| □ (Outf = Outf' ∧ Inpf = Inpf'), ∀ m. ¬(m ≤ n0 + 1 ∧ Gr(m)(S, S')), Gr(n0 + 1)(S, S') ∨ Gton(n0)(S, S'), GInv(S) → GInv(S') ⊦ blocked, last |
□ (Outf = Outf' ∧ Inpf = Inpf'), Gr(n0 + 1)(S, S') ∨ Gton(n0)(S, S'), GInv(S) → GInv(S'), ∀ m. ¬ m ≤ n0 + 1 ∨ ¬ Gr(m)(S, S') ⊦ blocked, last