<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.poFile org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="CTXHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="ATM" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ABSHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poPredicate name="respTransferFaim" org.eventb.core.predicate="transferOkA∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.invariant#_FRFscAY9EeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="respTransferFain" org.eventb.core.predicate="transferFailA∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.invariant#_btYp4w0NEeCDh_sKUTn4vw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="INITIALISATION/inv3/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv6/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv7/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))∈ℙ(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv8/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv11/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×BOOL))∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv15/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))⊆(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv16/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM))⊆(∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv18/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM),∅ ⦂ ℙ(ATM))" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#INITIALISATION\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaim" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOkA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFailA'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaim" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaim" org.eventb.core.poStamp="1"/>
<org.eventb.core.poSequent name="ReqTransfer/inv3/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer∪{a}∈ℙ(trans∪{a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv6/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk∈ℙ(trans∪{a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv7/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail∈ℙ(trans∪{a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv8/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="trAmount{a ↦ am}∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="ReqTransfer/inv18/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans∪{a},reqTransfer∪{a},transferOk,transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#ReqTransfer\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFain" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFain" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFain" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q7PwPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∉trans" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q9E8PifEd-KyJ1Ywzx_fQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RespTransferOk/inv6/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk∪{a}∈ℙ(trans)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferOk\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferOk/inv15/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferOk ∖ {a}⊆transferOkA" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferOk\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferOk/inv18/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk ∖ {a},transferFail,respTransferOk∪{a},respTransferFail)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferOk\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaio" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaio" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaio" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈transferOk" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4rHdAfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∉transferFail" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rG18PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_fWvycAZYEeC9GJs-VyssYx"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferFails/grd16/WD" org.eventb.core.accurate="false" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaip)"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmount)∧trAmount∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaip)"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/inv3/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer ∖ {a}∈ℙ(trans)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFails\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/inv16/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferFail∪{a}⊆transferFailA" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFails\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/inv18/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans,reqTransfer ∖ {a},transferOk,transferFail∪{a},respTransferOk,respTransferFail)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFails\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaip" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrespTransferFaip)" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaip" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_eHjV2uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(trAmount)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fW15EAZYEeC9GJs-VyssYw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaip" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTHYPrespTransferFaip)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am=trAmount(a)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈reqTransfer" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_3G4fkAJiEeC3zaFk15pOHQ"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a∉transferFail" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fW2gIAZYEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∉transferOk" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_CQkuoRNrEeCky5OpqeHuBQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RespTransferFail/inv7/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail∪{a}∈ℙ(trans)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferFail\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferFail/inv16/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transferFail ∖ {a}⊆transferFailA" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferFail\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RespTransferFail/inv18/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail ∖ {a},respTransferOk,respTransferFail∪{a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#RespTransferFail\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFaiq" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFaiq" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFaiq" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈transferFail" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4rQm8PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∉transferOk" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_fW5jcAZYEeC9GJs-VyssYx"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferOKAtm/inv3/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer∈ℙ(trans ∖ {a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/inv6/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk ∖ {a}∈ℙ(trans ∖ {a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/inv7/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail∈ℙ(trans ∖ {a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/inv11/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transOkAtm{a ↦ TRUE}∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferOKAtm/inv18/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans ∖ {a},reqTransfer,transferOk,transferFail,respTransferOk ∖ {a},respTransferFail)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferOKAtm\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFair" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFair" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFair" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈respTransferOk" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4rhssPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∉respTransferFail" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_gRnMIAZAEeC9GJs-VyssYx"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferFailsAtm/inv3/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="reqTransfer∈ℙ(trans ∖ {a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/inv6/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferOk∈ℙ(trans ∖ {a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/inv7/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="respTransferFail ∖ {a}∈ℙ(trans ∖ {a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv7\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/inv11/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transOkAtm{a ↦ FALSE}∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFailsAtm/inv18/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTALLHYPrespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="partition(trans ∖ {a},reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail ∖ {a})" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poSequent#TransferFailsAtm\/inv18\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrespTransferFais" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="respTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrespTransferFais" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#EVTIDENTrespTransferFais" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈respTransferFail" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4rnMQPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∉respTransferOk" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_eHtG0ewJEd-V6twkc9HfSx"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ALLHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_2.bpo|org.eventb.core.poFile#BalTransfer_2|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="trans∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfSz"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="reqTransfer∈ℙ(trans)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="respTransferOk∈ℙ(trans)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="respTransferFail∈ℙ(trans)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="transferOk⊆transferOkA" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="transferFail⊆transferFailA" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
</org.eventb.core.poPredicateSet>
</org.eventb.core.poFile>
