<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.prFile version="1">
<org.eventb.core.prProof name="inv12/WD" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p3" org.eventb.core.prInfHyps="p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p3"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p15" org.eventb.core.prInfHyps="p16,p17"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p15"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p16,p17"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p19,p20"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p19,p20"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p21" org.eventb.core.prInfHyps="p22,p23"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p21"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p22,p23"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p24"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p25"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p26"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a)" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p27">
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p27" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p30" org.eventb.core.prHyps="p28,p29">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p30" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p31">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="functional goal" org.eventb.core.prGoal="p31" org.eventb.core.prHyps="p1"/>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p32">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="functional goal" org.eventb.core.prGoal="p32" org.eventb.core.prHyps="p2"/>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="a∈dom(trAmountM)">
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="trAmount∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="transferOkA∈ℙ(ATM)">
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="trans∈ℙ(ATM)">
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="a∈dom(trAmountM)∧a∈dom(trAmount)⇒trAmountM∈ATM ⇸ ℤ∧trAmount∈ATM ⇸ ℤ">
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="a∈dom(trAmount)">
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℤ∧trAmount∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="transferFailA∈ℙ(ATM)">
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)">
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)∧a∈dom(trAmount)⇒trAmountM∈ATM ⇸ ℤ∧trAmount∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer">
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.isFunGoal"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="inv13/WD" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p3" org.eventb.core.prInfHyps="p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p3"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p15" org.eventb.core.prInfHyps="p16,p17"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p15"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p16,p17"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p19,p20"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p19,p20"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p21" org.eventb.core.prInfHyps="p22,p23"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p21"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p22,p23"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p24"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p25"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p26"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a)" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p27">
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p27" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p31" org.eventb.core.prHyps="p28,p29,p30">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p31" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p32">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="functional goal" org.eventb.core.prGoal="p32" org.eventb.core.prHyps="p2"/>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p33">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="functional goal" org.eventb.core.prGoal="p33" org.eventb.core.prHyps="p1"/>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="a∈dom(trAmountM)">
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="transferOkA∈ℙ(ATM)">
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="trans∈ℙ(ATM)">
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)∧a∈dom(trAmountM)⇒trAmountB∈ATM ⇸ ℤ∧trAmountM∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="a∈recvReqTransfer">
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℤ∧trAmountM∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="a∈dom(trAmountB)">
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="transferFailA∈ℙ(ATM)">
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="a∈recvReqTransfer∧a∈dom(trAmountB)∧a∈dom(trAmountM)⇒trAmountB∈ATM ⇸ ℤ∧trAmountM∈ATM ⇸ ℤ">
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.isFunGoal"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="INITIALISATION/inv3/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="INITIALISATION/inv6/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="INITIALISATION/inv12/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p1">
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⊤ goal" org.eventb.core.prGoal="p1" org.eventb.core.prHyps=""/>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="⊤"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×ℤ))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.trueGoal"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="INITIALISATION/inv13/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p1">
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⊤ goal" org.eventb.core.prGoal="p1" org.eventb.core.prHyps=""/>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="⊤"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a⦂ATM·a∈(∅ ⦂ ℙ(ATM))∧a∈dom(∅ ⦂ ℙ(ATM×ℤ))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.trueGoal"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="SendReqTransfer/inv3/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22,p23" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p19" org.eventb.core.prInfHyps="p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p19"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p35,p36"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p35,p36"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p37,p38"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p37,p38"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p39,p40"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p39,p40"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p12" org.eventb.core.prInfHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p12"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p44"/>
<org.eventb.core.prHypAction name="HIDE3" org.eventb.core.prHyps="p45"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail" org.eventb.core.prHyps="p24">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p41" org.eventb.core.prInfHyps="p46"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p35">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p47"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p48"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p46" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p24,p25,p26,p27,p28,p46"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p47" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p30,p32,p34,p47,p50,p52"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p31,p33,p51,p55,p56,p58"/>
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p9,p20,p23,p4,p2,p18,p11,p15,p1,p5,p6,p17,p21,p3,p22,p13,p14,p16,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p46,p47,p48,p49,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="a∉trans"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="¬a∈trans"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="¬a∈sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="¬a∈reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="¬a∈sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="trAmountM{a ↦ am}∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="a∈ATM"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="¬a∈sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="am∈ℕ1"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="SendReqTransfer/inv12/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22,p23" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p19" org.eventb.core.prInfHyps="p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p19"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p35,p36"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p35,p36"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p37,p38"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p37,p38"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p39,p40"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p39,p40"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p12" org.eventb.core.prInfHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p12"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p44"/>
<org.eventb.core.prHypAction name="HIDE3" org.eventb.core.prHyps="p45"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p46">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p46" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="p47">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p49">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail" org.eventb.core.prHyps="p24">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p41" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p35">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p24,p25,p26,p27,p28,p50"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p30,p32,p34,p51,p54,p56"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p59" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p67"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p62" org.eventb.core.prInfHyps="p68"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p31,p33,p55,p59,p60,p62"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p49" org.eventb.core.prHyps="p9,p20,p23,p4,p2,p16,p11,p15,p1,p5,p6,p17,p21,p3,p22,p14,p13,p18,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p47,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64,p65,p66,p67,p68">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p69">
