TSTP Solution File: SWV321-2 by Z3---4.8.9.0

View Problem - Process Solution

%------------------------------------------------------------------------------
% File     : Z3---4.8.9.0
% Problem  : SWV321-2 : TPTP v8.1.0. Released v3.2.0.
% Transfm  : none
% Format   : tptp
% Command  : z3_tptp -proof -model -t:%d -file:%s

% Computer : n007.cluster.edu
% Model    : x86_64 x86_64
% CPU      : Intel(R) Xeon(R) CPU E5-2620 v4 2.10GHz
% Memory   : 8042.1875MB
% OS       : Linux 3.10.0-693.el7.x86_64
% CPULimit : 300s
% WCLimit  : 300s
% DateTime : Thu Sep 29 15:11:09 EDT 2022

% Result   : Unsatisfiable 0.13s 0.40s
% Output   : Proof 0.20s
% Verified : 
% SZS Type : -

% Comments : 
%------------------------------------------------------------------------------
%----WARNING: Could not form TPTP format derivation
%------------------------------------------------------------------------------
%----ORIGINAL SYSTEM OUTPUT
% 0.10/0.12  % Problem  : SWV321-2 : TPTP v8.1.0. Released v3.2.0.
% 0.10/0.13  % Command  : z3_tptp -proof -model -t:%d -file:%s
% 0.13/0.34  % Computer : n007.cluster.edu
% 0.13/0.34  % Model    : x86_64 x86_64
% 0.13/0.34  % CPU      : Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz
% 0.13/0.34  % Memory   : 8042.1875MB
% 0.13/0.34  % OS       : Linux 3.10.0-693.el7.x86_64
% 0.13/0.34  % CPULimit : 300
% 0.13/0.34  % WCLimit  : 300
% 0.13/0.34  % DateTime : Sun Sep  4 02:10:34 EDT 2022
% 0.13/0.34  % CPUTime  : 
% 0.13/0.35  Z3tptp [4.8.9.0] (c) 2006-20**. Microsoft Corp.
% 0.13/0.35  Usage: tptp [options] [-file:]file
% 0.13/0.35    -h, -?       prints this message.
% 0.13/0.35    -smt2        print SMT-LIB2 benchmark.
% 0.13/0.35    -m, -model   generate model.
% 0.13/0.35    -p, -proof   generate proof.
% 0.13/0.35    -c, -core    generate unsat core of named formulas.
% 0.13/0.35    -st, -statistics display statistics.
% 0.13/0.35    -t:timeout   set timeout (in second).
% 0.13/0.35    -smt2status  display status in smt2 format instead of SZS.
% 0.13/0.35    -check_status check the status produced by Z3 against annotation in benchmark.
% 0.13/0.35    -<param>:<value> configuration parameter and value.
% 0.13/0.35    -o:<output-file> file to place output in.
% 0.13/0.40  % SZS status Unsatisfiable
% 0.13/0.40  % SZS output start Proof
% 0.13/0.40  tff(c_in_type, type, (
% 0.13/0.40     c_in: ( $i * $i * $i ) > $o)).
% 0.13/0.40  tff(tc_Message_Omsg_type, type, (
% 0.13/0.40     tc_Message_Omsg: $i)).
% 0.13/0.40  tff(c_Event_Oknows_type, type, (
% 0.13/0.40     c_Event_Oknows: ( $i * $i ) > $i)).
% 0.13/0.40  tff(v_evsf_type, type, (
% 0.13/0.40     v_evsf: $i)).
% 0.13/0.40  tff(c_Message_Oagent_OSpy_type, type, (
% 0.13/0.40     c_Message_Oagent_OSpy: $i)).
% 0.13/0.40  tff(c_Message_Omsg_OKey_type, type, (
% 0.13/0.40     c_Message_Omsg_OKey: $i > $i)).
% 0.13/0.40  tff(c_Public_OshrK_type, type, (
% 0.13/0.40     c_Public_OshrK: $i > $i)).
% 0.13/0.40  tff(v_A_type, type, (
% 0.13/0.40     v_A: $i)).
