| n < # wlar ⊦ valid-wl(apebs, wlar) ∧ wlar[n] = wl-entry(m0, used) ∧ apebs[n] = mkpeb(aehdr, avhdr, buf, m2, boolvar) → (aehdr.ec = m0 ↔ true) |
wlar[n] = wl-entry(m0, used), apebs[n] = mkpeb(aehdr, avhdr, buf, m2, boolvar), n < # wlar, valid-wl(apebs, wlar) ⊦ aehdr.ec = m0 ↔ true