<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.poFile org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="MAX_CASH" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="MIN_CASH" org.eventb.core.type="ℤ"/>
<org.eventb.core.poPredicate name="MIN_CASI" org.eventb.core.predicate="MIN_CASH∈ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1_CO.buc|org.eventb.core.contextFile#ATM_TD_1_CO|org.eventb.core.axiom#internal_element1"/>
<org.eventb.core.poPredicate name="MIN_CASJ" org.eventb.core.predicate="MAX_CASH∈ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1_CO.buc|org.eventb.core.contextFile#ATM_TD_1_CO|org.eventb.core.axiom#internal_element2"/>
<org.eventb.core.poPredicate name="MIN_CASK" org.eventb.core.predicate="MAX_CASH&gt;MIN_CASH" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1_CO.buc|org.eventb.core.contextFile#ATM_TD_1_CO|org.eventb.core.axiom#internal_element3"/>
<org.eventb.core.poIdentifier name="ACCOUNT" org.eventb.core.type="ℙ(ACCOUNT)"/>
<org.eventb.core.poIdentifier name="ATM" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="CARD" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ABSHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="accBalOnAtm" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCash" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCashA" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmDepAm" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmDepAmB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmDepAmM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="bal" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="cardAcct" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="cardInAtm" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="cardInAtmB" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="cardInAtmM" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="destAcc" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="destAccB" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="destAccBalAtm" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="destAccM" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="processedDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvReqDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendReqDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="srcAcc" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="srcAccB" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="srcAccBalAtm" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="srcAccM" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="transD" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="transT" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard" org.eventb.core.type="ℙ(CARD)"/>
<org.eventb.core.poPredicate name="sendRespTransferFaim" org.eventb.core.predicate="bal∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__COKMDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="sendRespTransferFain" org.eventb.core.predicate="cardAcct∈CARD ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwD24EeCAYsu3bd3gpA"/>
<org.eventb.core.poPredicate name="sendRespTransferFaio" org.eventb.core.predicate="cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwT24EeCAYsu3bd3gpA"/>
<org.eventb.core.poPredicate name="sendRespTransferFaip" org.eventb.core.predicate="validCard⊆CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwj24EeCAYsu3bd3gpA"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiq" org.eventb.core.predicate="∀c⦂CARD·c∈validCard⇒c∈ran(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__CQmeDqkEeCEXI9UeGRwry"/>
<org.eventb.core.poPredicate name="sendRespTransferFair" org.eventb.core.predicate="transferOkA∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poPredicate name="sendRespTransferFais" org.eventb.core.predicate="transferFailA∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poPredicate name="sendRespTransferFait" org.eventb.core.predicate="cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiu" org.eventb.core.predicate="atmCash∈ATM → ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_1.bum|org.eventb.core.machineFile#ATM_TD_1|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiv" org.eventb.core.predicate="transT∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiw" org.eventb.core.predicate="reqTransfer∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poPredicate name="sendRespTransferFaix" org.eventb.core.predicate="respTransferOk∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiy" org.eventb.core.predicate="respTransferFail∈ℙ(transT)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiz" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poPredicate name="sendRespTransferFai{" org.eventb.core.predicate="srcAccBalAtm∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poPredicate name="sendRespTransferFai|" org.eventb.core.predicate="destAccBalAtm∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poPredicate name="sendRespTransferFai}" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poPredicate name="sendRespTransferFai~" org.eventb.core.predicate="srcAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj'" org.eventb.core.predicate="destAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj(" org.eventb.core.predicate="transferOk⊆transferOkA" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj)" org.eventb.core.predicate="transferFail⊆transferFailA" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj*" org.eventb.core.predicate="∀c⦂CARD·c∈ran(cardInAtm)⇒c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj+" org.eventb.core.predicate="partition(transT,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj," org.eventb.core.predicate="transD∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj-" org.eventb.core.predicate="reqDep∈ℙ(transD)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj." org.eventb.core.predicate="respDep∈ℙ(transD)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj/" org.eventb.core.predicate="processedDep∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj0" org.eventb.core.predicate="atmDepAm∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj1" org.eventb.core.predicate="partition(transD,reqDep,respDep)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj2" org.eventb.core.predicate="atmCashA∈ATM → ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj3" org.eventb.core.predicate="accBalOnAtm∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj4" org.eventb.core.predicate="∀c⦂CARD·c∈ran(cardInAtm)⇒c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_2.bum|org.eventb.core.machineFile#ATM_TD_2|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj5" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj6" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj7" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj8" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj9" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj:" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj;" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj=" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj&gt;" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj?" org.eventb.core.predicate="sendReqDep∈ℙ(reqDep)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj@" org.eventb.core.predicate="recvReqDep∈ℙ(reqDep)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poPredicate name="sendRespTransferFajA" org.eventb.core.predicate="sendRespDep∈ℙ(respDep)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poPredicate name="sendRespTransferFajB" org.eventb.core.predicate="recvRespDep∈ℙ(respDep)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poPredicate name="sendRespTransferFajC" org.eventb.core.predicate="partition(reqDep,sendReqDep,recvReqDep)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poPredicate name="sendRespTransferFajD" org.eventb.core.predicate="partition(respDep,sendRespDep,recvRespDep)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.invariant#internal_element15"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="BalTransfer_4.inv12/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)∧a∈dom(trAmount)⇒trAmountM∈ATM ⇸ ℤ∧trAmount∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="BalTransfer_4.inv13/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CX"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)∧a∈dom(trAmountM)⇒trAmountB∈ATM ⇸ ℤ∧trAmountM∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CX"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="BalTransfer_4.inv25/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(srcAccM)∧a∈dom(srcAcc)⇒srcAccM∈ATM ⇸ ACCOUNT∧srcAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="BalTransfer_4.inv17/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CZ"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(srcAccB)∧a∈dom(srcAccM)⇒srcAccB∈ATM ⇸ ACCOUNT∧srcAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CZ"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="BalTransfer_4.inv26/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C["/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(destAccM)∧a∈dom(destAcc)⇒destAccM∈ATM ⇸ ACCOUNT∧destAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C["/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="BalTransfer_4.inv18/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C\\"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(destAccB)∧a∈dom(destAccM)⇒destAccB∈ATM ⇸ ACCOUNT∧destAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C\\"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="BalTransfer_4.inv27/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtmM)∧a∈dom(cardInAtm)⇒cardInAtmM∈ATM ⇸ CARD∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="BalTransfer_4.inv28/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C^"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(cardInAtmB)∧a∈dom(cardInAtm)⇒cardInAtmB∈ATM ⇸ CARD∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C^"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="Deposit_4.inv7/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtm)∧a∈dom(cardInAtmB)⇒cardInAtm∈ATM ⇸ CARD∧cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="Deposit_4.inv8/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cb"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtm)∧a∈dom(cardInAtmM)⇒cardInAtm∈ATM ⇸ CARD∧cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cb"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="Deposit_4.inv9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cc"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(atmDepAmM)∧a∈dom(atmDepAm)⇒atmDepAmM∈ATM ⇸ ℤ∧atmDepAm∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cc"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="Deposit_4.inv10/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cd"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(atmDepAmB)∧a∈recvReqDep∧a∈dom(atmDepAm)⇒atmDepAm∈ATM ⇸ ℤ∧atmDepAmB∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cd"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv2/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv2\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv21/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv21\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv22/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv22\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv23/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv23\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv24/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv24\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×ℤ))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CX|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈(∅ ⦂ ℙ(ATM))∧a∈dom(∅ ⦂ ℙ(ATM×ℤ))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv25/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×ACCOUNT))⇒a∈dom(∅ ⦂ ℙ(ATM×ACCOUNT))∧(∅ ⦂ ℙ(ATM×ACCOUNT))(a)=(∅ ⦂ ℙ(ATM×ACCOUNT))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv25\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CZ|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈(∅ ⦂ ℙ(ATM))∧a∈dom(∅ ⦂ ℙ(ATM×ACCOUNT))⇒a∈dom(∅ ⦂ ℙ(ATM×ACCOUNT))∧(∅ ⦂ ℙ(ATM×ACCOUNT))(a)=(∅ ⦂ ℙ(ATM×ACCOUNT))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv26/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×ACCOUNT))⇒a∈dom(∅ ⦂ ℙ(ATM×ACCOUNT))∧(∅ ⦂ ℙ(ATM×ACCOUNT))(a)=(∅ ⦂ ℙ(ATM×ACCOUNT))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv26\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C\\|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈(∅ ⦂ ℙ(ATM))∧a∈dom(∅ ⦂ ℙ(ATM×ACCOUNT))⇒a∈dom(∅ ⦂ ℙ(ATM×ACCOUNT))∧(∅ ⦂ ℙ(ATM×ACCOUNT))(a)=(∅ ⦂ ℙ(ATM×ACCOUNT))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv27/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×CARD))⇒a∈dom(∅ ⦂ ℙ(ATM×CARD))∧(∅ ⦂ ℙ(ATM×CARD))(a)=(∅ ⦂ ℙ(ATM×CARD))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv27\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C^|org.eventb.core.poPredicate#PRD14"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/BalTransfer_4.inv28/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈(∅ ⦂ ℙ(ATM))∧a∈dom(∅ ⦂ ℙ(ATM×CARD))⇒a∈dom(∅ ⦂ ℙ(ATM×CARD))∧(∅ ⦂ ℙ(ATM×CARD))(a)=(∅ ⦂ ℙ(ATM×CARD))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/BalTransfer_4.inv28\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_4.inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/Deposit_4.inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD16"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_4.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/Deposit_4.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD17"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_4.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×CARD))∧a∈dom(∅ ⦂ ℙ(ATM×CARD))⇒(∅ ⦂ ℙ(ATM×CARD))(a)=(∅ ⦂ ℙ(ATM×CARD))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/Deposit_4.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cb|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_4.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×CARD))∧a∈dom(∅ ⦂ ℙ(ATM×CARD))⇒(∅ ⦂ ℙ(ATM×CARD))(a)=(∅ ⦂ ℙ(ATM×CARD))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/Deposit_4.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cc|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_4.inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×ℤ))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/Deposit_4.inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cd|org.eventb.core.poPredicate#PRD20"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_4.inv10/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧a∈(∅ ⦂ ℙ(ATM))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/Deposit_4.inv10\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD21"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_4.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×CARD))⇒a∈dom(∅ ⦂ ℙ(ATM×CARD))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/Deposit_4.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD22"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×CARD))⇒a∈dom(∅ ⦂ ℙ(ATM×CARD))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/Deposit_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD23"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Deposit_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))⊆(∅ ⦂ ℙ(ATM×CARD))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/Deposit_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD24"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv1/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×CARD))⇒a∈dom(∅ ⦂ ℙ(ATM×CARD))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#INITIALISATION\/inv1\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD25"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaim" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="trAmountM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="processedDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="destAccM'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="sendRespDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardAcct'" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="destAccB'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="atmCash'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmDepAmM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmDepAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="sendRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmDepAmB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="srcAccM'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="srcAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="sendReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmountB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="sendRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="srcAccB'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="recvReqDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="cardInAtm'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="sendReqDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="destAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="transT'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard'" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaim" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaim" org.eventb.core.poStamp="1"/>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv2/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtmM{a ↦ c}∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv2\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="trAmountM{a ↦ am}∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv21/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="srcAccM{a ↦ src_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv21\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv22/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="destAccM{a ↦ dest_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv22\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(trAmountM{a ↦ am})⇒a0∈dom(trAmount{a ↦ am})∧(trAmountM{a ↦ am})(a0)=(trAmount{a ↦ am})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CX|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM{a ↦ am})∧trAmountB(a0)=(trAmountM{a ↦ am})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv25/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(srcAccM{a ↦ src_ac})⇒a0∈dom(srcAcc{a ↦ src_ac})∧(srcAccM{a ↦ src_ac})(a0)=(srcAcc{a ↦ src_ac})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv25\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CZ|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(srcAccB)⇒a0∈dom(srcAccM{a ↦ src_ac})∧srcAccB(a0)=(srcAccM{a ↦ src_ac})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv26/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(destAccM{a ↦ dest_ac})⇒a0∈dom(destAcc{a ↦ dest_ac})∧(destAccM{a ↦ dest_ac})(a0)=(destAcc{a ↦ dest_ac})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv26\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C\\|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(destAccB)⇒a0∈dom(destAccM{a ↦ dest_ac})∧destAccB(a0)=(destAccM{a ↦ dest_ac})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_4.inv27/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmM{a ↦ c})⇒a0∈dom(cardInAtm)∧(cardInAtmM{a ↦ c})(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_4.inv27\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C^|org.eventb.core.poPredicate#PRD14"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/Deposit_4.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom(cardInAtmM{a ↦ c})⇒cardInAtm(a0)=(cardInAtmM{a ↦ c})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/Deposit_4.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cc|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/Deposit_4.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmM{a ↦ c})⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/Deposit_4.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD22"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/Deposit_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtmM{a ↦ c}⊆cardInAtm" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/Deposit_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD24"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_3.SendReqTransfer.grd8/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_3.SendReqTransfer.grd8\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/BalTransfer_3.SendReqTransfer.grd9/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendReqTransfer\/BalTransfer_3.SendReqTransfer.grd9\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFain" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="trAmountM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="destAccM'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="srcAccM'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="srcAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="sendReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="destAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="transT'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFain" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFain" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∉transT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="a ↦ c∈cardInAtm" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element8"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.RecvReqTransfer.grd3/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio("/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmountM)∧trAmountM∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio("/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.RecvReqTransfer.grd7/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio+"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(destAccM)∧destAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio+"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.RecvReqTransfer.grd6/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio."/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(srcAccM)∧srcAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio."/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.inv23/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="srcAccB{a ↦ src_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/BalTransfer_4.inv23\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.inv24/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="destAccB{a ↦ dest_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/BalTransfer_4.inv24\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtmB{a ↦ c}∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/BalTransfer_4.inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="trAmountB{a ↦ am}∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/BalTransfer_4.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∪{a}∧a0∈dom(trAmountB{a ↦ am})⇒a0∈dom(trAmountM)∧(trAmountB{a ↦ am})(a0)=trAmountM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/BalTransfer_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∪{a}∧a0∈dom(srcAccB{a ↦ src_ac})⇒a0∈dom(srcAccM)∧(srcAccB{a ↦ src_ac})(a0)=srcAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/BalTransfer_4.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∪{a}∧a0∈dom(destAccB{a ↦ dest_ac})⇒a0∈dom(destAccM)∧(destAccB{a ↦ dest_ac})(a0)=destAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/BalTransfer_4.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/BalTransfer_4.inv28/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∪{a}∧a0∈dom(cardInAtmB{a ↦ c})⇒a0∈dom(cardInAtm)∧(cardInAtmB{a ↦ c})(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/BalTransfer_4.inv28\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/Deposit_4.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom(cardInAtmB{a ↦ c})⇒cardInAtm(a0)=(cardInAtmB{a ↦ c})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/Deposit_4.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cb|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/Deposit_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmB{a ↦ c})⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/Deposit_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD23"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/inv1/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmB{a ↦ c})⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvReqTransfer\/inv1\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD25"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaio" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="destAccB'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="sendReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="trAmountB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="srcAccB'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaio(" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaio" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈dom(trAmountM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element3"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaio+" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio(" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am=trAmountM(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈sendReqTransfer" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈dom(destAccM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element8"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaio." org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio+" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="destAccM(a)=dest_ac" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈dom(srcAccM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="a ↦ c∈cardInAtmM" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element6"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaio" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio." org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="srcAccM(a)=src_ac" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element7"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.TransferOK.grd12/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip,"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtmB)∧cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip,"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.TransferOK.grd14/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip\/"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(srcAccB)∧srcAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip\/"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.TransferOK.grd15/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip1"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(destAccB)∧destAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.TransferOK.grd16/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip2"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmountB)∧trAmountB∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.TransferOK.grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip5"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="src_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(srcAccB)⇒a0∈dom(srcAccM)∧srcAccB(a0)=srcAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_4.