| apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), n0 < # wlar.mapIndices(nx, λ wle. wle.ec:= n), indices-erasing(wlar, nx), valid-indices(wlar, nx), valid-wl(apebs, wlar) ⊦ dups(nx), (wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status = erroneous ↔ boolvar) ∧ (wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status = free → avhdr = empty) ∧ ( wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status ≠ erroneous ∧ wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status ≠ erasing → aehdr = aechdr(wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].ec)) ∧ (wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status = used → (∃ v, m. valid-peb(v, m, apebs[n0]) ∧ avhdr.sqn = valid-sqns(v, m, apebs).max)) |
apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), n0 < # wlar.mapIndices(nx, λ wle. wle.ec:= n), indices-erasing(wlar, nx), valid-indices(wlar, nx), valid-wl(apebs, wlar) ⊦ dups(nx), (wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status = erroneous ↔ boolvar) ∧ (wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status = free → avhdr = empty) ∧ ( wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status ≠ erroneous ∧ wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status ≠ erasing → aehdr = aechdr(wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].ec)) ∧ ( wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status = used → (∃ v, m. valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0].status = erroneous)) ∧ avhdr.sqn = valid-sqns(v, m, apebs).max))