| □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), □ (last ⊃ Post2(pm, s, S);G2(pm, S, S')), N = N'' + 1 until ¬ ◇ P(pm, S), \A ∀ N, P, pm, S, Post2, s, G2, R1, R2, I, Pre2, Pre1, G1, Post1. N < m → N = N'' + 1 until ¬ ◇ P(pm, S) ∧ □ (last ⊃ Post2(pm, s, S);G2(pm, S, S')) ∧ □ (R1(pm, S', S'') ∧ R2(pm, S', S'')) ∧ I(pm, S) ∧ P-restr(pm, P, I, R1) ∧ Pre2(pm, s) ∧ Pre1(pm, s) ∧ stable(pm, I, R2) ∧ stable(pm, I, R1) ∧ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ P(pm, S) → false, m = N, I(pm, S), P-restr(pm, P, I, R1), Pre2(pm, s), Pre1(pm, s), stable(pm, I, R2), stable(pm, I, R1), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), P(pm, S) ⊦ |
¬(P(pm, s0) ∨ ◇ P(pm, S)) ∨ n = N + 1 ∧ N = N'' + 1 until ¬ ◇ P(pm, S), □ (last ⊃ Post2(pm, s, S);G2(pm, S, S')), □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), \A ∀ N, P, pm, S, Post2, s, G2, R1, R2, I, Pre2, Pre1, G1, Post1. N < m → N = N'' + 1 until ¬ ◇ P(pm, S) ∧ □ (last ⊃ Post2(pm, s, S);G2(pm, S, S')) ∧ □ (R1(pm, S', S'') ∧ R2(pm, S', S'')) ∧ I(pm, S) ∧ P-restr(pm, P, I, R1) ∧ Pre2(pm, s) ∧ Pre1(pm, s) ∧ stable(pm, I, R2) ∧ stable(pm, I, R1) ∧ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ P(pm, S) → false, m = n, I(pm, s0), P-restr(pm, P, I, R1), Pre2(pm, s), Pre1(pm, s), stable(pm, I, R2), stable(pm, I, R1), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), P(pm, s0), ¬ false, boolvar → s0 = s1 ∧ n = n0, R1(pm, s1, S), R2(pm, s1, S), (false ⊃ Post2(pm, s, s0);G2(pm, s0, s1)) ⊦