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ovr in goal" org.eventb.core.prGoal="p69" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p71" org.eventb.core.prHyps="p70">
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ovr in goal" org.eventb.core.prGoal="p71" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p72" org.eventb.core.prHyps="p70">
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p72" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p73">
<org.eventb.core.prRule name="r9" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⊤ goal" org.eventb.core.prGoal="p73" org.eventb.core.prHyps=""/>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p75" org.eventb.core.prHyps="p74">
<org.eventb.core.prRule name="r10" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p75" org.eventb.core.prHyps="p4">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p76">
<org.eventb.core.prRule name="r11" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ct in hyps (¬a0=a)" org.eventb.core.prHyps="p70,p74"/>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p77" org.eventb.core.prHyps="p74">
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ovr in goal" org.eventb.core.prGoal="p77" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p78" org.eventb.core.prHyps="p70">
<org.eventb.core.prRule name="r10" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p78" org.eventb.core.prHyps="p3">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p79">
<org.eventb.core.prRule name="r11" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ct in hyps (¬a0=a)" org.eventb.core.prHyps="p70,p74"/>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="0"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p80" org.eventb.core.prHyps="p74">
<org.eventb.core.prRule name="r10" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p80" org.eventb.core.prHyps="p3">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p81">
<org.eventb.core.prRule name="r10" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p81" org.eventb.core.prHyps="p4">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p82">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail" org.eventb.core.prHyps="p24">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p41" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p35">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p24,p25,p26,p27,p28,p50"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p30,p32,p34,p51,p54,p56"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p59" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p67"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p62" org.eventb.core.prInfHyps="p68"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p31,p33,p55,p59,p60,p62"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p82" org.eventb.core.prHyps="p9,p20,p23,p4,p2,p16,p11,p15,p1,p5,p6,p17,p21,p3,p22,p14,p13,p18,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p47,p74,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64,p65,p66,p67,p68">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="0"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="0"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p76" org.eventb.core.predicate="am=trAmount(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="a∉trans"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p82" org.eventb.core.predicate="trAmountM(a0)=trAmount(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="¬a∈trans"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p66" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="¬a∈sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p81" org.eventb.core.predicate="trAmountM(a0)=({a} ⩤ trAmount)(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p80" org.eventb.core.predicate="({a} ⩤ trAmountM)(a0)=({a} ⩤ trAmount)(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p74" org.eventb.core.predicate="¬a0=a">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p69" org.eventb.core.predicate="(trAmountM{a ↦ am})(a0)=(trAmount{a ↦ am})(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p79" org.eventb.core.predicate="trAmountM(a0)=am">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p78" org.eventb.core.predicate="({a} ⩤ trAmountM)(a0)=am">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p71" org.eventb.core.predicate="am=(trAmount{a ↦ am})(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈dom(trAmount{a ↦ am})∧(trAmountM{a ↦ am})(a0)=(trAmount{a ↦ am})(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p73" org.eventb.core.predicate="⊤"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="¬a∈reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈dom(trAmountM{a ↦ am})">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p75" org.eventb.core.predicate="am=({a} ⩤ trAmount)(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="a0∈dom(trAmount{a ↦ am})">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p68" org.eventb.core.predicate="¬a∈sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p70" org.eventb.core.predicate="a0=a">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(trAmountM{a ↦ am})⇒a0∈dom(trAmount{a ↦ am})∧(trAmountM{a ↦ am})(a0)=(trAmount{a ↦ am})(a0)"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p65" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="a∈ATM"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="a0∈dom(trAmountM{a ↦ am})⇒a0∈dom(trAmount{a ↦ am})∧(trAmountM{a ↦ am})(a0)=(trAmount{a ↦ am})(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="¬a∈sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p72" org.eventb.core.predicate="am=am"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p67" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="am∈ℕ1"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p77" org.eventb.core.predicate="({a} ⩤ trAmountM)(a0)=(trAmount{a ↦ am})(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r7" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r11" org.eventb.core.prRID="org.eventb.core.seqprover.contrHyps:1"/>
<org.eventb.core.prReas name="r8" org.eventb.core.prRID="org.eventb.core.seqprover.funOvr:1"/>
<org.eventb.core.prReas name="r9" org.eventb.core.prRID="org.eventb.core.seqprover.trueGoal"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r10" org.eventb.core.prRID="org.eventb.core.seqprover.funImgSimplifies:0"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="SendReqTransfer/inv13/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22,p23" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p19" org.eventb.core.prInfHyps="p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p19"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p35,p36"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p35,p36"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p37,p38"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p37,p38"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p39,p40"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p39,p40"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p12" org.eventb.core.prInfHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p12"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p44"/>
<org.eventb.core.prHypAction name="HIDE3" org.eventb.core.prHyps="p45"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p46">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p46" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p49" org.eventb.core.prHyps="p47,p48">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p49" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p50">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail" org.eventb.core.prHyps="p24">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p41" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p35">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p24,p25,p26,p27,p28,p51"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p30,p32,p34,p52,p55,p57"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p67"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p61" org.eventb.core.prInfHyps="p68"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p63" org.eventb.core.prInfHyps="p69"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p31,p33,p56,p60,p61,p63"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p50" org.eventb.core.prHyps="p9,p20,p23,p4,p2,p16,p11,p15,p1,p5,p6,p17,p21,p3,p22,p14,p13,p18,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p47,p48,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64,p65,p66,p67,p68,p69">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p70">
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ovr in goal" org.eventb.core.prGoal="p70" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p72" org.eventb.core.prHyps="p71">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail" org.eventb.core.prHyps="p24">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p41" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p35">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p24,p25,p26,p27,p28,p51"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p30,p32,p34,p52,p55,p57"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p67"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p61" org.eventb.core.prInfHyps="p68"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p63" org.eventb.core.prInfHyps="p69"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p31,p33,p56,p60,p61,p63"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with a0=a" org.eventb.core.prGoal="p72" org.eventb.core.prHyps="p71">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p75">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p47" org.eventb.core.prInfHyps="p73"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p48" org.eventb.core.prInfHyps="p74"/>
