Definition true_expr : Clight.expr := Clight.Econst_int Int.one (Tint I32 Signed noattr).

(* Specifications: *)
Lemma dec_skip: forall s, {s=Sskip}+{s<>Sskip}.
Lemma strip_step: (* This one uses equality, one in Clight_sim uses <-> *) forall ge ve te k m st' m', cl_step ge (State ve te (strip_skip k)) m st' m' = cl_step ge (State ve te k) m st' m'.
Lemma strip_skip_app: forall k k', strip_skip k = nil -> strip_skip (k++k') = strip_skip k'.
Lemma strip_strip: forall k, strip_skip (strip_skip k) = strip_skip k.
Lemma strip_skip_app_cons: forall {k c l}, strip_skip k = c::l -> forall k', strip_skip (k++k') = c::l++k'.
Lemma filter_seq_current_function: forall ctl1 ctl2, filter_seq ctl1 = filter_seq ctl2 -> current_function ctl1 = current_function ctl2.
Lemma filter_seq_call_cont: forall ctl1 ctl2, filter_seq ctl1 = filter_seq ctl2 -> call_cont ctl1 = call_cont ctl2.
Lemma call_cont_app_nil: forall l k, call_cont l = nil -> call_cont (l++k) = call_cont k.
Lemma call_cont_app_cons: forall l c l', call_cont l = c::l' -> forall k, call_cont (l++k) = c::l' ++ k.
Lemma and_FF : forall {A} `{ageable A} (P:pred A), P && FF = FF.
Lemma sepcon_FF : forall {A}{JA: Join A}{PA: Perm_alg A}{AG: ageable A}{XA: Age_alg A} (P:pred A), (P * FF = FF)%pred.
Lemma age1_resource_decay: forall jm jm', age jm jm' -> resource_decay (nextblock (m_dry jm)) (m_phi jm) (m_phi jm').
Lemma safe_loop_skip: forall {Espec: OracleKind} ge ora ve te k m, jsafeN (@OK_spec Espec) ge (level m) ora (State ve te (Kseq (Sloop Clight.Sskip Clight.Sskip) :: k)) m.
Lemma safe_seq_skip {Espec: OracleKind} ge n ora ve te k m : jsafeN OK_spec ge n ora (State ve te k) m -> jsafeN OK_spec ge n ora (State ve te (Kseq Sskip :: k)) m.
Lemma safe_seq_skip' {Espec: OracleKind} ge n ora ve te k m : jsafeN OK_spec ge n ora (State ve te (Kseq Sskip :: k)) m -> jsafeN OK_spec ge n ora (State ve te k) m.
Lemma safe_step_forward {Espec: OracleKind}: forall psi n ora st m, cl_at_external st = None -> jsafeN (@OK_spec Espec) psi (S n) ora st m -> exists st', exists m', jstep (cl_core_sem psi) st m st' m' /\ jm_bupd ora (jsafeN (@OK_spec Espec) psi n ora st') m'.
Lemma safeN_strip {Espec: OracleKind}: forall ge n ora ve te k m, jsafeN (@OK_spec Espec) ge n ora (State ve te (strip_skip k)) m = jsafeN (@OK_spec Espec) ge n ora (State ve te k) m.