| CInv(n, Act, CS), Idle(m, CS), m ≤ n, m0 = m ⊦ [: Act, Inp, CS, Outp | CRely(m, Act', CS', Act'', CS'') , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , { skip or {Act(m0) := true; [PL CInv(n, Act, CS) ∧ Act(m0) ∧ m0 ≤ n ∧ Idle(m0, CS) → (CRely(m0, Act', CS', Act'', CS'') ∧ (CInv(n, Act', CS') ∧ Act'(m0) → CInv(n, Act'', CS'') ∧ Act''(m0))) -+-> (last ⊃ CInv(n, Act, CS) ∧ Idle(m0, CS) ∧ Act(m0) ;CGuar(m0, Act, CS, Act', CS') ∧ (CInv(n, Act, CS) ∧ Act(m0) → CInv(n, Act', CS') ∧ Act'(m0)) ) ]; Act(m0) := false}} star ] CInv(n, Act, CS) |
CInv(n, Act, CS), Idle(m, CS), m ≤ n ⊦ [: Act, Inp, CS, Outp | CRely(m, Act', CS', Act'', CS'') , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , { skip or {Act(m) := true; [PL CInv(n, Act, CS) ∧ Act(m) ∧ m ≤ n ∧ Idle(m, CS) → (CRely(m, Act', CS', Act'', CS'') ∧ (CInv(n, Act', CS') ∧ Act'(m) → CInv(n, Act'', CS'') ∧ Act''(m))) -+-> (last ⊃ CInv(n, Act, CS) ∧ Idle(m, CS) ∧ Act(m) ;CGuar(m, Act, CS, Act', CS') ∧ (CInv(n, Act, CS) ∧ Act(m) → CInv(n, Act', CS') ∧ Act'(m)) ) ]; Act(m) := false}} star ] CInv(n, Act, CS)