| INDHYP-nat(2 + N), m0 ≠ 0, m ≤ n, act(m), Inv(cs0), Idle(m, cs0), Rely(m, cs0, cs0), CGuar(m, act, cs0, act(m; false), cs0), CRely(m, act(m; false), cs0, Act, CS), n < m0, m < m0, ∀ m0. n < m0 → Idle(m0, cs0) ∧ ¬ act(m0), ¬(Idle(m0, cs0) ∧ (m = m0 ∨ ¬ act(m0))) ⊦ [: Act, Inp, CS, Outp | (CRely(m, Act', CS', Act'', CS'') ∧ N = N'' + 1) , CGuar(m, Act, CS, Act', CS') , CInv(n, Act, CS) , { skip or {Act(m) := true; [PL CInv(n, Act, CS) ∧ Act(m) ∧ m ≤ n ∧ Idle(m, CS) → (CRely(m, Act', CS', Act'', CS'') ∧ (CInv(n, Act', CS') ∧ Act'(m) → CInv(n, Act'', CS'') ∧ Act''(m))) -+-> (last ⊃ CInv(n, Act, CS) ∧ Idle(m, CS) ∧ Act(m) ;CGuar(m, Act, CS, Act', CS') ∧ (CInv(n, Act, CS) ∧ Act(m) → CInv(n, Act', CS') ∧ Act'(m)) ) ]; Act(m) := false}} star ] CInv(n, Act, CS) |
Used terms: m0