<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.poFile org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="CTXHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="ACCOUNT" org.eventb.core.type="ℙ(ACCOUNT)"/>
<org.eventb.core.poIdentifier name="CARD" org.eventb.core.type="ℙ(CARD)"/>
<org.eventb.core.poIdentifier name="ATM" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ABSHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="bal" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="cardAcct" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="cardInAtm" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="destAcc" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="destAccBalAtm" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="srcAcc" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="srcAccBalAtm" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard" org.eventb.core.type="ℙ(CARD)"/>
<org.eventb.core.poPredicate name="respTransferFaim" org.eventb.core.predicate="bal∈ℙ(ACCOUNT × ℤ)" org.eventb.core.source="/Transfer/BalTransfer_0.bum|org.eventb.core.machineFile#BalTransfer_0|org.eventb.core.invariant#*"/>
<org.eventb.core.poPredicate name="respTransferFain" org.eventb.core.predicate="validCard∈ℙ(CARD)" org.eventb.core.source="/Transfer/BalTransfer_0.bum|org.eventb.core.machineFile#BalTransfer_0|org.eventb.core.invariant#+"/>
<org.eventb.core.poPredicate name="respTransferFaio" org.eventb.core.predicate="cardAcct∈ℙ(CARD × ACCOUNT)" org.eventb.core.source="/Transfer/BalTransfer_0.bum|org.eventb.core.machineFile#BalTransfer_0|org.eventb.core.invariant#,"/>
<org.eventb.core.poPredicate name="respTransferFaip" org.eventb.core.predicate="bal∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/Transfer/BalTransfer_0.bum|org.eventb.core.machineFile#BalTransfer_0|org.eventb.core.invariant#-"/>
<org.eventb.core.poPredicate name="respTransferFaiq" org.eventb.core.predicate="cardAcct∈CARD ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_0.bum|org.eventb.core.machineFile#BalTransfer_0|org.eventb.core.invariant#."/>
<org.eventb.core.poPredicate name="respTransferFair" org.eventb.core.predicate="validCard⊆CARD" org.eventb.core.source="/Transfer/BalTransfer_0.bum|org.eventb.core.machineFile#BalTransfer_0|org.eventb.core.invariant#\/"/>
<org.eventb.core.poPredicate name="respTransferFais" org.eventb.core.predicate="transferOkA∈ℙ(ATM)" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.invariant#_FRFscAY9EeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="respTransferFait" org.eventb.core.predicate="transferFailA∈ℙ(ATM)" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.invariant#_btYp4w0NEeCDh_sKUTn4vw"/>
<org.eventb.core.poPredicate name="respTransferFaiu" org.eventb.core.predicate="cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.invariant#_eHjV0uwJEd-V6twkc9HfSy"/>
<org.eventb.core.poPredicate name="respTransferFaiv" org.eventb.core.predicate="transferOkA∩transferFailA=(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.invariant#_eHjV0uwJEd-V6twkc9HfSz"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="INITIALISATION/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ACCOUNT×ℤ))∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQofifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQofifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv10/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ACCOUNT×ℤ))∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qw3sPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qw3sPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv10\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×BOOL))∈ATM ⇸ BOOL" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoABNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoABNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoARNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoARNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))=(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))=(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀c⦂CARD·c∈ran(∅ ⦂ ℙ(ATM×CARD))⇒c∈(∅ ⦂ ℙ(CARD))" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfSx"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfSx"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM))" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/act7/SIM" org.eventb.core.accurate="true" org.eventb.core.poDesc="Action simulation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))=(∅ ⦂ ℙ(ATM×CARD))" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'|org.eventb.core.action#_ZZUNYRFeEeCibs8Q1rasEB"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'|org.eventb.core.action#_ZZUNYRFeEeCibs8Q1rasEB"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/act7\/SIM|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaim" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOkA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="destAccBalAtm'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="cardAcct'" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFailA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="srcAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardInAtm'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="respTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="srcAccBalAtm'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="destAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="validCard'" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaim" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaim" org.eventb.core.poStamp="1"/>
<org.eventb.core.poSequent name="ReqTransfer/grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFain,"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q8d4PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q8d4PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFain,"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer∪{a}∈ℙ(trans∪{a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk∈ℙ(trans∪{a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail∈ℙ(trans∪{a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="trAmount{a ↦ am}∈ATM ⇸ ℕ1" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="srcAcc{a ↦ src_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoABNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoABNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="destAcc{a ↦ dest_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoARNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoARNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans∪{a},reqTransfer∪{a},transferOk,transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFain" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="srcAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="destAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFain," org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFain" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q6BofifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q6osPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_CQhrURNrEeCky5OpqeHuBR"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q7PwPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q7PwfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_CQhrURNrEeCky5OpqeHuBT"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFain" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFain," org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q8d4PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="a∉trans" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q9E8PifEd-KyJ1Ywzx_fQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferOK/grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio."/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="src_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#3"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio."/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/grd12/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio0"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_s6E5gOwKEd-V6twkc9HfSy"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_s6E5gOwKEd-V6twkc9HfSy"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/grd14/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio4"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(srcAcc)∧srcAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_-x5twIUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_-x5twIUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/grd15/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio5"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(destAcc)∧destAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_-x6U0IUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_-x6U0IUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/grd16/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio6"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmount)∧trAmount∈ATM ⇸ ℤ" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_UgauENxTEd-xDIzZgjow2w"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_UgauENxTEd-xDIzZgjow2w"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer ∖ {a}∈ℙ(trans)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOK\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferOk∪{a}=transferOkA∪{a}" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOK\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans,reqTransfer ∖ {a},transferOk∪{a},transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOK\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/grd3/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Transfer/BalTransfer_0.bum|org.eventb.core.machineFile#BalTransfer_0|org.eventb.core.event#1|org.eventb.core.guard#-"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_0.bum|org.eventb.core.machineFile#BalTransfer_0|org.eventb.core.event#1|org.eventb.core.guard#-"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOK\/grd3\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/grd12/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∉transferOkA∪transferFailA" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_s6E5gOwKEd-V6twkc9HfSz"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_s6E5gOwKEd-V6twkc9HfSz"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOK\/grd12\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="dest_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ∧src_ac∈dom(bal)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.action#4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.action#4"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaio" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferOkA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio." org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaio" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#+"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#,"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="c ↦ src_ac∈cardAcct" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#."/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#\/"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="src_ac∈dom(bal)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#0"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="dest_ac∈dom(bal)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#1"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio0" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio." org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="am≤bal(src_ac)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#3"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_s6E5gOwKEd-V6twkc9HfSx"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio4" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio0" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_s6E5gOwKEd-V6twkc9HfSy"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="a∈dom(trAmount)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_B_jx8PiiEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="a∈dom(srcAcc)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_s6E5gOwKEd-V6twkc9HfSz"/>
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="a∈dom(destAcc)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_s6E5gOwKEd-V6twkc9HfS{"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio5" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio4" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="src_ac=srcAcc(a)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_-x5twIUfEd-Yw_1iUmuWTQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio6" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio5" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="dest_ac=destAcc(a)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_-x6U0IUfEd-Yw_1iUmuWTQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaio" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio6" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="am=trAmount(a)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_UgauENxTEd-xDIzZgjow2w"/>
<org.eventb.core.poPredicate name="PRD16" org.eventb.core.predicate="a∈reqTransfer" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_4rDyoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD17" org.eventb.core.predicate="a∉transferOk∪transferFail" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_-x4foYUfEd-Yw_1iUmuWTQ|org.eventb.core.guard#_fWsvIAZYEeC9GJs-VyssYw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RespTransferOk/inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk∪{a}∈ℙ(trans)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferOk\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferOk/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferOk ∖ {a}=transferOkA ∖ {a}" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferOk\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferOk/inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferFail=transferFailA ∖ {a}" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferOk\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferOk/inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk ∖ {a},transferFail,respTransferOk∪{a},respTransferFail)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferOk\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferOk/grd2/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈transferOkA∪transferFailA" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{|org.eventb.core.guard#)"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{|org.eventb.core.guard#)"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferOk\/grd2\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaip" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferOkA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFailA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaip" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaip" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#("/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈transferOk" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4rHdAfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∉transferFail" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_fWvycAZYEeC9GJs-VyssYx"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferFails/grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq-"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="src_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2-wJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2-wJEd-V6twkc9HfSw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq-"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/grd12/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq\/"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfS~"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfS~"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq\/"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/grd14/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq3"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(srcAcc)∧srcAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2OwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2OwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/grd15/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq4"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(destAcc)∧destAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2ewJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2ewJEd-V6twkc9HfSw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/grd16/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq5"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmount)∧trAmount∈ATM ⇸ ℤ" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer ∖ {a}∈ℙ(trans)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFails\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferFail∪{a}=transferFailA∪{a}" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFails\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans,reqTransfer ∖ {a},transferOk,transferFail∪{a},respTransferOk,respTransferFail)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFails\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/grd3/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfSy"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfSy"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFails\/grd3\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/grd12/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∉transferOkA∪transferFailA" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfT'"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfT'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFails\/grd12\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaiq" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="transferFailA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiq-" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaiq" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#internal1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#internal2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="src_ac∈dom(bal)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfS{"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="dest_ac∈dom(bal)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfS\|"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV3OwJEd-V6twkc9HfSw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiq/" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq-" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="am&gt;bal(src_ac)∨c ↦ src_ac∉cardAcct" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2-wJEd-V6twkc9HfSw"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfS}"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiq3" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq\/" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfS~"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="a∈dom(trAmount)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fW15EAZYEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="a∈dom(destAcc)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfT("/>
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="a∈dom(srcAcc)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_s6E5guwKEd-V6twkc9HfT'"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiq4" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq3" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="src_ac=srcAcc(a)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2OwJEd-V6twkc9HfSw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiq5" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq4" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="dest_ac=destAcc(a)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2ewJEd-V6twkc9HfSw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaiq" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq5" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="am=trAmount(a)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="a∈reqTransfer" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_3G4fkAJiEeC3zaFk15pOHQ"/>
<org.eventb.core.poPredicate name="PRD16" org.eventb.core.predicate="a∉transferOk∪transferFail" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fW2gIAZYEeC9GJs-VyssYw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RespTransferFail/inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail∪{a}∈ℙ(trans)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferFail\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferFail/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferOk=transferOkA ∖ {a}" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferFail\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferFail/inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferFail ∖ {a}=transferFailA ∖ {a}" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferFail\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferFail/inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail ∖ {a},respTransferOk,respTransferFail∪{a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferFail\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferFail/grd2/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈transferOkA∪transferFailA" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{|org.eventb.core.guard#)"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Transfer/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfS{|org.eventb.core.guard#)"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferFail\/grd2\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFair" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOkA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFailA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFair" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFair" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#("/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈transferFail" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4rQm8PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∉transferOk" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_fW5jcAZYEeC9GJs-VyssYx"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferOKAtm/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer∈ℙ(trans ∖ {a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk ∖ {a}∈ℙ(trans ∖ {a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail∈ℙ(trans ∖ {a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transOkAtm{a ↦ TRUE}∈ATM ⇸ BOOL" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans ∖ {a},reqTransfer,transferOk,transferFail,respTransferOk ∖ {a},respTransferFail)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFais" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFais" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFais" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈respTransferOk" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4rhssPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∉respTransferFail" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_gRnMIAZAEeC9GJs-VyssYx"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferFailsAtm/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer∈ℙ(trans ∖ {a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk∈ℙ(trans ∖ {a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail ∖ {a}∈ℙ(trans ∖ {a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transOkAtm{a ↦ FALSE}∈ATM ⇸ BOOL" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans ∖ {a},reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail ∖ {a})" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFait" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="respTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFait" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFait" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈respTransferFail" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4rnMQPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∉respTransferOk" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_eHtG0ewJEd-V6twkc9HfSx"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="Deposit/act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="acc∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#2|org.eventb.core.action#9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#2|org.eventb.core.action#9"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiu"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaiu" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaiu" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaiu" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#2|org.eventb.core.guard#4"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="acc∈dom(bal)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#2|org.eventb.core.guard#5"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#2|org.eventb.core.guard#6"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#2|org.eventb.core.guard#7"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c ↦ acc∈cardAcct" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#2|org.eventb.core.guard#8"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ALLHYP" org.eventb.core.parentSet="/Transfer/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="trans∈ℙ(ATM)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfSz"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="reqTransfer∈ℙ(trans)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="respTransferOk∈ℙ(trans)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="respTransferFail∈ℙ(trans)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="srcAccBalAtm∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQofifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="destAccBalAtm∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qw3sPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="srcAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoABNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="destAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQeoARNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="transferOk=transferOkA" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="transferFail=transferFailA" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="∀c⦂CARD·c∈ran(cardInAtm)⇒c∈validCard" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfSx"/>
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/Transfer/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
</org.eventb.core.poPredicateSet>
</org.eventb.core.poFile>