<org.eventb.core.prHypAction name="DESELECT2" org.eventb.core.prHyps="p47,p48"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p75" org.eventb.core.prHyps="p9,p20,p23,p4,p2,p16,p11,p15,p1,p5,p6,p17,p21,p3,p22,p14,p13,p18,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p47,p48,p71,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64,p65,p66,p67,p68,p69,p73,p74">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p77" org.eventb.core.prHyps="p76">
<org.eventb.core.prRule name="r9" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p77" org.eventb.core.prHyps="p3">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p78">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail" org.eventb.core.prHyps="p24">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p41" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p35">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p24,p25,p26,p27,p28,p51"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p30,p32,p34,p52,p55,p57"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p67"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p61" org.eventb.core.prInfHyps="p68"/>
<org.eventb.core.prHypAction name="FORWARD_INF5" org.eventb.core.prHyps="p63" org.eventb.core.prInfHyps="p69"/>
<org.eventb.core.prHypAction name="DESELECT6" org.eventb.core.prHyps="p31,p33,p56,p60,p61,p63"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p78" org.eventb.core.prHyps="p9,p20,p23,p4,p2,p16,p11,p15,p1,p5,p6,p17,p21,p3,p22,p14,p13,p18,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p47,p48,p76,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64,p65,p66,p67,p68,p69">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="a∉trans"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="¬a∈trans"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p72" org.eventb.core.predicate="trAmountB(a0)=am">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p67" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="¬a∈sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p73" org.eventb.core.predicate="a∈recvReqTransfer"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p78" org.eventb.core.predicate="trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="a0∈dom(trAmountM{a ↦ am})∧trAmountB(a0)=(trAmountM{a ↦ am})(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p76" org.eventb.core.predicate="¬a0=a">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p75" org.eventb.core.predicate="trAmountB(a)=am"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="¬a∈reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="a0∈dom(trAmountM{a ↦ am})">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈dom(trAmountB)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p69" org.eventb.core.predicate="¬a∈sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p71" org.eventb.core.predicate="a0=a">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p66" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="a∈ATM"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM{a ↦ am})∧trAmountB(a0)=(trAmountM{a ↦ am})(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="¬a∈sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p74" org.eventb.core.predicate="a∈dom(trAmountB)"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p68" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p65" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈recvReqTransfer">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="am∈ℕ1"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM{a ↦ am})∧trAmountB(a0)=(trAmountM{a ↦ am})(a0)"/>
<org.eventb.core.prPred name="p77" org.eventb.core.predicate="trAmountB(a0)=({a} ⩤ trAmountM)(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p70" org.eventb.core.predicate="trAmountB(a0)=(trAmountM{a ↦ am})(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r7" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r8" org.eventb.core.prRID="org.eventb.core.seqprover.funOvr:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r9" org.eventb.core.prRID="org.eventb.core.seqprover.funImgSimplifies:0"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="RecvReqTransfer/grd3/WD" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p3" org.eventb.core.prInfHyps="p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p3"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p15" org.eventb.core.prInfHyps="p16,p17"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p15"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p16,p17"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p19,p20"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p19,p20"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p21" org.eventb.core.prInfHyps="p22,p23"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p21"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p22,p23"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="generalized MP" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p24">
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p24" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p25">
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="functional goal" org.eventb.core.prGoal="p25" org.eventb.core.prHyps="p2"/>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="a∈dom(trAmountM)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="a∈dom(trAmountM)∧trAmountM∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)">
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="⊤∧trAmountM∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer">
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.isFunGoal"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.genMPL1"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="RecvReqTransfer/inv6/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22,p23,p24,p25" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p21" org.eventb.core.prInfHyps="p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p21"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p15" org.eventb.core.prInfHyps="p37,p38"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p15"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p37,p38"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p13" org.eventb.core.prInfHyps="p39,p40"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p13"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p39,p40"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p4" org.eventb.core.prInfHyps="p41,p42"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p4"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p41,p42"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p44"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p45"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with am=trAmountM(a)" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p6">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p46">
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p47"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p48"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p26,p27,p28,p29,p30"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p36" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p47" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p32,p34,p36,p47,p50"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p41">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p35" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p33,p35,p51,p54,p55"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p46" org.eventb.core.prHyps="p14,p5,p8,p10,p9,p23,p16,p20,p1,p3,p12,p22,p24,p11,p25,p17,p19,p7,p2,p6,p18,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p42,p47,p48,p49,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="a∈dom(trAmountM)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="am=trAmountM(a)"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="a∈sendReqTransfer"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="trAmountB{a ↦ trAmountM(a)}∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="trAmountB{a ↦ am}∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="RecvReqTransfer/inv13/INV" org.eventb.core.confidence="0" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22,p23,p24,p25" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p21" org.eventb.core.prInfHyps="p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p21"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p15" org.eventb.core.prInfHyps="p37,p38"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p15"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p37,p38"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p13" org.eventb.core.prInfHyps="p39,p40"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p13"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p39,p40"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p4" org.eventb.core.prInfHyps="p41,p42"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p4"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p41,p42"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p44"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p45"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p46">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p46" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p49" org.eventb.core.prHyps="p47,p48">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p49" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p50">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with