| apebs[n1] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), valid-sqns(v, m, apebs, m1) = bag ++ avhdr.sqn ++ avhdr0.sqn, n1 < # apebs, n0 < # apebs, m1 < # apebs, n0 < m1, n1 < m1, n0 + 1 < # apebs, n1 + 1 < # apebs, valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0)), valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅) = bag ++ avhdr.sqn ++ avhdr0.sqn |
apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), apebs[n1] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), valid-sqns(v, m, apebs, m1) = bag ++ avhdr.sqn ++ avhdr0.sqn, n1 + 1 < # apebs, n0 + 1 < # apebs, n1 < m1, n0 < m1, m1 < # apebs, n0 < # apebs, n1 < # apebs, valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0)), valid-peb(v, m, apebs[m1]) ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅) = bag ++ avhdr.sqn ++ avhdr0.sqn
Used simplifier rules: ⊦ ∅ ∪ bag0 = bag0; (s)%union-ass: ⊦ bag ∪ bag3 ∪ bag4 = (bag ∪ bag3) ∪ bag4; from specification bag-union[nat-bag]%union-com: ⊦ bag ∪ bag2 = bag2 ∪ bag; from specification bag-union[nat-bag]% ⊦ bag ++ n = bag2 ++ n ↔ bag = bag2; (s) Used formulas: valid-peb(v, m, apebs[m1])