| m < # apebs, unique-elems(valid-sqns(v, m0, apebs)), ¬ valid-peb(mkpeb(aehdr, avhdr, buf, m1, boolvar)) ∨ ¬ avhdr.sqn ∈ valid-sqns(avhdr.vol, avhdr.leb, apebs) \ (valid-peb(avhdr.vol, avhdr.leb, apebs[m]) ⊃ {apebs[m].vidhdr.sqn} ;∅) ⊦ unique-elems(valid-sqns(v, m0, apebs) ∪ (valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m1, boolvar)) ⊃ {avhdr.sqn} ;∅)), valid-peb(v, m0, apebs[m]) |
Used simplifier rules: ⊦ ∅ ∪ bag0 = bag0; (s)%union-ass: ⊦ bag ∪ bag3 ∪ bag4 = (bag ∪ bag3) ∪ bag4; from specification bag-union[nat-bag]%union-com: ⊦ bag ∪ bag2 = bag2 ∪ bag; from specification bag-union[nat-bag]% ⊦ bag \ {n} = bag -- n; (s)% ⊦ bag ∪ {n} = bag ++ n; (s)% ⊦ unique-elems(bag ++ m) ↔ unique-elems(bag) ∧ ¬ m ∈ bag; (s)% ⊦ valid-peb(v, m, apeb) → valid-peb(apeb); (ss)%⊦ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) → avhdr.vol = v; (s)%⊦ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) → avhdr.leb = m; (s)% ⊦ bag \ ∅ = bag; (s)