(vl-gateinstlist-split x delta) → (mv new-x delta)
Function:
(defun vl-gateinstlist-split (x delta) (declare (xargs :guard (and (vl-gateinstlist-p x) (vl-delta-p delta)))) (let ((__function__ 'vl-gateinstlist-split)) (declare (ignorable __function__)) (b* (((when (atom x)) (mv nil delta)) ((mv car delta) (vl-gateinst-split (car x) delta)) ((mv cdr delta) (vl-gateinstlist-split (cdr x) delta))) (mv (cons car cdr) delta))))
Theorem:
(defthm vl-gateinstlist-p-of-vl-gateinstlist-split.new-x (implies (and (force (vl-gateinstlist-p x)) (force (vl-delta-p delta))) (b* (((mv ?new-x ?delta) (vl-gateinstlist-split x delta))) (vl-gateinstlist-p new-x))) :rule-classes :rewrite)
Theorem:
(defthm vl-delta-p-of-vl-gateinstlist-split.delta (implies (and (force (vl-gateinstlist-p x)) (force (vl-delta-p delta))) (b* (((mv ?new-x ?delta) (vl-gateinstlist-split x delta))) (vl-delta-p delta))) :rule-classes :rewrite)