% 0.13/0.40  tff(c_insert_type, type, (
% 0.13/0.40     c_insert: ( $i * $i * $i ) > $i)).
% 0.13/0.40  tff(v_X_type, type, (
% 0.13/0.40     v_X: $i)).
% 0.13/0.40  tff(c_Message_Oparts_type, type, (
% 0.13/0.40     c_Message_Oparts: $i > $i)).
% 0.13/0.40  tff(tc_Message_Oagent_type, type, (
% 0.13/0.40     tc_Message_Oagent: $i)).
% 0.13/0.40  tff(c_Event_Obad_type, type, (
% 0.13/0.40     c_Event_Obad: $i)).
% 0.13/0.40  tff(c_Message_Osynth_type, type, (
% 0.13/0.40     c_Message_Osynth: $i > $i)).
% 0.13/0.40  tff(c_Message_Oanalz_type, type, (
% 0.13/0.40     c_Message_Oanalz: $i > $i)).
% 0.13/0.40  tff(c_union_type, type, (
% 0.13/0.40     c_union: ( $i * $i * $i ) > $i)).
% 0.13/0.40  tff(1,plain,
% 0.13/0.40      (^[V_H: $i, V_X: $i] : refl(((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg)) <=> ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg)))),
% 0.13/0.40      inference(bind,[status(th)],[])).
% 0.13/0.40  tff(2,plain,
% 0.13/0.40      (![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg)) <=> ![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.13/0.40      inference(quant_intro,[status(thm)],[1])).
% 0.13/0.40  tff(3,plain,
% 0.13/0.40      (![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg)) <=> ![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.13/0.40      inference(rewrite,[status(thm)],[])).
% 0.13/0.40  tff(4,axiom,(![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Message_Oparts_OInj_0')).
% 0.13/0.40  tff(5,plain,
% 0.13/0.40      (![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.13/0.40      inference(modus_ponens,[status(thm)],[4, 3])).
% 0.13/0.40  tff(6,plain,(
% 0.13/0.40      ![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.13/0.40      inference(skolemize,[status(sab)],[5])).
% 0.13/0.40  tff(7,plain,
% 0.13/0.40      (![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.13/0.40      inference(modus_ponens,[status(thm)],[6, 2])).
% 0.13/0.40  tff(8,plain,
% 0.13/0.40      (^[V_Z: $i, V_H: $i, V_X: $i] : refl((c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) <=> (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))))),
% 0.13/0.40      inference(bind,[status(th)],[])).
% 0.13/0.40  tff(9,plain,
% 0.13/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) <=> ![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.13/0.40      inference(quant_intro,[status(thm)],[8])).
% 0.13/0.40  tff(10,plain,
% 0.13/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) <=> ![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.13/0.40      inference(rewrite,[status(thm)],[])).
% 0.13/0.40  tff(11,plain,
% 0.13/0.40      (^[V_Z: $i, V_H: $i, V_X: $i] : trans(monotonicity(rewrite(((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) <=> ((~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))), ((((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)) <=> (((~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)))), rewrite((((~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)) <=> (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))), ((((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)) <=> (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))))),
% 0.13/0.40      inference(bind,[status(th)],[])).
% 0.13/0.40  tff(12,plain,
% 0.13/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg)) <=> ![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.13/0.40      inference(quant_intro,[status(thm)],[11])).
% 0.13/0.40  tff(13,axiom,(![V_Z: $i, V_H: $i, V_X: $i] : (((~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg))) | c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Message_OFake__parts__insert__in__Un__dest_0')).
% 0.13/0.40  tff(14,plain,
% 0.13/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.13/0.40      inference(modus_ponens,[status(thm)],[13, 12])).
% 0.13/0.40  tff(15,plain,
% 0.13/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.13/0.40      inference(modus_ponens,[status(thm)],[14, 10])).
% 0.13/0.40  tff(16,plain,(
% 0.13/0.40      ![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.13/0.40      inference(skolemize,[status(sab)],[15])).
