| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), lref = none, m < # apebs, valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar)), ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ lref = v × m1) ∧ (lref = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦ |
apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar)), ∀ v, m1. ¬ valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ⊦
Used simplifier rules: ⊦ none ≠ v × m; (s)