| INDHYP-nat(n0 + 1), m ≤ n, act(m), CInv(n, act, cs0), Idle(m, cs0), Rely(m, cs0, cs0), ¬ Guar(m, cs0, cs0) ∨ ¬(Inv(cs0) ∧ (∀ m0. n < m0 → Idle(m0, cs0) ∧ ¬ act(m; false)(m0))) ⊦ |
INDHYP-nat(n0 + 1), m ≤ n, act(m), CInv(n, act, cs0), Idle(m, cs0), Rely(m, cs0, cs0), ¬ Inv(cs0) ∨ ¬(n < m0 → Idle(m0, cs0) ∧ (m = m0 ∨ ¬ act(m0))) ⊦
Used simplifier rules: g-refl: ⊦ Inv(cs) → (¬ Guar(m, cs, cs) ↔ false); from specification RGI-Conds