<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.machineFile ch.ethz.eventb.decomposition.decomposed="true" org.eventb.core.configuration="ch.ethz.eventb.decomposition.mchBase" org.eventb.core.generated="true" version="5">
<org.eventb.core.variable name="'" org.eventb.core.identifier="validCard"/>
<org.eventb.core.variable name="(" org.eventb.core.identifier="cardInAtm"/>
<org.eventb.core.variable name=")" org.eventb.core.identifier="trAmount"/>
<org.eventb.core.variable name="*" org.eventb.core.identifier="transOkAtm"/>
<org.eventb.core.variable name="+" org.eventb.core.identifier="srcAcc"/>
<org.eventb.core.variable name="," org.eventb.core.identifier="destAcc"/>
<org.eventb.core.variable name="-" org.eventb.core.identifier="recvRespTransferOk"/>
<org.eventb.core.variable name="." org.eventb.core.identifier="recvRespTransferFail"/>
<org.eventb.core.variable name="/" org.eventb.core.identifier="trans"/>
<org.eventb.core.invariant name="0" org.eventb.core.label="typing_cardInAtm" org.eventb.core.predicate="cardInAtm ∈ ℙ(ATM × CARD)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="1" org.eventb.core.label="typing_trans" org.eventb.core.predicate="trans ∈ ℙ(ATM)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="2" org.eventb.core.label="typing_trAmount" org.eventb.core.predicate="trAmount ∈ ℙ(ATM × ℤ)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="3" org.eventb.core.label="typing_recvRespTransferOk" org.eventb.core.predicate="recvRespTransferOk ∈ ℙ(ATM)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="4" org.eventb.core.label="typing_transOkAtm" org.eventb.core.predicate="transOkAtm ∈ ℙ(ATM × BOOL)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="5" org.eventb.core.label="typing_recvRespTransferFail" org.eventb.core.predicate="recvRespTransferFail ∈ ℙ(ATM)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="6" org.eventb.core.label="typing_destAcc" org.eventb.core.predicate="destAcc ∈ ℙ(ATM × ACCOUNT)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="7" org.eventb.core.label="typing_validCard" org.eventb.core.predicate="validCard ∈ ℙ(CARD)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="8" org.eventb.core.label="typing_srcAcc" org.eventb.core.predicate="srcAcc ∈ ℙ(ATM × ACCOUNT)" org.eventb.core.theorem="true"/>
<org.eventb.core.invariant name="9" org.eventb.core.label="BalTransfer_0_IntegralATM_0_inv4" org.eventb.core.predicate="validCard ⊆  CARD"/>
<org.eventb.core.invariant name=":" org.eventb.core.label="BalTransfer_1_inv10" org.eventb.core.predicate="cardInAtm ∈  ATM ⇸ CARD"/>
<org.eventb.core.invariant name=";" org.eventb.core.label="BalTransfer_2_inv8" org.eventb.core.predicate="trAmount ∈ ATM ⇸ ℕ1"/>
<org.eventb.core.invariant name="=" org.eventb.core.label="BalTransfer_2_inv11" org.eventb.core.predicate="transOkAtm ∈ ATM ⇸ BOOL"/>
<org.eventb.core.invariant name="&gt;" org.eventb.core.label="BalTransfer_2_inv12" org.eventb.core.predicate="srcAcc ∈ ATM ⇸ ACCOUNT"/>
<org.eventb.core.invariant name="?" org.eventb.core.label="BalTransfer_2_inv13" org.eventb.core.predicate="destAcc ∈ ATM ⇸ ACCOUNT"/>
<org.eventb.core.invariant name="@" org.eventb.core.label="BalTransfer_2_inv17" org.eventb.core.predicate="∀ c · c ∈ ran(cardInAtm) ⇒ c ∈ validCard"/>
<org.eventb.core.event name="A" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="INITIALISATION">
<org.eventb.core.action name="'" org.eventb.core.assignment="validCard ≔ ∅" org.eventb.core.label="act4"/>
<org.eventb.core.action name="(" org.eventb.core.assignment="cardInAtm ≔ ∅" org.eventb.core.label="act7"/>
<org.eventb.core.action name=")" org.eventb.core.assignment="trAmount ≔ ∅" org.eventb.core.label="act18"/>
<org.eventb.core.action name="*" org.eventb.core.assignment="transOkAtm ≔ ∅" org.eventb.core.label="act21"/>
<org.eventb.core.action name="+" org.eventb.core.assignment="srcAcc ≔ ∅" org.eventb.core.label="act22"/>
<org.eventb.core.action name="," org.eventb.core.assignment="destAcc ≔ ∅" org.eventb.core.label="act23"/>
<org.eventb.core.action name="-" org.eventb.core.assignment="trans ≔ ∅" org.eventb.core.label="act30"/>
<org.eventb.core.action name="." org.eventb.core.assignment="recvRespTransferOk ≔  ∅" org.eventb.core.label="act24"/>
<org.eventb.core.action name="/" org.eventb.core.assignment="recvRespTransferFail ≔  ∅" org.eventb.core.label="act26"/>
</org.eventb.core.event>
<org.eventb.core.event name="B" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="SendReqTransfer">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="c"/>
<org.eventb.core.parameter name="(" org.eventb.core.identifier="src_ac"/>
<org.eventb.core.parameter name=")" org.eventb.core.identifier="dest_ac"/>
<org.eventb.core.parameter name="*" org.eventb.core.identifier="am"/>
<org.eventb.core.parameter name="+" org.eventb.core.identifier="a"/>
<org.eventb.core.guard name="8" org.eventb.core.label="typing_c" org.eventb.core.predicate="c ∈ CARD"/>
