| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ lref = v × m1) ∧ (lref = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦ lref = none, valid-peb(lref.vol, lref.leb, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ avhdr.sqn ≠ valid-sqns(lref.vol, lref.leb, apebs).max |
apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ lref = v × m1) ∧ (lref = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦ lref = none, valid-peb(lref.vol, lref.leb, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ avhdr.sqn ≠ valid-sqns(lref.vol, lref.leb, apebs).max