proposition: Lemma tarjan_correct : correct_ind DS.empty tarjan i' j' /\ invariant tarjan.
proof: Proof. apply loop_correct in _H; auto. rewrite measure_empty. auto with arith. apply invariant_empty. Qed.
imports: ATBR(Common) ATBR(Classes) ATBR(Graph) ATBR(Monoid) ATBR(SemiLattice) ATBR(SemiRing) ATBR(KleeneAlgebra) ATBR(MxGraph) ATBR(MxSemiLattice) ATBR(MxSemiRing) ATBR(MxKleeneAlgebra) ATBR(DKA_Definitions) ATBR(DKA_StateSetSets) ATBR(Utils_WF) Coq(Relations) Coq(List)