Module VA <: SEMILATTICE.
Inductive t' := Bot | State (ae: aenv) (am: amem).
Definition t := t'.
Definition eq (x y: t) :=
match x, y with
| Bot, Bot => True
| State ae1 am1, State ae2 am2 =>
AE.eq ae1 ae2 /\ forall bc m, mmatch bc m am1 <-> mmatch bc m am2
| _, _ => False
end.
Definition beq (x y: t) : bool :=
match x, y with
| Bot, Bot => true
| State ae1 am1, State ae2 am2 => AE.beq ae1 ae2 && mbeq am1 am2
| _, _ => false
end.
Definition ge (x y: t) : Prop :=
match x, y with
| _, Bot => True
| Bot, _ => False
| State ae1 am1, State ae2 am2 => AE.ge ae1 ae2 /\ forall bc m, mmatch bc m am2 -> mmatch bc m am1
end.
Definition bot : t := Bot.
Definition lub (x y: t) : t :=
match x, y with
| Bot, _ => y
| _, Bot => x
| State ae1 am1, State ae2 am2 => State (AE.lub ae1 ae2) (mlub am1 am2)
end.

Lemma ge_lub_left: forall x y, ge (lub x y) x.
Lemma ge_lub_right: forall x y, ge (lub x y) y.