| m1 < # apebs, ∀ apebs, v, m, n, apeb. m1 ≤ # apebs → valid-sqns(v, m, apebs[n, apeb], m1) = (n < m1 ⊃ (valid-sqns(v, m, apebs, m1) \ (valid-peb(v, m, apebs[n]) ⊃ {apebs[n].vidhdr.sqn} ;∅)) ∪ (valid-peb(v, m, apeb) ⊃ {apeb.vidhdr.sqn} ;∅) ;valid-sqns(v, m, apebs, m1) ) ⊦ valid-sqns(v, m, apebs[n, apeb], m1 + 1) = (¬ m1 < n ⊃ ( (valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅)) \ (valid-peb(v, m, apebs[n]) ⊃ {apebs[n].vidhdr.sqn} ;∅)) ∪ (valid-peb(v, m, apeb) ⊃ {apeb.vidhdr.sqn} ;∅) ;valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅) ) |
⊦ n < # apebs → valid-sqns(v, m, apebs, n + 1) = valid-sqns(v, m, apebs, n) ∪ (valid-peb(v, m, apebs[n]) ⊃ {apebs[n].vidhdr.sqn} ;∅)
m1 < # apebs, m1 < # apebs[n, apeb], ∀ apebs, v, m, n, apeb. m1 ≤ # apebs → valid-sqns(v, m, apebs[n, apeb], m1) = (n < m1 ⊃ (valid-sqns(v, m, apebs, m1) \ (valid-peb(v, m, apebs[n]) ⊃ {apebs[n].vidhdr.sqn} ;∅)) ∪ (valid-peb(v, m, apeb) ⊃ {apeb.vidhdr.sqn} ;∅) ;valid-sqns(v, m, apebs, m1) ) ⊦ valid-sqns(v, m, apebs[n, apeb], m1) ∪ (valid-peb(v, m, apebs[n, apeb][m1]) ⊃ {apebs[n, apeb][m1].vidhdr.sqn} ;∅) = (¬ m1 < n ⊃ ( (valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅)) \ (valid-peb(v, m, apebs[n]) ⊃ {apebs[n].vidhdr.sqn} ;∅)) ∪ (valid-peb(v, m, apeb) ⊃ {apeb.vidhdr.sqn} ;∅) ;valid-sqns(v, m, apebs, m1) ∪ (valid-peb(v, m, apebs[m1]) ⊃ {apebs[m1].vidhdr.sqn} ;∅) )
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ # apebs[n, apeb] = # apebs; (s)% ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ bag ∪ {n} = bag ++ n; (s)%union-ass: ⊦ bag ∪ bag3 ∪ bag4 = (bag ∪ bag3) ∪ bag4; from specification bag-union[nat-bag]%union-com: ⊦ bag ∪ bag2 = bag2 ∪ bag; from specification bag-union[nat-bag]%bag ⊆ bag3 ⊦ (bag3 \ bag) ∪ bag4 = (bag3 ∪ bag4) \ bag; (s) Used terms: m1, apebs[n, apeb], m, v