| # apebs = # wlar, avhdr1.sqn = valid-sqns(v, m5, apebs).max, apebs[n] = mkpeb(aechdr(m4), avhdr1, buf2, m6, false), wlar[n] = wl-entry(m4, used), apebs[m] = mkpeb(aehdr, avhdr, buf0, m0, boolvar0), wlar[m] = wl-entry(m2, used), n < # wlar, m < # wlar, valid-peb(mkpeb(aehdr, avhdr, buf0, m0, boolvar0)), valid-peb(mkpeb(aehdr, avhdr, buf1, m1, boolvar1)), valid-peb(v, m5, mkpeb(aechdr(m4), avhdr1, buf2, m6, false)) ⊦ avhdr1.sqn = valid-sqns(v, m5, apebs[m, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)]).max, n = m |
⊦ n < # apebs → valid-sqns(v, m, apebs[n, apeb]) = (valid-sqns(v, m, apebs) \ (valid-peb(v, m, apebs[n]) ⊃ {apebs[n].vidhdr.sqn} ;∅)) ∪ (valid-peb(v, m, apeb) ⊃ {apeb.vidhdr.sqn} ;∅)
# apebs = # wlar, avhdr1.sqn = valid-sqns(v, m5, apebs).max, wlar[m] = wl-entry(m2, used), apebs[m] = mkpeb(aehdr, avhdr, buf0, m0, boolvar0), wlar[n] = wl-entry(m4, used), apebs[n] = mkpeb(aechdr(m4), avhdr1, buf2, m6, false), m < # wlar, n < # wlar, m < # apebs, valid-peb(v, m5, mkpeb(aechdr(m4), avhdr1, buf2, m6, false)), valid-peb(mkpeb(aehdr, avhdr, buf1, m1, boolvar1)), valid-peb(mkpeb(aehdr, avhdr, buf0, m0, boolvar0)) ⊦ avhdr1.sqn = ( (valid-sqns(v, m5, apebs) \ (valid-peb(v, m5, apebs[m]) ⊃ {apebs[m].vidhdr.sqn} ;∅)) ∪ (valid-peb(v, m5, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)) ⊃ {mkpeb(aehdr, avhdr, buf1, m1, boolvar1).vidhdr.sqn} ;∅) ).max, n = m
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat[encoding-nat]%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat[encoding-nat]% ⊦ ¬ n < n; (s) Used terms: mkpeb(aehdr, avhdr, buf1, m1, boolvar1), m, apebs, m5, v