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(destAccB)⇒a0∈dom(destAccM)∧destAccB(a0)=destAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_4.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.inv28/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(cardInAtmB)⇒a0∈dom(cardInAtm)∧cardInAtmB(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_4.inv28\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_3.TransferOK.grd13/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmount)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_3.TransferOK.grd13\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_3.TransferOK.grd16/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="am=trAmount(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_3.TransferOK.grd16\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_3.TransferOK.grd21/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(destAcc)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_3.TransferOK.grd21\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_3.TransferOK.grd15/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="dest_ac=destAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_3.TransferOK.grd15\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_3.TransferOK.grd11/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_3.TransferOK.grd11\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_3.TransferOK.grd12/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_3.TransferOK.grd12\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_3.TransferOK.grd20/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(srcAcc)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_3.TransferOK.grd20\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_3.TransferOK.grd14/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="src_ac=srcAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferOK\/BalTransfer_3.TransferOK.grd14\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOK/BalTransfer_4.TransferOK.act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="dest_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ∧src_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.action#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.action#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaip" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="recvReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaip," org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaip" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(destAccB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈dom(srcAccB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a∈dom(cardInAtmB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element5"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaip/" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip," org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="c=cardInAtmB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="a∈dom(trAmountB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="src_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element16"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaip1" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip\/" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="src_ac=srcAccB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="a∈recvReqTransfer" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element9"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaip2" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip1" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="dest_ac=destAccB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element10"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaip5" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip2" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="am=trAmountB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element11"/>
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="dest_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element13"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaip" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaip5" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="am≤bal(src_ac)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element14"/>
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="c ↦ src_ac∈cardAcct" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element15"/>
<org.eventb.core.poPredicate name="PRD16" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element17"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="SendRespTransferOk/BalTransfer_4.inv23/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ srcAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/BalTransfer_4.inv23\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/BalTransfer_4.inv24/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ destAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/BalTransfer_4.inv24\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/BalTransfer_4.inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/BalTransfer_4.inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/BalTransfer_4.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ trAmountB∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/BalTransfer_4.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/BalTransfer_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ trAmountB)⇒a0∈dom(trAmountM)∧({a} ⩤ trAmountB)(a0)=trAmountM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/BalTransfer_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/BalTransfer_4.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ srcAccB)⇒a0∈dom(srcAccM)∧({a} ⩤ srcAccB)(a0)=srcAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/BalTransfer_4.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/BalTransfer_4.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ destAccB)⇒a0∈dom(destAccM)∧({a} ⩤ destAccB)(a0)=destAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/BalTransfer_4.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/BalTransfer_4.inv28/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmB)(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/BalTransfer_4.inv28\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/Deposit_4.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom({a} ⩤ cardInAtmB)⇒cardInAtm(a0)=({a} ⩤ cardInAtmB)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/Deposit_4.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cb|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/Deposit_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/Deposit_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD23"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/inv1/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferOk\/inv1\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD25"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaiq" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="destAccB'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmountB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="sendRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="srcAccB'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaiq" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaiq" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈transferOk" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv2/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv2\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ trAmountM∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv21/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ srcAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv21\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv22/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ destAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv22\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ trAmountM)⇒a0∈dom(trAmount)∧({a} ⩤ trAmountM)(a0)=trAmount(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CX|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom({a} ⩤ trAmountM)∧trAmountB(a0)=({a} ⩤ trAmountM)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv25/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ srcAccM)⇒a0∈dom(srcAcc)∧({a} ⩤ srcAccM)(a0)=srcAcc(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv25\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CZ|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(srcAccB)⇒a0∈dom({a} ⩤ srcAccM)∧srcAccB(a0)=({a} ⩤ srcAccM)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv26/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ destAccM)⇒a0∈dom(destAcc)∧({a} ⩤ destAccM)(a0)=destAcc(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv26\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C\\|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(destAccB)⇒a0∈dom({a} ⩤ destAccM)∧destAccB(a0)=({a} ⩤ destAccM)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/BalTransfer_4.inv27/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmM)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmM)(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/BalTransfer_4.inv27\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C^|org.eventb.core.poPredicate#PRD14"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/Deposit_4.