| S0 = ∅, S = ∅, ¬ done0, 0 = n - n0, INV(∅, ∅, S1, n0, source), INVR(∅, ∅, S1, n0, n, source, dest) ⊦ ⟪norfail0 := (done0 ⊃ some(n0); fail)⟫ norfail0 = some(n) |
S0 = ∅, S = ∅, ¬ done0, 0 = n - n0, INV(∅, ∅, S1, n0, source), INVR(∅, ∅, S1, n0, n, source, dest), ((done0 ⊃ some(n0); fail)) ≠ some(n) ⊦
[[CONCRETESIMPRULES : ()]]