<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.poFile org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="MAX_CASH" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="MIN_CASH" org.eventb.core.type="ℤ"/>
<org.eventb.core.poPredicate name="MIN_CASI" org.eventb.core.predicate="MIN_CASH∈ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1_CO.buc|org.eventb.core.contextFile#ATM_TD_1_CO|org.eventb.core.axiom#internal_element1"/>
<org.eventb.core.poPredicate name="MIN_CASJ" org.eventb.core.predicate="MAX_CASH∈ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1_CO.buc|org.eventb.core.contextFile#ATM_TD_1_CO|org.eventb.core.axiom#internal_element2"/>
<org.eventb.core.poPredicate name="MIN_CASK" org.eventb.core.predicate="MAX_CASH&gt;MIN_CASH" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1_CO.buc|org.eventb.core.contextFile#ATM_TD_1_CO|org.eventb.core.axiom#internal_element3"/>
<org.eventb.core.poIdentifier name="ACCOUNT" org.eventb.core.type="ℙ(ACCOUNT)"/>
<org.eventb.core.poIdentifier name="ATM" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="CARD" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ABSHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="accBalOnAtm" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCash" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCashA" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmDepAm" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="bal" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="cardAcct" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="cardInAtm" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="destAcc" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="destAccBalAtm" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="processedDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="srcAcc" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="srcAccBalAtm" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="transD" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="transT" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard" org.eventb.core.type="ℙ(CARD)"/>
<org.eventb.core.poPredicate name="respTransferFaim" org.eventb.core.predicate="bal∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__COKMDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="respTransferFain" org.eventb.core.predicate="cardAcct∈CARD ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwD24EeCAYsu3bd3gpA"/>
<org.eventb.core.poPredicate name="respTransferFaio" org.eventb.core.predicate="cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwT24EeCAYsu3bd3gpA"/>
<org.eventb.core.poPredicate name="respTransferFaip" org.eventb.core.predicate="validCard⊆CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwj24EeCAYsu3bd3gpA"/>
<org.eventb.core.poPredicate name="respTransferFaiq" org.eventb.core.predicate="∀c⦂CARD·c∈validCard⇒c∈ran(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__CQmeDqkEeCEXI9UeGRwry"/>
<org.eventb.core.poPredicate name="respTransferFair" org.eventb.core.predicate="transferOkA∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poPredicate name="respTransferFais" org.eventb.core.predicate="transferFailA∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poPredicate name="respTransferFait" org.eventb.core.predicate="cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poPredicate name="respTransferFaiu" org.eventb.core.predicate="atmCash∈ATM → ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.invariant#internal_element4"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ACCOUNT×ℤ))∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv10/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ACCOUNT×ℤ))∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv10\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×BOOL))∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))⊆(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))⊆(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀c⦂CARD·c∈ran(∅ ⦂ ℙ(ATM×CARD))⇒c∈(∅ ⦂ ℙ(CARD))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_2.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_2.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_2·inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/Deposit_2·inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_2.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/Deposit_2.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD16"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_2.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/Deposit_2.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_2.inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/Deposit_2.inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_2.inv10/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="ATM × {0}∈ATM → ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/Deposit_2.inv10\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD20"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_2.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ACCOUNT×ℤ))∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/Deposit_2.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD21"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_2.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀c⦂CARD·c∈ran(∅ ⦂ ℙ(ATM×CARD))⇒c∈(∅ ⦂ ℙ(CARD))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/Deposit_2.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD22"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_1.INITIALISATION.act6/SIM" org.eventb.core.accurate="true" org.eventb.core.poDesc="Action simulation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="ATM × {0}=ATM × {0}" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1|org.eventb.core.action#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1|org.eventb.core.action#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/Deposit_1.INITIALISATION.act6\/SIM|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_1.INITIALISATION.act7/SIM" org.eventb.core.accurate="true" org.eventb.core.poDesc="Action simulation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))=(∅ ⦂ ℙ(ATM×CARD))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1|org.eventb.core.action#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element1|org.eventb.core.action#internal_element4"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_1.INITIALISATION.act7\/SIM|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaim" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="processedDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOkA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="destAccBalAtm'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="cardAcct'" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="respTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmCash'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="transferFailA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmDepAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="reqDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="srcAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="accBalOnAtm'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="cardInAtm'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="respTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="srcAccBalAtm'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="destAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="transT'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard'" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaim" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaim" org.eventb.core.poStamp="1"/>
