| avhdr1.sqn = valid-sqns(v, m, apebs).max, apebs[m3] = mkpeb(aehdr1, avhdr1, buf1, m4, false), m3 < # apebs, valid-eraseq-stronger(apebs, q0), valid-peb(v, m, mkpeb(aehdr1, avhdr1, buf1, m4, false)), ∀ v0, m1. (v = v0 ∧ m = m1 ↔ lref = v0 × m1) ∧ (lref = v0 × m1 → avhdr1.sqn ≠ valid-sqns(v0, m1, apebs).max) ⊦ m3 ∈ q0 |
Used terms: v, m