<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.machineFile ch.ethz.eventb.decomposition.decomposed="true" org.eventb.core.configuration="ch.ethz.eventb.decomposition.mchBase" org.eventb.core.generated="true" version="5">
<org.eventb.core.variable name="'" org.eventb.core.identifier="bal"/>
<org.eventb.core.variable name="(" org.eventb.core.identifier="cardAcct"/>
<org.eventb.core.variable name=")" org.eventb.core.identifier="atmCash"/>
<org.eventb.core.variable name="*" org.eventb.core.identifier="withdrawOk"/>
<org.eventb.core.variable name="+" org.eventb.core.identifier="withdrawFail"/>
<org.eventb.core.variable name="," org.eventb.core.identifier="atmWDAmB"/>
<org.eventb.core.variable name="-" org.eventb.core.identifier="cardInAtmB"/>
<org.eventb.core.variable name="." org.eventb.core.identifier="recvReqWD"/>
<org.eventb.core.invariant name="/" org.eventb.core.label="typing_recvReqWD" org.eventb.core.predicate="recvReqWD ∈ ℙ(ATM)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="0" org.eventb.core.label="typing_bal" org.eventb.core.predicate="bal ∈ ℙ(ACCOUNT × ℤ)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="1" org.eventb.core.label="typing_cardInAtmB" org.eventb.core.predicate="cardInAtmB ∈ ℙ(ATM × CARD)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="2" org.eventb.core.label="typing_withdrawOk" org.eventb.core.predicate="withdrawOk ∈ ℙ(ATM)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="3" org.eventb.core.label="typing_withdrawFail" org.eventb.core.predicate="withdrawFail ∈ ℙ(ATM)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="4" org.eventb.core.label="typing_atmCash" org.eventb.core.predicate="atmCash ∈ ℙ(ATM × ℤ)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="5" org.eventb.core.label="typing_atmWDAmB" org.eventb.core.predicate="atmWDAmB ∈ ℙ(ATM × ℤ)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="6" org.eventb.core.label="typing_cardAcct" org.eventb.core.predicate="cardAcct ∈ ℙ(CARD × ACCOUNT)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="7" org.eventb.core.label="Withdraw_0_IntegralATM_0_inv1" org.eventb.core.predicate="bal ∈ ACCOUNT ⇸ ℕ"/>
<org.eventb.core.invariant name="8" org.eventb.core.label="Withdraw_0_IntegralATM_0_inv2" org.eventb.core.predicate="cardAcct ∈ CARD ⇸ ACCOUNT"/>
<org.eventb.core.invariant name="9" org.eventb.core.label="Withdraw_1_inv3" org.eventb.core.predicate="atmCash ∈ ATM → ℕ"/>
<org.eventb.core.invariant name=":" org.eventb.core.label="Withdraw_2_inv16" org.eventb.core.predicate="cardAcct ∈ CARD ↔ ACCOUNT"/>
<org.eventb.core.invariant name=";" org.eventb.core.label="Withdraw_4_inv3" org.eventb.core.predicate="cardInAtmB ∈ ATM ⇸ CARD"/>
<org.eventb.core.invariant name="=" org.eventb.core.label="Withdraw_4_inv5" org.eventb.core.predicate="atmWDAmB ∈ ATM ⇸ ℕ"/>
<org.eventb.core.event name="&gt;" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="INITIALISATION">
<org.eventb.core.action name="'" org.eventb.core.assignment="bal ≔ ∅" org.eventb.core.label="act1"/>
<org.eventb.core.action name="(" org.eventb.core.assignment="cardAcct ≔ ∅" org.eventb.core.label="act6"/>
<org.eventb.core.action name=")" org.eventb.core.assignment="atmCash ≔ ATM × {0}" org.eventb.core.label="act4"/>
<org.eventb.core.action name="*" org.eventb.core.assignment="withdrawOk ≔ ∅" org.eventb.core.label="act18"/>
<org.eventb.core.action name="+" org.eventb.core.assignment="withdrawFail ≔ ∅" org.eventb.core.label="act19"/>
<org.eventb.core.action name="," org.eventb.core.assignment="recvReqWD ≔  ∅" org.eventb.core.label="act21"/>