am=trAmountM(a)" org.eventb.core.prHyps="p6">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p48" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p48"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p26,p27,p28,p29,p30"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p36" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p32,p34,p36,p52,p55"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p41">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p35" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p59" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p33,p35,p56,p59,p60"/>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p67">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ovr in goal" org.eventb.core.prGoal="p67" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p69" org.eventb.core.prHyps="p68">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with am=trAmountM(a)" org.eventb.core.prGoal="p69" org.eventb.core.prHyps="p6">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p70">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p48" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p48"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p26,p27,p28,p29,p30"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p36" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p32,p34,p36,p52,p55"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p41">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p35" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p59" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p33,p35,p56,p59,p60"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with a0=a" org.eventb.core.prGoal="p70" org.eventb.core.prHyps="p68">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p73">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p47" org.eventb.core.prInfHyps="p71"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p72"/>
<org.eventb.core.prHypAction name="DESELECT2" org.eventb.core.prHyps="p47,p51"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p73" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p74">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p71"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⊤ goal" org.eventb.core.prGoal="p74" org.eventb.core.prHyps=""/>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p76" org.eventb.core.prHyps="p75">
<org.eventb.core.prRule name="r9" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p76" org.eventb.core.prHyps="p25">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p77">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with am=trAmountM(a)" org.eventb.core.prHyps="p6">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p48" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p48"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p37">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p26,p27,p28,p29,p30"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p39">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p36" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p32,p34,p36,p52,p55"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p41">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p35" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p59" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p33,p35,p56,p59,p60"/>
<org.eventb.core.prRule name="r10" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p77" org.eventb.core.prHyps="p14,p5,p8,p11,p9,p23,p16,p20,p1,p3,p12,p22,p24,p10,p25,p18,p19,p7,p2,p6,p17,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p42,p47,p48,p75,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64,p65,p66">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="0"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="0"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="a∈dom(trAmountM)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="am=trAmountM(a)"/>
<org.eventb.core.prPred name="p65" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="a∈sendReqTransfer"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p72" org.eventb.core.predicate="a∈dom(trAmountB{a ↦ trAmountM(a)})"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p77" org.eventb.core.predicate="trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p67" org.eventb.core.predicate="(trAmountB{a ↦ am})(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p75" org.eventb.core.predicate="¬a0=a">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p71" org.eventb.core.predicate="a∈recvReqTransfer∪{a}"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p74" org.eventb.core.predicate="⊤"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p70" org.eventb.core.predicate="trAmountM(a)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="a0∈recvReqTransfer∪{a}∧a0∈dom(trAmountB{a ↦ am})⇒a0∈dom(trAmountM)∧(trAmountB{a ↦ am})(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p73" org.eventb.core.predicate="trAmountM(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈recvReqTransfer∪{a}">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p68" org.eventb.core.predicate="a0=a">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p76" org.eventb.core.predicate="({a} ⩤ trAmountB)(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="a0∈dom(trAmountB{a ↦ trAmountM(a)})">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈dom(trAmountB{a ↦ am})">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="a0∈dom(trAmountM)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="a0∈dom(trAmountM)∧(trAmountB{a ↦ am})(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∪{a}∧a0∈dom(trAmountB{a ↦ am})⇒a0∈dom(trAmountM)∧(trAmountB{a ↦ am})(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p66" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p69" org.eventb.core.predicate="am=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r10" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="org.eventb.core.seqprover.funOvr:1"/>
<org.eventb.core.prReas name="r8" org.eventb.core.prRID="org.eventb.core.seqprover.trueGoal"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r7" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r9" org.eventb.core.prRID="org.eventb.core.seqprover.funImgSimplifies:0"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="SendRespTransferOk/inv6/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p40"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p43"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p44"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p45"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p46"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p47"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p48"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p43" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p46" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p43,p46"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p47" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p47,p50,p51"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p9,p19,p22,p4,p2,p17,p11,p14,p1,p5,p6,p16,p20,p3,p21,p12,p13,p15,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p43,p44,p45,p46,p47,p48,p49,p50,p51,p52,p53,p54,p55,p56,p57">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="a∈transferOk"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="{a} ⩤ trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="SendRespTransferOk/inv13/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p40">
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p40" org.eventb.core.prHyps="p21">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p44">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p44" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p45">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p45" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="p46,p47">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p49">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p50,p53"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p54,p57,p58"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p49" org.eventb.core.prHyps="p9,p19,p22,p4,p2,p16,p11,p14,p1,p5,p6,p17,p20,p3,p21,p12,p13,p15,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p47,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p65">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p50,p53"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p54,p57,p58"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p65" org.eventb.core.prHyps="p9,p19,p22,p4,p2,p16,p11,p14,p1,p5,p6,p17,p20,p3,p21,p12,p13,p15,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p47,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1.1.1.0"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p65" org.eventb.core.predicate="trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈dom(trAmountB) ∖ {a}">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB) ∖ {a}⇒a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="a∈transferOk"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ trAmountB)⇒a0∈dom(trAmountM)∧({a} ⩤ trAmountB)(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="a0∈dom(trAmountM)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="a0∈recvReqTransfer∧a0∈dom(trAmountB) ∖ {a}⇒a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="a0∈recvReqTransfer">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB) ∖ {a}⇒a0∈dom(trAmountM)∧({a} ⩤ trAmountB)(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r8" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r7" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.funImgSimplifies:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="RecvRespTransferOk/inv3/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p11" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p11"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p9" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p9"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p40"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p43"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p44"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p45"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p46"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p47"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p48"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p43" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p46" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p43,p46"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p47" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p47,p50,p51"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p10,p19,p22,p4,p2,p17,p12,p15,p1,p5,p6,p16,p20,p3,p21,p13,p14,p8,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p43,p44,p45,p46,p47,p48,p49,p50,p51,p52,p53,p54,p55,p56,p57">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="{a} ⩤ trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="a∈sendRespTransferOk"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="RecvRespTransferOk/inv12/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p11" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p11"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p9" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p9"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p40">