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom({a} ⩤ cardInAtmM)⇒cardInAtm(a0)=({a} ⩤ cardInAtmM)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/Deposit_4.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cc|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/Deposit_4.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmM)⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/Deposit_4.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD22"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/Deposit_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM⊆cardInAtm" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferOk\/Deposit_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD24"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFair" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="trAmountM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="destAccM'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="srcAccM'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="sendRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFair" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFair" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈sendRespTransferOk" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element6|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_4.TransferFails.grd16/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais)"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmountB)∧trAmountB∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais)"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_4.TransferFails.grd15/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais,"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(destAccB)∧destAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais,"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_4.TransferFails.grd12/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais2"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtmB)∧cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_4.TransferFails.grd14/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais4"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(srcAccB)∧srcAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_4.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(srcAccB)⇒a0∈dom(srcAccM)∧srcAccB(a0)=srcAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_4.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_4.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(destAccB)⇒a0∈dom(destAccM)∧destAccB(a0)=destAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_4.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_4.inv28/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(cardInAtmB)⇒a0∈dom(cardInAtm)∧cardInAtmB(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_4.inv28\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_3.TransferFails.grd13/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmount)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_3.TransferFails.grd13\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_3.TransferFails.grd16/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="am=trAmount(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_3.TransferFails.grd16\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_3.TransferFails.grd11/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element14"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_3.TransferFails.grd11\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_3.TransferFails.grd12/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_3.TransferFails.grd12\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_3.TransferFails.grd20/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(srcAcc)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element13"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element13"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_3.TransferFails.grd20\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_3.TransferFails.grd21/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(destAcc)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_3.TransferFails.grd21\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_3.TransferFails.grd15/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="dest_ac=destAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_3.TransferFails.grd15\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/BalTransfer_3.TransferFails.grd14/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="src_ac=srcAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#TransferFails\/BalTransfer_3.TransferFails.grd14\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFais" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="recvReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFais)" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFais" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈dom(trAmountB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element13"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(srcAccB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element16"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFais," org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am=trAmountB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a∈dom(destAccB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element15"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFais2" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais," org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="dest_ac=destAccB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="src_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="dest_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="a∈dom(cardInAtmB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element11"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFais4" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais2" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="c=cardInAtmB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element10"/>
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="am&gt;bal(src_ac)∨c ↦ src_ac∉cardAcct" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFais" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFais4" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="src_ac=srcAccB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element12"/>
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="a∈recvReqTransfer" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element14"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="SendRespTransferFail/BalTransfer_4.inv23/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ srcAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/BalTransfer_4.inv23\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/BalTransfer_4.inv24/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ destAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/BalTransfer_4.inv24\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/BalTransfer_4.inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/BalTransfer_4.inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/BalTransfer_4.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ trAmountB∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/BalTransfer_4.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/BalTransfer_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ trAmountB)⇒a0∈dom(trAmountM)∧({a} ⩤ trAmountB)(a0)=trAmountM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/BalTransfer_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/BalTransfer_4.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ srcAccB)⇒a0∈dom(srcAccM)∧({a} ⩤ srcAccB)(a0)=srcAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/BalTransfer_4.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/BalTransfer_4.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ destAccB)⇒a0∈dom(destAccM)∧({a} ⩤ destAccB)(a0)=destAccM(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/BalTransfer_4.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/BalTransfer_4.inv28/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmB)(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/BalTransfer_4.inv28\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/Deposit_4.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom({a} ⩤ cardInAtmB)⇒cardInAtm(a0)=({a} ⩤ cardInAtmB)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/Deposit_4.