| INDHYP-nat(n0), CInv(n, act, cs), Idle(m, cs), m ≤ n, boolvar → n0 = n1 ∧ act = act0 ∧ cs = cs0 ∧ outp = outp0 ∧ inp = inp0, ¬(act0 = (act(m; true)) ∧ outp = outp0 ∧ cs = cs0 ∧ inp = inp0 ∧ ¬ boolvar → CGuar(m, act, cs0, act(m; true), cs0) ∧ CInv(n, act(m; true), cs0)) ⊦ |
INDHYP-nat(n0), CInv(n, act, cs0), Idle(m, cs0), m ≤ n, ¬(CGuar(m, act, cs0, act(m; true), cs0) ∧ CInv(n, act(m; true), cs0)) ⊦