| [:S | false ::- [PL □ R1(pm, S', S'') ∧ □ (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ Boolvar ::- [PL ¬ Boolvar until ¬ R2(pm, S', S'') ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ], N = N'' +1 until Boolvar, □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), \A ∀ N, R1, pm, S, R2, Boolvar, Post1, s, G1, Post2, G2, Pre1, I, Pre2. N < m → □ (R1(pm, S', S'') ∧ R2(pm, S', S'')) ∧ N = N'' +1 until Boolvar ∧ [:S | false ::- [PL □ R1(pm, S', S'') ∧ □ (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ Boolvar ::- [PL ¬ Boolvar until ¬ R2(pm, S', S'') ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ] ∧ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ Pre1(pm, s) ∧ Pre2(pm, s) ∧ I(pm, S) ∧ I(pm, s) → false, m = N, RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), Pre1(pm, s), Pre2(pm, s), I(pm, S), I(pm, s) ⊦ |
[:S | false ::- [PL □ R1(pm, S', S'') ∧ □ (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ Boolvar ::- [PL ¬ Boolvar until ¬ R2(pm, S', S'') ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ], □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), N = N'' + 1 until Boolvar, \A ∀ N, R1, pm, S, R2, Boolvar, Post1, s, G1, Post2, G2, Pre1, I, Pre2. N < m → □ (R1(pm, S', S'') ∧ R2(pm, S', S'')) ∧ N = N'' +1 until Boolvar ∧ [:S | false ::- [PL □ R1(pm, S', S'') ∧ □ (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥ Boolvar ::- [PL ¬ Boolvar until ¬ R2(pm, S', S'') ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S'))] ] ∧ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ Pre1(pm, s) ∧ Pre2(pm, s) ∧ I(pm, S) ∧ I(pm, s) → false, m = N, RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), Pre1(pm, s), Pre2(pm, s), I(pm, S), I(pm, s) ⊦
Used simplifier rules: succ: ⊦ m +1 = m + 1; from specification nat-basic2