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cb|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/Deposit_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/Deposit_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD23"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/inv1/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#SendRespTransferFail\/inv1\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD25"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFait" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="destAccB'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="sendRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="trAmountB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="srcAccB'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFait" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFait" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈transferFail" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element8|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv2/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv2\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ trAmountM∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv21/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ srcAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv21\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv22/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ destAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv22\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ trAmountM)⇒a0∈dom(trAmount)∧({a} ⩤ trAmountM)(a0)=trAmount(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CX|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom({a} ⩤ trAmountM)∧trAmountB(a0)=({a} ⩤ trAmountM)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv25/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ srcAccM)⇒a0∈dom(srcAcc)∧({a} ⩤ srcAccM)(a0)=srcAcc(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv25\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CZ|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv17/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(srcAccB)⇒a0∈dom({a} ⩤ srcAccM)∧srcAccB(a0)=({a} ⩤ srcAccM)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv17\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv26/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ destAccM)⇒a0∈dom(destAcc)∧({a} ⩤ destAccM)(a0)=destAcc(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv26\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C\\|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv18/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(destAccB)⇒a0∈dom({a} ⩤ destAccM)∧destAccB(a0)=({a} ⩤ destAccM)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/BalTransfer_4.inv27/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmM)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmM)(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/BalTransfer_4.inv27\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C^|org.eventb.core.poPredicate#PRD14"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/Deposit_4.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom({a} ⩤ cardInAtmM)⇒cardInAtm(a0)=({a} ⩤ cardInAtmM)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/Deposit_4.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cc|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/Deposit_4.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmM)⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/Deposit_4.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD22"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/Deposit_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM⊆cardInAtm" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#RecvRespTransferFail\/Deposit_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD24"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaiu" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="trAmountM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="destAccM'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="sendRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="srcAccM'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaiu" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaiu" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈sendRespTransferFail" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaiv" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="recvRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="transT'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaiv" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaiv" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈recvRespTransferOk" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaiw" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="transT'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaiw" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaiw" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈recvRespTransferFail" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="sendReqDeposit/BalTransfer_4.inv2/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtmM{a ↦ c}∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendReqDeposit\/BalTransfer_4.inv2\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendReqDeposit/BalTransfer_4.inv27/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmM{a ↦ c})⇒a0∈dom(cardInAtm)∧(cardInAtmM{a ↦ c})(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendReqDeposit\/BalTransfer_4.inv27\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C^|org.eventb.core.poPredicate#PRD14"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendReqDeposit/Deposit_4.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmDepAmM{a ↦ am}∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendReqDeposit\/Deposit_4.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD17"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendReqDeposit/Deposit_4.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom(cardInAtmM{a ↦ c})⇒cardInAtm(a0)=(cardInAtmM{a ↦ c})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendReqDeposit\/Deposit_4.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cc|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendReqDeposit/Deposit_4.inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(atmDepAmM{a ↦ am})⇒a0∈dom(atmDepAm{a ↦ am})∧(atmDepAmM{a ↦ am})(a0)=(atmDepAm{a ↦ am})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendReqDeposit\/Deposit_4.inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cd|org.eventb.core.poPredicate#PRD20"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendReqDeposit/Deposit_4.inv10/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(atmDepAmB)∧a0∈recvReqDep⇒a0∈dom(atmDepAm{a ↦ am})∧(atmDepAm{a ↦ am})(a0)=atmDepAmB(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendReqDeposit\/Deposit_4.inv10\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD21"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendReqDeposit/Deposit_4.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmM{a ↦ c})⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendReqDeposit\/Deposit_4.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD22"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendReqDeposit/Deposit_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaix"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtmM{a ↦ c}⊆cardInAtm" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendReqDeposit\/Deposit_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD24"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaix" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmDepAmM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmDepAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="sendReqDep'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaix" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaix" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∉transD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="c∈ran(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="cardInAtm(a)=c" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element5"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="recvReqDeposit/Deposit_4.recvReqDeposit.grd5/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaiy*"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmDepAmM)∧atmDepAmM∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaiy*"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvReqDeposit/BalTransfer_4.inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiy"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtmB{a ↦ c}∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvReqDeposit\/BalTransfer_4.inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvReqDeposit/BalTransfer_4.inv28/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiy"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(cardInAtmB{a ↦ c})⇒a0∈dom(cardInAtm)∧(cardInAtmB{a ↦ c})(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvReqDeposit\/BalTransfer_4.inv28\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvReqDeposit/Deposit_4.inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiy"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmDepAmB{a ↦ am}∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvReqDeposit\/Deposit_4.inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD16"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvReqDeposit/Deposit_4.