| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ v0 × m2 = v × m1) ∧ (v0 × m2 = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦ valid-peb(v0, m2, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ avhdr.sqn ≠ valid-sqns(v0, m2, apebs).max |
apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ v0 × m2 = v × m1) ∧ (v0 × m2 = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦ valid-peb(v0, m2, mkpeb(aehdr, avhdr, buf, m0, boolvar))
avhdr.sqn = valid-sqns(v0, m2, apebs).max, apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ v0 × m2 = v × m1) ∧ (v0 × m2 = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