| # apebs = # wlar, wlar[m] = wl-entry(m2, used), apebs[m] = mkpeb(aechdr(m2), avhdr0, buf, m3, false), m < # wlar, valid-peb(v, m5, mkpeb(aechdr(m2), avhdr0, buf, m3, false)), valid-peb(mkpeb(aechdr(m2), avhdr0, buf2, m6, false)), valid-peb(v, m5, mkpeb(aechdr(m2), avhdr0, buf2, m6, false)), valid-peb(mkpeb(aechdr(m2), avhdr0, buf, m3, false)) ⊦ avhdr0.sqn = valid-sqns(v, m5, apebs).max, avhdr0.sqn < valid-sqns(v, m5, apebs).max |
# apebs = # wlar, wlar[m] = wl-entry(m2, used), apebs[m] = mkpeb(aechdr(m2), avhdr0, buf, m3, false), valid-sqns(v, m5, apebs).max < avhdr0.sqn, m < # wlar, valid-peb(v, m5, mkpeb(aechdr(m2), avhdr0, buf, m3, false)), valid-peb(mkpeb(aechdr(m2), avhdr0, buf2, m6, false)), valid-peb(v, m5, mkpeb(aechdr(m2), avhdr0, buf2, m6, false)), valid-peb(mkpeb(aechdr(m2), avhdr0, buf, m3, false)) ⊦ avhdr0.sqn = valid-sqns(v, m5, apebs).max
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic[encoding-nat]% ⊦ n ≠ n0 → (n < n0 ↔ ¬ n0 < n); (ss)