| apebs[m] = mkpeb(aehdr, avhdr, buf0, m0, boolvar0), m < # apebs, valid-peb(mkpeb(aehdr, avhdr, buf1, m1, boolvar1)), valid-peb(mkpeb(aehdr, avhdr, buf0, m0, boolvar0)), n ≤ (valid-sqns(v, m2, apebs) ∪ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)) ⊃ {avhdr.sqn} ;∅)).max, ∀ v, m2. valid-sqns(v, m2, apebs) ≠ ∅ → valid-sqns(v, m2, apebs).max < n ⊦ valid-sqns(v, m2, apebs) ∪ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)) ⊃ {avhdr.sqn} ;∅) = ∅, v = avhdr.vol ∧ m2 = avhdr.leb |
apebs[m] = mkpeb(aehdr, avhdr, buf0, m0, boolvar0), m < # apebs, valid-peb(mkpeb(aehdr, avhdr, buf0, m0, boolvar0)), valid-peb(mkpeb(aehdr, avhdr, buf1, m1, boolvar1)), n ≤ (valid-sqns(v, m2, apebs) ∪ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)) ⊃ {avhdr.sqn} ;∅)).max, ∀ v, m2. valid-sqns(v, m2, apebs) ≠ ∅ → valid-sqns(v, m2, apebs).max < n ⊦ valid-sqns(v, m2, apebs) ∪ (valid-peb(v, m2, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)) ⊃ {avhdr.sqn} ;∅) = ∅, valid-peb(v, m2, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)), v = avhdr.vol ∧ m2 = avhdr.leb
Used simplifier rules: ⊦ valid-peb(v0, m0, apeb) → (valid-peb(v1, m1, apeb) ↔ v0 = v1 ∧ m0 = m1); (s)% ⊦ bag ∪ {n} = bag ++ n; (s)%union-ass: ⊦ bag ∪ bag3 ∪ bag4 = (bag ∪ bag3) ∪ bag4; from specification bag-union[nat-bag]%union-com: ⊦ bag ∪ bag2 = bag2 ∪ bag; from specification bag-union[nat-bag]% ⊦ ∅ ≠ bag ++ n; (s)%⊦ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) → avhdr.vol = v; (s)%⊦ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, boolvar)) → avhdr.leb = m; (s) Used formulas: valid-peb(v, m2, mkpeb(aehdr, avhdr, buf1, m1, boolvar1))