| act0(m + 1) ↔ act(m + 1), Idle(m + 1, cs) ↔ Idle(m + 1, cs0), Idle(m + 1, cs) ∧ ¬ act(m + 1), CInv(n, act, cs), Rely(m + 1, cs, cs0), CInv(n, act0, cs0), m < n ⊦ n = 0, CInit(m + 1, act0, cs0) |
Idle(m + 1, cs), CInv(n, act, cs), Rely(m + 1, cs, cs0), CInv(n, act0, cs0), m < n, Idle(m + 1, cs0) ⊦ n = 0, CInit(m + 1, act0, cs0), act(m + 1), act0(m + 1)