| apebs[n] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), apebs[m1] = mkpeb(aehdr, avhdr, buf, m0, boolvar), valid-sqns(v, m, apebs[n, apeb], m1) = (valid-sqns(v, m, apebs, m1) -- avhdr0.sqn) ∪ (valid-peb(v, m, apeb) ⊃ {apeb.vidhdr.sqn} ;∅), n < # apebs, n < m1, m1 < # apebs, n + 1 < # apebs, valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0)), valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ⊦ valid-sqns(v, m, apebs[n, apeb], m1) ++ avhdr.sqn = (avhdr.sqn = avhdr0.sqn ⊃ valid-sqns(v, m, apebs, m1);(valid-sqns(v, m, apebs, m1) -- avhdr0.sqn) ++ avhdr.sqn) ∪ (valid-peb(v, m, apeb) ⊃ {apeb.vidhdr.sqn} ;∅), m1 = n |
avhdr.sqn = avhdr0.sqn, apebs[m1] = mkpeb(aehdr, avhdr, buf, m0, boolvar), apebs[n] = mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0), valid-sqns(v, m, apebs[n, apeb], m1) = (valid-sqns(v, m, apebs, m1) -- avhdr0.sqn) ∪ (valid-peb(v, m, apeb) ⊃ {apeb.vidhdr.sqn} ;∅), n + 1 < # apebs, m1 < # apebs, n < m1, n < # apebs, valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)), valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m2, boolvar0)) ⊦ valid-sqns(v, m, apebs[n, apeb], m1) ++ avhdr.sqn = valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apeb) ⊃ {apeb.vidhdr.sqn} ;∅), m1 = n
Used simplifier rules: ⊦ (bag ++ n) ∪ bag2 = (bag ∪ bag2) ++ n; (s)%union-ass: ⊦ bag ∪ bag3 ∪ bag4 = (bag ∪ bag3) ∪ bag4; from specification bag-union[nat-bag]%union-com: ⊦ bag ∪ bag2 = bag2 ∪ bag; from specification bag-union[nat-bag]% ⊦ bag ++ n = bag2 ++ n ↔ bag = bag2; (s)