| Inv(cs0), CInv(n0, act, cs), Guar(n, cs, cs0), ∀ m0. n0 < m0 → Idle(m0, cs0) ∧ ¬ act0(m0), ∀ m0. m0 ≠ n → (act0(m0) ↔ act(m0)) ∧ (Idle(m0, cs) ↔ Idle(m0, cs0)), (¬ act(n) → Idle(n, cs)) → ¬ act0(n) → Idle(n, cs0) ⊦ m = n, Inv(cs), Rely(m, cs, cs0) ∧ (Idle(m, cs) ↔ Idle(m, cs0)) ∧ (act0(m) ↔ act(m)) |
⊦ CInv(m, act, cs) ↔ Inv(cs) ∧ (∀ m0. m < m0 → Idle(m0, cs) ∧ ¬ act(m0))
Used terms: cs, act, n0