(vl-modinstlist-split x delta) → (mv new-x delta)
Function:
(defun vl-modinstlist-split (x delta) (declare (xargs :guard (and (vl-modinstlist-p x) (vl-delta-p delta)))) (let ((__function__ 'vl-modinstlist-split)) (declare (ignorable __function__)) (b* (((when (atom x)) (mv nil delta)) ((mv car delta) (vl-modinst-split (car x) delta)) ((mv cdr delta) (vl-modinstlist-split (cdr x) delta))) (mv (cons car cdr) delta))))
Theorem:
(defthm vl-modinstlist-p-of-vl-modinstlist-split.new-x (implies (and (force (vl-modinstlist-p x)) (force (vl-delta-p delta))) (b* (((mv ?new-x ?delta) (vl-modinstlist-split x delta))) (vl-modinstlist-p new-x))) :rule-classes :rewrite)
Theorem:
(defthm vl-delta-p-of-vl-modinstlist-split.delta (implies (and (force (vl-modinstlist-p x)) (force (vl-delta-p delta))) (b* (((mv ?new-x ?delta) (vl-modinstlist-split x delta))) (vl-delta-p delta))) :rule-classes :rewrite)