<org.eventb.core.action name="-" org.eventb.core.assignment="cardInAtmB ≔ ∅" org.eventb.core.label="act28"/>
<org.eventb.core.action name="." org.eventb.core.assignment="atmWDAmB ≔ ∅" org.eventb.core.label="act30"/>
</org.eventb.core.event>
<org.eventb.core.event name="?" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="RecvReqWD">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="a"/>
<org.eventb.core.parameter name="(" org.eventb.core.identifier="c"/>
<org.eventb.core.parameter name=")" org.eventb.core.identifier="am"/>
<org.eventb.core.action name="." org.eventb.core.assignment="recvReqWD ≔ recvReqWD ∪ {a}" org.eventb.core.label="act4"/>
<org.eventb.core.action name="/" org.eventb.core.assignment="atmWDAmB(a) ≔ am" org.eventb.core.label="act6"/>
<org.eventb.core.action name="0" org.eventb.core.assignment="cardInAtmB(a) ≔ c" org.eventb.core.label="act8"/>
<org.eventb.core.guard name="1" org.eventb.core.label="typing_c" org.eventb.core.predicate="c ∈ CARD"/>
<org.eventb.core.guard name="2" org.eventb.core.label="typing_am" org.eventb.core.predicate="am ∈ ℤ"/>
<org.eventb.core.guard name="3" org.eventb.core.label="typing_a" org.eventb.core.predicate="a ∈ ATM"/>
</org.eventb.core.event>
<org.eventb.core.event name="@" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="withdrawOK">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="a"/>
<org.eventb.core.parameter name="(" org.eventb.core.identifier="c"/>
<org.eventb.core.parameter name=")" org.eventb.core.identifier="am"/>
<org.eventb.core.parameter name="*" org.eventb.core.identifier="acc"/>
<org.eventb.core.guard name="=" org.eventb.core.label="typing_c" org.eventb.core.predicate="c ∈ CARD"/>
<org.eventb.core.guard name="&gt;" org.eventb.core.label="typing_am" org.eventb.core.predicate="am ∈ ℤ"/>
<org.eventb.core.guard name="+" org.eventb.core.label="grd1" org.eventb.core.predicate="acc ∈ ACCOUNT"/>
<org.eventb.core.guard name="," org.eventb.core.label="grd2" org.eventb.core.predicate="am ∈ ℕ1"/>
<org.eventb.core.guard name="-" org.eventb.core.label="grd3" org.eventb.core.predicate="acc ∈ dom(bal)"/>
<org.eventb.core.guard name="." org.eventb.core.label="grd4" org.eventb.core.predicate="bal(acc) ≥ am"/>
<org.eventb.core.guard name="/" org.eventb.core.label="grd5" org.eventb.core.predicate="a ∈ ATM"/>
<org.eventb.core.guard name="0" org.eventb.core.label="grd6" org.eventb.core.predicate="atmCash(a) ≥ am"/>
<org.eventb.core.guard name="1" org.eventb.core.label="grd8" org.eventb.core.predicate="a ∈ dom(atmWDAmB)"/>
<org.eventb.core.guard name="2" org.eventb.core.label="grd9" org.eventb.core.predicate="am = atmWDAmB(a)"/>
<org.eventb.core.guard name="3" org.eventb.core.label="grd17" org.eventb.core.predicate="a ∈ dom(cardInAtmB)"/>
<org.eventb.core.guard name="4" org.eventb.core.label="grd16" org.eventb.core.predicate="c = cardInAtmB(a)"/>
<org.eventb.core.guard name="5" org.eventb.core.label="grd14" org.eventb.core.predicate="c ↦ acc ∈ cardAcct"/>
<org.eventb.core.guard name="6" org.eventb.core.label="grd18" org.eventb.core.predicate="a ∉ withdrawOk"/>
<org.eventb.core.guard name="7" org.eventb.core.label="grd19" org.eventb.core.predicate="a ∈ recvReqWD"/>
<org.eventb.core.guard name="8" org.eventb.core.label="grd15" org.eventb.core.predicate="a ∈ recvReqWD"/>
<org.eventb.core.action name="9" org.eventb.core.assignment="bal(acc) ≔ bal(acc) − am" org.eventb.core.label="act1"/>
<org.eventb.core.action name=":" org.eventb.core.assignment="atmCash(a) ≔ atmCash(a) − am" org.eventb.core.label="act2"/>
