| # sl = # al + 2, SetInv(sl.head.gstate, sl.head.lsf, sl.head.pcf), frag*(IOAut(setInit, setStep, setExt))(sl, al + ARetMember(tid, b) ') ⊦ (∃ n. n < # al ∧ al[n] = ADoMember(tid) ∧ (b ↔ sl[n].lsf(tid).le ∈ sl[n].gstate.set) ∧ sl[n].pcf(tid) = invMember ∧ (∀ m. n < m ∧ m < # al → al[m] ≠ τ ∧ al[m].tid ≠ tid)) ∨ (b ↔ sl.head.lsf(tid).lb) ∧ sl.head.pcf(tid) = retMember ∧ (∀ m. m < # al → al[m] ≠ τ ∧ al[m].tid ≠ tid) |