fact: Definition fact_tp n acc := unit -> {N}, STsep (fact_inv n acc N, [vfun (res : nat) h => fact_inv n acc N h /\ res = fact_pure N]).
imports: mathcomp(ssreflect ssrbool ssrnat eqtype seq ssrfun) fcsl(prelude pred pcm unionmap heap) HTT(stmod stsep stlog stlogR)