LOCALINV-receiver-lemLOCALINV(na, state(na), balance1, balance, exLog1, exLog, state1, state, nextSeqNo1, nextSeqNo, pdAuth1, pdAuth, ether1, ether),
state(receiver) ≠ idle
→ LOCALINV
((state(receiver) = epv ⊃ pdAuth(receiver) .from; pdAuth(receiver) .to),
state((state(receiver) = epv ⊃ pdAuth(receiver) .from; pdAuth(receiver) .to)), balance2, balance, exLog2, exLog, state2, state, nextSeqNo2,
nextSeqNo, pdAuth2, pdAuth, ether2, ether)
∧ pastexlog
((state(receiver) = epv ⊃ pdAuth(receiver) .from; pdAuth(receiver) .to),
exLog((state(receiver) = epv ⊃ pdAuth(receiver) .from; pdAuth(receiver) .to)),
nextSeqNo2((state(receiver) = epv ⊃ pdAuth(receiver) .from; pdAuth(receiver) .to)), nextSeqNo),
msg ∈ ether, authentic(receiver), na = receiver, pastexlog(receiver, exLog(receiver), nextSeqNo1(receiver), nextSeqNo), pastether(ether, nextSeqNo),
reqsok(ether, pdAuth, state, exLog, nextSeqNo), state1(na) = idle
⊦
⦉LCSTEP#(msg, receiver, fail?; balance, exLog, state, nextSeqNo, pdAuth, ether)⦊
〈if state(receiver) = idle ∧ na = receiver
then balance1 := balance, exLog1 := exLog, state1 := state, nextSeqNo1 := nextSeqNo, pdAuth1 := pdAuth, ether1 := ether〉
( LOCALINV(na, state(na), balance1, balance, exLog1, exLog, state1, state, nextSeqNo1, nextSeqNo, pdAuth1, pdAuth, ether1, ether)
∧ pastexlog(receiver, exLog(receiver), nextSeqNo1(receiver), nextSeqNo) ∧ pastether(ether, nextSeqNo)
∧ reqsok(ether, pdAuth, state, exLog, nextSeqNo) ∧ state1(na) = idle)pastexlog-snle-le-lempastether-lem-03pastexlog-snle-ls-lempastexlog-add-lempastexlog-ls-lempastether-lem-02pastether-noReqgenLOCALINV-epapastether-noValgenpastether-noValpastether-noAckLOCALINV-epvpastether-lemreqsok-defpastether-noAckfrompastether-noValfromLOCALINV-eprpastexlog-snls-lemlocalok-defLOCALINV-idle
2698LOCALINV-receiver-lem-proofLOCALINV-receiver-lem-proof-info
The proof is valid.
CINV-lem
../../../../specs/status/export/unit.xmlstatus../../../../specs/status/export/case/longlemmainfo.xmlcase../../../../../../../../lib/basic/specs/set-basic/export/unit.xmlset-basicset-PayDetails../../../../../../../../lib/basic/specs/set-basic/export/In-insert/longlemmainfo.xmlIn-insert../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/let/longlemmainfo.xmllet../../../../specs/status/export/unit.xmlstatus../../../../specs/status/export/disj-02/longlemmainfo.xmldisj-02../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-36/longlemmainfo.xmltest-36../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-33/longlemmainfo.xmltest-33../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-39/longlemmainfo.xmltest-39../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/sel-24/longlemmainfo.xmlsel-24../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-45/longlemmainfo.xmltest-45../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-42/longlemmainfo.xmltest-42../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-35/longlemmainfo.xmltest-35../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-32/longlemmainfo.xmltest-32../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/inj-07/longlemmainfo.xmlinj-07../../../../specs/status/export/unit.xmlstatus../../../../specs/status/export/disj-05/longlemmainfo.xmldisj-05../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-38/longlemmainfo.xmltest-38../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/sel-23/longlemmainfo.xmlsel-23../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-41/longlemmainfo.xmltest-41../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/disj-18/longlemmainfo.xmldisj-18../../../../../../../../lib/basic/specs/nat-basic2/export/unit.xmlnat-basic2../../../../../../../../lib/basic/specs/nat-basic2/export/eq-01/longlemmainfo.xmleq-01../../../../../../../../lib/basic/specs/set-basic/export/unit.xmlset-basicset-PayDetails../../../../../../../../lib/basic/specs/set-basic/export/ne-01/longlemmainfo.xmlne-01../../../../../../../../lib/basic/specs/nat-basic2/export/unit.xmlnat-basic2../../../../../../../../lib/basic/specs/nat-basic2/export/l-02/longlemmainfo.xmll-02../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/lep/longlemmainfo.xmllep../../../../specs/PayDetails/export/unit.xmlPayDetails../../../../specs/PayDetails/export/sel-02/longlemmainfo.xmlsel-02../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/elim-sub/longlemmainfo.xmlelim-sub../../../../specs/status/export/unit.xmlstatus../../../../specs/status/export/disj-11/longlemmainfo.xmldisj-11../../../../specs/set-nogen-basic/export/unit.xmlset-nogen-basicset-message../../../../specs/set-nogen-basic/export/sub-insert/longlemmainfo.xmlsub-insert../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-34/longlemmainfo.xmltest-34../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-31/longlemmainfo.xmltest-31../../../../specs/set-nogen-basic/export/unit.xmlset-nogen-basicset-message../../../../specs/set-nogen-basic/export/in/longlemmainfo.xmlin../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/inj-06/longlemmainfo.xmlinj-06../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/disj-21/longlemmainfo.xmldisj-21../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/disj-20/longlemmainfo.xmldisj-20../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/sel-17/longlemmainfo.xmlsel-17../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/sel-16/longlemmainfo.xmlsel-16../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/sel-18/longlemmainfo.xmlsel-18../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