% 0.13/0.40  tff(17,plain,
% 0.13/0.40      (![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.13/0.40      inference(modus_ponens,[status(thm)],[16, 9])).
% 0.13/0.40  tff(18,assumption,(~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)), introduced(assumption)).
% 0.13/0.40  tff(19,plain,
% 0.13/0.40      (((~![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> ((~![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.13/0.40      inference(rewrite,[status(thm)],[])).
% 0.13/0.40  tff(20,plain,
% 0.13/0.40      ((~![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.13/0.40      inference(quant_inst,[status(thm)],[])).
% 0.13/0.40  tff(21,plain,
% 0.13/0.40      ((~![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)),
% 0.13/0.40      inference(modus_ponens,[status(thm)],[20, 19])).
% 0.13/0.40  tff(22,plain,
% 0.13/0.40      (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)),
% 0.13/0.40      inference(unit_resolution,[status(thm)],[21, 18, 7])).
% 0.13/0.40  tff(23,plain,
% 0.13/0.40      (^[V_A: $i, V_evs: $i] : refl(((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg)) <=> ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg)))),
% 0.13/0.40      inference(bind,[status(th)],[])).
% 0.13/0.40  tff(24,plain,
% 0.13/0.40      (![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg)) <=> ![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))),
% 0.13/0.40      inference(quant_intro,[status(thm)],[23])).
% 0.13/0.40  tff(25,plain,
% 0.13/0.40      (![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg)) <=> ![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))),
% 0.13/0.40      inference(rewrite,[status(thm)],[])).
% 0.13/0.40  tff(26,axiom,(![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Public_OSpy__spies__bad__shrK_0')).
% 0.13/0.40  tff(27,plain,
% 0.13/0.40      (![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))),
% 0.13/0.40      inference(modus_ponens,[status(thm)],[26, 25])).
% 0.13/0.40  tff(28,plain,(
% 0.13/0.40      ![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))),
% 0.13/0.40      inference(skolemize,[status(sab)],[27])).
% 0.13/0.40  tff(29,plain,
% 0.13/0.40      (![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))),
% 0.13/0.40      inference(modus_ponens,[status(thm)],[28, 24])).
% 0.13/0.40  tff(30,plain,
% 0.13/0.40      (((~![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))) | ((~c_in(v_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg))) <=> ((~![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))) | (~c_in(v_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg))),
% 0.13/0.40      inference(rewrite,[status(thm)],[])).
% 0.13/0.40  tff(31,plain,
% 0.13/0.40      ((~![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))) | ((~c_in(v_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg))),
% 0.13/0.40      inference(quant_inst,[status(thm)],[])).
% 0.13/0.40  tff(32,plain,
% 0.13/0.40      ((~![V_A: $i, V_evs: $i] : ((~c_in(V_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(V_A)), c_Event_Oknows(c_Message_Oagent_OSpy, V_evs), tc_Message_Omsg))) | (~c_in(v_A, c_Event_Obad, tc_Message_Oagent)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)),
% 0.13/0.40      inference(modus_ponens,[status(thm)],[31, 30])).
% 0.13/0.40  tff(33,plain,
% 0.13/0.40      (~c_in(v_A, c_Event_Obad, tc_Message_Oagent)),
% 0.13/0.40      inference(unit_resolution,[status(thm)],[32, 29, 22])).
% 0.13/0.40  tff(34,plain,
% 0.13/0.40      ((c_in(v_A, c_Event_Obad, tc_Message_Oagent) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)) <=> (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))),
% 0.13/0.40      inference(rewrite,[status(thm)],[])).
% 0.13/0.40  tff(35,plain,
% 0.13/0.40      ((c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg) | c_in(v_A, c_Event_Obad, tc_Message_Oagent)) <=> (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))),
% 0.13/0.41      inference(rewrite,[status(thm)],[])).
% 0.13/0.41  tff(36,axiom,(c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg) | c_in(v_A, c_Event_Obad, tc_Message_Oagent)), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_5')).
