| □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), [:S | Boolvar ::- [PL N = n25 ∧ S = s33 ∧ N' = N'' + 1 until ¬ R1(pm, S', S'') ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥nf false ::- [PL S = s34 ∧ N = n26 ∧ □ ¬ N' < N'' ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S')) ∧ ◇ last] ], □ (N = N' ∧ ¬ N' < N''), INDHYP-nat(n25 + 1) ∧ INDHYP-nat0(n25 + 1), R1(pm, s2, S), I(pm, s2), I(pm, s3), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), Pre1(pm, s), Pre2(pm, s), R1(pm, s3, S), R2(pm, s3, S), N ≤ n25 + 1, I(pm, s), G1(pm, s2, s2), R1(pm, s2, s33), G2(pm, s2, s3), R2(pm, s3, s34), n26 ≤ n25 + 1, R2(pm, s2, s2), R1(pm, s2, s3), I(pm, s33), I(pm, S), I(pm, s34), boolvar1 → s2 = s3 ∧ boolvar0, ¬ N < n25 + 1 ⊦ ◇ last |
□ (N = N' ∧ ¬ N' < N''), [:S | Boolvar ::- [PL N = n25 ∧ S = s33 ∧ N' = N'' + 1 until ¬ R1(pm, S', S'') ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥nf false ::- [PL S = s34 ∧ N = n26 ∧ □ ¬ N' < N'' ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S')) ∧ ◇ last] ], □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), INDHYP-nat(n25 + 1) ∧ INDHYP-nat0(n25 + 1), N = n25 + 1, R2(pm, s3, S), R1(pm, s3, S), Pre2(pm, s), Pre1(pm, s), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), I(pm, s3), I(pm, s2), R1(pm, s2, S), I(pm, s34), I(pm, S), I(pm, s33), R1(pm, s2, s3), R2(pm, s2, s2), n26 ≤ n25 + 1, R2(pm, s3, s34), G2(pm, s2, s3), R1(pm, s2, s33), G1(pm, s2, s2), I(pm, s), boolvar1 → s2 = s3 ∧ boolvar0 ⊦ ◇ last
Used simplifier rules: ref-1: ⊦ ¬ n < n; from specification nat-basic1%lep-02: ⊦ m + n ≤ m + n0 ↔ n ≤ n0; from specification nat%oz: ⊦ m + 1 ≠ 0; from specification nat-basic2%le-one: ⊦ m ≤ n + 1 ∧ n < n0 → m ≤ n0; (forward) from specification nat%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic1%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic1%eqle-one: ⊦ m = n + 1 ∧ n < n0 → m ≤ n0; (forward) from specification nat%les: ⊦ m < n → (n ≤ m + 1 ↔ n = m + 1); from specification nat%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%s: ⊦ m < n + 1 ↔ ¬ n < m; from specification nat-basic2