| n0 < # apebs, n1 < # apebs, n0 < m1 +1, n1 < m1 +1, valid-peb(v, m, apebs[n0]), valid-peb(v, m, apebs[n1]), m1 +1 ≤ # apebs, ∀ n1, n0, apebs, v, m. n1 < m1 ∧ n0 < m1 ∧ n1 < # apebs ∧ n0 < # apebs ∧ valid-peb(v, m, apebs[n1]) ∧ valid-peb(v, m, apebs[n0]) ∧ m1 ≤ # apebs → n0 = n1 ∨ (∃ bag. valid-sqns(v, m, apebs, m1) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn) ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m1 +1) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn |
n1 < # apebs, n0 < # apebs, m1 < # apebs, valid-peb(v, m, apebs[n1]), valid-peb(v, m, apebs[n0]), n1 ≤ m1, n0 ≤ m1, ∀ n1, n0, apebs, v, m. n1 < m1 ∧ n0 < m1 ∧ n1 < # apebs ∧ n0 < # apebs ∧ valid-peb(v, m, apebs[n1]) ∧ valid-peb(v, m, apebs[n0]) ∧ m1 ≤ # apebs → n0 = n1 ∨ (∃ bag. valid-sqns(v, m, apebs, m1) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn) ⊦ n0 = n1, ∃ bag. valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅) = bag ++ apebs[n0].vidhdr.sqn ++ apebs[n1].vidhdr.sqn
Used simplifier rules: valid-sqns-rec: ⊦ n < # apebs → valid-sqns(v, m, apebs, n + 1) = valid-sqns(v, m, apebs, n) ∪ (valid-peb(v, m, apebs[n]) ⊃ {apebs[n].vidhdr.sqn} ;∅);% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m < n + 1 ↔ ¬ n < m; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + 1 ≤ n ↔ m < n; (s)% ⊦ m +1 = m + 1; (s)