% 0.13/0.41  tff(37,plain,
% 0.13/0.41      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)),
% 0.13/0.41      inference(modus_ponens,[status(thm)],[36, 35])).
% 0.13/0.41  tff(38,plain,
% 0.13/0.41      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)),
% 0.13/0.41      inference(modus_ponens,[status(thm)],[37, 34])).
% 0.13/0.41  tff(39,plain,
% 0.13/0.41      (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)),
% 0.13/0.41      inference(unit_resolution,[status(thm)],[38, 33])).
% 0.13/0.41  tff(40,plain,
% 0.13/0.41      (c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) <=> c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)),
% 0.13/0.41      inference(rewrite,[status(thm)],[])).
% 0.13/0.41  tff(41,axiom,(c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_1')).
% 0.13/0.41  tff(42,plain,
% 0.13/0.41      (c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)),
% 0.13/0.41      inference(modus_ponens,[status(thm)],[41, 40])).
% 0.13/0.41  tff(43,plain,
% 0.13/0.41      (((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))) <=> ((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))),
% 0.13/0.41      inference(rewrite,[status(thm)],[])).
% 0.13/0.41  tff(44,plain,
% 0.13/0.41      ((c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))) <=> ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))),
% 0.20/0.41      inference(rewrite,[status(thm)],[])).
% 0.20/0.41  tff(45,plain,
% 0.20/0.41      (((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)))) <=> ((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg))))),
% 0.20/0.41      inference(monotonicity,[status(thm)],[44])).
% 0.20/0.41  tff(46,plain,
% 0.20/0.41      (((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)))) <=> ((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)))),
% 0.20/0.41      inference(transitivity,[status(thm)],[45, 43])).
% 0.20/0.41  tff(47,plain,
% 0.20/0.41      ((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.20/0.41      inference(quant_inst,[status(thm)],[])).
% 0.20/0.41  tff(48,plain,
% 0.20/0.41      ((~![V_Z: $i, V_H: $i, V_X: $i] : (c_in(V_Z, c_union(c_Message_Osynth(c_Message_Oanalz(V_H)), c_Message_Oparts(V_H), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(V_X, c_Message_Osynth(c_Message_Oanalz(V_H)), tc_Message_Omsg)) | (~c_in(V_Z, c_Message_Oparts(c_insert(V_X, V_H, tc_Message_Omsg)), tc_Message_Omsg)))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg) | (~c_in(v_X, c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg))),
% 0.20/0.41      inference(modus_ponens,[status(thm)],[47, 46])).
% 0.20/0.41  tff(49,plain,
% 0.20/0.41      (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)),
% 0.20/0.41      inference(unit_resolution,[status(thm)],[48, 42, 39, 17])).
% 0.20/0.41  tff(50,plain,
% 0.20/0.41      (^[V_c: $i, T_a: $i, V_B: $i, V_A: $i] : refl((c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))) <=> (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))))),
% 0.20/0.41      inference(bind,[status(th)],[])).
% 0.20/0.41  tff(51,plain,
% 0.20/0.41      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))) <=> ![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.20/0.41      inference(quant_intro,[status(thm)],[50])).
% 0.20/0.41  tff(52,plain,
% 0.20/0.41      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))) <=> ![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.20/0.41      inference(rewrite,[status(thm)],[])).
% 0.20/0.41  tff(53,plain,
% 0.20/0.41      (^[V_c: $i, T_a: $i, V_B: $i, V_A: $i] : rewrite((((~c_in(V_c, c_union(V_A, V_B, T_a), T_a)) | c_in(V_c, V_B, T_a)) | c_in(V_c, V_A, T_a)) <=> (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a))))),
% 0.20/0.41      inference(bind,[status(th)],[])).
% 0.20/0.41  tff(54,plain,
% 0.20/0.41      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (((~c_in(V_c, c_union(V_A, V_B, T_a), T_a)) | c_in(V_c, V_B, T_a)) | c_in(V_c, V_A, T_a)) <=> ![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.20/0.41      inference(quant_intro,[status(thm)],[53])).
