| apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), n0 < n1, valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), n1 ≤ # apebs ⊦ avhdr.sqn ∈ valid-sqns(v, m, apebs, n1) |
apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), n0 < n1, n0 < # apebs, valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), n1 ≤ # apebs ⊦ avhdr.sqn ∈ valid-sqns(v, m, apebs, n1)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic