<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.poFile org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="CTXHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="ACCOUNT" org.eventb.core.type="ℙ(ACCOUNT)"/>
<org.eventb.core.poIdentifier name="ATM" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="CARD" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ABSHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="atmCashA" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmWDAm" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="cardInAtm" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="recvRespWDFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard" org.eventb.core.type="ℙ(CARD)"/>
<org.eventb.core.poIdentifier name="withdrawFailMsg" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="withdrawOkMsg" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="INITIALISATION/Withdraw_2_inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#:"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#A"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#:"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#INITIALISATION\/Withdraw_2_inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Withdraw_2_inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="ATM × {0}∈ATM → ℕ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#;"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#A"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#;"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#INITIALISATION\/Withdraw_2_inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Withdraw_2_inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×BOOL))∈ATM ⇸ BOOL" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#="/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#A"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#="/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#INITIALISATION\/Withdraw_2_inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Withdraw_2_inv14/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×BOOL))∈ATM ⇸ BOOL" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#&gt;"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#A"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#&gt;"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#INITIALISATION\/Withdraw_2_inv14\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Withdraw_2_inv21/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#?"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#A"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#?"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#INITIALISATION\/Withdraw_2_inv21\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD14"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/Withdraw_2_inv22/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀c⦂CARD·c∈ran(∅ ⦂ ℙ(ATM×CARD))⇒c∈(∅ ⦂ ℙ(CARD))" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#@"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#A"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#@"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#INITIALISATION\/Withdraw_2_inv22\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD15"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsh" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="withdrawFailMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="withdrawOkMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmWDAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="cardInAtm'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard'" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsh" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsh" org.eventb.core.poStamp="1"/>
<org.eventb.core.poSequent name="SendReqWithdraw/grd8/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsi-"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#0"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#0"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsi-"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqWithdraw/Withdraw_2_inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsi"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmWDAm{a ↦ am}∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#:"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#:"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#SendReqWithdraw\/Withdraw_2_inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsi" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="atmWDAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPwithdrawFailMsi-" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsi" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="c∈CARD" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#3"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#4"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#+"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#,"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#-"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#."/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="a ↦ c∈cardInAtm" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#\/"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsi" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsi-" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="am≤atmCashA(a)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#0"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="a∉trans" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#B|org.eventb.core.guard#1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsj" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsj" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsj" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#C|org.eventb.core.guard#,"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsk" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsk" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsk" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#D|org.eventb.core.guard#,"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="withdrawOKAtm/grd11/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsl*"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.guard#+"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.guard#+"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsl*"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOKAtm/Withdraw_2_inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsl"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmCashA{a ↦ atmCashA(a) − am}∈ATM → ℕ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#;"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#;"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#withdrawOKAtm\/Withdraw_2_inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD11"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOKAtm/Withdraw_2_inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsl"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="withdrawOkMsg{a ↦ TRUE}∈ATM ⇸ BOOL" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#="/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#="/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#withdrawOKAtm\/Withdraw_2_inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOKAtm/act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsl"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.action#-"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.action#-"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsl"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsl" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="withdrawOkMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPwithdrawFailMsl*" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsl" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.guard#1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.guard#2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(atmCashA)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.guard#)"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.guard#*"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsl" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsl*" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="am≤atmCashA(a)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.guard#+"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈recvRespWDOk" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#E|org.eventb.core.guard#,"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="withdrawFailsAtm/Withdraw_2_inv14/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsm"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="withdrawFailMsg{a ↦ TRUE}∈ATM ⇸ BOOL" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#&gt;"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#F"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#&gt;"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poSequent#withdrawFailsAtm\/Withdraw_2_inv14\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsm" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="withdrawFailMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="recvRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsm" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsm" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#F|org.eventb.core.guard#,"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈recvRespWDFail" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#F|org.eventb.core.guard#("/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsn" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsn" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsn" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="c∈CARD" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#G|org.eventb.core.guard#."/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#G|org.eventb.core.guard#\/"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#G|org.eventb.core.guard#*"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#G|org.eventb.core.guard#,"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#G|org.eventb.core.guard#-"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMso" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMso" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMso" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="c∈CARD" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#H|org.eventb.core.guard#3"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#H|org.eventb.core.guard#4"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#H|org.eventb.core.guard#+"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#H|org.eventb.core.guard#,"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#H|org.eventb.core.guard#-"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#H|org.eventb.core.guard#\/"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.event#H|org.eventb.core.guard#2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ALLHYP" org.eventb.core.parentSet="/Withdraw/mATM_W.bpo|org.eventb.core.poFile#mATM_W|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="atmCashA∈ℙ(ATM × ℤ)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#0"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="atmWDAm∈ℙ(ATM × ℤ)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#1"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="cardInAtm∈ℙ(ATM × CARD)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#2"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="trans∈ℙ(ATM)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#3"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="recvRespWDOk∈ℙ(ATM)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#4"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="recvRespWDFail∈ℙ(ATM)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#5"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="withdrawOkMsg∈ℙ(ATM × BOOL)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#6"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="withdrawFailMsg∈ℙ(ATM × BOOL)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#7"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="validCard∈ℙ(CARD)" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#8"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="validCard⊆CARD" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#9"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="atmWDAm∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#:"/>
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="atmCashA∈ATM → ℕ" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#;"/>
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="withdrawOkMsg∈ATM ⇸ BOOL" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#="/>
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="withdrawFailMsg∈ATM ⇸ BOOL" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#&gt;"/>
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#?"/>
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="∀c⦂CARD·c∈ran(cardInAtm)⇒c∈validCard" org.eventb.core.source="/Withdraw/mATM_W.bum|org.eventb.core.machineFile#mATM_W|org.eventb.core.invariant#@"/>
</org.eventb.core.poPredicateSet>
</org.eventb.core.poFile>
