| apebs[m] = mkpeb(aehdr, avhdr, buf, m1, boolvar), m < # apebs, avhdr.sqn < (valid-sqns(v, m0, apebs, m) ++ avhdr.sqn).max, avhdr.sqn < n, avhdr.sqn < valid-sqns(v, m0, apebs, m).max, valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m1, boolvar)), n ≤ valid-sqns(v, m0, apebs, m).max, ∀ v, m0. valid-sqns(v, m0, apebs, m) ≠ ∅ → valid-sqns(v, m0, apebs, m).max < n ⊦ |
Used simplifier rules: ⊦ m ≤ n → (n < m ↔ false); (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat% ⊦ m < n → n ≠ 0; (s)% ⊦ (∅ ++ n).max = n; (s)% ⊦ ¬ n < n; (s) Used terms: v, m0