| # apebs = # wlar, avhdr0.sqn = valid-sqns(v, n, apebs, m).max, apebs[m] = mkpeb(aehdr1, avhdr1, buf1, m5, false), apebs[m0] = mkpeb(aehdr0, avhdr0, buf0, m4, boolvar0), wlar[m] = wl-entry(m7, stat0), m0 + 1 < # wlar, m < # wlar, m0 < m, avhdr0.sqn < avhdr1.sqn, m0 < # wlar, valid-peb(v, n, mkpeb(aehdr0, avhdr0, buf0, m4, boolvar0)), valid-peb(v, n, mkpeb(aehdr1, avhdr1, buf1, m5, false)), ∀ v, m. unique-elems(valid-sqns(v, m, apebs)) ⊦ aehdr1 = aechdr(aehdr1.ec), m = m0, aehdr1 = aechdr(aehdr1.ec) ∧ (∃ v0, m2. valid-peb(v0, m2, mkpeb(aechdr(aehdr1.ec), avhdr1, buf1, m5, false)) ∧ avhdr1.sqn = (valid-sqns(v0, m2, apebs, m) ∪ (v = v0 ∧ n = m2 ⊃ {avhdr1.sqn} ;∅)).max) |
# apebs = # wlar, avhdr0.sqn = valid-sqns(v, n, apebs, m).max, wlar[m] = wl-entry(m7, stat0), apebs[m0] = mkpeb(aehdr0, avhdr0, buf0, m4, boolvar0), apebs[m] = mkpeb(aehdr1, avhdr1, buf1, m5, false), m0 < # wlar, avhdr0.sqn < avhdr1.sqn, m0 < m, m < # wlar, m0 + 1 < # wlar, valid-peb(v, n, mkpeb(aehdr1, avhdr1, buf1, m5, false)), valid-peb(v, n, mkpeb(aehdr0, avhdr0, buf0, m4, boolvar0)), ∀ v, m. unique-elems(valid-sqns(v, m, apebs)) ⊦ aehdr1 = aechdr(aehdr1.ec), m = m0