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p40" org.eventb.core.prHyps="p3">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p44">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p44" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p45">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p45" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p47" org.eventb.core.prHyps="p46">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p47" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p48">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p49" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p49,p52"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p53,p56,p57"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="p10,p19,p22,p4,p2,p16,p12,p15,p1,p5,p6,p17,p20,p3,p21,p13,p14,p8,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p49,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p64">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p49" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p49,p52"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p53,p56,p57"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p64" org.eventb.core.prHyps="p10,p19,p22,p4,p2,p16,p12,p15,p1,p5,p6,p17,p20,p3,p21,p13,p14,p8,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p49,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1.1.1.0"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="trAmountM(a0)=trAmount(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="a0∈dom(trAmountM) ∖ {a}">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈dom(trAmount)∧trAmountM(a0)=trAmount(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ trAmountM)⇒a0∈dom(trAmount)∧({a} ⩤ trAmountM)(a0)=trAmount(a0)"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="a0∈dom(trAmountM) ∖ {a}⇒a0∈dom(trAmount)∧trAmountM(a0)=trAmount(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(trAmountM) ∖ {a}⇒a0∈dom(trAmount)∧({a} ⩤ trAmountM)(a0)=trAmount(a0)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(trAmountM) ∖ {a}⇒a0∈dom(trAmount)∧trAmountM(a0)=trAmount(a0)"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈dom(trAmount)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="a∈sendRespTransferOk"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r8" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r7" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.funImgSimplifies:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="RecvRespTransferOk/inv13/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p11" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p11"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p9" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p9"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p40">
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p40" org.eventb.core.prHyps="p3">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p44">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p44" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p45">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p45" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="p46,p47">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p49">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p50,p53"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p54,p57,p58"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p49" org.eventb.core.prHyps="p10,p19,p22,p4,p2,p16,p12,p15,p1,p5,p6,p17,p20,p3,p21,p13,p14,p8,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p47,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p65">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p50,p53"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p54,p57,p58"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p65" org.eventb.core.prHyps="p10,p19,p22,p4,p2,p16,p12,p15,p1,p5,p6,p17,p20,p3,p21,p13,p14,p8,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p47,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1.1.1.1"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="a0∈dom(trAmountM) ∖ {a}">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p65" org.eventb.core.predicate="trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈dom(trAmountM) ∖ {a}∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈dom(trAmountB)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM) ∖ {a}∧trAmountB(a0)=({a} ⩤ trAmountM)(a0)"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="a∈sendRespTransferOk"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM) ∖ {a}∧trAmountB(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM) ∖ {a}∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="a0∈recvReqTransfer">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom({a} ⩤ trAmountM)∧trAmountB(a0)=({a} ⩤ trAmountM)(a0)"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r8" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r7" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.funImgSimplifies:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="TransferFails/grd16/WD" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p3" org.eventb.core.prInfHyps="p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p3"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p15" org.eventb.core.prInfHyps="p16,p17"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p15"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p16,p17"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p19,p20"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p19,p20"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p21" org.eventb.core.prInfHyps="p22,p23"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p21"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p22,p23"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="generalized MP" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p24">
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p24" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p25">
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="functional goal" org.eventb.core.prGoal="p25" org.eventb.core.prHyps="p2"/>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="⊤∧trAmountB∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="a∈dom(trAmountB)∧trAmountB∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)">
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="a∈dom(trAmountB)"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)">
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer">
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)">
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))">
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.isFunGoal"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.genMPL1"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="TransferFails/inv13/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22,p23,p24,p25,p26" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p21" org.eventb.core.prInfHyps="p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p21"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p16" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p16"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p13" org.eventb.core.prInfHyps="p40,p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p13"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p40,p41"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p4" org.eventb.core.prInfHyps="p42,p43"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p4"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p42,p43"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p44"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p45"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p46"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p47">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p47" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p50" org.eventb.core.prHyps="p48,p49">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p50" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p51">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with am=trAmountB(a)" org.eventb.core.prHyps="p6">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p24"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p27,p28,p29,p30,p31"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p40">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p35" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p37" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p33,p35,p37,p53,p56"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p42">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p36" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p61" org.eventb.core.prInfHyps="p67"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p34,p36,p57,p60,p61"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p51" org.eventb.core.prHyps="p14,p5,p7,p11,p9,p22,p17,p20,p1,p3,p12,p23,p25,p10,p26,p18,p19,p24,p15,p6,p2,p8,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p42,p43,p48,p49,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64,p65,p66,p67">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p68">