<org.eventb.core.action name=";" org.eventb.core.assignment="withdrawOk ≔ withdrawOk ∪  {a}" org.eventb.core.label="act3"/>
</org.eventb.core.event>
<org.eventb.core.event name="A" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="SendRespWDok">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="a"/>
<org.eventb.core.guard name="." org.eventb.core.label="typing_a" org.eventb.core.predicate="a ∈ ATM"/>
<org.eventb.core.guard name="(" org.eventb.core.label="grd1" org.eventb.core.predicate="a ∈ withdrawOk"/>
<org.eventb.core.guard name=")" org.eventb.core.label="grd2" org.eventb.core.predicate="a ∈ recvReqWD"/>
<org.eventb.core.action name="*" org.eventb.core.assignment="recvReqWD ≔ recvReqWD ∖ {a}" org.eventb.core.label="act2"/>
<org.eventb.core.action name="+" org.eventb.core.assignment="withdrawOk ≔ withdrawOk ∖ {a}" org.eventb.core.label="act3"/>
<org.eventb.core.action name="," org.eventb.core.assignment="atmWDAmB ≔ {a} ⩤ atmWDAmB" org.eventb.core.label="act4"/>
<org.eventb.core.action name="-" org.eventb.core.assignment="cardInAtmB ≔ {a} ⩤ cardInAtmB" org.eventb.core.label="act6"/>
</org.eventb.core.event>
<org.eventb.core.event name="B" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="withdrawFail">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="acc"/>
<org.eventb.core.parameter name="(" org.eventb.core.identifier="am"/>
<org.eventb.core.parameter name=")" org.eventb.core.identifier="a"/>
<org.eventb.core.parameter name="*" org.eventb.core.identifier="c"/>
<org.eventb.core.guard name="8" org.eventb.core.label="typing_c" org.eventb.core.predicate="c ∈ CARD"/>
<org.eventb.core.guard name="9" org.eventb.core.label="typing_am" org.eventb.core.predicate="am ∈ ℤ"/>
<org.eventb.core.guard name="+" org.eventb.core.label="grd1" org.eventb.core.predicate="acc ∈ ACCOUNT"/>
<org.eventb.core.guard name="," org.eventb.core.label="grd2" org.eventb.core.predicate="am ∈ ℕ1"/>
<org.eventb.core.guard name="-" org.eventb.core.label="grd3" org.eventb.core.predicate="acc ∈ dom(bal)"/>
<org.eventb.core.guard name="." org.eventb.core.label="grd4" org.eventb.core.predicate="am &gt; bal(acc)"/>
<org.eventb.core.guard name="/" org.eventb.core.label="grd6" org.eventb.core.predicate="c ↦ acc ∈ cardAcct"/>
<org.eventb.core.guard name="0" org.eventb.core.label="grd7" org.eventb.core.predicate="a ∈ ATM"/>
<org.eventb.core.guard name="1" org.eventb.core.label="grd8" org.eventb.core.predicate="am ≤ atmCash(a)"/>
<org.eventb.core.guard name="2" org.eventb.core.label="grd10" org.eventb.core.predicate="a ∈ dom(atmWDAmB)"/>
<org.eventb.core.guard name="3" org.eventb.core.label="grd11" org.eventb.core.predicate="am = atmWDAmB(a)"/>
<org.eventb.core.guard name="4" org.eventb.core.label="grd16" org.eventb.core.predicate="a ∈ recvReqWD"/>
<org.eventb.core.guard name="5" org.eventb.core.label="grd12" org.eventb.core.predicate="a ∈ dom(cardInAtmB)"/>
<org.eventb.core.guard name="6" org.eventb.core.label="grd13" org.eventb.core.predicate="cardInAtmB(a) = c"/>
<org.eventb.core.action name="7" org.eventb.core.assignment="withdrawFail ≔ withdrawFail ∪  {a}" org.eventb.core.label="act4"/>
</org.eventb.core.event>
<org.eventb.core.event name="C" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="SendRespWDfail">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="a"/>
<org.eventb.core.guard name="0" org.eventb.core.label="typing_a" org.eventb.core.predicate="a ∈ ATM"/>
<org.eventb.core.guard name="(" org.eventb.core.label="grd1" org.eventb.core.predicate="a ∈ withdrawFail"/>
<org.eventb.core.guard name=")" org.eventb.core.label="grd2" org.eventb.core.predicate="a ∈ recvReqWD"/>
