@@ -190,15 +190,15 @@ func testRun(
190190 assert dp.Lookup(dp.Lookup(pair4)) == pair4
191191 assert dp.Lookup(dp.Lookup(pair5)) == pair5
192192
193- assert forall ifs io.Ifs :: {ifs in domain(dp.neighborIAs)} ifs in domain(dp.neighborIAs) ==>
194- io.AsIfsPair{dp.localIA, ifs} in domain(dp.links)
195- assert forall ifs io.Ifs :: {ifs in domain(dp.neighborIAs)} ifs in domain(dp.neighborIAs) ==>
193+ assert forall ifs io.Ifs :: {ifs elem domain(dp.neighborIAs)} ifs elem domain(dp.neighborIAs) ==>
194+ io.AsIfsPair{dp.localIA, ifs} elem domain(dp.links)
195+ assert forall ifs io.Ifs :: {ifs elem domain(dp.neighborIAs)} ifs elem domain(dp.neighborIAs) ==>
196196 dp.Lookup(io.AsIfsPair{dp.localIA, ifs}).asid == dp.neighborIAs[ifs]
197- assert forall ifs io.Ifs :: {ifs in domain(dp.neighborIAs)} io.AsIfsPair{dp.localIA, ifs} in domain(dp.links) ==>
198- ifs in domain(dp.neighborIAs)
199- assert forall pair io.AsIfsPair :: {dp.Lookup(pair)} pair in domain(dp.links) ==>
197+ assert forall ifs io.Ifs :: {ifs elem domain(dp.neighborIAs)} io.AsIfsPair{dp.localIA, ifs} elem domain(dp.links) ==>
198+ ifs elem domain(dp.neighborIAs)
199+ assert forall pair io.AsIfsPair :: {dp.Lookup(pair)} pair elem domain(dp.links) ==>
200200 let next_pair := dp.Lookup(pair) in
201- (next_pair in domain(dp.links)) &&
201+ (next_pair elem domain(dp.links)) &&
202202 dp.Lookup(next_pair) == pair
203203 assert domain(dp.linkTypes) == domain(dp.neighborIAs)
204204 assert reveal dp.Valid()
@@ -213,7 +213,7 @@ func testRun(
213213 fold d.Mem()
214214 assert d.getDomNeighborIAs() == reveal d.getDomExternal()
215215 assert d.getDomNeighborIAs() == d.getDomLinkTypes()
216- assert !(0 in d.getDomNeighborIAs())
216+ assert !(0 elem d.getDomNeighborIAs())
217217 assert reveal d.getDomExternal() intersection d.GetDomInternalNextHops() == set[uint16]{}
218218 assert reveal d.DpAgreesWithSpec(dp)
219219
0 commit comments