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with am=trAmountB(a)" org.eventb.core.prHyps="p6">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p24"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p27,p28,p29,p30,p31"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p40">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p35" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p37" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p33,p35,p37,p53,p56"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p42">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p36" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p60" org.eventb.core.prInfHyps="p66"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p61" org.eventb.core.prInfHyps="p67"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p34,p36,p57,p60,p61"/>
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p68" org.eventb.core.prHyps="p14,p5,p7,p11,p9,p22,p17,p20,p1,p3,p12,p23,p25,p10,p26,p18,p19,p24,p15,p6,p2,p8,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p42,p43,p48,p49,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64,p65,p66,p67">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p66" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="am=trAmountB(a)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="a∈recvReqTransfer"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p68" org.eventb.core.predicate="trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈recvReqTransfer ∖ {a}∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="a0∈dom(trAmountB)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈recvReqTransfer ∖ {a}">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="trAmountB(a)∈ℕ1"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p65" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="a0∈dom(trAmountM)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="a∈dom(trAmountB)"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p67" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="am∈ℕ1"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="TransferFails/grd13/GRD" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22,p23,p24,p25,p26" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p21" org.eventb.core.prInfHyps="p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p21"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p16" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p16"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p13" org.eventb.core.prInfHyps="p40,p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p13"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p40,p41"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p4" org.eventb.core.prInfHyps="p42,p43"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p4"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p42,p43"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p44"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p45"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p46"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with am=trAmountB(a)" org.eventb.core.prHyps="p6">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p22" org.eventb.core.prInfHyps="p47"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p22"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p48"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p28" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p27,p28,p29,p30,p31"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p40">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p35" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p37" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p48" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p33,p35,p37,p48,p51"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p42">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p34" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p36" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p34,p36,p52,p55,p56"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p14,p5,p7,p11,p9,p24,p17,p20,p2,p3,p12,p23,p25,p10,p26,p19,p18,p22,p15,p6,p1,p8,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p42,p43,p47,p48,p49,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="a∈dom(trAmount)"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="am=trAmountB(a)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="a∈recvReqTransfer"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="trAmountB(a)∈ℕ1"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="a∈dom(trAmountB)"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="am∈ℕ1"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="TransferFails/grd16/GRD" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22,p23,p24,p25,p26,p27,p28" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p24"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p18" org.eventb.core.prInfHyps="p40,p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p18"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p40,p41"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p15" org.eventb.core.prInfHyps="p42,p43"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p15"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p42,p43"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p5" org.eventb.core.prInfHyps="p44,p45"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p5"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p44,p45"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p46"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p47"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p48"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with am=trAmountB(a)" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p8">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p50">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="DESELECT1" org.eventb.core.prHyps="p25"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p40">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p42">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p35" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p37" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p39" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p35,p37,p39,p51,p54"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p44">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p36" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p38" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p55" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p59" org.eventb.core.prInfHyps="p65"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p36,p38,p55,p58,p59"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p50" org.eventb.core.prHyps="p16,p7,p9,p13,p11,p23,p19,p22,p2,p3,p14,p26,p27,p12,p28,p21,p20,p25,p17,p8,p1,p10,p6,p4,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p40,p41,p42,p43,p44,p45,p49,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64,p65">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="a∈dom(trAmount)"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="am=trAmountB(a)"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="a∈recvReqTransfer"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="am=trAmount(a)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℤ"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="trAmountB(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="trAmountB(a)∈ℕ1"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="a∈dom(trAmountB)"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p65" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="am∈ℕ1"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="SendRespTransferFail/inv6/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p17" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p17"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p40"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p43"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p44"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p45"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p46"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p47"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p48"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p43" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p46" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p43,p46"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p47" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p47,p50,p51"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p9,p18,p22,p4,p2,p16,p11,p14,p1,p5,p6,p15,p19,p3,p21,p12,p13,p20,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p43,p44,p45,p46,p47,p48,p49,p50,p51,p52,p53,p54,p55,p56,p57">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="{a} ⩤ trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="a∈transferFail"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="SendRespTransferFail/inv13/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p17" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p17"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p40">
