| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)), lref ≠ none → valid-peb(lref.vol, lref.leb, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ∧ avhdr.sqn ≠ valid-sqns(lref.vol, lref.leb, apebs).max, lref = none → ¬ valid-peb(mkpeb(aehdr, avhdr, buf, m0, boolvar)) ⊦ lref = v × m1 |
apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, valid-peb(lref.vol, lref.leb, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ⊦ avhdr.sqn = valid-sqns(lref.vol, lref.leb, apebs).max, lref = none, lref = lref.vol × lref.leb
Used simplifier rules: ⊦ valid-peb(v0, m0, apeb) → (valid-peb(v1, m1, apeb) ↔ v0 = v1 ∧ m0 = m1); (s)% ⊦ valid-peb(v, m, apeb) → valid-peb(apeb); (ss)