<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.poFile org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="CTXHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="ACCOUNT" org.eventb.core.type="ℙ(ACCOUNT)"/>
<org.eventb.core.poIdentifier name="CARD" org.eventb.core.type="ℙ(CARD)"/>
<org.eventb.core.poIdentifier name="ATM" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ABSHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="atmCash" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCashA" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmWDAm" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmWDAmB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmWDAmM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="bal" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="cardAcct" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="cardInAtm" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="cardInAtmB" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="cardInAtmM" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="recvReqWD" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqWD" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respWDfail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respWDok" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendReqWD" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespWDFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespWDOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard" org.eventb.core.type="ℙ(CARD)"/>
<org.eventb.core.poIdentifier name="withdrawFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="withdrawFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="withdrawFailMsg" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="withdrawOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="withdrawOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="withdrawOkMsg" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poPredicate name="withdrawFailMsh" org.eventb.core.predicate="bal∈ℙ(ACCOUNT × ℤ)" org.eventb.core.source="/Withdraw/Withdraw_0.bum|org.eventb.core.machineFile#Withdraw_0|org.eventb.core.invariant#*"/>
<org.eventb.core.poPredicate name="withdrawFailMsi" org.eventb.core.predicate="validCard∈ℙ(CARD)" org.eventb.core.source="/Withdraw/Withdraw_0.bum|org.eventb.core.machineFile#Withdraw_0|org.eventb.core.invariant#+"/>
<org.eventb.core.poPredicate name="withdrawFailMsj" org.eventb.core.predicate="cardAcct∈ℙ(CARD × ACCOUNT)" org.eventb.core.source="/Withdraw/Withdraw_0.bum|org.eventb.core.machineFile#Withdraw_0|org.eventb.core.invariant#,"/>
<org.eventb.core.poPredicate name="withdrawFailMsk" org.eventb.core.predicate="bal∈ACCOUNT ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_0.bum|org.eventb.core.machineFile#Withdraw_0|org.eventb.core.invariant#-"/>
<org.eventb.core.poPredicate name="withdrawFailMsl" org.eventb.core.predicate="cardAcct∈CARD ⇸ ACCOUNT" org.eventb.core.source="/Withdraw/Withdraw_0.bum|org.eventb.core.machineFile#Withdraw_0|org.eventb.core.invariant#."/>
<org.eventb.core.poPredicate name="withdrawFailMsm" org.eventb.core.predicate="validCard⊆CARD" org.eventb.core.source="/Withdraw/Withdraw_0.bum|org.eventb.core.machineFile#Withdraw_0|org.eventb.core.invariant#\/"/>
<org.eventb.core.poPredicate name="withdrawFailMsn" org.eventb.core.predicate="atmCash∈ATM → ℕ" org.eventb.core.source="/Withdraw/Withdraw_1.bum|org.eventb.core.machineFile#Withdraw_1|org.eventb.core.invariant#_Oi3SglOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMso" org.eventb.core.predicate="withdrawOkA∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_1.bum|org.eventb.core.machineFile#Withdraw_1|org.eventb.core.invariant#_Oi2rdFOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMsp" org.eventb.core.predicate="withdrawFailA∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_1.bum|org.eventb.core.machineFile#Withdraw_1|org.eventb.core.invariant#_Oi3SgVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMsq" org.eventb.core.predicate="reqWD∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_MjPjIFOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMsr" org.eventb.core.predicate="respWDok∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_MjPjIVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMss" org.eventb.core.predicate="respWDfail∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_MjPjIlOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMst" org.eventb.core.predicate="atmWDAm∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_MjPjJVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMsu" org.eventb.core.predicate="atmCashA∈ATM → ℕ" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_MjQKMVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMsv" org.eventb.core.predicate="withdrawOkMsg∈ATM ⇸ BOOL" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_MjQKM1OnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMsw" org.eventb.core.predicate="withdrawFailMsg∈ATM ⇸ BOOL" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_MjQKNFOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="withdrawFailMsx" org.eventb.core.predicate="cardAcct∈CARD ↔ ACCOUNT" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_Cq_u0FOrEeCp_sWDnLAT7w"/>
<org.eventb.core.poPredicate name="withdrawFailMsy" org.eventb.core.predicate="withdrawOk⊆withdrawOkA" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_z9CjYIfxEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMsz" org.eventb.core.predicate="withdrawFail⊆withdrawFailA" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_z9CjYYfxEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMs{" org.eventb.core.predicate="trans∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_z9CjYofxEeCsjdVPpjFWxi"/>
<org.eventb.core.poPredicate name="withdrawFailMs|" org.eventb.core.predicate="cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_z9CjYofxEeCsjdVPpjFWxj"/>
<org.eventb.core.poPredicate name="withdrawFailMs}" org.eventb.core.predicate="∀c⦂CARD·c∈ran(cardInAtm)⇒c∈validCard" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_z9CjYofxEeCsjdVPpjFWxk"/>
<org.eventb.core.poPredicate name="withdrawFailMs~" org.eventb.core.predicate="partition(trans,reqWD,respWDok,respWDfail)" org.eventb.core.source="/Withdraw/Withdraw_2.bum|org.eventb.core.machineFile#Withdraw_2|org.eventb.core.invariant#_z9CjYofxEeCsjdVPpjFWxl"/>
<org.eventb.core.poPredicate name="withdrawFailMt'" org.eventb.core.predicate="sendReqWD∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.invariant#_LRnkgYfvEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMt(" org.eventb.core.predicate="recvReqWD∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.invariant#_LRnkgofvEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMt)" org.eventb.core.predicate="sendRespWDOk∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.invariant#_LRnkg4fvEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMt*" org.eventb.core.predicate="recvRespWDOk∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.invariant#_LRnkhIfvEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMt+" org.eventb.core.predicate="sendRespWDFail∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.invariant#_LRnkhYfvEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMt," org.eventb.core.predicate="recvRespWDFail∈ℙ(ATM)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.invariant#_LRoLkIfvEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMt-" org.eventb.core.predicate="partition(reqWD,sendReqWD,recvReqWD)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.invariant#_LRoLkYfvEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMt." org.eventb.core.predicate="partition(respWDok,sendRespWDOk,recvRespWDOk)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.invariant#_LRoLkofvEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="withdrawFailMt/" org.eventb.core.predicate="partition(respWDfail,sendRespWDFail,recvRespWDFail)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.invariant#_LRoLk4fvEeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="inv13/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtmB)∧a∈dom(cardInAtm)⇒cardInAtmB∈ATM ⇸ CARD∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="inv16/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COS"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtmM)∧a∈dom(cardInAtm)⇒cardInAtmM∈ATM ⇸ CARD∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COS"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="inv14/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COT"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(atmWDAmM)∧a∈dom(atmWDAm)⇒atmWDAmM∈ATM ⇸ ℤ∧atmWDAm∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COT"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="inv15/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COU"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(atmWDAmB)∧a∈recvReqWD∧a∈dom(atmWDAmM)⇒atmWDAmB∈ATM ⇸ ℤ∧atmWDAmM∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COU"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv4/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv4\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10Mof7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10Mof7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10M4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10M4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bQYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bQYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))⊆(∅ ⦂ ℙ(ATM×ℤ))" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bRIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bRIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×CARD))⇒a∈dom(∅ ⦂ ℙ(ATM×CARD))∧(∅ ⦂ ℙ(ATM×CARD))(a)=(∅ ⦂ ℙ(ATM×CARD))(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COS|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×CARD))⇒a∈dom(∅ ⦂ ℙ(ATM×CARD))∧(∅ ⦂ ℙ(ATM×CARD))(a)=(∅ ⦂ ℙ(ATM×CARD))(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COT|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv14/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×ℤ))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv14\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COU|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsh"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧a∈(∅ ⦂ ℙ(ATM))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#INITIALISATION\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsh" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="sendReqWD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="withdrawFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardAcct'" org.eventb.core.type="ℙ(CARD×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="atmWDAmM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCash'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="withdrawOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="withdrawFailMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="withdrawOkMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="atmWDAmB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvReqWD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmWDAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="cardInAtm'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard'" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsh" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsh" org.eventb.core.poStamp="1"/>
<org.eventb.core.poSequent name="SendReqWithdraw/inv4/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsi"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtmM{a ↦ c}∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendReqWithdraw\/inv4\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqWithdraw/inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsi"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmWDAmM{a ↦ am}∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10M4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10M4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendReqWithdraw\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqWithdraw/inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsi"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtmM{a ↦ c}∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bQYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bQYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendReqWithdraw\/inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqWithdraw/inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsi"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmWDAmM{a ↦ am}⊆atmWDAm{a ↦ am}" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bRIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bRIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendReqWithdraw\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqWithdraw/inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsi"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmM{a ↦ c})⇒a0∈dom(cardInAtm)∧(cardInAtmM{a ↦ c})(a0)=cardInAtm(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendReqWithdraw\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COT|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqWithdraw/inv14/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsi"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(atmWDAmM{a ↦ am})⇒a0∈dom(atmWDAm{a ↦ am})∧(atmWDAmM{a ↦ am})(a0)=(atmWDAm{a ↦ am})(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendReqWithdraw\/inv14\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COU|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqWithdraw/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsi"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(atmWDAmB)∧a0∈recvReqWD⇒a0∈dom(atmWDAmM{a ↦ am})∧atmWDAmB(a0)=(atmWDAmM{a ↦ am})(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendReqWithdraw\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsi" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="sendReqWD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="atmWDAmM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="atmWDAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsi" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsi" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg|org.eventb.core.guard#_1j9WNVOhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg|org.eventb.core.guard#internal1"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg|org.eventb.core.guard#internal2"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg|org.eventb.core.guard#internal3"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a ↦ c∈cardInAtm" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg|org.eventb.core.guard#_1j99Q1OhEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="am≤atmCashA(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg|org.eventb.core.guard#_1j9WNVOhEeCu5ZBiYa8OYh"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="a∉trans" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_1j9WMFOhEeCu5ZBiYa8OYg|org.eventb.core.guard#_1j99RFOhEeCu5ZBiYa8OYg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RecvReqWD/grd5/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsj*"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmWDAmM)∧atmWDAmM∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg|org.eventb.core.guard#_z_8h4If7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg|org.eventb.core.guard#_z_8h4If7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsj*"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqWD/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsj"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="cardInAtmB{a ↦ c}∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvReqWD\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqWD/inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsj"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmWDAmB{a ↦ am}∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10Mof7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10Mof7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvReqWD\/inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqWD/inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsj"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(cardInAtmB{a ↦ c})⇒a0∈dom(cardInAtm)∧(cardInAtmB{a ↦ c})(a0)=cardInAtm(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvReqWD\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COS|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqWD/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsj"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(atmWDAmB{a ↦ am})∧a0∈recvReqWD∪{a}⇒a0∈dom(atmWDAmM)∧(atmWDAmB{a ↦ am})(a0)=atmWDAmM(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvReqWD\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsj" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="sendReqWD'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="atmWDAmB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="recvReqWD'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPwithdrawFailMsj*" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsj" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈sendReqWD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg|org.eventb.core.guard#_rs5x0of0EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a ↦ c∈cardInAtmM" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg|org.eventb.core.guard#_z_761If7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(atmWDAmM)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg|org.eventb.core.guard#_z_761of7EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsj" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsj*" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am=atmWDAmM(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs5x0If0EeCsjdVPpjFWxg|org.eventb.core.guard#_z_8h4If7EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="withdrawOK/grd9/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsk."/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmWDAmB)∧atmWDAmB∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal4"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsk."/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOK/grd16/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsk0"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtmB)∧cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9G00YfxEeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9G00YfxEeCsjdVPpjFWxh"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsk0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOK/grd8/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsk"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmWDAm)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_antvAlOdEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_antvAlOdEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#withdrawOK\/grd8\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOK/grd9/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsk"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="am=atmWDAm(a)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_anuWEFOdEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_anuWEFOdEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#withdrawOK\/grd9\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOK/grd17/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsk"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9G00YfxEeCsjdVPpjFWxi"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9G00YfxEeCsjdVPpjFWxi"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#withdrawOK\/grd17\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOK/grd16/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsk"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9G00YfxEeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9G00YfxEeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#withdrawOK\/grd16\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOK/act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsk"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="acc∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.action#_Oi6V0VOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.action#_Oi6V0VOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsk"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOK/act2/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsk"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCash)∧atmCash∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.action#_Oi6V0lOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.action#_Oi6V0lOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsk"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsk" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmCash'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="withdrawOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPwithdrawFailMsk." org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsk" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_Oi4go1OcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal1"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="acc∈dom(bal)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_Oi4gpVOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="bal(acc)≥am" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_Oi5HsFOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal2"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="atmCash(a)≥am" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_antvAFOdEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="a∈dom(atmWDAmB)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal3"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPwithdrawFailMsk0" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsk." org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="am=atmWDAmB(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal4"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="a∈dom(cardInAtmB)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9G00YfxEeCsjdVPpjFWxi"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsk" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsk0" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="c=cardInAtmB(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9G00YfxEeCsjdVPpjFWxh"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="c ↦ acc∈cardAcct" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9G00YfxEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="a∉withdrawOk" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_MjVpwFOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="a∈recvReqWD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal7"/>
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="a∈recvReqWD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi35kVOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_rs7nAIf0EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="SendRespWDok/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsl"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendRespWDok\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespWDok/inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsl"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ atmWDAmB∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10Mof7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10Mof7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendRespWDok\/inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespWDok/inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsl"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmB)(a0)=cardInAtm(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendRespWDok\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COS|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespWDok/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsl"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ atmWDAmB)∧a0∈recvReqWD ∖ {a}⇒a0∈dom(atmWDAmM)∧({a} ⩤ atmWDAmB)(a0)=atmWDAmM(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendRespWDok\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsl" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="sendRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="withdrawOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmWDAmB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvReqWD'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsl" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsl" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈withdrawOk" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_MjWQ0lOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈recvReqWD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjWQ0FOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_rs81IYf0EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RecvRespWDOk/inv4/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsm"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDOk\/inv4\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDOk/inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsm"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ atmWDAmM∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10M4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10M4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDOk\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDOk/inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsm"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bQYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bQYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDOk\/inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDOk/inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsm"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ atmWDAmM⊆atmWDAm" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bRIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bRIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDOk\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDOk/inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsm"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmM)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmM)(a0)=cardInAtm(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDOk\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COT|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDOk/inv14/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsm"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ atmWDAmM)⇒a0∈dom(atmWDAm)∧({a} ⩤ atmWDAmM)(a0)=atmWDAm(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDOk\/inv14\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COU|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDOk/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsm"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(atmWDAmB)∧a0∈recvReqWD⇒a0∈dom({a} ⩤ atmWDAmM)∧atmWDAmB(a0)=({a} ⩤ atmWDAmM)(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDOk\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsm" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="sendRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmWDAmM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsm" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsm" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈sendRespWDOk" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg|org.eventb.core.guard#_rs9cMof0EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(cardInAtmM)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg|org.eventb.core.guard#_0AAzUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(atmWDAmM)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg|org.eventb.core.guard#_0AAzU4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∉recvReqWD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rs9cMIf0EeCsjdVPpjFWxg|org.eventb.core.guard#_0AAzVIf7EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="withdrawFail/grd11/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsn\/"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmWDAmB)∧atmWDAmB∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal5"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsn\/"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawFail/grd13/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsn2"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtmB)∧cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_6HASoofuEeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_6HASoofuEeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsn2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawFail/grd10/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsn"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmWDAm)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal4"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#withdrawFail\/grd10\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawFail/grd11/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsn"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="am=atmWDAm(a)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal5"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal5"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#withdrawFail\/grd11\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawFail/grd18/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsn"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_rs_4cIf0EeCsjdVPpjFWxi"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_rs_4cIf0EeCsjdVPpjFWxi"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#withdrawFail\/grd18\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawFail/grd17/GRD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsn"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="c=cardInAtm(a)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_rs_4cIf0EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_rs_4cIf0EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#withdrawFail\/grd17\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsn" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="withdrawFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPwithdrawFailMsn/" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsn" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_Oi7j8VOcEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal1"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="acc∈dom(bal)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_anvkMlOdEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am&gt;bal(acc)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal2"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c ↦ acc∈cardAcct" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_anvkNFOdEeCu5ZBiYa8OYi"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal3"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="am≤atmCash(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_anvkNFOdEeCu5ZBiYa8OYh"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="a∈dom(atmWDAmB)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal4"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPwithdrawFailMsn2" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsn\/" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="am=atmWDAmB(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#internal5"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="a∈recvReqWD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_rs_4cIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="a∈dom(cardInAtmB)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_6HASoYfuEeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsn" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTHYPwithdrawFailMsn2" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="cardInAtmB(a)=c" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_Oi684FOcEeCu5ZBiYa8OYg|org.eventb.core.guard#_6HASoofuEeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="SendRespWDfail/inv3/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMso"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendRespWDfail\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespWDfail/inv5/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMso"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ atmWDAmB∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10Mof7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10Mof7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendRespWDfail\/inv5\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespWDfail/inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMso"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmB)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmB)(a0)=cardInAtm(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendRespWDfail\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COS|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespWDfail/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMso"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ atmWDAmB)∧a0∈recvReqWD ∖ {a}⇒a0∈dom(atmWDAmM)∧({a} ⩤ atmWDAmB)(a0)=atmWDAmM(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#SendRespWDfail\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMso" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="cardInAtmB'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="withdrawFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="atmWDAmB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvReqWD'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMso" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMso" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈withdrawFail" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_MjYGA1OnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈recvReqWD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_MjYGBFOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(cardInAtmB)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_0AD2oIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈dom(atmWDAmB)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYGAVOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_0AD2oof7EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RecvRespWDFail/inv4/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsp"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDFail\/inv4\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDFail/inv6/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsp"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ atmWDAmM∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10M4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10M4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDFail\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDFail/inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsp"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bQYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bQYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDFail\/inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD4"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDFail/inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsp"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ atmWDAmM⊆atmWDAm" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bRIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bRIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDFail\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDFail/inv16/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsp"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ cardInAtmM)⇒a0∈dom(cardInAtm)∧({a} ⩤ cardInAtmM)(a0)=cardInAtm(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDFail\/inv16\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COT|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDFail/inv14/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsp"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ atmWDAmM)⇒a0∈dom(atmWDAm)∧({a} ⩤ atmWDAmM)(a0)=atmWDAm(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDFail\/inv14\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COU|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespWDFail/inv15/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsp"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(atmWDAmB)∧a0∈recvReqWD⇒a0∈dom({a} ⩤ atmWDAmM)∧atmWDAmB(a0)=({a} ⩤ atmWDAmM)(a0)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poSequent#RecvRespWDFail\/inv15\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsp" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="sendRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmWDAmM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="cardInAtmM'" org.eventb.core.type="ℙ(ATM×CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsp" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsp" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈sendRespWDFail" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg|org.eventb.core.guard#_rtBGkof0EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(cardInAtmM)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg|org.eventb.core.guard#_0AFEwYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(atmWDAmM)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg|org.eventb.core.guard#_0AFEw4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∉recvReqWD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_rtBGkIf0EeCsjdVPpjFWxg|org.eventb.core.guard#_0AFr0If7EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="withdrawOKAtm/act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYtElOnEeCu5ZBiYa8OYg|org.eventb.core.action#_MjYtFVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYtElOnEeCu5ZBiYa8OYg|org.eventb.core.action#_MjYtFVOnEeCu5ZBiYa8OYg"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMsq"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsq" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="withdrawOkMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsq" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsq" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈dom(atmCashA)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYtElOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9LGRIfxEeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYtElOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9MUYIfxEeCsjdVPpjFWxh"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am≤atmCashA(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYtElOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_z9MUYIfxEeCsjdVPpjFWxi"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈recvRespWDOk" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYtElOnEeCu5ZBiYa8OYg|org.eventb.core.guard#_6HCu4YfuEeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMsr" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="withdrawFailMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="recvRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMsr" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMsr" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈recvRespWDFail" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.event#_MjYtF1OnEeCu5ZBiYa8OYg|org.eventb.core.guard#_MjZUIVOnEeCu5ZBiYa8OYg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="Deposit/act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMss"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="acc∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_mdc1ObEeCu5ZBiYa8OYg|org.eventb.core.action#_h_fkAI1oEeCql_Cw8lZNHZ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_mdc1ObEeCu5ZBiYa8OYg|org.eventb.core.action#_h_fkAI1oEeCql_Cw8lZNHZ"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMss"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMss" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMss" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMss" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_mdc1ObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_fkAI1oEeCql_Cw8lZNHU"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="acc∈dom(bal)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_mdc1ObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_fkAI1oEeCql_Cw8lZNHV"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_mdc1ObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_fkAI1oEeCql_Cw8lZNHW"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_mdc1ObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_fkAI1oEeCql_Cw8lZNHX"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c ↦ acc∈cardAcct" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_mdc1ObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_fkAI1oEeCql_Cw8lZNHY"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="Transfer/act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMst"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="dest_ac∈dom(bal)∧bal∈ACCOUNT ⇸ ℤ∧src_ac∈dom(bal)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.action#_h_gLEI1oEeCql_Cw8lZNH_"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.action#_h_gLEI1oEeCql_Cw8lZNH_"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTALLHYPwithdrawFailMst"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTwithdrawFailMst" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="bal'" org.eventb.core.type="ℙ(ACCOUNT×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPwithdrawFailMst" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#EVTIDENTwithdrawFailMst" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_gLEI1oEeCql_Cw8lZNHV"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_gLEI1oEeCql_Cw8lZNHW"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_gLEI1oEeCql_Cw8lZNHX"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="c ↦ src_ac∈cardAcct" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_gLEI1oEeCql_Cw8lZNHY"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_gLEI1oEeCql_Cw8lZNHZ"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="src_ac∈dom(bal)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_gLEI1oEeCql_Cw8lZNH["/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="dest_ac∈dom(bal)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_gLEI1oEeCql_Cw8lZNH\\"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_gLEI1oEeCql_Cw8lZNH]"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="am&lt;bal(src_ac)" org.eventb.core.source="/Withdraw/Withdraw_3.bum|org.eventb.core.machineFile#Withdraw_3|org.eventb.core.event#_T_nrklObEeCu5ZBiYa8OYg|org.eventb.core.guard#_h_gLEI1oEeCql_Cw8lZNH^"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPWithdraw_COR" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="cardInAtmB∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MIf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10MYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="atmWDAmB∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10Mof7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="atmWDAmM∈ATM ⇸ ℕ" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_10M4f7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="cardInAtmM∈ATM ⇸ CARD" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bQYf7EeCsjdVPpjFWxg"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="atmWDAmM⊆atmWDAm" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_2bRIf7EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPWithdraw_COS" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COR" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtmB)⇒a∈dom(cardInAtm)∧cardInAtmB(a)=cardInAtm(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUIf7EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPWithdraw_COT" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COS" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="∀a⦂ATM·a∈dom(cardInAtmM)⇒a∈dom(cardInAtm)∧cardInAtmM(a)=cardInAtm(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxi"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPWithdraw_COU" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COT" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="∀a⦂ATM·a∈dom(atmWDAmM)⇒a∈dom(atmWDAm)∧atmWDAmM(a)=atmWDAm(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxg"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ALLHYP" org.eventb.core.parentSet="/Withdraw/Withdraw_4.bpo|org.eventb.core.poFile#Withdraw_4|org.eventb.core.poPredicateSet#HYPWithdraw_COU" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="∀a⦂ATM·a∈dom(atmWDAmB)∧a∈recvReqWD⇒a∈dom(atmWDAmM)∧atmWDAmB(a)=atmWDAmM(a)" org.eventb.core.source="/Withdraw/Withdraw_4.bum|org.eventb.core.machineFile#Withdraw_4|org.eventb.core.invariant#_z_3CUYf7EeCsjdVPpjFWxh"/>
</org.eventb.core.poPredicateSet>
</org.eventb.core.poFile>