<org.eventb.core.guard name="9" org.eventb.core.label="typing_am" org.eventb.core.predicate="am ∈ ℤ"/>
<org.eventb.core.guard name="," org.eventb.core.label="grd1" org.eventb.core.predicate="src_ac ∈ ACCOUNT"/>
<org.eventb.core.guard name="-" org.eventb.core.label="grd2" org.eventb.core.predicate="dest_ac ∈ ACCOUNT"/>
<org.eventb.core.guard name="." org.eventb.core.label="grd3" org.eventb.core.predicate="am ∈ ℕ1"/>
<org.eventb.core.guard name="/" org.eventb.core.label="grd5" org.eventb.core.predicate="src_ac ≠ dest_ac"/>
<org.eventb.core.guard name="0" org.eventb.core.label="grd4" org.eventb.core.predicate="c ∈ validCard"/>
<org.eventb.core.guard name="1" org.eventb.core.label="grd7" org.eventb.core.predicate="a ↦ c ∈ cardInAtm"/>
<org.eventb.core.guard name="2" org.eventb.core.label="grd8" org.eventb.core.predicate="a ∈ ATM"/>
<org.eventb.core.guard name="3" org.eventb.core.label="grd11" org.eventb.core.predicate="a ∉ trans"/>
<org.eventb.core.action name="4" org.eventb.core.assignment="trAmount(a) ≔ am" org.eventb.core.label="act2"/>
<org.eventb.core.action name="5" org.eventb.core.assignment="srcAcc(a) ≔ src_ac" org.eventb.core.label="act3"/>
<org.eventb.core.action name="6" org.eventb.core.assignment="destAcc(a) ≔ dest_ac" org.eventb.core.label="act4"/>
<org.eventb.core.action name="7" org.eventb.core.assignment="trans ≔ trans ∪ {a}" org.eventb.core.label="act11"/>
</org.eventb.core.event>
<org.eventb.core.event name="C" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="RecvRespTransferOk">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="a"/>
<org.eventb.core.action name=")" org.eventb.core.assignment="recvRespTransferOk ≔  recvRespTransferOk ∪ {a}" org.eventb.core.label="act1"/>
<org.eventb.core.guard name="*" org.eventb.core.label="typing_a" org.eventb.core.predicate="a ∈ ATM"/>
</org.eventb.core.event>
<org.eventb.core.event name="D" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="RecvRespTransferFail">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="a"/>
<org.eventb.core.action name=")" org.eventb.core.assignment="recvRespTransferFail ≔  recvRespTransferFail ∪ {a}" org.eventb.core.label="act1"/>
<org.eventb.core.guard name="*" org.eventb.core.label="typing_a" org.eventb.core.predicate="a ∈ ATM"/>
</org.eventb.core.event>
<org.eventb.core.event name="E" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="TransferOKAtm">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="a"/>
<org.eventb.core.guard name="," org.eventb.core.label="typing_a" org.eventb.core.predicate="a ∈ ATM"/>
<org.eventb.core.guard name="(" org.eventb.core.label="grd11" org.eventb.core.predicate="a ∈ recvRespTransferOk"/>
<org.eventb.core.action name=")" org.eventb.core.assignment="transOkAtm(a) ≔  TRUE" org.eventb.core.label="act1"/>
<org.eventb.core.action name="*" org.eventb.core.assignment="trans ≔ trans ∖ {a}" org.eventb.core.label="act7"/>
<org.eventb.core.action name="+" org.eventb.core.assignment="recvRespTransferOk ≔ recvRespTransferOk ∖ {a}" org.eventb.core.label="act6"/>
</org.eventb.core.event>
<org.eventb.core.event name="F" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="TransferFailsAtm">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="a"/>
<org.eventb.core.guard name="," org.eventb.core.label="typing_a" org.eventb.core.predicate="a ∈ ATM"/>
<org.eventb.core.guard name="(" org.eventb.core.label="grd11" org.eventb.core.predicate="a ∈ recvRespTransferFail"/>
<org.eventb.core.action name=")" org.eventb.core.assignment="transOkAtm(a) ≔  FALSE" org.eventb.core.label="act1"/>
<org.eventb.core.action name="*" org.eventb.core.assignment="trans ≔ trans ∖ {a}" org.eventb.core.label="act7"/>
<org.eventb.core.action name="+" org.eventb.core.assignment="recvRespTransferFail ≔ recvRespTransferFail ∖ {a}" org.eventb.core.label="act6"/>
</org.eventb.core.event>
<org.eventb.core.event ch.ethz.eventb.decomposition.external="true" name="G" org.eventb.core.convergence="0" org.eventb.core.extended="false" org.eventb.core.label="Deposit">
<org.eventb.core.parameter name="'" org.eventb.core.identifier="acc"/>
<org.eventb.core.parameter name="(" org.eventb.core.identifier="am"/>
<org.eventb.core.parameter name=")" org.eventb.core.identifier="c"/>
<org.eventb.core.guard name="." org.eventb.core.label="typing_c" org.eventb.core.predicate="c ∈ CARD"/>
<org.eventb.core.guard name="/" org.eventb.core.label="typing_am" org.eventb.core.predicate="am ∈ ℤ"/>
<org.eventb.core.guard name="*" org.eventb.core.label="grd1" org.eventb.core.predicate="acc ∈ ACCOUNT"/>
<org.eventb.core.guard name="," org.eventb.core.label="grd3" org.eventb.core.predicate="am ∈ ℕ1"/>
<org.eventb.core.guard name="-" org.eventb.core.label="grd4" org.eventb.core.predicate="c ∈ validCard"/>
</org.eventb.core.event>
<org.eventb.core.seesContext name="H" org.eventb.core.target="Context_mATM_T"/>
</org.eventb.core.machineFile>
