PROOF.cap.gof_app: def of bend-osdev-apparmor@0.1.0.0
Import: import bend-osdev-apparmor@0.1.0.0/PROOF.bend as PROOF
Lines 3558-3565 of bend-osdev-apparmor@0.1.0.0/PROOF.bend: https://jend.leeeet.dev/read.txt?path=bend-osdev-apparmor@0.1.0.0/PROOF.bend&start_line=3558&end_line=3565

import Base
import bend-osdev-apparmor@0.1.0.0/perm.bend as P
import bend-osdev-apparmor@0.1.0.0/rule_capability.bend as RC

def cap.gof_app(+xs: List<&2, RC.AaCapRule>, +ys: List<&2, RC.AaCapRule>) -> {RC.AaCapRule.grants.of(RC.AaCapRule.append(xs, ys)) == P.AaGrant.append(RC.AaCapRule.grants.of(xs), RC.AaCapRule.grants.of(ys)) : List<&2, P.AaGrant>}:
  match xs:
    case Nil{}:
      {==}
    case Con{r, t}:
      match r:
        case RC.AaCapRule{qu, ks}:
          Equal.cong(List<&2, P.AaGrant>, List<&2, P.AaGrant>, x => Con{P.AaGrant.of(qu, P.AaPerms.bit(0n)), x}, RC.AaCapRule.grants.of(RC.AaCapRule.append(t, ys)), P.AaGrant.append(RC.AaCapRule.grants.of(t), RC.AaCapRule.grants.of(ys)), cap.gof_app(t, ys))

Uses (9):
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=Equal.cong
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=List
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-apparmor@0.1.0.0/perm.bend&name=AaGrant
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-apparmor@0.1.0.0/perm.bend&name=AaGrant.append
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-apparmor@0.1.0.0/perm.bend&name=AaGrant.of
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-apparmor@0.1.0.0/perm.bend&name=AaPerms.bit
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-apparmor@0.1.0.0/rule_capability.bend&name=AaCapRule
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-apparmor@0.1.0.0/rule_capability.bend&name=AaCapRule.append
  https://jend.leeeet.dev/definition.txt?path=bend-osdev-apparmor@0.1.0.0/rule_capability.bend&name=AaCapRule.grants.of