| apebs[m0] = mkpeb(aehdr, avhdr, buf, m1, boolvar), n < # apebs, m0 < # apebs, valid-eraseq-strong(apebs, vtbl, q0), valid-peb(v, m, apebs[n]), ∀ n, apebs, vtbl, v, m. n < # apebs ∧ valid-eraseq-strong(apebs, vtbl, q0) ∧ valid-peb(v, m, apebs[n]) ∧ (¬ v ∈ vtbl ∨ ¬ m < vtbl[v]) → valid-eraseq-strong(apebs, vtbl, q0 + eq-entry(n, v × m) ') ∨ n ∈ q0, ∀ v, m. (valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m1, boolvar)) ↔ lref = v × m) ∧ (lref = v × m ∧ v ∈ vtbl ∧ m < vtbl[v] → avhdr.sqn ≠ valid-sqns(v, m, apebs).max), ¬ v ∈ vtbl ∨ ¬ m < vtbl[v] ⊦ n = m0, valid-eraseq-strong(apebs, vtbl, q0 + eq-entry(n, v × m) '), n ∈ q0, m0 ∈ q0 |
Used simplifier rules: ⊦ valid-peb(v0, m0, apeb) → (valid-peb(v1, m1, apeb) ↔ v0 = v1 ∧ m0 = m1); (s) Used terms: n, apebs, vtbl, v, m