| n0 < m0, n1 < m0, valid-peb(v, m, apebs[n0]), valid-peb(v, m, apebs[n1]), m0 ≤ # apebs ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m0) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn |
n1 < m0, n0 < m0, n1 < # apebs, n0 < # apebs, valid-peb(v, m, apebs[n1]), valid-peb(v, m, apebs[n0]), m0 ≤ # apebs ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m0) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic