewhat) | file | diff | annotate |
| Tue, 04 May 1999 10:26:00 +0200 | paulson | Invariant -> Always and other tidying | file | diff | annotate |
| Fri, 23 Oct 1998 20:44:34 +0200 | oheimb | corrected auto_tac (applications of unsafe wrappers) | file | diff | annotate |
| Thu, 15 Oct 1998 11:35:07 +0200 | paulson | specifications as sets of programs | file | diff | annotate |
| Wed, 23 Sep 1998 10:11:18 +0200 | paulson | tidying and deleting needless parentheses | file | diff | annotate |
| Mon, 14 Sep 1998 10:18:07 +0200 | paulson | commented out duplicate proof | file | diff | annotate |
| Thu, 10 Sep 1998 17:30:24 +0200 | paulson | deleted not_Says_to_self | file | diff | annotate |
| Mon, 07 Sep 1998 10:43:31 +0200 | paulson | New UNITY theory, the N-S protocol | file | diff | annotate |