| INDHYP-nat(n0 + 1), m ≤ n, act(m), CInv(n, act, cs), boolvar → n0 = n1 ∧ act = act0 ∧ cs = cs0 ∧ outp = outp0 ∧ inp = inp0, Idle(m, cs), CRely(m, act, cs, act, cs) ⊦ (act0 = (act(m; false)) ∧ outp = outp0 ∧ cs = cs0 ∧ inp = inp0 ∧ ¬ boolvar → CGuar(m, act, cs0, act(m; false), cs0) ∧ CInv(n, act(m; false), cs0)) ∧ ( act0 = (act(m; false)) ∧ outp = outp0 ∧ cs = cs0 ∧ inp = inp0 ∧ ¬ boolvar ∧ CGuar(m, act, cs0, act(m; false), cs0) ∧ CRely(m, act(m; false), cs0, Act, CS) ∧ n0 = N + 1 ∧ (CInv(n, act(m; false), cs0) → CInv(n, Act, CS)) → [: Act, Inp, CS, Outp | (CRely(m, Act', CS', Act'', CS'') ∧ N = N'' + 1) , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , { skip or {Act(m) := true; [PL CInv(n, Act, CS) ∧ Act(m) ∧ m ≤ n ∧ Idle(m, CS) → (CRely(m, Act', CS', Act'', CS'') ∧ (CInv(n, Act', CS') ∧ Act'(m) → CInv(n, Act'', CS'') ∧ Act''(m))) -+-> (last ⊃ CInv(n, Act, CS) ∧ Idle(m, CS) ∧ Act(m) ;CGuar(m, Act, CS, Act', CS') ∧ (CInv(n, Act, CS) ∧ Act(m) → CInv(n, Act', CS') ∧ Act'(m)) ) ]; Act(m) := false}} star ] CInv(n, Act, CS)) |
⊦ CRely(m, act1, cs1, act2, cs2) ↔ Rely(m, cs1, cs2) ∧ (Idle(m, cs1) ↔ Idle(m, cs2)) ∧ (act2(m) ↔ act1(m))
INDHYP-nat(n0 + 1), m ≤ n, act(m), CInv(n, act, cs), boolvar → n0 = n1 ∧ act = act0 ∧ cs = cs0 ∧ outp = outp0 ∧ inp = inp0, Idle(m, cs), Rely(m, cs, cs) ∧ (Idle(m, cs) ↔ Idle(m, cs)) ∧ (act(m) ↔ act(m)) ⊦ (act0 = (act(m; false)) ∧ outp = outp0 ∧ cs = cs0 ∧ inp = inp0 ∧ ¬ boolvar → CGuar(m, act, cs0, act(m; false), cs0) ∧ CInv(n, act(m; false), cs0)) ∧ ( act0 = (act(m; false)) ∧ outp = outp0 ∧ cs = cs0 ∧ inp = inp0 ∧ ¬ boolvar ∧ CGuar(m, act, cs0, act(m; false), cs0) ∧ CRely(m, act(m; false), cs0, Act, CS) ∧ n0 = N + 1 ∧ (CInv(n, act(m; false), cs0) → CInv(n, Act, CS)) → [: Act, Inp, CS, Outp | (CRely(m, Act', CS', Act'', CS'') ∧ N = N'' + 1) , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , { skip or {Act(m) := true; [PL CInv(n, Act, CS) ∧ Act(m) ∧ m ≤ n ∧ Idle(m, CS) → (CRely(m, Act', CS', Act'', CS'') ∧ (CInv(n, Act', CS') ∧ Act'(m) → CInv(n, Act'', CS'') ∧ Act''(m))) -+-> (last ⊃ CInv(n, Act, CS) ∧ Idle(m, CS) ∧ Act(m) ;CGuar(m, Act, CS, Act', CS') ∧ (CInv(n, Act, CS) ∧ Act(m) → CInv(n, Act', CS') ∧ Act'(m)) ) ]; Act(m) := false}} star ] CInv(n, Act, CS))
Used terms: cs, act, cs, act, m