| □ (Outf = Outf' ∧ Inpf = Inpf'), GInv(S) → GInv(S'), ∀ m. ¬ m ≤ n0 + 1 ∨ ¬ Gr(m)(S, S'), m ≤ n0 ∧ Gr(m)(S, S') ⊦ blocked, last |
□ (Outf = Outf' ∧ Inpf = Inpf'), Gr(m)(S, S'), m ≤ n0, ∀ m. ¬ m ≤ n0 + 1 ∨ ¬ Gr(m)(S, S'), GInv(S) → GInv(S') ⊦ last, blocked