| n < # apebs, # apebs = # wlar ⊦ valid-wl(apebs, wlar) ∧ valid-peb(apeb) ∧ (valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs) ≠ ∅ → apeb.vidhdr.sqn > valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs).max) ∧ (∀ m. m < # wlar ∧ m ≠ n ∧ wlar[m].status = used → apebs[m].vidhdr.vol ≠ apeb.vidhdr.vol ∨ apebs[m].vidhdr.leb ≠ apeb.vidhdr.leb) ∧ apeb.echdr.ec = m0 → valid-wl(apebs[n, apeb], wlar[n, wl-entry(m0, used)]) |
# apebs = # wlar, apeb.echdr.ec = m0, n < # apebs, valid-peb(apeb), valid-wl(apebs, wlar), valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs) ≠ ∅ → apeb.vidhdr.sqn > valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs).max, ∀ m. m < # wlar ∧ m ≠ n ∧ wlar[m].status = used → apebs[m].vidhdr.vol ≠ apeb.vidhdr.vol ∨ apebs[m].vidhdr.leb ≠ apeb.vidhdr.leb ⊦ valid-wl(apebs[n, apeb], wlar[n, wl-entry(m0, used)])