| m0 ≤ m, m < n, CInv(n, act, cs), CInv(n, act0, cs0), CGuar(m + 1, act, cs, act0, cs0), m0 < n ⊦ n = 0, CRely(m0, act, cs, act0, cs0) |
⊦ CGuar(m, act, cs, act0, cs0) ↔ Guar(m, cs, cs0) ∧ ((¬ act(m) → Idle(m, cs)) → ¬ act0(m) → Idle(m, cs0)) ∧ (∀ m0. m0 ≠ m → (act0(m0) ↔ act(m0)) ∧ (Idle(m0, cs) ↔ Idle(m0, cs0)))
m0 ≤ m, m < n, CInv(n, act, cs), CInv(n, act0, cs0), Guar(m + 1, cs, cs0) ∧ ((¬ act(m + 1) → Idle(m + 1, cs)) → ¬ act0(m + 1) → Idle(m + 1, cs0)) ∧ (∀ m0. m0 ≠ m + 1 → (act0(m0) ↔ act(m0)) ∧ (Idle(m0, cs) ↔ Idle(m0, cs0))), m0 < n ⊦ n = 0, CRely(m0, act, cs, act0, cs0)
Used terms: cs0, act0, cs, act, m + 1