End ROOTED1.
Section INVARIANT2.

(* Specifications: *)
Lemma invariant2_init :
forall s0 : Site, st config_init s0 = sigma_rooted s0 (bm config_init).
Lemma invariant2_ind :
forall s0 : Site,
s0 <> owner ->
forall (c : Config) (t : class_trans c),
legal c ->
st c s0 = sigma_rooted s0 (bm c) ->
st (transition c t) s0 = sigma_rooted s0 (bm (transition c t)).
Lemma invariant2 :
forall (c0 : Config) (s0 : Site),
legal c0 -> s0 <> owner -> st c0 s0 = sigma_rooted s0 (bm c0).
Lemma positive_st :
forall (c : Config) (s0 s5 : Site),
s0 <> owner ->
legal c -> In_queue Message (inc_dec s0) (bm c s5 owner) -> (st c s0 > 0)%Z.
Lemma invariant2_init :
forall s0 : Site, st config_init s0 = sigma_rooted s0 (bm config_init).
Lemma invariant2_ind :
forall s0 : Site,
s0 <> owner ->
forall (c : Config) (t : class_trans c),
legal c ->
st c s0 = sigma_rooted s0 (bm c) ->
st (transition c t) s0 = sigma_rooted s0 (bm (transition c t)).
Lemma invariant2 :
forall (c0 : Config) (s0 : Site),
legal c0 -> s0 <> owner -> st c0 s0 = sigma_rooted s0 (bm c0).
Lemma positive_st :
forall (c : Config) (s0 s5 : Site),
s0 <> owner ->
legal c -> In_queue Message (inc_dec s0) (bm c s5 owner) -> (st c s0 > 0)%Z.