<org.eventb.core.poSequent name="ReqTransfer/BalTransfer_2.ReqTransfer.grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFain,"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFain,"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/BalTransfer_2.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer∪{a}∈ℙ(transT∪{a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#ReqTransfer\/BalTransfer_2.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/BalTransfer_2.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk∈ℙ(transT∪{a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#ReqTransfer\/BalTransfer_2.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/BalTransfer_2.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail∈ℙ(transT∪{a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#ReqTransfer\/BalTransfer_2.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/BalTransfer_2.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="trAmount{a ↦ am}∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#ReqTransfer\/BalTransfer_2.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/BalTransfer_2.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="srcAcc{a ↦ src_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#ReqTransfer\/BalTransfer_2.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/BalTransfer_2.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="destAcc{a ↦ dest_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#ReqTransfer\/BalTransfer_2.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/BalTransfer_2.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transT∪{a},reqTransfer∪{a},transferOk,transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#ReqTransfer\/BalTransfer_2.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFain" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="srcAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="destAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="transT'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFain," org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFain" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element6"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFain" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFain," org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="a∉transT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element8"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_2.TransferOK.grd12/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio-"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio-"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_2.TransferOK.grd14/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio\/"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(srcAcc)∧srcAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio\/"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_2.TransferOK.grd15/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio0"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(destAcc)∧destAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_2.TransferOK.grd16/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio1"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmount)∧trAmount∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_2.TransferOK.grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio3"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="src_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_2.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer ∖ {a}∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferOK\/BalTransfer_2.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_2.inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferOk∪{a}⊆transferOkA∪{a}" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferOK\/BalTransfer_2.inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_2.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transT,reqTransfer ∖ {a},transferOk∪{a},transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferOK\/BalTransfer_2.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/grd3/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxRjqkEeCEXI9UeGRwry"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxRjqkEeCEXI9UeGRwry"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferOK\/grd3\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_2.TransferOK.act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="dest_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ∧src_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaio" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferOkA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio-" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaio" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="c ↦ src_ac∈cardAcct" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈dom(srcAcc)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈dom(destAcc)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element6"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio/" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio-" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="a∈dom(trAmount)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element8"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio0" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio\/" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="src_ac=srcAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element9"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio1" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio0" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="dest_ac=destAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element10"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaio3" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio1" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="am=trAmount(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element11"/>
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="src_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element19"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaio" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaio3" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="am≤bal(src_ac)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="a∈reqTransfer" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element13"/>
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="⊤" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element14"/>
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="dest_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element15"/>
<org.eventb.core.poPredicate name="PRD16" org.eventb.core.predicate="⊤" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element16"/>
<org.eventb.core.poPredicate name="PRD17" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element17"/>
<org.eventb.core.poPredicate name="PRD18" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element18"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RespTransferOk/BalTransfer_2.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk∪{a}∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#RespTransferOk\/BalTransfer_2.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferOk/BalTransfer_2.inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferOk ∖ {a}⊆transferOkA" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#RespTransferOk\/BalTransfer_2.inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferOk/BalTransfer_2.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transT,reqTransfer,transferOk ∖ {a},transferFail,respTransferOk∪{a},respTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#RespTransferOk\/BalTransfer_2.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaip" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaip" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaip" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∉transferFail" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈transferOk" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_2.TransferFails.grd14/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq,"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(srcAcc)∧srcAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq,"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_2.TransferFails.grd16/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq."/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmount)∧trAmount∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq."/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_2.TransferFails.grd15/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq\/"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(destAcc)∧destAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq\/"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_2.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer ∖ {a}∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferFails\/BalTransfer_2.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_2.inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferFail∪{a}⊆transferFailA∪{a}" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferFails\/BalTransfer_2.inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_2.