| apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), n0 < n1, n0 < # apebs, valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), n1 ≤ # apebs ⊦ avhdr.sqn ∈ valid-sqns(v, m, apebs, n1) |
apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), n0 < # apebs, n0 < n +1, valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), n +1 ≤ # apebs, ∀ apebs, n0, aehdr, avhdr, buf, m0, boolvar, v, m. apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar) ∧ n0 < n ∧ n0 < # apebs ∧ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ n ≤ # apebs → avhdr.sqn ∈ valid-sqns(v, m, apebs, n) ⊦ avhdr.sqn ∈ valid-sqns(v, m, apebs, n +1)
Used simplifier rules: nat freely generated by 0, +1;;% ⊦ 0 ≤ m; (s)% ⊦ ¬ m < 0; (s)