-40/longlemmainfo.xmltest-40../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-43/longlemmainfo.xmltest-43../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-37/longlemmainfo.xmltest-37../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/sel-22/longlemmainfo.xmlsel-22../../../../specs/PayDetails/export/unit.xmlPayDetails../../../../specs/PayDetails/export/sel-04/longlemmainfo.xmlsel-04../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-02/longlemmainfo.xmltest-02../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-08/longlemmainfo.xmltest-08../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/elim-02/longlemmainfo.xmlelim-02../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/fle-01/longlemmainfo.xmlfle-01../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/fle/longlemmainfo.xmlfle../../../../../../../../lib/basic/specs/nat-basic1/export/unit.xmlnat-basic1../../../../../../../../lib/basic/specs/nat-basic1/export/trans/longlemmainfo.xmltrans../../../../../../../../lib/basic/specs/nat-basic1/export/unit.xmlnat-basic1../../../../../../../../lib/basic/specs/nat-basic1/export/lf-01/longlemmainfo.xmllf-01../../../../../../../../lib/basic/specs/nat-basic1/export/unit.xmlnat-basic1../../../../../../../../lib/basic/specs/nat-basic1/export/trans-1/longlemmainfo.xmltrans-1../../../../../../../../lib/basic/specs/nat-basic1/export/unit.xmlnat-basic1../../../../../../../../lib/basic/specs/nat-basic1/export/ls-02/longlemmainfo.xmlls-02../../../../specs/set-nogen-basic/export/unit.xmlset-nogen-basicset-message../../../../specs/set-nogen-basic/export/In-insert/longlemmainfo.xmlIn-insert../../../../specs/status/export/unit.xmlstatus../../../../specs/status/export/disj-12/longlemmainfo.xmldisj-12../../../../specs/status/export/unit.xmlstatus../../../../specs/status/export/disj-01/longlemmainfo.xmldisj-01../../../../specs/PayDetails/export/unit.xmlPayDetails../../../../specs/PayDetails/export/sel-01/longlemmainfo.xmlsel-01../../../../specs/PayDetails/export/unit.xmlPayDetails../../../../specs/PayDetails/export/sel-03/longlemmainfo.xmlsel-03../../../../../../../../lib/basic/specs/nat-basic1/export/unit.xmlnat-basic1../../../../../../../../lib/basic/specs/nat-basic1/export/ref-1/longlemmainfo.xmlref-1../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/disj-19/longlemmainfo.xmldisj-19../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/disj-16/longlemmainfo.xmldisj-16../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/disj-17/longlemmainfo.xmldisj-17../../../../specs/set-nogen-basic/export/unit.xmlset-nogen-basicset-message../../../../specs/set-nogen-basic/export/rax/longlemmainfo.xmlrax../../../../specs/set-nogen-basic/export/unit.xmlset-nogen-basicset-message../../../../specs/set-nogen-basic/export/sub-in/longlemmainfo.xmlsub-in../../../../specs/set-nogen-basic/export/unit.xmlset-nogen-basicset-message../../../../specs/set-nogen-basic/export/sub-idem/longlemmainfo.xmlsub-idem../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/ls-le-simp/longlemmainfo.xmlls-le-simp../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/sel-20/longlemmainfo.xmlsel-20../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/sel-19/longlemmainfo.xmlsel-19../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/sel-21/longlemmainfo.xmlsel-21../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/le-ls-simp/longlemmainfo.xmlle-ls-simp../../../../specs/PayDetails/export/unit.xmlPayDetails../../../../specs/PayDetails/export/sel-05/longlemmainfo.xmlsel-05../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/lels-01/longlemmainfo.xmllels-01../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-24/longlemmainfo.xmltest-24../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-30/longlemmainfo.xmltest-30../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-18/longlemmainfo.xmltest-18../../../../specs/status/export/unit.xmlstatus../../../../specs/status/export/disj-13/longlemmainfo.xmldisj-13../../../../specs/set-nogen-basic/export/unit.xmlset-nogen-basicset-message../../../../specs/set-nogen-basic/export/sub-add-01/longlemmainfo.xmlsub-add-01../../../../../../../../lib/basic/specs/nat-basic1/export/unit.xmlnat-basic1../../../../../../../../lib/basic/specs/nat-basic1/export/f/longlemmainfo.xmlf../../../../../../../../lib/basic/specs/nat-basic1/export/unit.xmlnat-basic1../../../../../../../../lib/basic/specs/nat-basic1/export/lf-02/longlemmainfo.xmllf-02../../../../../../../../lib/basic/specs/nat-basic2/export/unit.xmlnat-basic2../../../../../../../../lib/basic/specs/nat-basic2/export/succ/longlemmainfo.xmlsucc../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/le-add/longlemmainfo.xmlle-add../../../../../../../../lib/basic/specs/nat-basic2/export/unit.xmlnat-basic2../../../../../../../../lib/basic/specs/nat-basic2/export/a/longlemmainfo.xmla../../../../../../../../lib/basic/specs/nat-basic2/export/unit.xmlnat-basic2../../../../../../../../lib/basic/specs/nat-basic2/export/c/longlemmainfo.xmlc../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/test-01/longlemmainfo.xmltest-01../../../../specs/message/export/unit.xmlmessage../../../../specs/message/export/elim-01/longlemmainfo.xmlelim-01../../../../../../../../lib/basic/specs/nat/export/unit.xmlnat../../../../../../../../lib/basic/specs/nat/export/lels/longlemmainfo.xmllels../../../../specs/set-nogen-basic/export/unit.xmlset-nogen-basicset-message../../../../specs/set-nogen-basic/export/ne-01/longlemmainfo.xmlne-01