| apebs[n] = mkpeb(aehdr, avhdr, buf, m0, boolvar), valid-sqns(v, m, apebs, m1) = bag ++ avhdr.sqn, n < # apebs, m1 < # apebs, valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), valid-peb(v, m, apebs[m1]), n ≤ m1 ⊦ ∃ bag. valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅) = bag ++ avhdr.sqn |
apebs[n] = mkpeb(aehdr, avhdr, buf, m0, boolvar), valid-sqns(v, m, apebs, m1) = bag ++ avhdr.sqn, m1 < # apebs, n < # apebs, valid-peb(v, m, apebs[m1]), valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), n ≤ m1 ⊦ ∃ bag0. bag ++ avhdr.sqn ++ apebs[m1].vidhdr.sqn = bag0 ++ avhdr.sqn
Used simplifier rules: union-com: ⊦ bag ∪ bag2 = bag2 ∪ bag; from specification bag-union[nat-bag]%union-ass: ⊦ bag ∪ bag3 ∪ bag4 = (bag ∪ bag3) ∪ bag4; from specification bag-union[nat-bag]% ⊦ bag ∪ {n} = bag ++ n; (s)%⊦ valid-peb(v0, m0, apeb) → (valid-peb(v1, m1, apeb) ↔ v0 = v1 ∧ m0 = m1); (s)