| apebs[m] = mkpeb(aehdr, avhdr, buf0, m0, boolvar0), m < # apebs, ( (valid-sqns(v, m2, apebs) \ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf0, m0, boolvar0)) ⊃ {avhdr.sqn} ;∅)) ∪ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)) ⊃ {avhdr.sqn} ;∅) ).max < n, valid-peb(mkpeb(aehdr, avhdr, buf1, m1, boolvar1)), valid-peb(mkpeb(aehdr, avhdr, buf0, m0, boolvar0)), n ≤ valid-sqns(v, m2, apebs).max ⊦ valid-sqns(v, m2, apebs) = ∅ |
apebs[m] = mkpeb(aehdr, avhdr, buf0, m0, boolvar0), ( (valid-sqns(v, m2, apebs) \ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf0, m0, boolvar0)) ⊃ {avhdr.sqn} ;∅)) ∪ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)) ⊃ {avhdr.sqn} ;∅) ).max < n, m < # apebs, ( (valid-sqns(v, m2, apebs) \ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf0, m0, boolvar0)) ⊃ {avhdr.sqn} ;∅)) ∪ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)) ⊃ {avhdr.sqn} ;∅) ).max < valid-sqns(v, m2, apebs).max, valid-peb(mkpeb(aehdr, avhdr, buf0, m0, boolvar0)), valid-peb(mkpeb(aehdr, avhdr, buf1, m1, boolvar1)), n ≤ valid-sqns(v, m2, apebs).max ⊦ valid-sqns(v, m2, apebs) = ∅
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic