| n < # apebs, # apebs = # wlar ⊦ valid-wl(apebs, wlar) ∧ valid-peb(apeb) ∧ (valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs) ≠ ∅ → apeb.vidhdr.sqn > valid-sqns(apeb.vidhdr.vol, apeb.vidhdr.leb, apebs).max) ∧ (∀ m. m < # wlar ∧ m ≠ n ∧ wlar[m].status = used → apebs[m].vidhdr.vol ≠ apeb.vidhdr.vol ∨ apebs[m].vidhdr.leb ≠ apeb.vidhdr.leb) ∧ apeb.echdr.ec = m0 → valid-wl(apebs[n, apeb], wlar[n, wl-entry(m0, used)]) |