| □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), [:S | Boolvar ::- [PL N = n56 ∧ S = s69 ∧ N' = N'' + 1 until ¬ R1(pm, S', S'') ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥nf false ::- [PL S = s68 ∧ N = n55 ∧ □ ¬ N' < N'' ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S')) ∧ ◇ last] ], □ (N = N' ∧ ¬ N' < N''), boolvar ∨ n2 = N + 1 ∧ N = N'' + 1 until Boolvar, INDHYP-nat(n2) ∧ INDHYP-nat0(n2), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), Pre1(pm, s), Pre2(pm, s), I(pm, s2), R1(pm, s3, S), R2(pm, s3, S), N ≤ n2, I(pm, s), boolvar1 → s2 = s3 ∧ (boolvar ↔ boolvar0), G2(pm, s2, s2), R2(pm, s2, s68), n2 = n56 + 1, G1(pm, s2, s3), R1(pm, s3, s69), ¬ n56 + 1 < n55 ⊦ ◇ last |
□ (R1(pm, S', S'') ∧ R2(pm, S', S'')), [:S | Boolvar ::- [PL N = n56 ∧ S = s69 ∧ N' = N'' + 1 until ¬ R1(pm, S', S'') ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥nf false ::- [PL S = s68 ∧ N = n55 ∧ □ ¬ N' < N'' ∧ R2(pm, S', S'') -+-> (last ⊃ Post2(pm, s, S);G2(pm, S, S')) ∧ ◇ last] ], □ (N = N' ∧ ¬ N' < N''), boolvar ∨ n56 = N ∧ N = N'' + 1 until Boolvar, INDHYP-nat(n56 + 1) ∧ INDHYP-nat0(n56 + 1), R2(pm, s2, S), I(pm, s3), I(pm, s2), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), Pre1(pm, s), Pre2(pm, s), R1(pm, s3, S), R2(pm, s3, S), N ≤ n56 + 1, I(pm, s), G2(pm, s2, s2), R2(pm, s2, s68), G1(pm, s2, s3), R1(pm, s3, s69), n55 ≤ n56 + 1, R2(pm, s2, s3), R1(pm, s2, s2), I(pm, s68), I(pm, s69), I(pm, S), boolvar1 → s2 = s3 ∧ (boolvar ↔ boolvar0) ⊦ ◇ last
Used simplifier rules: i-r2-i: ⊦ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ R2(pm, s, s0) ∧ I(pm, s) → I(pm, s0);%g2-r1: ⊦ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ G2(pm, s, s0) ∧ I(pm, s) → R1(pm, s, s0);%g1-r2: ⊦ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ G1(pm, s, s0) ∧ I(pm, s) → R2(pm, s, s0);%r2-trans: ⊦ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ R2(pm, s, s0) ∧ R2(pm, s0, s1) ∧ I(pm, s) → R2(pm, s, s1);%i-r1-i: ⊦ RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2) ∧ R1(pm, s, s0) ∧ I(pm, s) → I(pm, s0);%c: ⊦ m + n = n + m; from specification nat-basic2%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic2%eq-01: ⊦ m + n = m + n0 ↔ n = n0; from specification nat-basic2%lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat