Transitivity of DAG paths.
If there is a path from
Theorem:
(defthm path-to-author+round-transitive (implies (and (certificate-setp dag) (certificate-set-unequivocalp dag) (in cert dag) (in cert1 dag) (in cert2 dag) (equal (path-to-author+round cert (certificate->author cert1) (certificate->round cert1) dag) cert1) (equal (path-to-author+round cert1 (certificate->author cert2) (certificate->round cert2) dag) cert2)) (equal (path-to-author+round cert (certificate->author cert2) (certificate->round cert2) dag) cert2)))