% 0.20/0.41  tff(55,axiom,(![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (((~c_in(V_c, c_union(V_A, V_B, T_a), T_a)) | c_in(V_c, V_B, T_a)) | c_in(V_c, V_A, T_a))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Set_OUnE_0')).
% 0.20/0.41  tff(56,plain,
% 0.20/0.41      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.20/0.41      inference(modus_ponens,[status(thm)],[55, 54])).
% 0.20/0.41  tff(57,plain,
% 0.20/0.41      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.20/0.41      inference(modus_ponens,[status(thm)],[56, 52])).
% 0.20/0.41  tff(58,plain,(
% 0.20/0.41      ![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.20/0.41      inference(skolemize,[status(sab)],[57])).
% 0.20/0.41  tff(59,plain,
% 0.20/0.41      (![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))),
% 0.20/0.41      inference(modus_ponens,[status(thm)],[58, 51])).
% 0.20/0.41  tff(60,plain,
% 0.20/0.41      (((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))) <=> ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))),
% 0.20/0.41      inference(rewrite,[status(thm)],[])).
% 0.20/0.41  tff(61,plain,
% 0.20/0.41      ((c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg))) <=> (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))),
% 0.20/0.41      inference(rewrite,[status(thm)],[])).
% 0.20/0.41  tff(62,plain,
% 0.20/0.41      (((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))) <=> ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg))))),
% 0.20/0.42      inference(monotonicity,[status(thm)],[61])).
% 0.20/0.42  tff(63,plain,
% 0.20/0.42      (((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))) <=> ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))),
% 0.20/0.42      inference(transitivity,[status(thm)],[62, 60])).
% 0.20/0.42  tff(64,plain,
% 0.20/0.42      ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg)))),
% 0.20/0.42      inference(quant_inst,[status(thm)],[])).
% 0.20/0.42  tff(65,plain,
% 0.20/0.42      ((~![V_c: $i, T_a: $i, V_B: $i, V_A: $i] : (c_in(V_c, V_A, T_a) | c_in(V_c, V_B, T_a) | (~c_in(V_c, c_union(V_A, V_B, T_a), T_a)))) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_union(c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[64, 63])).
% 0.20/0.42  tff(66,plain,
% 0.20/0.42      (c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)),
% 0.20/0.42      inference(unit_resolution,[status(thm)],[65, 18, 59, 49])).
% 0.20/0.42  tff(67,plain,
% 0.20/0.42      (^[V_c: $i, V_H: $i] : refl(((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg)) <=> ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg)))),
% 0.20/0.42      inference(bind,[status(th)],[])).
% 0.20/0.42  tff(68,plain,
% 0.20/0.42      (![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg)) <=> ![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.20/0.42      inference(quant_intro,[status(thm)],[67])).
% 0.20/0.42  tff(69,plain,
% 0.20/0.42      (![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg)) <=> ![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.20/0.42      inference(rewrite,[status(thm)],[])).
% 0.20/0.42  tff(70,axiom,(![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Message_Oanalz__into__parts__dest_0')).
% 0.20/0.42  tff(71,plain,
% 0.20/0.42      (![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[70, 69])).
% 0.20/0.42  tff(72,plain,(
% 0.20/0.42      ![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.20/0.42      inference(skolemize,[status(sab)],[71])).
% 0.20/0.42  tff(73,plain,
% 0.20/0.42      (![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[72, 68])).
% 0.20/0.42  tff(74,plain,
% 0.20/0.42      (((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> ((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(rewrite,[status(thm)],[])).
% 0.20/0.42  tff(75,plain,
% 0.20/0.42      ((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(quant_inst,[status(thm)],[])).
% 0.20/0.42  tff(76,plain,
% 0.20/0.42      ((~![V_c: $i, V_H: $i] : ((~c_in(V_c, c_Message_Oanalz(V_H), tc_Message_Omsg)) | c_in(V_c, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[75, 74])).
% 0.20/0.42  tff(77,plain,
% 0.20/0.42      (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)),
% 0.20/0.42      inference(unit_resolution,[status(thm)],[76, 18, 73])).
