| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ lref = v × m1) ∧ (lref = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦ (lref = none → ¬ valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar))) ∧ (lref ≠ none → valid-peb(lref.vol, lref.leb, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ avhdr.sqn ≠ valid-sqns(lref.vol, lref.leb, apebs).max) |
apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), lref = none, m < # apebs, valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar)), ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ lref = v × m1) ∧ (lref = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦
apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ lref = v × m1) ∧ (lref = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦ lref = none, valid-peb(lref.vol, lref.leb, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ avhdr.sqn ≠ valid-sqns(lref.vol, lref.leb, apebs).max