(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P)
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-NECC)
(ALEOBFT::BOOLEANP-OF-ENDORSEMENT-IN-ENDORSER-P)
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P
 (31 13 (:REWRITE SET::IN-TAIL))
 (16 10 (:REWRITE SET::NEVER-IN-EMPTY))
 (12 12 (:TYPE-PRESCRIPTION SET::EMPTYP-TYPE))
 (12 4 (:REWRITE SETP-WHEN-POS-SETP))
 (12 4 (:REWRITE ALEOBFT::SETP-WHEN-CERTIFICATE-SETP))
 (9 3 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 (8 8 (:TYPE-PRESCRIPTION POS-SETP))
 (1 1 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-VALIDATOR-STATE-MAPP-BINDS-FREE-X))
 (1 1 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-POS-MAPP-BINDS-FREE-X))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-SYSTEM-STATE-FIX-SYSTATE
 (2056 488 (:REWRITE SET::IN-TAIL))
 (976 976 (:TYPE-PRESCRIPTION SET::EMPTYP-TYPE))
 (836 244 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 (836 244 (:REWRITE SET::NEVER-IN-EMPTY))
 (260 52 (:REWRITE ALEOBFT::EMPTYP-OF-CERT-SET->PROP-SET))
 (252 106 (:REWRITE ALEOBFT::SYSTEM-STATE-FIX-WHEN-SYSTEM-STATEP))
 (156 52 (:REWRITE ALEOBFT::CERTIFICATE-SET-FIX-WHEN-CERTIFICATE-SETP))
 (146 146 (:TYPE-PRESCRIPTION ALEOBFT::SYSTEM-STATEP))
 (52 52 (:TYPE-PRESCRIPTION ALEOBFT::CERTIFICATE-SETP))
 (52 52 (:REWRITE ALEOBFT::CERTIFICATE-SETP-OF-VALIDATOR-STATE->DAG))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-SYSTEM-STATE-EQUIV-CONGRUENCE-ON-SYSTATE)
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-WHEN-INIT
 (9 3 (:REWRITE SET::IN-TAIL))
 (5 5 (:TYPE-PRESCRIPTION SET::IN-TYPE))
 (1 1 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-PROPOSE-NEXT
 (1378 294 (:REWRITE SET::IN-TAIL))
 (838 838 (:TYPE-PRESCRIPTION SET::EMPTYP-TYPE))
 (643 147 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 (518 147 (:REWRITE SET::NEVER-IN-EMPTY))
 (325 75 (:REWRITE ALEOBFT::EMPTYP-ADDRESS-SET-FIX))
 (325 25 (:REWRITE SET::UNION-EMPTYP-Y))
 (275 25 (:REWRITE ALEOBFT::EMPTYP-OF-MAKE-PROPOSAL-MESSAGES))
 (250 25 (:REWRITE ALEOBFT::PROPOSAL-FIX-WHEN-PROPOSALP))
 (200 200 (:TYPE-PRESCRIPTION ALEOBFT::ADDRESS-SETP))
 (150 50 (:REWRITE ALEOBFT::ADDRESS-SET-FIX-WHEN-ADDRESS-SETP))
 (130 26 (:REWRITE ALEOBFT::EMPTYP-OF-CERT-SET->PROP-SET))
 (125 25 (:REWRITE ALEOBFT::PROPOSALP-WHEN-PROPOSAL-OPTIONP))
 (78 26 (:REWRITE ALEOBFT::CERTIFICATE-SET-FIX-WHEN-CERTIFICATE-SETP))
 (75 75 (:TYPE-PRESCRIPTION ALEOBFT::PROPOSALP))
 (75 25 (:REWRITE SET::UNION-EMPTYP-X))
 (50 50 (:TYPE-PRESCRIPTION ALEOBFT::PROPOSAL-OPTIONP))
 (50 25 (:REWRITE ALEOBFT::PROPOSAL-OPTIONP-WHEN-PROPOSALP))
 (26 26 (:TYPE-PRESCRIPTION ALEOBFT::CERTIFICATE-SETP))
