(* This program is free software; you can redistribute it and/or      *)
(* modify it under the terms of the GNU Lesser General Public License *)
(* as published by the Free Software Foundation; either version 2.1   *)
(* of the License, or (at your option) any later version.             *)
(*                                                                    *)
(* This program is distributed in the hope that it will be useful,    *)
(* but WITHOUT ANY WARRANTY; without even the implied warranty of     *)
(* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the      *)
(* GNU General Public License for more details.                       *)
(*                                                                    *)
(* You should have received a copy of the GNU Lesser General Public   *)
(* License along with this program; if not, write to the Free         *)
(* Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA *)
(* 02110-1301 USA                                                     *)
Definition BDDneg (cfg : BDDconfig) (memo : BDDneg_memo)
(node : ad) :=
match BDDneg_1_1 cfg memo node (S (nat_of_N (var cfg node))) with
| ((cfg', node'), memo') => (cfg', (node', memo'))
end.
Definition BDDor (cfg : BDDconfig) (memo : BDDor_memo)
(node1 node2 : ad) :=
BDDor_1_1 cfg memo node1 node2
(S (max (nat_of_N (var cfg node1)) (nat_of_N (var cfg node2)))).
Definition BDDand (cfg : BDDconfig) (negm : BDDneg_memo)
(orm : BDDor_memo) (node1 node2 : ad) :=
match BDDneg cfg negm node1 with
| (cfg', (node1', negm')) =>
match BDDneg cfg' negm' node2 with
| (cfg'', (node2', negm'')) =>
match BDDor cfg'' orm node1' node2' with
| (cfg''', (node, orm')) =>
match BDDneg cfg''' negm'' node with
| (cfg'''', (node', negm''')) =>
(cfg'''', (node', (negm''', orm')))
end
end
end
end.

Lemma BDDand_keeps_neg_memo_OK :
forall (cfg : BDDconfig) (negm : BDDneg_memo) (orm : BDDor_memo)
(node1 node2 : ad),
BDDconfig_OK cfg ->
BDDneg_memo_OK_2 cfg negm ->
BDDor_memo_OK cfg orm ->
config_node_OK cfg node1 ->
config_node_OK cfg node2 ->
BDDneg_memo_OK_2 (fst (BDDand cfg negm orm node1 node2))
(fst (snd (snd (BDDand cfg negm orm node1 node2)))).