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiy"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom(cardInAtmB{a ↦ c})⇒cardInAtm(a0)=(cardInAtmB{a ↦ c})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvReqDeposit\/Deposit_4.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cb|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvReqDeposit/Deposit_4.inv10/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiy"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(atmDepAmB{a ↦ am})∧a0∈recvReqDep∪{a}⇒a0∈dom(atmDepAm)∧atmDepAm(a0)=(atmDepAmB{a ↦ am})(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvReqDeposit\/Deposit_4.inv10\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD21"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvReqDeposit/Deposit_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiy"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmB{a ↦ c})⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvReqDeposit\/Deposit_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD23"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvReqDeposit/inv1/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiy"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmB{a ↦ c})⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvReqDeposit\/inv1\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD25"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaiy" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="atmDepAmB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvReqDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="sendReqDep'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaiy*" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaiy" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈sendReqDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a ↦ c∈cardInAtmM" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(atmDepAmM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13|org.eventb.core.guard#internal_element3"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaiy" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaiy*" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am=atmDepAmM(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element13|org.eventb.core.guard#internal_element4"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="depositB/Deposit_4.depositB.grd12/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaiz*"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmDepAmB)∧atmDepAmB∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaiz*"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_4.depositB.grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaiz0"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtmB)∧cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaiz0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_3.depositB.grd11/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiz"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmDepAm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#depositB\/Deposit_3.depositB.grd11\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_3.depositB.grd12/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiz"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmDepAm(a)=am" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#depositB\/Deposit_3.depositB.grd12\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_3.depositB.grd8/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiz"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#depositB\/Deposit_3.depositB.grd8\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_3.depositB.grd9/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiz"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtm(a)=c" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#depositB\/Deposit_3.depositB.grd9\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_4.depositB.act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiz"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="acc∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiz"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositB/Deposit_4.depositB.act2/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiz"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCash)∧atmCash∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.action#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.action#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiz"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaiz" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="processedDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmCash'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaiz*" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaiz" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(atmDepAmB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="acc∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element3"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaiz0" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaiz*" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="atmDepAmB(a)=am" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c ↦ acc∈cardAcct" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈dom(atmCash)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="a∈recvReqDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="a∈dom(cardInAtmB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element10"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaiz" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaiz0" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="cardInAtmB(a)=c" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element11"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="sendRespDeposit/BalTransfer_4.inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai{"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendRespDeposit\/BalTransfer_4.inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendRespDeposit/BalTransfer_4.inv28/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai{"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmB)(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendRespDeposit\/BalTransfer_4.inv28\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendRespDeposit/Deposit_4.inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai{"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ atmDepAmB∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendRespDeposit\/Deposit_4.inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD16"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendRespDeposit/Deposit_4.inv7/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai{"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom({a} ⩤ cardInAtmB)⇒cardInAtm(a0)=({a} ⩤ cardInAtmB)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendRespDeposit\/Deposit_4.inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cb|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendRespDeposit/Deposit_4.inv10/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai{"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ atmDepAmB)∧a0∈recvReqDep ∖ {a}⇒a0∈dom(atmDepAm)∧atmDepAm(a0)=({a} ⩤ atmDepAmB)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendRespDeposit\/Deposit_4.inv10\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD21"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendRespDeposit/Deposit_4.inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai{"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendRespDeposit\/Deposit_4.inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD23"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendRespDeposit/inv1/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai{"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#sendRespDeposit\/inv1\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD25"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFai{" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="processedDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="sendRespDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="atmDepAmB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvReqDep'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFai{" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFai{" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈dom(atmDepAmB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(cardInAtmB)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈processedDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈recvReqDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element15|org.eventb.core.guard#internal_element4"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="recvRespDeposit/BalTransfer_4.inv2/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai\|"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvRespDeposit\/BalTransfer_4.inv2\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvRespDeposit/BalTransfer_4.inv27/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai\|"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmM)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmM)(a0)=cardInAtm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvRespDeposit\/BalTransfer_4.inv27\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C^|org.eventb.core.poPredicate#PRD14"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvRespDeposit/Deposit_4.inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai\|"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ atmDepAmM∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvRespDeposit\/Deposit_4.inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca|org.eventb.core.poPredicate#PRD17"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvRespDeposit/Deposit_4.inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai\|"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtm)∧a0∈dom({a} ⩤ cardInAtmM)⇒cardInAtm(a0)=({a} ⩤ cardInAtmM)(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvRespDeposit\/Deposit_4.inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cc|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvRespDeposit/Deposit_4.inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai\|"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ atmDepAmM)⇒a0∈dom(atmDepAm)∧({a} ⩤ atmDepAmM)(a0)=atmDepAm(a0)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element21"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvRespDeposit\/Deposit_4.inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cd|org.eventb.core.poPredicate#PRD20"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvRespDeposit/Deposit_4.inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai\|"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmM)⇒a0∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvRespDeposit\/Deposit_4.inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD22"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="recvRespDeposit/Deposit_4.inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai\|"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM⊆cardInAtm" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_3.bum|org.eventb.core.machineFile#ATM_TD_3|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poSequent#recvRespDeposit\/Deposit_4.inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD24"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFai|" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="sendRespDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmDepAmM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFai|" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFai\|" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈dom(atmDepAmM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(cardInAtmM)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈sendRespDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element16|org.eventb.core.guard#internal_element3"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="depositATM/Deposit_3.depositATM.act2/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai}"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element17|org.eventb.core.action#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element17|org.eventb.core.action#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFai}"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFai}" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespDep'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFai}" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFai}" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈recvRespDep" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element17|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(atmDepAm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element17|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="atmDepAm(a)=am" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.event#internal_element17|org.eventb.core.guard#internal_element3"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_CW" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="srcAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="destAccM∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="srcAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="destAccB∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element8"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_CX" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CW" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element9"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_CY" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CX" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element10"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_CZ" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CY" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="∀a⦂ATM·a∈dom(srcAccM)⇒a∈dom(srcAcc)∧srcAccM(a)=srcAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element11"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_C[" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_CZ" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(srcAccB)⇒a∈dom(srcAccM)∧srcAccB(a)=srcAccM(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element12"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_C\" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C[" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="∀a⦂ATM·a∈dom(destAccM)⇒a∈dom(destAcc)∧destAccM(a)=destAcc(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element13"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_C]" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C\\" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(destAccB)⇒a∈dom(destAccM)∧destAccB(a)=destAccM(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element14"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_C^" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C]" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtmM)⇒a∈dom(cardInAtm)∧cardInAtmM(a)=cardInAtm(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element15"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_Ca" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_C^" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(cardInAtmB)⇒a∈dom(cardInAtm)∧cardInAtmB(a)=cardInAtm(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poPredicate name="PRD16" org.eventb.core.predicate="atmDepAmB∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poPredicate name="PRD17" org.eventb.core.predicate="atmDepAmM∈ATM ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element18"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_Cb" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Ca" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD18" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtm)∧a∈dom(cardInAtmB)⇒cardInAtm(a)=cardInAtmB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element19"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_Cc" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cb" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD19" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtm)∧a∈dom(cardInAtmM)⇒cardInAtm(a)=cardInAtmM(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element20"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPATM_TD_4_Cd" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cc" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD20" org.eventb.core.predicate="∀a⦂ATM·a∈dom(atmDepAmM)⇒a∈dom(atmDepAm)∧atmDepAmM(a)=atmDepAm(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element21"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ALLHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_4.bpo|org.eventb.core.poFile#ATM_TD_4|org.eventb.core.poPredicateSet#HYPATM_TD_4_Cd" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD21" org.eventb.core.predicate="∀a⦂ATM·a∈dom(atmDepAmB)∧a∈recvReqDep⇒a∈dom(atmDepAm)∧atmDepAm(a)=atmDepAmB(a)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element22"/>
<org.eventb.core.poPredicate name="PRD22" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtmM)⇒a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element23"/>
<org.eventb.core.poPredicate name="PRD23" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtmB)⇒a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element24"/>
<org.eventb.core.poPredicate name="PRD24" org.eventb.core.predicate="cardInAtmM⊆cardInAtm" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element25"/>
<org.eventb.core.poPredicate name="PRD25" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtmB)⇒a∈dom(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_4.bum|org.eventb.core.machineFile#ATM_TD_4|org.eventb.core.invariant#internal_element37"/>
</org.eventb.core.poPredicateSet>
</org.eventb.core.poFile>