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p40" org.eventb.core.prHyps="p21">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p44">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p44" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p45">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p45" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="p46,p47">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p49">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p50,p53"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p54,p57,p58"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p49" org.eventb.core.prHyps="p9,p18,p22,p4,p2,p15,p11,p14,p1,p5,p6,p16,p20,p3,p21,p12,p13,p19,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p47,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p65">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p50,p53"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p54,p57,p58"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p65" org.eventb.core.prHyps="p9,p18,p22,p4,p2,p15,p11,p14,p1,p5,p6,p16,p20,p3,p21,p12,p13,p19,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p47,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1.1.1.0"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p65" org.eventb.core.predicate="trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈dom(trAmountB) ∖ {a}">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB) ∖ {a}⇒a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="a∈transferFail"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ trAmountB)⇒a0∈dom(trAmountM)∧({a} ⩤ trAmountB)(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="a0∈dom(trAmountM)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="a0∈recvReqTransfer∧a0∈dom(trAmountB) ∖ {a}⇒a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="a0∈recvReqTransfer">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB) ∖ {a}⇒a0∈dom(trAmountM)∧({a} ⩤ trAmountB)(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r8" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r7" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.funImgSimplifies:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="RecvRespTransferFail/inv3/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p17" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p17"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p40"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p43"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p44"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p45"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p46"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p47"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p48"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p43" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p46" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p43,p46"/>
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p47" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p51" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p47,p50,p51"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p9,p18,p22,p4,p2,p16,p11,p14,p1,p5,p6,p15,p19,p3,p20,p12,p13,p21,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p43,p44,p45,p46,p47,p48,p49,p50,p51,p52,p53,p54,p55,p56,p57">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="{a} ⩤ trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="a∈sendRespTransferFail"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="RecvRespTransferFail/inv12/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p17" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p17"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p40">
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p40" org.eventb.core.prHyps="p3">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p44">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p44" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p45">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p45" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p47" org.eventb.core.prHyps="p46">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p47" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p48">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p49" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p49,p52"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p53,p56,p57"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="p9,p18,p22,p4,p2,p15,p11,p14,p1,p5,p6,p16,p19,p3,p20,p12,p13,p21,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p49,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p64">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p49"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p49" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p52" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p49,p52"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p56" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p53,p56,p57"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p64" org.eventb.core.prHyps="p9,p18,p22,p4,p2,p15,p11,p14,p1,p5,p6,p16,p19,p3,p20,p12,p13,p21,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p49,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1.1.1.0"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="trAmountM(a0)=trAmount(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="a0∈dom(trAmountM) ∖ {a}">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈dom(trAmount)∧trAmountM(a0)=trAmount(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ trAmountM)⇒a0∈dom(trAmount)∧({a} ⩤ trAmountM)(a0)=trAmount(a0)"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="a0∈dom(trAmountM) ∖ {a}⇒a0∈dom(trAmount)∧trAmountM(a0)=trAmount(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(trAmountM) ∖ {a}⇒a0∈dom(trAmount)∧({a} ⩤ trAmountM)(a0)=trAmount(a0)"/>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(trAmountM) ∖ {a}⇒a0∈dom(trAmount)∧trAmountM(a0)=trAmount(a0)"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈dom(trAmount)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="a∈sendRespTransferFail"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r8" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r7" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.funImgSimplifies:0"/>
</org.eventb.core.prProof>
<org.eventb.core.prProof name="RecvRespTransferFail/inv13/INV" org.eventb.core.confidence="1000" org.eventb.core.prFresh="a0" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="p1,p2,p3,p4,p5,p6,p7,p8,p9,p10,p11,p12,p13,p14,p15,p16,p17,p18,p19,p20,p21,p22" org.eventb.core.prSets="ATM">
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p17" org.eventb.core.prInfHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p17"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(reqTransfer,sendReqTransfer,recvReqTransfer))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p10" org.eventb.core.prInfHyps="p34,p35"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p10"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p34,p35"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferOk,sendRespTransferOk,recvRespTransferOk))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p8" org.eventb.core.prInfHyps="p36,p37"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p8"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p36,p37"/>
<org.eventb.core.prRule name="r0" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Partition rewrites in hyp (partition(respTransferFail,sendRespTransferFail,recvRespTransferFail))" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p7" org.eventb.core.prInfHyps="p38,p39"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p7"/>
<org.eventb.core.prHypAction name="SELECT2" org.eventb.core.prHyps="p38,p39"/>
<org.eventb.core.prRule name="r1" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="simplification rewrites" org.eventb.core.prGoal="p0" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p40">
<org.eventb.core.prRule name="r2" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="type rewrites" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="HIDE0" org.eventb.core.prHyps="p41"/>
<org.eventb.core.prHypAction name="HIDE1" org.eventb.core.prHyps="p42"/>
<org.eventb.core.prHypAction name="HIDE2" org.eventb.core.prHyps="p43"/>
<org.eventb.core.prRule name="r3" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="Functional image simplification in goal" org.eventb.core.prGoal="p40" org.eventb.core.prHyps="p3">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p44">
<org.eventb.core.prRule name="r4" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∀ goal (frees a0)" org.eventb.core.prGoal="p44" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p45">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
<org.eventb.core.prRule name="r5" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="⇒ goal" org.eventb.core.prGoal="p45" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="p46,p47">
<org.eventb.core.prRule name="r6" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="∧ goal" org.eventb.core.prGoal="p48" org.eventb.core.prHyps="">
<org.eventb.core.prAnte name="'" org.eventb.core.prGoal="p49">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p50,p53"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p54,p57,p58"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p49" org.eventb.core.prHyps="p9,p18,p22,p4,p2,p15,p11,p14,p1,p5,p6,p16,p19,p3,p20,p12,p13,p21,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p47,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prAnte name="(" org.eventb.core.prGoal="p65">
