| valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m2, boolvar)) ↔ lref = v × m0, apebs[m1] = mkpeb(aehdr, avhdr, buf, m2, boolvar), m1 + 1 < # apebs, m1 < m, m < # apebs, m1 < # apebs, valid-eraseq-stronger(subarray(apebs, 0, m + 1), q0), valid-eraseq-stronger(subarray(apebs, 0, m), q0), lref = v × m0 → avhdr.sqn ≠ valid-sqns(v, m0, apebs, m).max, ∀ m, apebs. m < # apebs ∧ valid-eraseq-stronger(subarray(apebs, 0, m), q0) → valid-eraseq-stronger(subarray(apebs, 0, m + 1), q0) ⊦ m1 ∈ q0, (valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m2, boolvar)) ↔ lref = v × m0) ∧ (lref = v × m0 → avhdr.sqn ≠ (valid-sqns(v, m0, apebs, m) ∪ (valid-peb(v, m0, apebs[m]) ⊃ {apebs[m].vidhdr.sqn} ;∅)).max) |
avhdr.sqn = (valid-sqns(v, m0, apebs, m) ∪ (valid-peb(v, m0, apebs[m]) ⊃ {apebs[m].vidhdr.sqn} ;∅)).max, apebs[m1] = mkpeb(aehdr, avhdr, buf, m2, boolvar), m1 + 1 < # apebs, m1 < m, m < # apebs, m1 < # apebs, valid-eraseq-stronger(subarray(apebs, 0, m + 1), q0), valid-eraseq-stronger(subarray(apebs, 0, m), q0), valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m2, boolvar)), ∀ m, apebs. m < # apebs ∧ valid-eraseq-stronger(subarray(apebs, 0, m), q0) → valid-eraseq-stronger(subarray(apebs, 0, m + 1), q0) ⊦ avhdr.sqn = valid-sqns(v, m0, apebs, m).max, m1 ∈ q0