Fair Deliver Msg schedule Msgs
Cslib.FLP.FairScheduler.fairDeliverMsg_scheduleMsgs
Plain-language statement
The correctness of d.scheduleMsgs ps s under the assumption a.FairDeliverMsg d ps q.
Exact Lean statement
theorem fairDeliverMsg_scheduleMsgs {d : DeliverMsg P M S} {ps : Set P} {q : State P M S → Prop}
(hd : a.FairDeliverMsg d ps q) (s : State P M S) (hs : q s) :
let xlFormal artifact
Lean source
theorem fairDeliverMsg_scheduleMsgs {d : DeliverMsg P M S} {ps : Set P} {q : State P M S → Prop} (hd : a.FairDeliverMsg d ps q) (s : State P M S) (hs : q s) : let xl := (d.scheduleMsgs ps s).fst let t := (d.scheduleMsgs ps s).snd q t ∧ a.lts.MTr s xl t ∧ xl.length > 0 ∧ ∀ m, m ∈ s.msgs → m.dest ∈ ps → some m ∈ xl := by classical intro xl t let ms := s.msgs.filter (fun m ↦ m.dest ∈ ps) by_cases h_ms : ms = 0 · have h1 : xl = [none] ∧ t = s := by grind [DeliverMsg.scheduleMsgs] simp [ms, eq_zero_iff_forall_notMem] at h_ms simp only [h1, hs, List.length_cons, List.length_nil, zero_add, Order.lt_one_iff, true_and] split_ands · apply LTS.MTr.single grind [Algorithm.lts] · grind · have : q t ∧ a.lts.MTr s xl t ∧ ∀ m, m ∈ ms.toList → some m ∈ xl := by grind [DeliverMsg.scheduleMsgs, fairDeliverMsg_foldList hd s ms.toList ∅ (by simp [ms, hs])] obtain ⟨m, _⟩ := exists_mem_of_ne_zero h_ms have : some m ∈ xl := by grind [mem_toList] split_ands <;> grind [mem_toList, mem_filter]- Project
- Lean Computer Science Library
- License
- Apache-2.0
- Commit
- f36649cff2c9
- Source
- Cslib/Computability/Distributed/FLP/FairScheduler.lean:154-174
Reuse this declaration
Bring the exact result into your workflow
The import identifies the source module. Your project still needs the pinned package dependency shown on this page.
What this badge means
This completion status comes from the project or community source. It has not yet been represented here as an independent rebuild and axiom audit.
Continue in this project
Related declarations
Unique minimal
Cslib.Automata.DA.FinAcc.unique_minimal
Plain-language statement
The minimal DFA M accepting the language l is unique up to unique isomorphism.
Source project: Lean Computer Science Library
Person-level attribution pending.
Buchi Family cover
Cslib.Automata.NA.Buchi.buchiFamily_cover
Project documentation
na.buchiFamily is a cover if na has only finitely many states. This theorem uses the Ramsey theorem for infinite graphs and does not depend on any details of na.BuchiCongruence other than that it is of finite index.
Source project: Lean Computer Science Library
Person-level attribution pending.
Buchi Family saturation
Cslib.Automata.NA.Buchi.buchiFamily_saturation
Plain-language statement
na.buchiFamily saturates the ω-language accepted by na.
Source project: Lean Computer Science Library
Person-level attribution pending.