| m0 < n, Guar(m + 1, cs, cs0), Inv(cs0), CInv(n, act, cs), m < n, m0 ≤ m, ∀ m0. n < m0 → Idle(m0, cs0) ∧ ¬ act0(m0), ∀ m0. m0 ≠ m + 1 → (act0(m0) ↔ act(m0)) ∧ (Idle(m0, cs) ↔ Idle(m0, cs0)), (¬ act(m + 1) → Idle(m + 1, cs)) → ¬ act0(m + 1) → Idle(m + 1, cs0) ⊦ n = 0, m + 1 = m0, Inv(cs), Rely(m0, cs, cs0) ∧ (Idle(m0, cs) ↔ Idle(m0, cs0)) ∧ (act0(m0) ↔ act(m0)) |
⊦ CInv(m, act, cs) ↔ Inv(cs) ∧ (∀ m0. m < m0 → Idle(m0, cs) ∧ ¬ act(m0))
Used terms: cs, act, n