| m < # apebs, # apebs = # wlar ⊦ apebs[m] = mkpeb(aehdr, avhdr, buf0, m0, boolvar0) ∧ valid-peb(mkpeb(aehdr, avhdr, buf0, m0, boolvar0)) ∧ valid-peb(mkpeb(aehdr, avhdr, buf1, m1, boolvar1)) ∧ wlar[m] = wl-entry(m2, used) → (valid-wl(apebs[m, mkpeb(aehdr, avhdr, buf1, m1, boolvar1)], wlar) ↔ valid-wl(apebs, wlar)) |