Summary
- tuned;
- merged
- clarified signature: just one level of arguments to avoid type-inference problems;
- tuned signature: more operations;
- tuned;
- clarified signature;
- stated goals of some lemmas explicitely to prevent silent changes
- rewrite proofs using to_pred attribute on existing lemmas