| □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), [:S | Boolvar ::- [PL N' = N'' + 1 until last ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥nf false ::- [PL N = n34 ∧ S = s34 ∧ □ ¬ N' < N'' ∧ ◇ last] ], □ (N = N' ∧ ¬ N' < N''), N0 = N0'' + 1 until Boolvar, INDHYP-nat(n3) ∧ INDHYP-nat0(N0 + 1), R1(pm, s2, S), I(pm, s3), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), Pre1(pm, s), Pre2(pm, s), I(pm, s2), R1(pm, s3, S), R2(pm, s3, S), N ≤ n3, I(pm, s), G2(pm, s2, s3), n34 ≤ n3, R1(pm, s2, s3), I(pm, S), ¬ R2(pm, s3, s34) ⊦ ◇ last |
[:S | [PL R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s1, S);G1(pm, S, S')) ∧ (□ R1(pm, S', S'') → ◇ last)] ∥nf [PL S = s]], □ (R1(pm, S', S'') ∧ R2(pm, S', S'')), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), R2(pm, s0, S), ¬ R2(pm, s0, s), Pre1(pm, s1), I(pm, s0) ⊦ ◇ last
□ (R1(pm, S', S'') ∧ R2(pm, S', S'')), [:S | Boolvar ::- [PL N' = N'' + 1 until last ∧ R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S'))] ∥nf false ::- [PL N = n34 ∧ S = s34 ∧ □ ¬ N' < N'' ∧ ◇ last] ], □ (N = N' ∧ ¬ N' < N''), N0 = N0'' + 1 until Boolvar, INDHYP-nat(n3) ∧ INDHYP-nat0(N0 + 1), R1(pm, s2, S), I(pm, s3), RG-restr(pm, R1, G1, Pre1, Post1, I, R2, G2, Pre2, Post2), Pre1(pm, s), Pre2(pm, s), I(pm, s2), R1(pm, s3, S), R2(pm, s3, S), N ≤ n3, I(pm, s), G2(pm, s2, s3), n34 ≤ n3, R1(pm, s2, s3), I(pm, S), ¬ R2(pm, s3, s34) ⊦ [:S | [PL R1(pm, S', S'') -+-> (last ⊃ Post1(pm, s, S);G1(pm, S, S')) ∧ (□ R1(pm, S', S'') → ◇ last)] ∥nf [PL S = s34]], ◇ last
Used terms: Post1, pm, s, S, G1, R1, s34, R2, Pre1, I, G2, Pre2, Post2, s3