<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.poFile org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="CTXHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="ACCOUNT" org.eventb.core.type="ℙ(ACCOUNT)"/>
<org.eventb.core.poIdentifier name="ATM" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="CARD" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ABSHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="bal" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="cardAcct" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="cardInAtm" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="validCard" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="INITIALISATION/inv1/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCare"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ACCOUNT×ℤ))∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__COKMDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__COKMDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poSequent#INITIALISATION\/inv1\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv2/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCare"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(CARD×ACCOUNT))∈CARD ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwD24EeCAYsu3bd3gpA"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwD24EeCAYsu3bd3gpA"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poSequent#INITIALISATION\/inv2\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCare"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwT24EeCAYsu3bd3gpA"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwT24EeCAYsu3bd3gpA"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poSequent#INITIALISATION\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCare"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀c⦂CARD·c∈(∅ ⦂ ℙ(CARD))⇒c∈ran(∅ ⦂ ℙ(ATM×CARD))" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__CQmeDqkEeCEXI9UeGRwry"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__CQmeDqkEeCEXI9UeGRwry"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poSequent#INITIALISATION\/inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTvalidCare" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="cardAcct'" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="cardInAtm'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="validCard'" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPvalidCare" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTIDENTvalidCare" org.eventb.core.poStamp="1"/>
<org.eventb.core.poSequent name="Transfer/grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTHYPvalidCarf."/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="src_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxRTqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxRTqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTHYPvalidCarf."/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="Transfer/inv1/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCarf"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="bal{dest_ac ↦ bal(dest_ac)+am,src_ac ↦ bal(src_ac) − am}∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__COKMDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__COKMDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poSequent#Transfer\/inv1\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="Transfer/act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCarf"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="dest_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ∧src_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.action#__COxRjqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.action#__COxRjqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCarf"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTvalidCarf" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPvalidCarf." org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTIDENTvalidCarf" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COKNjqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxQDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxRjqkEeCEXI9UeGRwry"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="c ↦ src_ac∈cardAcct" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxRjqkEeCEXI9UeGRwrz"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxQTqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="src_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxQjqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="dest_ac∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxQzqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxRDqkEeCEXI9UeGRwrw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPvalidCarf" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTHYPvalidCarf." org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="am≤bal(src_ac)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__COKMjqkEeCEXI9UeGRwrw|org.eventb.core.guard#__COxRTqkEeCEXI9UeGRwrw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="Deposit/inv1/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCarg"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="bal{acc ↦ bal(acc)+am}∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__COKMDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__COKMDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poSequent#Deposit\/inv1\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="Deposit/act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCarg"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="acc∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw|org.eventb.core.action#__CPYVjqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw|org.eventb.core.action#__CPYVjqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTALLHYPvalidCarg"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTvalidCarg" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPvalidCarg" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#EVTIDENTvalidCarg" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw|org.eventb.core.guard#__CPYUzqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="acc∈dom(bal)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw|org.eventb.core.guard#__CPYVDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw|org.eventb.core.guard#__CPYVTqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw|org.eventb.core.guard#__CPYVjqkEeCEXI9UeGRwry"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c ↦ acc∈cardAcct" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.event#__CPYUDqkEeCEXI9UeGRwrw|org.eventb.core.guard#__CPYVjqkEeCEXI9UeGRwrz"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ALLHYP" org.eventb.core.parentSet="/ATMintegralRefined/ATM_TD_0.bpo|org.eventb.core.poFile#ATM_TD_0|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="bal∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__COKMDqkEeCEXI9UeGRwrw"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="cardAcct∈CARD ⇸ ACCOUNT" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwD24EeCAYsu3bd3gpA"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwT24EeCAYsu3bd3gpA"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="validCard⊆CARD" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#_RPaLwj24EeCAYsu3bd3gpA"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="∀c⦂CARD·c∈validCard⇒c∈ran(cardInAtm)" org.eventb.core.source="/ATMintegralRefined/ATM_TD_0.bum|org.eventb.core.machineFile#ATM_TD_0|org.eventb.core.invariant#__CQmeDqkEeCEXI9UeGRwry"/>
</org.eventb.core.poPredicateSet>
</org.eventb.core.poFile>
