fact: Definition msgid_inv (s : InstConcExec.State) := NoDup (map (fun m => (msg_sender m, msg_clock m, msg_receiver m)) (messages s)) /\ Forall (fun m => clock_state (node_states s (msg_sender m)) >= msg_clock m) (messages s).
imports: Coq(FunctionalExtensionality Arith Lia) Coq(Arith.Peano_dec Arith.Compare_dec) Coq(Relations.Relation_Operators) Coq(List) Chapar(Predefs)