| act0(m0) ↔ act(m0), Idle(m0, cs) ↔ Idle(m0, cs0), Rely(m0, cs, cs0), Idle(m0, cs) ∧ ¬ act(m0), m0 < n, CInv(n, act, cs), CInv(n, act0, cs0), m < n, m0 ≤ m ⊦ n = 0, CInit(m0, act0, cs0) |
Rely(m0, cs, cs0), Idle(m0, cs), m0 < n, CInv(n, act, cs), CInv(n, act0, cs0), m < n, m0 ≤ m, Idle(m0, cs0) ⊦ n = 0, CInit(m0, act0, cs0), act(m0), act0(m0)