| # apebs = # wlar, avhdr1.sqn = valid-sqns(v, m, apebs).max, apebs[n0] = mkpeb(aechdr(m3), avhdr1, buf1, m2, false), wlar[n0] = wl-entry(m3, used), apebs[n] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0), n < # wlar, n0 < # wlar, valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar)), valid-peb(v, m, mkpeb(aechdr(m3), avhdr1, buf1, m2, false)), valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0)), valid-sqns(avhdr.vol, avhdr.leb, apebs) ≠ ∅ → valid-sqns(avhdr.vol, avhdr.leb, apebs).max < avhdr.sqn, n < # apebs ∧ n0 < # apebs ∧ n ≠ n0 ∧ valid-peb(v, m, apebs[n]) ∧ valid-peb(v, m, apebs[n0]) → (∃ bag. valid-sqns(v, m, apebs) = bag ++ apebs[n].vidhdr.sqn ++ apebs[n0].vidhdr.sqn), v ≠ avhdr.vol ∨ m ≠ avhdr.leb ⊦ avhdr1.sqn = (valid-sqns(v, m, apebs) -- avhdr0.sqn).max, n0 = n, v = avhdr.vol ∧ m = avhdr.leb |
# apebs = # wlar, apebs[n] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0), wlar[n0] = wl-entry(m3, used), apebs[n0] = mkpeb(aechdr(m3), avhdr1, buf1, m2, false), valid-sqns(v, m, apebs) = bag ++ avhdr0.sqn ++ avhdr1.sqn, n0 < # wlar, n < # wlar, valid-peb(v, m, mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0)), valid-peb(v, m, mkpeb(aechdr(m3), avhdr1, buf1, m2, false)), valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar)), (bag ++ avhdr0.sqn).max ≤ avhdr1.sqn, valid-sqns(avhdr.vol, avhdr.leb, apebs) ≠ ∅ → valid-sqns(avhdr.vol, avhdr.leb, apebs).max < avhdr.sqn, v ≠ avhdr.vol ∨ m ≠ avhdr.leb ⊦ avhdr1.sqn = (avhdr1.sqn = avhdr0.sqn ⊃ bag ++ avhdr0.sqn;bag ++ avhdr1.sqn).max, n0 = n, v = avhdr.vol ∧ m = avhdr.leb
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ (bag0 ++ n) -- n0 = (n = n0 ⊃ bag0;(bag0 -- n0) ++ n); (s)% ⊦ ∅ ≠ bag ++ n; (s)% ⊦ m = (bag ++ m).max ↔ ¬(bag ≠ ∅ ∧ m < bag.max); (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).vidhdr = avhdr; (s)%⊦ valid-peb(v0, m0, apeb) → (valid-peb(v1, m1, apeb) ↔ v0 = v1 ∧ m0 = m1); (s)