<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.poFile org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="CTXHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="ACCOUNT" org.eventb.core.type="ℙ(ACCOUNT)"/>
<org.eventb.core.poIdentifier name="ATM" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="CARD" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ABSHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="atmCashA" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmDepAm" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmWDAm" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="cardInAtm" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="destAcc" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="recvRespDep" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="srcAcc" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="validCard" org.eventb.core.type="ℙ(CARD)"/>
<org.eventb.core.poIdentifier name="withdrawFailMsg" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="withdrawOkMsg" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="INITIALISATION/ATM_W.Withdraw_2_inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/ATM_W.Withdraw_2_inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/ATM_W.Withdraw_2_inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="ATM × {0}∈ATM → ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/ATM_W.Withdraw_2_inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/ATM_W.Withdraw_2_inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×BOOL))∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/ATM_W.Withdraw_2_inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/ATM_W.Withdraw_2_inv14/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×BOOL))∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/ATM_W.Withdraw_2_inv14\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/mATM_T.BalTransfer_1_inv10/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×CARD))∈ATM ⇸ CARD" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/mATM_T.BalTransfer_1_inv10\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD9"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/ATM_W.Withdraw_2_inv22/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀c⦂CARD·c∈ran(∅ ⦂ ℙ(ATM×CARD))⇒c∈(∅ ⦂ ℙ(CARD))" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/ATM_W.Withdraw_2_inv22\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD10"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/mATM_D.Deposit_2_inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/mATM_D.Deposit_2_inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/mATM_D.Deposit_2_inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀c⦂CARD·c∈ran(∅ ⦂ ℙ(ATM×CARD))⇒c∈(∅ ⦂ ℙ(CARD))" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/mATM_D.Deposit_2_inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD13"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/mATM_T.BalTransfer_2_inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/mATM_T.BalTransfer_2_inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD16"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/mATM_T.BalTransfer_2_inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×BOOL))∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/mATM_T.BalTransfer_2_inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD17"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/mATM_T.BalTransfer_2_inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/mATM_T.BalTransfer_2_inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/mATM_T.BalTransfer_2_inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ACCOUNT))∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element1"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#INITIALISATION\/mATM_T.BalTransfer_2_inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaim" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="recvRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmDepAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="srcAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="withdrawFailMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="withdrawOkMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="atmWDAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="cardInAtm'" org.eventb.core.type="ℙ(ATM×CARD)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="destAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="validCard'" org.eventb.core.type="ℙ(CARD)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaim" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaim" org.eventb.core.poStamp="0"/>
<org.eventb.core.poSequent name="SendReqWithdraw/ATM_W.SendReqWithdraw.grd8/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFain'"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFain'"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqWithdraw/ATM_W.Withdraw_2_inv9/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmWDAm{a ↦ am}∈ATM ⇸ ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#SendReqWithdraw\/ATM_W.Withdraw_2_inv9\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD5"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFain" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="atmWDAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrecvRespTransferFain'" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFain" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="c∈CARD" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFain" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFain'" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am≤atmCashA(a)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∉trans" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="a ↦ c∈cardInAtm" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element2|org.eventb.core.guard#internal_element9"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaio" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaio" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaio" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element3|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaip" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaip" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaip" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element4|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="withdrawOKAtm/ATM_W.withdrawOKAtm.grd11/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFaiq+"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFaiq+"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOKAtm/ATM_W.Withdraw_2_inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmCashA{a ↦ atmCashA(a) − am}∈ATM → ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#withdrawOKAtm\/ATM_W.Withdraw_2_inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOKAtm/ATM_W.Withdraw_2_inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="withdrawOkMsg{a ↦ TRUE}∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#withdrawOKAtm\/ATM_W.Withdraw_2_inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD7"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="withdrawOKAtm/ATM_W.withdrawOKAtm.act1/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.action#internal_element2"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiq"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaiq" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="withdrawOkMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespWDOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrecvRespTransferFaiq+" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaiq" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(atmCashA)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈recvRespWDOk" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element5"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaiq" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFaiq+" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="am≤atmCashA(a)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element5|org.eventb.core.guard#internal_element6"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="withdrawFailsAtm/ATM_W.Withdraw_2_inv14/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="withdrawFailMsg{a ↦ TRUE}∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element6"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#withdrawFailsAtm\/ATM_W.Withdraw_2_inv14\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD8"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFair" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="withdrawFailMsg'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="recvRespWDFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFair" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFair" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈recvRespWDFail" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element6|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element6|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="sendReqDeposit/mATM_D.sendReqDeposit.grd5/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFais)"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(cardInAtm)∧cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFais)"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="sendReqDeposit/mATM_D.Deposit_2_inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmDepAm{a ↦ am}∈ATM ⇸ ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#sendReqDeposit\/mATM_D.Deposit_2_inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD12"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFais" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmDepAm'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrecvRespTransferFais)" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFais" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(cardInAtm)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element4"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFais" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFais)" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="cardInAtm(a)=c" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c∈ran(cardInAtm)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="a∉trans" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="c∈CARD" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element7|org.eventb.core.guard#internal_element9"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFait" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespDep'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFait" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFait" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element8|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="depositATM/mATM_D.depositATM.grd10/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFaiu)"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmDepAm)∧atmDepAm∈ATM ⇸ ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFaiu)"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositATM/ATM_W.Withdraw_2_inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="atmCashA{a ↦ atmCashA(a)+am}∈ATM → ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#depositATM\/ATM_W.Withdraw_2_inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD6"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="depositATM/mATM_D.depositATM.act2/WD" org.eventb.core.accurate="true" org.eventb.core.poDesc="Well-definedness of action" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiu"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(atmCashA)∧atmCashA∈ATM ⇸ ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9|org.eventb.core.action#internal_element1"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9|org.eventb.core.action#internal_element1"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiu"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaiu" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="atmCashA'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespDep'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPrecvRespTransferFaiu)" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaiu" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈recvRespDep" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∈dom(atmDepAm)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element3"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaiu" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTHYPrecvRespTransferFaiu)" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="atmDepAm(a)=am" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element9|org.eventb.core.guard#internal_element5"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaiv" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaiv" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaiv" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="c∈CARD" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element10|org.eventb.core.guard#internal_element7"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="SendReqTransfer/mATM_T.BalTransfer_2_inv8/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiw"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="trAmount{a ↦ am}∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#SendReqTransfer\/mATM_T.BalTransfer_2_inv8\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD16"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/mATM_T.BalTransfer_2_inv12/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiw"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="srcAcc{a ↦ src_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#SendReqTransfer\/mATM_T.BalTransfer_2_inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD18"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/mATM_T.BalTransfer_2_inv13/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiw"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="destAcc{a ↦ dest_ac}∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element20"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#SendReqTransfer\/mATM_T.BalTransfer_2_inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD19"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaiw" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="dest_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="srcAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="src_ac" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="destAcc'" org.eventb.core.type="ℙ(ATM×ACCOUNT)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaiw" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaiw" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="c∈CARD" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="dest_ac∈ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="a∉trans" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="src_ac∈ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="a ↦ c∈cardInAtm" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element8"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element9"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="src_ac≠dest_ac" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element11|org.eventb.core.guard#internal_element10"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaix" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="recvRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaix" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaix" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element12|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaiy" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaiy" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaiy" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element13|org.eventb.core.guard#internal_element1"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferOKAtm/mATM_T.BalTransfer_2_inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFaiz"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transOkAtm{a ↦ TRUE}∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element14"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#TransferOKAtm\/mATM_T.BalTransfer_2_inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD17"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFaiz" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="recvRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFaiz" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFaiz" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈recvRespTransferOk" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element14|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferFailsAtm/mATM_T.BalTransfer_2_inv11/INV" org.eventb.core.accurate="true" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTALLHYPrecvRespTransferFai{"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="transOkAtm{a ↦ FALSE}∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element15"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poSelHint name="SEQHYT" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poSequent#TransferFailsAtm\/mATM_T.BalTransfer_2_inv11\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD17"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFai{" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFai{" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFai{" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element15|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈recvRespTransferFail" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element15|org.eventb.core.guard#internal_element2"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTrecvRespTransferFai|" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="acc" org.eventb.core.type="ACCOUNT"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="c" org.eventb.core.type="CARD"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPrecvRespTransferFai|" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#EVTIDENTrecvRespTransferFai\|" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="acc∈ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element16|org.eventb.core.guard#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element16|org.eventb.core.guard#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am∈ℤ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element16|org.eventb.core.guard#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="c∈validCard" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element16|org.eventb.core.guard#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="c∈CARD" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.event#internal_element16|org.eventb.core.guard#internal_element5"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ALLHYP" org.eventb.core.parentSet="/ATMproduct_TDW/ATM_TDW.bpo|org.eventb.core.poFile#ATM_TDW|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="trans∈ℙ(ATM)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="recvRespWDOk∈ℙ(ATM)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element2"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="recvRespWDFail∈ℙ(ATM)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element3"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="validCard∈ℙ(CARD)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element4"/>
<org.eventb.core.poPredicate name="PRD4" org.eventb.core.predicate="validCard⊆CARD" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element5"/>
<org.eventb.core.poPredicate name="PRD5" org.eventb.core.predicate="atmWDAm∈ATM ⇸ ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element6"/>
<org.eventb.core.poPredicate name="PRD6" org.eventb.core.predicate="atmCashA∈ATM → ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element7"/>
<org.eventb.core.poPredicate name="PRD7" org.eventb.core.predicate="withdrawOkMsg∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element8"/>
<org.eventb.core.poPredicate name="PRD8" org.eventb.core.predicate="withdrawFailMsg∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element9"/>
<org.eventb.core.poPredicate name="PRD9" org.eventb.core.predicate="cardInAtm∈ATM ⇸ CARD" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element16"/>
<org.eventb.core.poPredicate name="PRD10" org.eventb.core.predicate="∀c⦂CARD·c∈ran(cardInAtm)⇒c∈validCard" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element10"/>
<org.eventb.core.poPredicate name="PRD11" org.eventb.core.predicate="recvRespDep∈ℙ(ATM)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element11"/>
<org.eventb.core.poPredicate name="PRD12" org.eventb.core.predicate="atmDepAm∈ATM ⇸ ℕ" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element12"/>
<org.eventb.core.poPredicate name="PRD13" org.eventb.core.predicate="∀c⦂CARD·c∈ran(cardInAtm)⇒c∈validCard" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element13"/>
<org.eventb.core.poPredicate name="PRD14" org.eventb.core.predicate="recvRespTransferOk∈ℙ(ATM)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element14"/>
<org.eventb.core.poPredicate name="PRD15" org.eventb.core.predicate="recvRespTransferFail∈ℙ(ATM)" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element15"/>
<org.eventb.core.poPredicate name="PRD16" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element17"/>
<org.eventb.core.poPredicate name="PRD17" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element18"/>
<org.eventb.core.poPredicate name="PRD18" org.eventb.core.predicate="srcAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element19"/>
<org.eventb.core.poPredicate name="PRD19" org.eventb.core.predicate="destAcc∈ATM ⇸ ACCOUNT" org.eventb.core.source="/ATMproduct_TDW/ATM_TDW.bum|org.eventb.core.machineFile#ATM_TDW|org.eventb.core.invariant#internal_element20"/>
</org.eventb.core.poPredicateSet>
</org.eventb.core.poFile>
