| m < n, CInv(n, act, cs), CInv(n, act0, cs0), m0 ≤ m, Guar(m0, cs, cs0) ∧ ((¬ act(m0) → Idle(m0, cs)) → ¬ act0(m0) → Idle(m0, cs0)) ∧ (∀ m1. m1 ≠ m0 → (act0(m1) ↔ act(m1)) ∧ (Idle(m1, cs) ↔ Idle(m1, cs0))), m0 < n ⊦ n = 0, Rely(m + 1, cs, cs0) ∧ (Idle(m + 1, cs) ↔ Idle(m + 1, cs0)) ∧ (act0(m + 1) ↔ act(m + 1)) |
m0 < n, Guar(m0, cs, cs0), m0 ≤ m, CInv(n, act0, cs0), CInv(n, act, cs), m < n, ∀ m1. m1 ≠ m0 → (act0(m1) ↔ act(m1)) ∧ (Idle(m1, cs) ↔ Idle(m1, cs0)), (¬ act(m0) → Idle(m0, cs)) → ¬ act0(m0) → Idle(m0, cs0) ⊦ n = 0, Rely(m + 1, cs, cs0) ∧ (Idle(m + 1, cs) ↔ Idle(m + 1, cs0)) ∧ (act0(m + 1) ↔ act(m + 1))