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transT,reqTransfer ∖ {a},transferOk,transferFail∪{a},respTransferOk,respTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferFails\/BalTransfer_2.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_1.transferFails.grd3/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferFails\/BalTransfer_1.transferFails.grd3\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaiq" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="transferFailA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiq," org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaiq" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(destAcc)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a∈dom(srcAcc)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element4"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiq." org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq," org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="src_ac=srcAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="a∈dom(trAmount)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element7"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiq/" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq." org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="am=trAmount(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element8"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaiq" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiq\/" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="dest_ac=destAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="a∉transferFail" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element11"/>
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="a∈reqTransfer" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element13"/>
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="a∉transferOk" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element14"/>
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="dest_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element15"/>
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="src_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element16"/>
<org.eventb.core.poPredicate name="PRD16" org.eventb.core.predicate="am&gt;bal(src_ac)∨c ↦ src_ac∉cardAcct" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element17"/>
<org.eventb.core.poPredicate name="PRD17" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element18"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RespTransferFail/BalTransfer_2.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail∪{a}∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#RespTransferFail\/BalTransfer_2.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferFail/BalTransfer_2.inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferFail ∖ {a}⊆transferFailA" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#RespTransferFail\/BalTransfer_2.inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferFail/BalTransfer_2.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transT,reqTransfer,transferOk,transferFail ∖ {a},respTransferOk,respTransferFail∪{a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#RespTransferFail\/BalTransfer_2.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFair" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFair" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFair" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∉transferOk" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element6|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈transferFail" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element6|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferOKAtm/BalTransfer_2.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer∈ℙ(transT ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferOKAtm\/BalTransfer_2.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/BalTransfer_2.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk ∖ {a}∈ℙ(transT ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferOKAtm\/BalTransfer_2.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/BalTransfer_2.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail∈ℙ(transT ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferOKAtm\/BalTransfer_2.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/BalTransfer_2.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transOkAtm{a ↦ TRUE}∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferOKAtm\/BalTransfer_2.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/BalTransfer_2.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transT ∖ {a},reqTransfer,transferOk,transferFail,respTransferOk ∖ {a},respTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferOKAtm\/BalTransfer_2.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFais" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="respTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="transT'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFais" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFais" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∉respTransferFail" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈respTransferOk" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferFailsAtm/BalTransfer_2.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer∈ℙ(transT ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferFailsAtm\/BalTransfer_2.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/BalTransfer_2.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk∈ℙ(transT ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferFailsAtm\/BalTransfer_2.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/BalTransfer_2.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail ∖ {a}∈ℙ(transT ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferFailsAtm\/BalTransfer_2.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/BalTransfer_2.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transOkAtm{a ↦ FALSE}∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferFailsAtm\/BalTransfer_2.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/BalTransfer_2.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transT ∖ {a},reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#TransferFailsAtm\/BalTransfer_2.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFait" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="respTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="transT'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFait" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFait" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∉respTransferOk" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element8|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈respTransferFail" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element8|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="reqDeposit/Deposit_2.reqDeposit.grd5/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiu)"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiu)"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="reqDeposit/Deposit_2·inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqDep∪{a}∈ℙ(transD∪{a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#reqDeposit\/Deposit_2·inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="reqDeposit/Deposit_2.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respDep∈ℙ(transD∪{a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#reqDeposit\/Deposit_2.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD16"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="reqDeposit/Deposit_2.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmDepAm{a ↦ am}∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#reqDeposit\/Deposit_2.