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with reqTransfer=sendReqTransfer∪recvReqTransfer" org.eventb.core.prHyps="p34">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p23" org.eventb.core.prInfHyps="p50"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p24" org.eventb.core.prInfHyps="p51"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p25" org.eventb.core.prInfHyps="p52"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p26" org.eventb.core.prInfHyps="p53"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p27" org.eventb.core.prInfHyps="p54"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p23,p24,p25,p26,p27"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferOk=sendRespTransferOk∪recvRespTransferOk" org.eventb.core.prHyps="p36">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p29" org.eventb.core.prInfHyps="p55"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p31" org.eventb.core.prInfHyps="p56"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p33" org.eventb.core.prInfHyps="p57"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p50" org.eventb.core.prInfHyps="p58"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p53" org.eventb.core.prInfHyps="p59"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p29,p31,p33,p50,p53"/>
<org.eventb.core.prRule name="r7" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="eh with respTransferFail=sendRespTransferFail∪recvRespTransferFail" org.eventb.core.prHyps="p38">
<org.eventb.core.prAnte name="'">
<org.eventb.core.prHypAction name="FORWARD_INF0" org.eventb.core.prHyps="p30" org.eventb.core.prInfHyps="p60"/>
<org.eventb.core.prHypAction name="FORWARD_INF1" org.eventb.core.prHyps="p32" org.eventb.core.prInfHyps="p61"/>
<org.eventb.core.prHypAction name="FORWARD_INF2" org.eventb.core.prHyps="p54" org.eventb.core.prInfHyps="p62"/>
<org.eventb.core.prHypAction name="FORWARD_INF3" org.eventb.core.prHyps="p57" org.eventb.core.prInfHyps="p63"/>
<org.eventb.core.prHypAction name="FORWARD_INF4" org.eventb.core.prHyps="p58" org.eventb.core.prInfHyps="p64"/>
<org.eventb.core.prHypAction name="DESELECT5" org.eventb.core.prHyps="p30,p32,p54,p57,p58"/>
<org.eventb.core.prRule name="r8" org.eventb.core.confidence="1000" org.eventb.core.prDisplay="ML" org.eventb.core.prGoal="p65" org.eventb.core.prHyps="p9,p18,p22,p4,p2,p15,p11,p14,p1,p5,p6,p16,p19,p3,p20,p12,p13,p21,p23,p24,p25,p26,p27,p28,p29,p30,p31,p32,p33,p34,p35,p36,p37,p38,p39,p46,p47,p50,p51,p52,p53,p54,p55,p56,p57,p58,p59,p60,p61,p62,p63,p64">
<org.eventb.core.prString name=".arg" org.eventb.core.prSValue="0;1:500"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue="1.1.1.1"/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
</org.eventb.core.prAnte>
<org.eventb.core.prString name=".pos" org.eventb.core.prSValue=""/>
</org.eventb.core.prRule>
<org.eventb.core.prIdent name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.prIdent name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.prIdent name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.prIdent name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prIdent name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.prPred name="p51" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p1" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p28" org.eventb.core.predicate="transferOk∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p56" org.eventb.core.predicate="transferFail∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p7" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)"/>
<org.eventb.core.prPred name="p31" org.eventb.core.predicate="transferFail∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p58" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p43" org.eventb.core.predicate="trans∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p53" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p18" org.eventb.core.predicate="respTransferOk∈ℙ(trans)"/>
<org.eventb.core.prPred name="p54" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p63" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p49" org.eventb.core.predicate="a0∈dom(trAmountM) ∖ {a}">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p27" org.eventb.core.predicate="reqTransfer∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p39" org.eventb.core.predicate="sendRespTransferFail∩recvRespTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p2" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL"/>
<org.eventb.core.prPred name="p65" org.eventb.core.predicate="trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p3" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p25" org.eventb.core.predicate="reqTransfer∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p23" org.eventb.core.predicate="trans=reqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p42" org.eventb.core.predicate="transferFailA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p48" org.eventb.core.predicate="a0∈dom(trAmountM) ∖ {a}∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p12" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)"/>
<org.eventb.core.prPred name="p34" org.eventb.core.predicate="reqTransfer=sendReqTransfer∪recvReqTransfer"/>
<org.eventb.core.prPred name="p14" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)"/>
<org.eventb.core.prPred name="p17" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)"/>
<org.eventb.core.prPred name="p16" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p15" org.eventb.core.predicate="transferOk⊆transferOkA"/>
<org.eventb.core.prPred name="p19" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)"/>
<org.eventb.core.prPred name="p55" org.eventb.core.predicate="transferOk∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p37" org.eventb.core.predicate="sendRespTransferOk∩recvRespTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p5" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p47" org.eventb.core.predicate="a0∈dom(trAmountB)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p32" org.eventb.core.predicate="transferFail∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p52" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩transferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p41" org.eventb.core.predicate="transferOkA∈ℙ(ATM)"/>
<org.eventb.core.prPred name="p57" org.eventb.core.predicate="(sendRespTransferOk∪recvRespTransferOk)∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p36" org.eventb.core.predicate="respTransferOk=sendRespTransferOk∪recvRespTransferOk"/>
<org.eventb.core.prPred name="p33" org.eventb.core.predicate="respTransferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p29" org.eventb.core.predicate="transferOk∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p40" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM) ∖ {a}∧trAmountB(a0)=({a} ⩤ trAmountM)(a0)"/>
<org.eventb.core.prPred name="p62" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p22" org.eventb.core.predicate="respTransferFail∈ℙ(trans)"/>
<org.eventb.core.prPred name="p35" org.eventb.core.predicate="sendReqTransfer∩recvReqTransfer=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p38" org.eventb.core.predicate="respTransferFail=sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p6" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)"/>
<org.eventb.core.prPred name="p8" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)"/>
<org.eventb.core.prPred name="p9" org.eventb.core.predicate="reqTransfer∈ℙ(trans)"/>
<org.eventb.core.prPred name="p59" org.eventb.core.predicate="(sendReqTransfer∪recvReqTransfer)∩(sendRespTransferOk∪recvRespTransferOk)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p44" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM) ∖ {a}∧trAmountB(a0)=trAmountM(a0)"/>
<org.eventb.core.prPred name="p64" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪sendRespTransferOk∪recvRespTransferOk∪sendRespTransferFail∪recvRespTransferFail"/>
<org.eventb.core.prPred name="p10" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)"/>
<org.eventb.core.prPred name="p11" org.eventb.core.predicate="transferFail⊆transferFailA"/>
<org.eventb.core.prPred name="p26" org.eventb.core.predicate="reqTransfer∩respTransferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p45" org.eventb.core.predicate="a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM) ∖ {a}∧trAmountB(a0)=trAmountM(a0)">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p61" org.eventb.core.predicate="transferFail∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)"/>
<org.eventb.core.prPred name="p46" org.eventb.core.predicate="a0∈recvReqTransfer">
<org.eventb.core.prIdent name="a0" org.eventb.core.type="ATM"/>
</org.eventb.core.prPred>
<org.eventb.core.prPred name="p50" org.eventb.core.predicate="trans=sendReqTransfer∪recvReqTransfer∪transferOk∪transferFail∪respTransferOk∪respTransferFail"/>
<org.eventb.core.prPred name="p24" org.eventb.core.predicate="reqTransfer∩transferOk=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p0" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom({a} ⩤ trAmountM)∧trAmountB(a0)=({a} ⩤ trAmountM)(a0)"/>
<org.eventb.core.prPred name="p30" org.eventb.core.predicate="transferOk∩respTransferFail=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p20" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1"/>
<org.eventb.core.prPred name="p60" org.eventb.core.predicate="transferOk∩(sendRespTransferFail∪recvRespTransferFail)=(∅ ⦂ ℙ(ATM))"/>
<org.eventb.core.prPred name="p21" org.eventb.core.predicate="a∈sendRespTransferFail"/>
<org.eventb.core.prReas name="r2" org.eventb.core.prRID="org.eventb.core.seqprover.typeRewrites:1"/>
<org.eventb.core.prReas name="r8" org.eventb.core.prRID="com.clearsy.atelierb.provers.core.externalML:1"/>
<org.eventb.core.prReas name="r4" org.eventb.core.prRID="org.eventb.core.seqprover.allI"/>
<org.eventb.core.prReas name="r0" org.eventb.core.prRID="org.eventb.core.seqprover.partitionRewrites"/>
<org.eventb.core.prReas name="r5" org.eventb.core.prRID="org.eventb.core.seqprover.impI"/>
<org.eventb.core.prReas name="r6" org.eventb.core.prRID="org.eventb.core.seqprover.conj:0"/>
<org.eventb.core.prReas name="r1" org.eventb.core.prRID="org.eventb.core.seqprover.autoRewritesL3:0"/>
<org.eventb.core.prReas name="r7" org.eventb.core.prRID="org.eventb.core.seqprover.eq:1"/>
<org.eventb.core.prReas name="r3" org.eventb.core.prRID="org.eventb.core.seqprover.funImgSimplifies:0"/>
</org.eventb.core.prProof>
</org.eventb.core.prFile>
