Module Sset := ToSset (Def) (Conseq) (Extr) (SetB) (PtrCmpB) (LoadB) (CastLoadB).

Theorem semax_prog_rule :
forall {Espec: OracleKind}{CS: compspecs},
forall V G prog m h z,
postcondition_allows_exit Espec tint ->
@DeepEmbedded.DeepEmbeddedDefs.semax_prog Espec CS prog z V G ->
Genv.init_mem prog = Some m ->
{ b : block & { q : Clight_core.state &
(Genv.find_symbol (globalenv prog) (prog_main prog) = Some b) *
(forall jm, m_dry jm = m -> exists jm', semantics.initial_core (juicy_core_sem (cl_core_sem (globalenv prog))) h
jm q jm' (Vptr b Ptrofs.zero) nil) *
forall n,
{ jm |
m_dry jm = m /\ level jm = n /\
nth_error (ghost_of (m_phi jm)) 0 = Some (Some (ext_ghost z, NoneP)) /\
jsafeN (@OK_spec Espec) (globalenv prog) n z q jm /\
no_locks (m_phi jm) /\
matchfunspecs (globalenv prog) G (m_phi jm) /\
app_pred (funassert (nofunc_tycontext V G) (empty_environ (globalenv prog))) (m_phi jm)
} } }%type.