| apebs[m] = mkpeb(aehdr, avhdr, buf, m1, boolvar), m < # apebs, valid-peb(mkpeb(aehdr, avhdr, buf, m1, boolvar)), ∀ v, m0. valid-sqns(v, m0, apebs, m) ≠ ∅ → valid-sqns(v, m0, apebs, m).max < n, ∀ v, m0. valid-sqns(v, m0, apebs, m) ∪ (valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m1, boolvar)) ⊃ {avhdr.sqn} ;∅) ≠ ∅ → (valid-sqns(v, m0, apebs, m) ∪ (valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m1, boolvar)) ⊃ {avhdr.sqn} ;∅)).max < n ⊦ avhdr.sqn < n |
apebs[m] = mkpeb(aehdr, avhdr, buf, m1, boolvar), m < # apebs, valid-peb(mkpeb(aehdr, avhdr, buf, m1, boolvar)), n ≤ avhdr.sqn, ∀ v, m0. valid-sqns(v, m0, apebs, m) ∪ (valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m1, boolvar)) ⊃ {avhdr.sqn} ;∅) ≠ ∅ → (valid-sqns(v, m0, apebs, m) ∪ (valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m1, boolvar)) ⊃ {avhdr.sqn} ;∅)).max < n, ∀ v, m0. valid-sqns(v, m0, apebs, m) ≠ ∅ → valid-sqns(v, m0, apebs, m).max < n ⊦
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)