% 0.20/0.42  tff(78,plain,
% 0.20/0.42      (^[V_H: $i, V_K: $i] : refl(((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg)) <=> ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg)))),
% 0.20/0.42      inference(bind,[status(th)],[])).
% 0.20/0.42  tff(79,plain,
% 0.20/0.42      (![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg)) <=> ![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))),
% 0.20/0.42      inference(quant_intro,[status(thm)],[78])).
% 0.20/0.42  tff(80,plain,
% 0.20/0.42      (![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg)) <=> ![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))),
% 0.20/0.42      inference(rewrite,[status(thm)],[])).
% 0.20/0.42  tff(81,axiom,(![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Message_OKey__synth_0')).
% 0.20/0.42  tff(82,plain,
% 0.20/0.42      (![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[81, 80])).
% 0.20/0.42  tff(83,plain,(
% 0.20/0.42      ![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))),
% 0.20/0.42      inference(skolemize,[status(sab)],[82])).
% 0.20/0.42  tff(84,plain,
% 0.20/0.42      (![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[83, 79])).
% 0.20/0.42  tff(85,plain,
% 0.20/0.42      (((~![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> ((~![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(rewrite,[status(thm)],[])).
% 0.20/0.42  tff(86,plain,
% 0.20/0.42      ((~![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(quant_inst,[status(thm)],[])).
% 0.20/0.42  tff(87,plain,
% 0.20/0.42      ((~![V_H: $i, V_K: $i] : ((~c_in(c_Message_Omsg_OKey(V_K), c_Message_Osynth(V_H), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(V_K), V_H, tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Osynth(c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf))), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oanalz(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[86, 85])).
% 0.20/0.42  tff(88,plain,
% 0.20/0.42      ($false),
% 0.20/0.42      inference(unit_resolution,[status(thm)],[87, 84, 77, 66])).
% 0.20/0.42  tff(89,plain,(c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)), inference(lemma,lemma(discharge,[]))).
% 0.20/0.42  tff(90,plain,
% 0.20/0.42      ((c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))) <=> (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg)))),
% 0.20/0.42      inference(rewrite,[status(thm)],[])).
% 0.20/0.42  tff(91,axiom,(c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_2')).
% 0.20/0.42  tff(92,plain,
% 0.20/0.42      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[91, 90])).
% 0.20/0.42  tff(93,plain,
% 0.20/0.42      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[92, 90])).
% 0.20/0.42  tff(94,plain,
% 0.20/0.42      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[93, 90])).
% 0.20/0.42  tff(95,plain,
% 0.20/0.42      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[94, 90])).
% 0.20/0.42  tff(96,plain,
% 0.20/0.42      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[95, 90])).
% 0.20/0.42  tff(97,plain,
% 0.20/0.42      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[96, 90])).
% 0.20/0.42  tff(98,plain,
% 0.20/0.42      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[97, 90])).
% 0.20/0.42  tff(99,plain,
% 0.20/0.42      (c_in(v_A, c_Event_Obad, tc_Message_Oagent) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf)), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[98, 90])).
% 0.20/0.42  tff(100,plain,
% 0.20/0.42      (c_in(v_A, c_Event_Obad, tc_Message_Oagent)),
% 0.20/0.42      inference(unit_resolution,[status(thm)],[99, 89])).
% 0.20/0.42  tff(101,plain,
% 0.20/0.42      (((~c_in(v_A, c_Event_Obad, tc_Message_Oagent)) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))) <=> ((~c_in(v_A, c_Event_Obad, tc_Message_Oagent)) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)))),
% 0.20/0.42      inference(rewrite,[status(thm)],[])).
% 0.20/0.42  tff(102,axiom,((~c_in(v_A, c_Event_Obad, tc_Message_Oagent)) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_conjecture_4')).
% 0.20/0.42  tff(103,plain,
% 0.20/0.42      ((~c_in(v_A, c_Event_Obad, tc_Message_Oagent)) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))),
% 0.20/0.42      inference(modus_ponens,[status(thm)],[102, 101])).