 (26 26 (:REWRITE ALEOBFT::CERTIFICATE-SETP-OF-VALIDATOR-STATE->DAG))
 (25 25 (:REWRITE ALEOBFT::PROPOSALP-WHEN-IN-PROPOSAL-SETP-BINDS-FREE-X))
 (25 25 (:REWRITE ALEOBFT::PROPOSALP-WHEN-ASSOC-PROPOSAL-ADDRESS-SET-MAPP-BINDS-FREE-X))
 (25 25 (:REWRITE ALEOBFT::MESSAGEP-WHEN-IN-MESSAGE-SETP-BINDS-FREE-X))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-ENDORSE-NEXT
 (1985 530 (:REWRITE SET::IN-TAIL))
 (960 960 (:TYPE-PRESCRIPTION SET::EMPTYP-TYPE))
 (720 230 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 (720 230 (:REWRITE SET::NEVER-IN-EMPTY))
 (700 70 (:REWRITE ALEOBFT::PROPOSAL-FIX-WHEN-PROPOSALP))
 (435 85 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ADDRESS-OPTIONP))
 (350 70 (:REWRITE ALEOBFT::PROPOSALP-WHEN-PROPOSAL-OPTIONP))
 (210 210 (:TYPE-PRESCRIPTION ALEOBFT::PROPOSALP))
 (210 45 (:REWRITE SET::INSERT-WHEN-EMPTYP))
 (200 40 (:REWRITE ALEOBFT::EMPTYP-OF-CERT-SET->PROP-SET))
 (200 25 (:REWRITE SET::DELETE-NONMEMBER-CANCEL))
 (180 85 (:REWRITE ALEOBFT::ADDRESS-OPTIONP-WHEN-ADDRESSP))
 (170 170 (:TYPE-PRESCRIPTION ALEOBFT::ADDRESS-OPTIONP))
 (140 140 (:TYPE-PRESCRIPTION ALEOBFT::PROPOSAL-OPTIONP))
 (140 70 (:REWRITE ALEOBFT::PROPOSAL-OPTIONP-WHEN-PROPOSALP))
 (120 40 (:REWRITE ALEOBFT::CERTIFICATE-SET-FIX-WHEN-CERTIFICATE-SETP))
 (95 95 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-VALIDATOR-STATE-MAPP-BINDS-FREE-X))
 (95 95 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-POS-MAPP-BINDS-FREE-X))
 (85 85 (:REWRITE ALEOBFT::ADDRESSP-WHEN-IN-ADDRESS-SETP-BINDS-FREE-X))
 (75 25 (:REWRITE SET::DELETE-PRESERVES-EMPTYP))
 (70 70 (:REWRITE ALEOBFT::PROPOSALP-WHEN-IN-PROPOSAL-SETP-BINDS-FREE-X))
 (70 70 (:REWRITE ALEOBFT::PROPOSALP-WHEN-ASSOC-PROPOSAL-ADDRESS-SET-MAPP-BINDS-FREE-X))
 (50 50 (:REWRITE ALEOBFT::RETURN-TYPE-OF-MESSAGE-PROPOSAL))
 (40 40 (:TYPE-PRESCRIPTION ALEOBFT::CERTIFICATE-SETP))
 (40 40 (:REWRITE ALEOBFT::CERTIFICATE-SETP-OF-VALIDATOR-STATE->DAG))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-AUGMENT-NEXT
 (1083 274 (:REWRITE SET::IN-TAIL))
 (488 488 (:TYPE-PRESCRIPTION SET::EMPTYP-TYPE))
 (448 152 (:REWRITE SET::NEVER-IN-EMPTY))
 (418 122 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 (200 25 (:REWRITE SET::DELETE-NONMEMBER-CANCEL))
 (165 15 (:REWRITE ALEOBFT::ADDRESS-FIX-WHEN-ADDRESSP))
 (150 15 (:REWRITE ALEOBFT::PROPOSAL-FIX-WHEN-PROPOSALP))
 (130 26 (:REWRITE ALEOBFT::EMPTYP-OF-CERT-SET->PROP-SET))
 (78 26 (:REWRITE ALEOBFT::CERTIFICATE-SET-FIX-WHEN-CERTIFICATE-SETP))
 (75 15 (:REWRITE ALEOBFT::PROPOSALP-WHEN-PROPOSAL-OPTIONP))
 (75 15 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ADDRESS-OPTIONP))
 (45 45 (:TYPE-PRESCRIPTION ALEOBFT::PROPOSALP))
 (45 45 (:TYPE-PRESCRIPTION ALEOBFT::ADDRESSP))
