| n1 < m0, n0 < m0, n1 < # apebs, n0 < # apebs, valid-peb(v, m, apebs[n1]), valid-peb(v, m, apebs[n0]), m0 ≤ # apebs ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m0) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn |
n0 < # apebs, n1 < # apebs, n0 < m1 +1, n1 < m1 +1, valid-peb(v, m, apebs[n0]), valid-peb(v, m, apebs[n1]), m1 +1 ≤ # apebs, ∀ n1, n0, apebs, v, m. n1 < m1 ∧ n0 < m1 ∧ n1 < # apebs ∧ n0 < # apebs ∧ valid-peb(v, m, apebs[n1]) ∧ valid-peb(v, m, apebs[n0]) ∧ m1 ≤ # apebs → n0 = n1 ∨ (∃ bag. valid-sqns(v, m, apebs, m1) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn) ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m1 +1) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn
Used simplifier rules: nat freely generated by 0, +1;;% ⊦ 0 ≤ m; (s)% ⊦ ¬ m < 0; (s)