| CInv(n, Act, CS), Idle(m, CS), m ≤ n, m0 = m ⊦ [: Act, Inp, CS, Outp | CRely(m, Act', CS', Act'', CS'') , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , {skip or {Act(m0) := true; COP(m0, Inp; CS, Outp); Act(m0) := false}} star ] CInv(n, Act, CS) |
CInv(n, Act, CS), Idle(m, CS), m ≤ n, m0 = m ⊦ [: Act, Inp, CS, Outp | CRely(m, Act', CS', Act'', CS'') , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , { skip or {Act(m0) := true; [PL CInv(n, Act, CS) ∧ Act(m0) ∧ m0 ≤ n ∧ Idle(m0, CS) → (CRely(m0, Act', CS', Act'', CS'') ∧ (CInv(n, Act', CS') ∧ Act'(m0) → CInv(n, Act'', CS'') ∧ Act''(m0))) -+-> (last ⊃ CInv(n, Act, CS) ∧ Idle(m0, CS) ∧ Act(m0) ;CGuar(m0, Act, CS, Act', CS') ∧ (CInv(n, Act, CS) ∧ Act(m0) → CInv(n, Act', CS') ∧ Act'(m0)) ) ]; Act(m0) := false}} star ] CInv(n, Act, CS)
Used simplifier rules: COP-sat-rely-guar: CInv(n, Act, CS), Act(m), m ≤ n, Idle(m, CS) ⊦ [: Act, Inp, CS, Outp | CRely(m, Act', CS', Act'', CS'') , CGuar(m, Act, CS, Act', CS') , (CInv(n, Act, CS) ∧ Act(m)) , COP(m, Inp; CS, Outp) ] (CInv(n, Act, CS) ∧ Idle(m, CS) ∧ Act(m));