 (30 30 (:TYPE-PRESCRIPTION ALEOBFT::PROPOSAL-OPTIONP))
 (30 30 (:TYPE-PRESCRIPTION ALEOBFT::ADDRESS-OPTIONP))
 (30 15 (:REWRITE ALEOBFT::PROPOSAL-OPTIONP-WHEN-PROPOSALP))
 (30 15 (:REWRITE ALEOBFT::ADDRESS-OPTIONP-WHEN-ADDRESSP))
 (26 26 (:TYPE-PRESCRIPTION ALEOBFT::CERTIFICATE-SETP))
 (26 26 (:REWRITE ALEOBFT::CERTIFICATE-SETP-OF-VALIDATOR-STATE->DAG))
 (15 15 (:REWRITE ALEOBFT::PROPOSALP-WHEN-IN-PROPOSAL-SETP-BINDS-FREE-X))
 (15 15 (:REWRITE ALEOBFT::PROPOSALP-WHEN-ASSOC-PROPOSAL-ADDRESS-SET-MAPP-BINDS-FREE-X))
 (15 15 (:REWRITE ALEOBFT::ADDRESSP-WHEN-IN-ADDRESS-SETP-BINDS-FREE-X))
 (15 15 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-VALIDATOR-STATE-MAPP-BINDS-FREE-X))
 (15 15 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-POS-MAPP-BINDS-FREE-X))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-CERTIFY-NEXT
 (1844 402 (:REWRITE SET::IN-TAIL))
 (1069 1069 (:TYPE-PRESCRIPTION SET::EMPTYP-TYPE))
 (849 191 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 (689 191 (:REWRITE SET::NEVER-IN-EMPTY))
 (440 40 (:REWRITE ALEOBFT::CERTIFICATE-FIX-WHEN-CERTIFICATEP))
 (325 75 (:REWRITE ALEOBFT::EMPTYP-ADDRESS-SET-FIX))
 (325 25 (:REWRITE SET::UNION-EMPTYP-X))
 (290 53 (:REWRITE ALEOBFT::EMPTYP-OF-CERT-SET->PROP-SET))
 (275 25 (:REWRITE ALEOBFT::EMPTYP-OF-MAKE-CERTIFICATE-MESSAGES))
 (230 45 (:REWRITE ALEOBFT::CERTIFICATEP-WHEN-CERTIFICATE-OPTIONP))
 (200 200 (:TYPE-PRESCRIPTION ALEOBFT::ADDRESS-SETP))
 (150 50 (:REWRITE ALEOBFT::ADDRESS-SET-FIX-WHEN-ADDRESS-SETP))
 (149 53 (:REWRITE ALEOBFT::CERTIFICATE-SET-FIX-WHEN-CERTIFICATE-SETP))
 (100 20 (:REWRITE SET::INSERT-IDENTITY))
 (95 45 (:REWRITE ALEOBFT::CERTIFICATE-OPTIONP-WHEN-CERTIFICATEP))
 (90 90 (:TYPE-PRESCRIPTION ALEOBFT::CERTIFICATE-OPTIONP))
 (90 90 (:REWRITE ALEOBFT::CERTIFICATEP-WHEN-MEMBER-EQUAL-OF-CERTIFICATE-LISTP))
 (80 20 (:REWRITE SET::INSERT-WHEN-EMPTYP))
 (75 25 (:REWRITE SET::UNION-EMPTYP-Y))
 (45 45 (:REWRITE ALEOBFT::CERTIFICATEP-WHEN-IN-CERTIFICATE-SETP-BINDS-FREE-X))
 (35 10 (:REWRITE ALEOBFT::EMPTYP-CERTIFICATE-SET-FIX))
 (25 25 (:REWRITE ALEOBFT::MESSAGEP-WHEN-IN-MESSAGE-SETP-BINDS-FREE-X))
 (20 20 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-VALIDATOR-STATE-MAPP-BINDS-FREE-X))
 (20 20 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-POS-MAPP-BINDS-FREE-X))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-ACCEPT-NEXT
 (2266 553 (:REWRITE SET::IN-TAIL))
 (1066 1066 (:TYPE-PRESCRIPTION SET::EMPTYP-TYPE))
 (926 234 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 (921 279 (:REWRITE SET::NEVER-IN-EMPTY))
 (535 97 (:REWRITE ALEOBFT::EMPTYP-OF-CERT-SET->PROP-SET))
 (495 45 (:REWRITE ALEOBFT::CERTIFICATE-FIX-WHEN-CERTIFICATEP))
