| avhdr.sqn = (valid-sqns(v, m0, apebs, m) ++ avhdr0.sqn).max, apebs[m1] = mkpeb(aehdr, avhdr, buf, m2, boolvar), apebs[m] = mkpeb(aehdr0, avhdr0, buf0, m3, boolvar0), m1 < # apebs, m < # apebs, m1 < m, m1 + 1 < # apebs, valid-eraseq-stronger(subarray(apebs, 0, m), q0), valid-eraseq-stronger(subarray(apebs, 0, m + 1), q0), valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m2, boolvar)), valid-peb(v, m0, apebs[m]), ∀ m, apebs. m < # apebs ∧ valid-eraseq-stronger(subarray(apebs, 0, m), q0) → valid-eraseq-stronger(subarray(apebs, 0, m + 1), q0) ⊦ avhdr.sqn = valid-sqns(v, m0, apebs, m).max, m1 ∈ q0 |
avhdr.sqn = (valid-sqns(v, m0, apebs, m) ++ avhdr0.sqn).max, apebs[m] = mkpeb(aehdr0, avhdr0, buf0, m3, boolvar0), apebs[m1] = mkpeb(aehdr, avhdr, buf, m2, boolvar), m1 + 1 < # apebs, m1 < m, m < # apebs, m1 < # apebs, valid-eraseq-stronger(subarray(apebs, 0, m + 1), q0), valid-eraseq-stronger(subarray(apebs, 0, m), q0), valid-peb(v, m0, mkpeb(aehdr0, avhdr0, buf0, m3, boolvar0)), valid-peb(v, m0, mkpeb(aehdr, avhdr, buf, m2, boolvar)), ∀ m, apebs. m < # apebs ∧ valid-eraseq-stronger(subarray(apebs, 0, m), q0) → valid-eraseq-stronger(subarray(apebs, 0, m + 1), q0) ⊦ avhdr.sqn = valid-sqns(v, m0, apebs, m).max, m1 ∈ q0