runProg (simulate p) (xs, map simulate qs) = ((xs ++ runNondet p ++ concatMap runNondet qs, []), ()) Proof. The proof proceeds by structural induction on p ...
確定! 回上一頁