| INDHYP-nat(n0 + 1), m ≤ n, act(m), CInv(n, act, cs), boolvar → n0 = n1 ∧ act = act0 ∧ cs = cs0 ∧ outp = outp0 ∧ inp = inp0, Idle(m, cs), Rely(m, cs, cs) ∧ (Idle(m, cs) ↔ Idle(m, cs)) ∧ (act(m) ↔ act(m)) ⊦ (act0 = (act(m; false)) ∧ outp = outp0 ∧ cs = cs0 ∧ inp = inp0 ∧ ¬ boolvar → CGuar(m, act, cs0, act(m; false), cs0) ∧ CInv(n, act(m; false), cs0)) ∧ ( act0 = (act(m; false)) ∧ outp = outp0 ∧ cs = cs0 ∧ inp = inp0 ∧ ¬ boolvar ∧ CGuar(m, act, cs0, act(m; false), cs0) ∧ CRely(m, act(m; false), cs0, Act, CS) ∧ n0 = N + 1 ∧ (CInv(n, act(m; false), cs0) → CInv(n, Act, CS)) → [: Act, Inp, CS, Outp | (CRely(m, Act', CS', Act'', CS'') ∧ N = N'' + 1) , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , { skip or {Act(m) := true; [PL CInv(n, Act, CS) ∧ Act(m) ∧ m ≤ n ∧ Idle(m, CS) → (CRely(m, Act', CS', Act'', CS'') ∧ (CInv(n, Act', CS') ∧ Act'(m) → CInv(n, Act'', CS'') ∧ Act''(m))) -+-> (last ⊃ CInv(n, Act, CS) ∧ Idle(m, CS) ∧ Act(m) ;CGuar(m, Act, CS, Act', CS') ∧ (CInv(n, Act, CS) ∧ Act(m) → CInv(n, Act', CS') ∧ Act'(m)) ) ]; Act(m) := false}} star ] CInv(n, Act, CS)) |
INDHYP-nat(n0 + 1), m ≤ n, act(m), CInv(n, act, cs), Idle(m, cs), Rely(m, cs, cs), boolvar → n0 = n1 ∧ act = act0 ∧ cs = cs0 ∧ outp = outp0 ∧ inp = inp0 ⊦ (act0 = (act(m; false)) ∧ outp = outp0 ∧ cs = cs0 ∧ inp = inp0 ∧ ¬ boolvar → CGuar(m, act, cs0, act(m; false), cs0) ∧ CInv(n, act(m; false), cs0)) ∧ ( act0 = (act(m; false)) ∧ outp = outp0 ∧ cs = cs0 ∧ inp = inp0 ∧ ¬ boolvar ∧ CGuar(m, act, cs0, act(m; false), cs0) ∧ CRely(m, act(m; false), cs0, Act, CS) ∧ n0 = N + 1 ∧ (CInv(n, act(m; false), cs0) → CInv(n, Act, CS)) → [: Act, Inp, CS, Outp | (CRely(m, Act', CS', Act'', CS'') ∧ N = N'' + 1) , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , { skip or {Act(m) := true; [PL CInv(n, Act, CS) ∧ Act(m) ∧ m ≤ n ∧ Idle(m, CS) → (CRely(m, Act', CS', Act'', CS'') ∧ (CInv(n, Act', CS') ∧ Act'(m) → CInv(n, Act'', CS'') ∧ Act''(m))) -+-> (last ⊃ CInv(n, Act, CS) ∧ Idle(m, CS) ∧ Act(m) ;CGuar(m, Act, CS, Act', CS') ∧ (CInv(n, Act, CS) ∧ Act(m) → CInv(n, Act', CS') ∧ Act'(m)) ) ]; Act(m) := false}} star ] CInv(n, Act, CS))