| apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), apebs[n1] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), valid-sqns(v, m, apebs, m1) = bag ++ avhdr.sqn ++ avhdr0.sqn, n1 + 1 < # apebs, n0 + 1 < # apebs, n1 < m1, n0 < m1, m1 < # apebs, n0 < # apebs, n1 < # apebs, valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0)), valid-peb(v, m, apebs[m1]) ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅) = bag ++ avhdr.sqn ++ avhdr0.sqn |
apebs[n1] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), valid-sqns(v, m, apebs, m1) = bag ++ avhdr.sqn ++ avhdr0.sqn, n1 < # apebs, n0 < # apebs, m1 < # apebs, n0 < m1, n1 < m1, n0 + 1 < # apebs, n1 + 1 < # apebs, valid-peb(v, m, apebs[m1]), valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0)), valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ⊦ n0 = n1, ∃ bag0. bag ++ avhdr.sqn ++ avhdr0.sqn ++ apebs[m1].vidhdr.sqn = bag0 ++ avhdr.sqn ++ avhdr0.sqn
Used simplifier rules: union-com: ⊦ bag ∪ bag2 = bag2 ∪ bag; from specification bag-union[nat-bag]%union-ass: ⊦ bag ∪ bag3 ∪ bag4 = (bag ∪ bag3) ∪ bag4; from specification bag-union[nat-bag]% ⊦ bag ∪ {n} = bag ++ n; (s)%⊦ valid-peb(v0, m0, apeb) → (valid-peb(v1, m1, apeb) ↔ v0 = v1 ∧ m0 = m1); (s)