| □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), [:S | Boolvar ::- [PL N = n31 ∧ S = s31 ∧ N' = N'' + 1 until last] ∥nf false ::- [PL N = n30 ∧ S = s30 ∧ □ ¬ N' < N'' ∧ ¬ □ R2(pm, S', S'')]], □ (N = N' ∧ ¬ N' < N''), boolvar ∨ n2 = N0 + 1 ∧ N0 = N0'' + 1 until Boolvar, INDHYP-nat(n31 + 1) ∧ INDHYP-nat0(n2), R2(pm, s2, S), I(pm, s3), I(pm, s2), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), Pre1(pm, s), Pre2(pm, s), R1(pm, s3, S), R2(pm, s3, S), N ≤ n31 + 1, I(pm, s), G2(pm, s2, s2), G1(pm, s2, s3), n30 ≤ n31 + 1, R2(pm, s2, s3), R1(pm, s2, s2), I(pm, S), ¬ R2(pm, s2, s30), ¬ R1(pm, s3, s31), boolvar1 → s2 = s3 ∧ (boolvar ↔ boolvar0) ∧ n2 = n4 ⊦ ◇ last |
Used simplifier rules: lels: ⊦ ¬ m < n ↔ n ≤ m; from specification nat