□ (Outf = Outf' ∧ Inpf = Inpf'), ∀ m. m ≤ n0 + 1 → Ry(m)(S', S''), GInv(S') → GInv(S''), ¬ Ry(n0 + 1)(S', S'') ⊦