| # apebs = # wlar, avhdr0.sqn = valid-sqns(v, m1, apebs).max, wlar[n] = wl-entry(m5, used), apebs[n] = mkpeb(aechdr(m5), avhdr0, buf0, m3, false), n < # wlar, m < # wlar, m < # apebs, valid-peb(v, m1, mkpeb(aechdr(m5), avhdr0, buf0, m3, false)) ⊦ avhdr0.sqn = ( (valid-sqns(v, m1, apebs) \ (valid-peb(v, m1, apebs[m]) ⊃ {apebs[m].vidhdr.sqn} ;∅)) ∪ (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, true)) ⊃ {mkpeb(aehdr, avhdr, buf, m0, true).vidhdr.sqn} ;∅) ).max, n = m |
# apebs = # wlar, avhdr0.sqn = valid-sqns(v, m1, apebs).max, apebs[n] = mkpeb(aechdr(m5), avhdr0, buf0, m3, false), wlar[n] = wl-entry(m5, used), m < # wlar, n < # wlar, valid-peb(v, m1, mkpeb(aechdr(m5), avhdr0, buf0, m3, false)) ⊦ avhdr0.sqn = (valid-sqns(v, m1, apebs) \ (valid-peb(v, m1, apebs[m]) ⊃ {apebs[m].vidhdr.sqn} ;∅)).max, n = m
Used simplifier rules: union-com: ⊦ bag ∪ bag2 = bag2 ∪ bag; from specification bag-union[nat-bag]%union-ass: ⊦ bag ∪ bag3 ∪ bag4 = (bag ∪ bag3) ∪ bag4; from specification bag-union[nat-bag]% ⊦ ∅ ∪ bag0 = bag0; (s)% ⊦ ¬ valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, true)); (s)