| [:S | Boolvar ::- [PL S = s] ∥nf false ::- [PL S = s5 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s1, S);G2(pm, S, S'))]], N = N'' + 1 until Boolvar, \A ∀ N, Boolvar, S, s, Post2, pm, s1, G2, R2, R1, G1, Pre1, Post1, I, Pre2, s0. N < n → N = N'' +1 until Boolvar ∧ [:S | Boolvar ::- [PL S = s] ∥nf false ::- [PL R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s1, S);G2(pm, S, S'))]] ∧ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ R1(pm, s0, S) ∧ I(pm, s0) ∧ Pre1(pm, s1) ∧ Pre2(pm, s1) ∧ I(pm, S) ∧ I(pm, s1) ∧ ¬ R1(pm, s0, s) → (R1(pm, S', S'') ∧ R2(pm, S', S'')) -+-> (last ⊃ Post1(pm, s1, S) ∧ Post2(pm, s1, S);G1(pm, S, S') ∨ G2(pm, S, S')), n = N + 1, R1(pm, s0, s3), R1(pm, s2, S), I(pm, s3), I(pm, S), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), R1(pm, s0, s2), I(pm, s0), Pre1(pm, s1), Pre2(pm, s1), I(pm, s2), I(pm, s1), G2(pm, s2, s3), R2(pm, s3, s5), R1(pm, s3, S), R2(pm, s3, S), R1(pm, s2, s3), R1(pm, s0, S), I(pm, s5), ¬ R1(pm, s0, s) ⊦ (R1(pm, S', S'') ∧ R2(pm, S', S'')) -+-> (last ⊃ Post1(pm, s1, S) ∧ Post2(pm, s1, S);G1(pm, S, S') ∨ G2(pm, S, S')) |
[:S | Boolvar ::- [PL S = s] ∥nf false ::- [PL S = s5 ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s1, S);G2(pm, S, S'))]], N = N'' + 1 until Boolvar, \A ∀ N, Boolvar, S, s, Post2, pm, s1, G2, R2, R1, G1, Pre1, Post1, I, Pre2, s0. N < n → N = N'' +1 until Boolvar ∧ [:S | Boolvar ::- [PL S = s] ∥nf false ::- [PL R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s1, S);G2(pm, S, S'))]] ∧ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ R1(pm, s0, S) ∧ I(pm, s0) ∧ Pre1(pm, s1) ∧ Pre2(pm, s1) ∧ I(pm, S) ∧ I(pm, s1) ∧ ¬ R1(pm, s0, s) → (R1(pm, S', S'') ∧ R2(pm, S', S'')) -+-> (last ⊃ Post1(pm, s1, S) ∧ Post2(pm, s1, S);G1(pm, S, S') ∨ G2(pm, S, S')), n = N + 1, R1(pm, s0, s3), R1(pm, s2, S), I(pm, s3), I(pm, S), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), R1(pm, s0, s2), I(pm, s0), Pre1(pm, s1), Pre2(pm, s1), I(pm, s2), I(pm, s1), G2(pm, s2, s3), R2(pm, s3, s5), R1(pm, s3, S), R2(pm, s3, S), R1(pm, s2, s3), R1(pm, s0, S), I(pm, s5), ¬ R1(pm, s0, s) ⊦ N = N'' +1 until Boolvar ∧ [:S | Boolvar ::- [PL S = s] ∥nf false ::- [PL R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s1, S);G2(pm, S, S'))]] ∧ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ R1(pm, s0, S) ∧ I(pm, s0) ∧ Pre1(pm, s1) ∧ Pre2(pm, s1) ∧ I(pm, S) ∧ I(pm, s1) ∧ ¬ R1(pm, s0, s), (R1(pm, S', S'') ∧ R2(pm, S', S'')) -+-> (last ⊃ Post1(pm, s1, S) ∧ Post2(pm, s1, S);G1(pm, S, S') ∨ G2(pm, S, S'))
Used simplifier rules: s: ⊦ m < n + 1 ↔ ¬ n < m; from specification nat-basic2%ref-1: ⊦ ¬ n < n; from specification nat-basic1%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%c: ⊦ m + n = n + m; from specification nat-basic2 Used terms: N, Boolvar, S, s, Post2, pm, s1, G2, R2, R1, G1, Pre1, Post1, I, Pre2, s0