| ¬(P(pm, s2) ∨ ◇ P(pm, S)) ∨ n = N + 1 ∧ N = N'' + 1 until ¬ ◇ P(pm, S), ( ( ( (((P(pm, s2) ∧ (true ⊃ Post1(pm, s, s2);G1(pm, s2, s2))) ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3))) ∧ ¬ R1(pm, s2, s2)) ∧ ¬ R2(pm, s3, S) ∨ (((P(pm, s2) ∧ (true ⊃ Post1(pm, s, s2);G1(pm, s2, s2))) ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3)) ∧ R2(pm, s3, S)) ∧ ¬ R1(pm, s2, s2)) ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))) ∨ ((P(pm, s2) ∧ (true ⊃ Post1(pm, s, s2);G1(pm, s2, s2)) ∧ R1(pm, s2, s2)) ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3))) ∧ ¬ R2(pm, s3, S) ∨ ((P(pm, s2) ∧ (true ⊃ Post1(pm, s, s2);G1(pm, s2, s2)) ∧ R1(pm, s2, s2)) ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3)) ∧ R2(pm, s3, S)) ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))) ∨ ( (∃ s0. (¬ false ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3)) ∧ ¬ R1(pm, s3, s0)) ∧ ¬ boolvar ∧ [:S | [PL S = s0 ∧ □ ◇ P(pm, S)] ∥ [PL R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))]]) ∨ (∃ s0, s1. ((((false ⊃ Post1(pm, s, s2);G1(pm, s2, s2)) ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3))) ∧ ¬ R1(pm, s2, s0)) ∧ ¬ R2(pm, s3, s1)) ∧ [:S | [PL S = s0 ∧ □ ◇ P(pm, S)] ∥ [PL S = s1 ∧ true]]) ∨ (∃ s0, s1. (((false ⊃ Post1(pm, s, s2);G1(pm, s2, s2)) ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3)) ∧ R2(pm, s3, s1)) ∧ ¬ R1(pm, s2, s0)) ∧ [:S | [PL S = s0 ∧ □ ◇ P(pm, S)] ∥ [PL S = s1 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))]])) ∨ (∃ s0. (¬ false ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3)) ∧ R1(pm, s3, s0)) ∧ ¬ boolvar ∧ [:S | [PL S = s0 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ]) ∨ (∃ s0, s1. ((((false ⊃ Post1(pm, s, s2);G1(pm, s2, s2)) ∧ R1(pm, s2, s0)) ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3))) ∧ ¬ R2(pm, s3, s1)) ∧ [:S | [PL S = s0 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s1 ∧ true]]) ∨ (∃ s0, s1. (((false ⊃ Post1(pm, s, s2);G1(pm, s2, s2)) ∧ R1(pm, s2, s0)) ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3)) ∧ R2(pm, s3, s1)) ∧ [:S | [PL S = s0 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s1 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ])) ∨ ( ( (false ∨ false) ∨ ((((true ⊃ Post2(pm, s, s2);G2(pm, s2, s2)) ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3))) ∧ ¬ R2(pm, s2, s2)) ∧ ¬ R1(pm, s3, S)) ∧ □ ◇ P(pm, S) ∨ (((true ⊃ Post2(pm, s, s2);G2(pm, s2, s2)) ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3)) ∧ R1(pm, s3, S)) ∧ ¬ R2(pm, s2, s2)) ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))) ∨ (∃ s0. (¬ false ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3)) ∧ ¬ R2(pm, s3, s0)) ∧ ¬ boolvar ∧ [:S | [PL □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s0 ∧ true]]) ∨ (∃ s0, s1. ((((false ⊃ Post2(pm, s, s2);G2(pm, s2, s2)) ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3))) ∧ ¬ R2(pm, s2, s0)) ∧ ¬ R1(pm, s3, s1)) ∧ [:S | [PL S = s1 ∧ □ ◇ P(pm, S)] ∥ [PL S = s0 ∧ true]]) ∨ (∃ s0, s1. (((false ⊃ Post2(pm, s, s2);G2(pm, s2, s2)) ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3)) ∧ R1(pm, s3, s1)) ∧ ¬ R2(pm, s2, s0)) ∧ [:S | [PL S = s1 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s0 ∧ true]])) ∨ ( (false ∨ false) ∨ ((((true ⊃ Post2(pm, s, s2);G2(pm, s2, s2)) ∧ R2(pm, s2, s2)) ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3))) ∧ ¬ R1(pm, s3, S)) ∧ □ ◇ P(pm, S) ∨ (((true ⊃ Post2(pm, s, s2);G2(pm, s2, s2)) ∧ R2(pm, s2, s2)) ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3)) ∧ R1(pm, s3, S)) ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))) ∨ (∃ s0. (¬ false ∧ (false ⊃ Post2(pm, s, s2);G2(pm, s2, s3)) ∧ R2(pm, s3, s0)) ∧ ¬ boolvar ∧ [:S | [PL □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s0 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ]) ∨ (∃ s0, s1. ((((false ⊃ Post2(pm, s, s2);G2(pm, s2, s2)) ∧ R2(pm, s2, s0)) ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3))) ∧ ¬ R1(pm, s3, s1)) ∧ [:S | [PL S = s1 ∧ □ ◇ P(pm, S)] ∥ [PL S = s0 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))]]) ∨ (∃ s0, s1. (((false ⊃ Post2(pm, s, s2);G2(pm, s2, s2)) ∧ R2(pm, s2, s0)) ∧ (false ⊃ Post1(pm, s, s2);G1(pm, s2, s3)) ∧ R1(pm, s3, s1)) ∧ [:S | [PL S = s1 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s0 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ]), □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), \A ∀ N, P, pm, S, Post1, s, G1, R1, Post2, G2, R2, Pre1, I, Pre2. N < m → [:S | [PL □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ] ∧ □ (R1(pm, S', S'') ∧ R2(pm, S', S'')) ∧ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ stable(pm, I, R1) ∧ stable(pm, I, R2) ∧ I(pm, S) ∧ Pre1(pm, s) ∧ Pre2(pm, s) ∧ P-restr(pm, P, I, R1) → ¬ N = N'' +1 until ¬ ◇ P(pm, S), m = n, RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), stable(pm, I, R1), stable(pm, I, R2), I(pm, s2), Pre1(pm, s), Pre2(pm, s), P-restr(pm, P, I, R1), ¬ false, boolvar → s2 = s3 ∧ n = n0, R1(pm, s3, S), R2(pm, s3, S) ⊦ |
□ (R1(pm, S', S'') ∧ R2(pm, S', S'')), ¬ P(pm, s2) ∧ ¬ ◇ P(pm, S) ∨ n = N + 1 ∧ N = N'' + 1 until ¬ ◇ P(pm, S), P(pm, s2) ∧ Post1(pm, s, s2) ∧ G2(pm, s2, s3) ∧ ¬ R1(pm, s2, s2) ∧ □ (last ⊃ Post2(pm, s, S);G2(pm, S, S')) ∨ P(pm, s2) ∧ Post1(pm, s, s2) ∧ R1(pm, s2, s2) ∧ G2(pm, s2, s3) ∧ □ (last ⊃ Post2(pm, s, S);G2(pm, S, S')) ∨ G1(pm, s2, s3) ∧ ¬ R1(pm, s3, s0) ∧ ¬ boolvar ∧ [:S | [PL S = s0 ∧ □ ◇ P(pm, S)] ∥ [PL R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))]] ∨ G1(pm, s2, s2) ∧ G2(pm, s2, s3) ∧ ¬ R1(pm, s2, s1) ∧ ¬ R2(pm, s3, s4) ∧ [:S | [PL S = s1 ∧ □ ◇ P(pm, S)] ∥ [PL S = s4]] ∨ G1(pm, s2, s2) ∧ G2(pm, s2, s3) ∧ R2(pm, s3, s6) ∧ ¬ R1(pm, s2, s5) ∧ [:S | [PL S = s5 ∧ □ ◇ P(pm, S)] ∥ [PL S = s6 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))]] ∨ G1(pm, s2, s3) ∧ R1(pm, s3, s7) ∧ ¬ boolvar ∧ [:S | [PL S = s7 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ] ∨ G1(pm, s2, s2) ∧ R1(pm, s2, s8) ∧ G2(pm, s2, s3) ∧ ¬ R2(pm, s3, s9) ∧ [:S | [PL S = s8 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s9]] ∨ G1(pm, s2, s2) ∧ R1(pm, s2, s10) ∧ G2(pm, s2, s3) ∧ R2(pm, s3, s11) ∧ [:S | [PL S = s10 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s11 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ] ∨ Post2(pm, s, s2) ∧ G1(pm, s2, s3) ∧ ¬ R2(pm, s2, s2) ∧ □ ◇ P(pm, S) ∧ □ (last ⊃ Post1(pm, s, S);G1(pm, S, S')) ∨ G2(pm, s2, s3) ∧ ¬ R2(pm, s3, s12) ∧ ¬ boolvar ∧ [:S | [PL □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s12]] ∨ G2(pm, s2, s2) ∧ G1(pm, s2, s3) ∧ ¬ R2(pm, s2, s13) ∧ ¬ R1(pm, s3, s14) ∧ [:S | [PL S = s14 ∧ □ ◇ P(pm, S)] ∥ [PL S = s13]] ∨ G2(pm, s2, s2) ∧ G1(pm, s2, s3) ∧ R1(pm, s3, s16) ∧ ¬ R2(pm, s2, s15) ∧ [:S | [PL S = s16 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s15]] ∨ Post2(pm, s, s2) ∧ R2(pm, s2, s2) ∧ G1(pm, s2, s3) ∧ □ ◇ P(pm, S) ∧ □ (last ⊃ Post1(pm, s, S);G1(pm, S, S')) ∨ G2(pm, s2, s3) ∧ R2(pm, s3, s17) ∧ ¬ boolvar ∧ [:S | [PL □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s17 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ] ∨ G2(pm, s2, s2) ∧ R2(pm, s2, s18) ∧ G1(pm, s2, s3) ∧ ¬ R1(pm, s3, s19) ∧ [:S | [PL S = s19 ∧ □ ◇ P(pm, S)] ∥ [PL S = s18 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))]] ∨ G2(pm, s2, s2) ∧ R2(pm, s2, s20) ∧ G1(pm, s2, s3) ∧ R1(pm, s3, s21) ∧ [:S | [PL S = s21 ∧ □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL S = s20 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ], \A ∀ N, P, pm, S, Post1, s, G1, R1, Post2, G2, R2, Pre1, I, Pre2. N < n → [:S | [PL □ ◇ P(pm, S) ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ [PL R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ] ∧ □ (R1(pm, S', S'') ∧ R2(pm, S', S'')) ∧ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ stable(pm, I, R1) ∧ stable(pm, I, R2) ∧ I(pm, S) ∧ Pre1(pm, s) ∧ Pre2(pm, s) ∧ P-restr(pm, P, I, R1) → ¬ N = N'' +1 until ¬ ◇ P(pm, S), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), stable(pm, I, R1), stable(pm, I, R2), I(pm, s2), Pre1(pm, s), Pre2(pm, s), P-restr(pm, P, I, R1), R1(pm, s3, S), R2(pm, s3, S), boolvar → s2 = s3 ∧ n = n0 ⊦