| # apebs ≤ # apebs ∧ valid-sqns(v, m, apebs, # apebs) ≠ ∅ → (∃ n0. n0 < # apebs ∧ valid-peb(v, m, apebs[n0]) ∧ apebs[n0].vidhdr.sqn = valid-sqns(v, m, apebs, # apebs).max) ⊦ valid-sqns(v, m, apebs, # apebs) = ∅, ∃ n. n < # apebs ∧ valid-peb(v, m, apebs[n]) ∧ apebs[n].vidhdr.sqn = valid-sqns(v, m, apebs, # apebs).max |
apebs[n].vidhdr.sqn = valid-sqns(v, m, apebs, # apebs).max, n < # apebs, valid-peb(v, m, apebs[n]) ⊦ valid-sqns(v, m, apebs, # apebs) = ∅, ∃ n. n < # apebs ∧ valid-peb(v, m, apebs[n]) ∧ apebs[n].vidhdr.sqn = valid-sqns(v, m, apebs, # apebs).max
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ m; (s)