| INDHYP-nat(n0 + 1), m ≤ n, act(m), CInv(n, act, cs0), Idle(m, cs0), Rely(m, cs0, cs0), ¬ Guar(m, cs0, cs0) ∨ ¬ CInv(n, act(m; false), cs0) ⊦ |
⊦ CInv(m, act, cs) ↔ Inv(cs) ∧ (∀ m0. m < m0 → Idle(m0, cs) ∧ ¬ act(m0))
INDHYP-nat(n0 + 1), m ≤ n, act(m), CInv(n, act, cs0), Idle(m, cs0), Rely(m, cs0, cs0), ¬ Guar(m, cs0, cs0) ∨ ¬(Inv(cs0) ∧ (∀ m0. n < m0 → Idle(m0, cs0) ∧ ¬ act(m; false)(m0))) ⊦
Used terms: cs0, act(m; false), n