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="reqDeposit/Deposit_2.inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transD∪{a},reqDep∪{a},respDep)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#reqDeposit\/Deposit_2.inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaiu" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmDepAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="reqDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiu)" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaiu" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="c∈ran(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element4"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaiu" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiu)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="cardInAtm(a)=c" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∉transD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element6"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="depositB/Deposit_2.depositB.grd12/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiv)"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmDepAm)∧atmDepAm∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiv)"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_2.depositB.grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiv*"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiv*"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/grd4/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiv"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw|org.eventb.core.guard#__CPYVjqkEeCEXI9UeGRwry"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw|org.eventb.core.guard#__CPYVjqkEeCEXI9UeGRwry"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#depositB\/grd4\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_2.depositB.act2/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiv"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCash)∧atmCash∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.action#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.action#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiv"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_2.depositB.act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiv"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="acc∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiv"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaiv" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="processedDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmCash'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiv)" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaiv" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(atmDepAm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaiv*" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiv)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="atmDepAm(a)=am" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element3"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaiv" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaiv*" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="cardInAtm(a)=c" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈reqDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="a∈dom(atmCash)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="c ↦ acc∈cardAcct" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="acc∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element11"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="respDeposit/Deposit_2·inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiw"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqDep ∖ {a}∈ℙ(transD)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element11"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#respDeposit\/Deposit_2·inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="respDeposit/Deposit_2.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiw"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respDep∪{a}∈ℙ(transD)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element11"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#respDeposit\/Deposit_2.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD16"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="respDeposit/Deposit_2.inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiw"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transD,reqDep ∖ {a},respDep∪{a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element11"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#respDeposit\/Deposit_2.inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaiw" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="processedDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="respDep'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaiw" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaiw" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈reqDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈processedDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="depositATM/Deposit_2.depositATM.grd10/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaix'"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmDepAm)∧atmDepAm∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaix'"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositATM/Deposit_2·inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqDep∈ℙ(transD ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#depositATM\/Deposit_2·inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositATM/Deposit_2.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respDep ∖ {a}∈ℙ(transD ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#depositATM\/Deposit_2.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD16"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositATM/Deposit_2.inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(transD ∖ {a},reqDep,respDep ∖ {a})" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#depositATM\/Deposit_2.inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositATM/Deposit_2.inv10/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmCashA{a ↦ atmCashA(a)+am}∈ATM → ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poSequent#depositATM\/Deposit_2.inv10\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD20"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositATM/Deposit_2.depositATM.act2/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaix"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaix" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respDep'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaix'" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaix" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈dom(atmDepAm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaix" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaix'" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="atmDepAm(a)=am" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈respDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element3"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ALLHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_2.bpo|org.eventb.core.poFile#ATM_TD_2|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="transT∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="reqTransfer∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="respTransferOk∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="respTransferFail∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="srcAccBalAtm∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="destAccBalAtm∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="srcAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="destAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="transferOk⊆transferOkA" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="transferFail⊆transferFailA" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="∀c⦂CARD·c∈ran(cardInAtm)⇒c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="partition(transT,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="transD∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="reqDep∈ℙ(transD)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poPredicate name="PRD16" org.eventb.core.predicate="respDep∈ℙ(transD)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poPredicate name="PRD17" org.eventb.core.predicate="processedDep∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poPredicate name="PRD18" org.eventb.core.predicate="atmDepAm∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poPredicate name="PRD19" org.eventb.core.predicate="partition(transD,reqDep,respDep)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poPredicate name="PRD20" org.eventb.core.predicate="atmCashA∈ATM → ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poPredicate name="PRD21" org.eventb.core.predicate="accBalOnAtm∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poPredicate name="PRD22" org.eventb.core.predicate="∀c⦂CARD·c∈ran(cardInAtm)⇒c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element22"/>
</org.eventb.core.poPredicateSet>
</org.eventb.core.poFile>
