(* This program is free software; you can redistribute it and/or      *)
(* modify it under the terms of the GNU Lesser General Public License *)
(* as published by the Free Software Foundation; either version 2.1   *)
(* of the License, or (at your option) any later version.             *)
(*                                                                    *)
(* This program is distributed in the hope that it will be useful,    *)
(* but WITHOUT ANY WARRANTY; without even the implied warranty of     *)
(* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the      *)
(* GNU General Public License for more details.                       *)
(*                                                                    *)
(* You should have received a copy of the GNU Lesser General Public   *)
(* License along with this program; if not, write to the Free         *)
(* Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA *)
(* 02110-1301 USA                                                     *)
(* RECEIVE COPY 3 *)
(*definit la troisiem transition receive copy et ses consequences*)
Require Export init.
Require Export table_act.
Require Export mess_act.
Unset Standard Proposition Elimination Names.
Section DEF_REC_COP3.
Definition rec_copy3_trans (c : Config) (s1 s2 : Site) :=
mkconfig (S (time c)) (Update_table (dt c) s2 (S (time c)))
(st c) (Set_rec_table (rt c) s2)
(Post_message (inc_dec s1) (Collect_message (bm c) s1 s2) s2 owner).
End DEF_REC_COP3.
Section REC_COP3_EFFECT.
(* invariants *)
Variable c0 : Config.
Variable s0 s1 s2 s3 s4 : Site.
Hypothesis rt_true : rt c0 s2 = false.

(* Specifications: *)
Lemma rcop3_trans_le_dt_time :
dt c0 s0 <= time c0 ->
dt (rec_copy3_trans c0 s1 s2) s0 <= time (rec_copy3_trans c0 s1 s2).
Lemma rcop3_trans_diff_site :
(In_queue Message copy (bm c0 s3 s4) -> s3 <> s4) ->
In_queue Message copy (bm (rec_copy3_trans c0 s1 s2) s3 s4) -> s3 <> s4.
Lemma rcop3_trans_rt :
Int (rt (rec_copy3_trans c0 s1 s2) s0) =
(if eq_site_dec s0 s2
then  (Int (rt c0 s0) + 1)%Z
else  Int (rt c0 s0)).
Lemma rcop3_trans_in_queue :
s0 <> s1 ->
In_queue Message (inc_dec s0) (bm (rec_copy3_trans c0 s1 s2) s3 s4) ->
In_queue Message (inc_dec s0) (bm c0 s3 s4).
Lemma rcop3_trans_in_other_queue :
s2 <> s3 \/ s4 <> owner ->
In_queue Message (inc_dec s0) (bm (rec_copy3_trans c0 s1 s2) s3 s4) ->
In_queue Message (inc_dec s0) (bm c0 s3 s4).
Lemma rcop3_trans_st_rt :
((st c0 s0 > 0)%Z -> rt c0 s0 = true) ->
(st (rec_copy3_trans c0 s1 s2) s0 > 0)%Z ->
rt (rec_copy3_trans c0 s1 s2) s0 = true.