 (360 45 (:REWRITE SET::DELETE-NONMEMBER-CANCEL))
 (335 65 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ADDRESS-OPTIONP))
 (315 60 (:REWRITE ALEOBFT::CERTIFICATEP-WHEN-CERTIFICATE-OPTIONP))
 (271 97 (:REWRITE ALEOBFT::CERTIFICATE-SET-FIX-WHEN-CERTIFICATE-SETP))
 (200 40 (:REWRITE SET::INSERT-IDENTITY))
 (180 40 (:REWRITE SET::INSERT-WHEN-EMPTYP))
 (140 65 (:REWRITE ALEOBFT::ADDRESS-OPTIONP-WHEN-ADDRESSP))
 (135 60 (:REWRITE ALEOBFT::CERTIFICATE-OPTIONP-WHEN-CERTIFICATEP))
 (130 130 (:TYPE-PRESCRIPTION ALEOBFT::ADDRESS-OPTIONP))
 (120 120 (:TYPE-PRESCRIPTION ALEOBFT::CERTIFICATE-OPTIONP))
 (120 120 (:REWRITE ALEOBFT::CERTIFICATEP-WHEN-MEMBER-EQUAL-OF-CERTIFICATE-LISTP))
 (85 85 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-VALIDATOR-STATE-MAPP-BINDS-FREE-X))
 (85 85 (:REWRITE ALEOBFT::ADDRESSP-WHEN-ASSOC-ADDRESS-POS-MAPP-BINDS-FREE-X))
 (70 20 (:REWRITE ALEOBFT::EMPTYP-CERTIFICATE-SET-FIX))
 (65 65 (:REWRITE ALEOBFT::ADDRESSP-WHEN-IN-ADDRESS-SETP-BINDS-FREE-X))
 (60 60 (:REWRITE ALEOBFT::CERTIFICATEP-WHEN-IN-CERTIFICATE-SETP-BINDS-FREE-X))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-ADVANCE-NEXT
 (1028 244 (:REWRITE SET::IN-TAIL))
 (488 488 (:TYPE-PRESCRIPTION SET::EMPTYP-TYPE))
 (418 122 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 (418 122 (:REWRITE SET::NEVER-IN-EMPTY))
 (130 26 (:REWRITE ALEOBFT::EMPTYP-OF-CERT-SET->PROP-SET))
 (78 26 (:REWRITE ALEOBFT::CERTIFICATE-SET-FIX-WHEN-CERTIFICATE-SETP))
 (26 26 (:TYPE-PRESCRIPTION ALEOBFT::CERTIFICATE-SETP))
 (26 26 (:REWRITE ALEOBFT::CERTIFICATE-SETP-OF-VALIDATOR-STATE->DAG))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-COMMIT-NEXT
 (1028 244 (:REWRITE SET::IN-TAIL))
 (488 488 (:TYPE-PRESCRIPTION SET::EMPTYP-TYPE))
 (418 122 (:REWRITE SET::TAIL-WHEN-EMPTYP))
 (418 122 (:REWRITE SET::NEVER-IN-EMPTY))
 (130 26 (:REWRITE ALEOBFT::EMPTYP-OF-CERT-SET->PROP-SET))
 (78 26 (:REWRITE ALEOBFT::CERTIFICATE-SET-FIX-WHEN-CERTIFICATE-SETP))
 (26 26 (:TYPE-PRESCRIPTION ALEOBFT::CERTIFICATE-SETP))
 (26 26 (:REWRITE ALEOBFT::CERTIFICATE-SETP-OF-VALIDATOR-STATE->DAG))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-EVENT-NEXT)
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-OF-EVENTS-NEXT)
(ALEOBFT::LEMMA
 (6 2 (:REWRITE ALEOBFT::EVENT-LISTP-WHEN-NOT-CONSP))
 (4 4 (:REWRITE ALEOBFT::EVENT-LISTP-WHEN-SUBSETP-EQUAL))
 (3 1 (:REWRITE ALEOBFT::SYSTEM-STATE-FIX-WHEN-SYSTEM-STATEP))
 (2 2 (:TYPE-PRESCRIPTION ALEOBFT::SYSTEM-STATEP))
 (2 2 (:REWRITE CONSP-WHEN-MEMBER-EQUAL-OF-SYMBOL-SYMBOL-ALISTP . 2))
 (2 2 (:REWRITE CONSP-WHEN-MEMBER-EQUAL-OF-SYMBOL-SYMBOL-ALISTP . 1))
 )
(ALEOBFT::ENDORSEMENT-IN-ENDORSER-P-WHEN-REACHABLE)