<org.eventb.core.guard name="*" org.eventb.core.label="grd5" org.eventb.core.predicate="a ∈ dom(cardInAtmB)"/>
<org.eventb.core.guard name="+" org.eventb.core.label="grd7" org.eventb.core.predicate="a ∈ dom(atmWDAmB)"/>
<org.eventb.core.action name="," org.eventb.core.assignment="recvReqWD ≔ recvReqWD ∖ {a}" org.eventb.core.label="act2"/>
<org.eventb.core.action name="-" org.eventb.core.assignment="withdrawFail ≔ withdrawFail ∖ {a}" org.eventb.core.label="act3"/>
<org.eventb.core.action name="." org.eventb.core.assignment="atmWDAmB ≔ {a} ⩤ atmWDAmB" org.eventb.core.label="act4"/>
<org.eventb.core.action name="/" org.eventb.core.assignment="cardInAtmB ≔ {a} ⩤ cardInAtmB" org.eventb.core.label="act6"/>
</org.eventb.core.event>
<org.eventb.core.event name="D" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="Deposit">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="acc"/>
<org.eventb.core.parameter name="(" org.eventb.core.identifier="am"/>
<org.eventb.core.parameter name=")" org.eventb.core.identifier="c"/>
<org.eventb.core.guard name="0" org.eventb.core.label="typing_c" org.eventb.core.predicate="c ∈ CARD"/>
<org.eventb.core.guard name="1" org.eventb.core.label="typing_am" org.eventb.core.predicate="am ∈ ℤ"/>
<org.eventb.core.guard name="*" org.eventb.core.label="grd1" org.eventb.core.predicate="acc ∈ ACCOUNT"/>
<org.eventb.core.guard name="+" org.eventb.core.label="grd2" org.eventb.core.predicate="acc ∈ dom(bal)"/>
<org.eventb.core.guard name="," org.eventb.core.label="grd3" org.eventb.core.predicate="am ∈ ℕ1"/>
<org.eventb.core.guard name="." org.eventb.core.label="grd5" org.eventb.core.predicate="c ↦ acc ∈ cardAcct"/>
<org.eventb.core.action name="/" org.eventb.core.assignment="bal(acc) ≔ bal(acc) + am" org.eventb.core.label="act1"/>
</org.eventb.core.event>
<org.eventb.core.event name="E" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="Transfer">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="src_ac"/>
<org.eventb.core.parameter name="(" org.eventb.core.identifier="dest_ac"/>
<org.eventb.core.parameter name=")" org.eventb.core.identifier="am"/>
<org.eventb.core.parameter name="*" org.eventb.core.identifier="c"/>
<org.eventb.core.guard name="5" org.eventb.core.label="typing_c" org.eventb.core.predicate="c ∈ CARD"/>
<org.eventb.core.guard name="6" org.eventb.core.label="typing_am" org.eventb.core.predicate="am ∈ ℤ"/>
<org.eventb.core.guard name="+" org.eventb.core.label="grd1" org.eventb.core.predicate="src_ac ∈ ACCOUNT"/>
<org.eventb.core.guard name="," org.eventb.core.label="grd2" org.eventb.core.predicate="dest_ac ∈ ACCOUNT"/>
<org.eventb.core.guard name="." org.eventb.core.label="grd4" org.eventb.core.predicate="c ↦ src_ac ∈ cardAcct"/>
<org.eventb.core.guard name="/" org.eventb.core.label="grd5" org.eventb.core.predicate="am ∈ ℕ1"/>
<org.eventb.core.guard name="0" org.eventb.core.label="grd6" org.eventb.core.predicate="src_ac ∈ dom(bal)"/>
<org.eventb.core.guard name="1" org.eventb.core.label="grd7" org.eventb.core.predicate="dest_ac ∈ dom(bal)"/>
<org.eventb.core.guard name="2" org.eventb.core.label="grd8" org.eventb.core.predicate="src_ac ≠ dest_ac"/>
<org.eventb.core.guard name="3" org.eventb.core.label="grd9" org.eventb.core.predicate="am &lt; bal(src_ac)"/>
<org.eventb.core.action name="4" org.eventb.core.assignment="bal ≔  bal  {dest_ac ↦ (bal(dest_ac) + am), src_ac ↦(bal(src_ac) − am)}" org.eventb.core.label="act1"/>
</org.eventb.core.event>
<org.eventb.core.seesContext name="F" org.eventb.core.target="Context_BANK_W"/>
</org.eventb.core.machineFile>
