--- lemma-5 
(goal RAILCAB-NEW |- ceq channel1(S:Sys) = empty 
                     if loc(S:Sys) = noReturn [label lemma-5] ;)
				    
 (set ind on S:Sys .)
 (apply SI .)
 (auto .)

(apply CA CA IP RD .)

 (cp   eq channel1(x#1) = Q#2 chkMsg  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)



 (cp   eq channel1(x#1) = Q#2 passed  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)

 (cp   eq channel1(x#1) = Q#2 reqMsg  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)


 (cp   eq channel1(x#1) = Q#2 gateMsg(grant)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)


 (cp   eq channel1(x#1) = Q#2 gateMsg(reject)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)

 (cp   eq channel1(x#1) = Q#2 respMsg(grant)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)


 (cp   eq channel1(x#1) = Q#2 respMsg(reject)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)

 (cp   eq channel1(x#1) = Q#2 reqMsg  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(init ceq true = false if empty = Q:MsgSeq reqMsg . by Q:MsgSeq <- Q#2 ; .)
(auto .)





(apply CA CA IP RD .)
(apply CA CA IP RD .)
(apply CA CA IP RD .)
(apply CA CA IP RD .)
(apply CA CA IP RD .)
(apply CA CA IP RD .)
(apply CA CA IP RD .)
(apply CA CA IP RD .)
(apply CA CA IP RD .)
(apply CA CA IP RD .)
(apply CA CA IP RD .)

(apply CA CA IP RD .)


 (cp   eq channel1(x#1) = Q#2 chkMsg  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)

 (cp   eq channel1(x#1) = Q#2 reqMsg  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)


 (cp   eq channel1(x#1) = Q#2 gateMsg(grant)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)


 (cp   eq channel1(x#1) = Q#2 gateMsg(reject)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)

 (cp   eq channel1(x#1) = Q#2 respMsg(grant)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)

 (cp   eq channel1(x#1) = Q#2 respMsg(reject)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)


 (cp   eq channel1(x#1) = Q#2 passed  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(init ceq true = false if empty = Q:MsgSeq passed . by Q:MsgSeq <- Q#2 ; .)
(auto .)


(apply CA CA IP RD .)
(apply CA CA IP RD .)

(init ceq channel1(S:Sys) = empty if appResult(S:Sys) = grant /\ loc(S:Sys) = leBrake /\ pass(S:Sys) = grant /\ appResult(S:Sys) = grant . by S:Sys <- x#1 ; .)
(auto .)

(apply CA CA IP RD .)
(apply CA CA IP RD .)


 (cp   eq channel1(x#1) = Q#2 passed  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)

 (cp   eq channel1(x#1) = Q#2 reqMsg  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)

 (cp   eq channel1(x#1) = Q#2 gateMsg(grant)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)


 (cp   eq channel1(x#1) = Q#2 gateMsg(reject)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)



 (cp   eq channel1(x#1) = Q#2 respMsg(grant)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)


 (cp   eq channel1(x#1) = Q#2 respMsg(reject)  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(auto .)



 (cp   eq channel1(x#1) = Q#2 chkMsg  . ><   ceq channel1(x#1) = empty  if loc(x#1)= noReturn [label lemma-5]. ) 
(equation .)
(init ceq true = false if empty = Q:MsgSeq chkMsg . by Q:MsgSeq <- Q#2 ; .)
(auto .)

--- end of proof of lemma-5