% 0.20/0.42  tff(104,plain,
% 0.20/0.42      (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)),
% 0.20/0.42      inference(unit_resolution,[status(thm)],[103, 100])).
% 0.20/0.42  tff(105,plain,
% 0.20/0.42      (((~![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))) <=> ((~![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))),
% 0.20/0.43      inference(rewrite,[status(thm)],[])).
% 0.20/0.43  tff(106,plain,
% 0.20/0.43      ((~![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg))),
% 0.20/0.43      inference(quant_inst,[status(thm)],[])).
% 0.20/0.43  tff(107,plain,
% 0.20/0.43      ((~![V_H: $i, V_X: $i] : ((~c_in(V_X, V_H, tc_Message_Omsg)) | c_in(V_X, c_Message_Oparts(V_H), tc_Message_Omsg))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Message_Oparts(c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)), tc_Message_Omsg)),
% 0.20/0.43      inference(modus_ponens,[status(thm)],[106, 105])).
% 0.20/0.43  tff(108,plain,
% 0.20/0.43      (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg), tc_Message_Omsg)),
% 0.20/0.43      inference(unit_resolution,[status(thm)],[107, 104, 7])).
% 0.20/0.43  tff(109,plain,
% 0.20/0.43      (^[V_b: $i, V_a: $i, T_a: $i, V_B: $i] : refl(((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a)) <=> ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a)))),
% 0.20/0.43      inference(bind,[status(th)],[])).
% 0.20/0.43  tff(110,plain,
% 0.20/0.43      (![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a)) <=> ![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))),
% 0.20/0.43      inference(quant_intro,[status(thm)],[109])).
% 0.20/0.43  tff(111,plain,
% 0.20/0.43      (![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a)) <=> ![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))),
% 0.20/0.43      inference(rewrite,[status(thm)],[])).
% 0.20/0.43  tff(112,axiom,(![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))), file('/export/starexec/sandbox/benchmark/theBenchmark.p','cls_Set_OinsertCI_0')).
% 0.20/0.43  tff(113,plain,
% 0.20/0.43      (![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))),
% 0.20/0.43      inference(modus_ponens,[status(thm)],[112, 111])).
% 0.20/0.43  tff(114,plain,(
% 0.20/0.43      ![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))),
% 0.20/0.43      inference(skolemize,[status(sab)],[113])).
% 0.20/0.43  tff(115,plain,
% 0.20/0.43      (![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))),
% 0.20/0.43      inference(modus_ponens,[status(thm)],[114, 110])).
% 0.20/0.43  tff(116,plain,
% 0.20/0.43      (((~![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg), tc_Message_Omsg))) <=> ((~![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg), tc_Message_Omsg))),
% 0.20/0.43      inference(rewrite,[status(thm)],[])).
% 0.20/0.43  tff(117,plain,
% 0.20/0.43      ((~![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))) | ((~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg), tc_Message_Omsg))),
% 0.20/0.43      inference(quant_inst,[status(thm)],[])).
% 0.20/0.43  tff(118,plain,
% 0.20/0.43      ((~![V_b: $i, V_a: $i, T_a: $i, V_B: $i] : ((~c_in(V_a, V_B, T_a)) | c_in(V_a, c_insert(V_b, V_B, T_a), T_a))) | (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)) | c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_insert(v_X, c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg), tc_Message_Omsg)),
% 0.20/0.43      inference(modus_ponens,[status(thm)],[117, 116])).
% 0.20/0.43  tff(119,plain,
% 0.20/0.43      (~c_in(c_Message_Omsg_OKey(c_Public_OshrK(v_A)), c_Event_Oknows(c_Message_Oagent_OSpy, v_evsf), tc_Message_Omsg)),
% 0.20/0.43      inference(unit_resolution,[status(thm)],[118, 115, 108])).
% 0.20/0.43  tff(120,plain,
% 0.20/0.43      ($false),
% 0.20/0.43      inference(unit_resolution,[status(thm)],[32, 100, 29, 119])).
% 0.20/0.43  % SZS output end Proof
%------------------------------------------------------------------------------