| ◇ last, ∃ Out. □ (Out = Outf(m) ∧ Outf' = (Outf(m; Out'))) ∧ [:S, Out | SEQ#(m, Inpf(m); S, Out)], GInv(S), Pr(m)(S) ⊦ (Ry(m)(S', S'') ∧ (GInv(S') → GInv(S''))) -+-> (last ⊃ Po(m)(S) ∧ GInv(S);Gr(m)(S, S') ∧ ¬ blocked ∧ (GInv(S) → GInv(S'))), ∃ Out0. [:S, Out0 | SEQ#(m, Inpf(m); S, Out0)] ∧ □ (Out0 = Outf(m) ∧ Out0' = Outf'(m)) |
◇ last, □ (Out = Outf(m) ∧ Outf' = (Outf(m; Out'))), [:S, Out | SEQ#(m, Inpf(m); S, Out)], GInv(S), Pr(m)(S) ⊦ (Ry(m)(S', S'') ∧ (GInv(S') → GInv(S''))) -+-> (last ⊃ Po(m)(S) ∧ GInv(S);Gr(m)(S, S') ∧ ¬ blocked ∧ (GInv(S) → GInv(S'))), ∃ Out0. [:S, Out0 | SEQ#(m, Inpf(m); S, Out0)] ∧ □ (Out0 = Outf(m) ∧ Out0' = Outf'(m))