Specification of the circuit.
We use an if, obviously.
Function:
(defun boolean-if-spec (x y z w prime) (declare (xargs :guard (and (primep prime) (pfield::fep x prime) (pfield::fep y prime) (pfield::fep z prime) (pfield::fep w prime)))) (declare (ignore prime)) (declare (xargs :guard (and (bitp x) (bitp y) (bitp z)))) (let ((__function__ 'boolean-if-spec)) (declare (ignorable __function__)) (equal w (if (= x 1) y z))))
Theorem:
(defthm booleanp-of-boolean-if-spec (b* ((yes/no (boolean-if-spec x y z w prime))) (booleanp yes/no)) :rule-classes :rewrite)
Theorem:
(defthm bitp-w-when-boolean-if-spec (implies (and (boolean-if-spec x y z w prime) (bitp y) (bitp z)) (bitp w)))