| INDHYP-nat(2 + N), m ≤ n, act(m), CInv(n, act, cs), CInv(n, act0, cs0), act0(m), CGuar(m, act, cs, act0, cs0), CRely(m, act0, cs0, Act, CS), CInv(n, Act, CS), ¬ Act(m), boolvar → N + 1 = n1 ∧ act = act0 ∧ cs = cs0 ∧ outp = outp0 ∧ inp = inp0 ⊦ [: Act, Inp, CS, Outp | (CRely(m, Act', CS', Act'', CS'') ∧ N = N'' + 1) , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , {Act(m) := false; { skip or {Act(m) := true; [PL CInv(n, Act, CS) ∧ Act(m) ∧ m ≤ n ∧ Idle(m, CS) → (CRely(m, Act', CS', Act'', CS'') ∧ (CInv(n, Act', CS') ∧ Act'(m) → CInv(n, Act'', CS'') ∧ Act''(m))) -+-> (last ⊃ CInv(n, Act, CS) ∧ Idle(m, CS) ∧ Act(m) ;CGuar(m, Act, CS, Act', CS') ∧ (CInv(n, Act, CS) ∧ Act(m) → CInv(n, Act', CS') ∧ Act'(m)) ) ]; Act(m) := false}} star} ] CInv(n, Act, CS) |
⊦ CRely(m, act1, cs1, act2, cs2) ↔ Rely(m, cs1, cs2) ∧ (Idle(m, cs1) ↔ Idle(m, cs2)) ∧ (act2(m) ↔ act1(m))
Used terms: CS, Act, cs0, act0, m