| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs ⊦ (∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ lref = v × m1) ∧ (lref = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max)) ↔ (lref = none → ¬ valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar))) ∧ (lref ≠ none → valid-peb(lref.vol, lref.leb, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ avhdr.sqn ≠ valid-sqns(lref.vol, lref.leb, apebs).max) |
apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ lref = v × m1) ∧ (lref = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦ (lref = none → ¬ valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar))) ∧ (lref ≠ none → valid-peb(lref.vol, lref.leb, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ avhdr.sqn ≠ valid-sqns(lref.vol, lref.leb, apebs).max)
apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, lref = none → ¬ valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar)), lref ≠ none → valid-peb(lref.vol, lref.leb, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ avhdr.sqn ≠ valid-sqns(lref.vol, lref.leb, apebs).max ⊦ ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ lref = v × m1) ∧ (lref = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max)