<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<org.eventb.core.poFile org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="CTXHYP" org.eventb.core.poStamp="0">
<org.eventb.core.poIdentifier name="ATM" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ABSHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="recvReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="reqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="respTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendReqTransfer" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespTransferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespTransferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmount" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trAmountB" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trAmountM" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trans" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm" org.eventb.core.type="ℙ(ATM×BOOL)"/>
<org.eventb.core.poIdentifier name="transferFail" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFailA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOk" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferOkA" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poPredicate name="sendRespTransferFaim" org.eventb.core.predicate="transferOkA∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.invariant#_FRFscAY9EeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="sendRespTransferFain" org.eventb.core.predicate="transferFailA∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_1.bum|org.eventb.core.machineFile#BalTransfer_1|org.eventb.core.invariant#_btYp4w0NEeCDh_sKUTn4vw"/>
<org.eventb.core.poPredicate name="sendRespTransferFaio" org.eventb.core.predicate="trans∈ℙ(ATM)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfSz"/>
<org.eventb.core.poPredicate name="sendRespTransferFaip" org.eventb.core.predicate="reqTransfer∈ℙ(trans)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qt0YPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiq" org.eventb.core.predicate="respTransferOk∈ℙ(trans)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvCgPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFair" org.eventb.core.predicate="respTransferFail∈ℙ(trans)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qvpkPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFais" org.eventb.core.predicate="trAmount∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_4qwQoPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFait" org.eventb.core.predicate="transOkAtm∈ATM ⇸ BOOL" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_gRDygAZAEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiu" org.eventb.core.predicate="transferOk⊆transferOkA" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPEBNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiv" org.eventb.core.predicate="transferFail⊆transferFailA" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_CQfPERNrEeCky5OpqeHuBQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiw" org.eventb.core.predicate="partition(trans,reqTransfer,transferOk,transferFail,respTransferOk,respTransferFail)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_2.bum|org.eventb.core.machineFile#BalTransfer_2|org.eventb.core.invariant#_s5x-k-wKEd-V6twkc9HfS{"/>
<org.eventb.core.poPredicate name="sendRespTransferFaix" org.eventb.core.predicate="sendReqTransfer∈ℙ(reqTransfer)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.invariant#_qkMn0fiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiy" org.eventb.core.predicate="recvReqTransfer∈ℙ(reqTransfer)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.invariant#_qkNO4PiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFaiz" org.eventb.core.predicate="sendRespTransferOk∈ℙ(respTransferOk)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.invariant#_qkN18PiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFai{" org.eventb.core.predicate="recvRespTransferOk∈ℙ(respTransferOk)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.invariant#_qkOdAPiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFai|" org.eventb.core.predicate="sendRespTransferFail∈ℙ(respTransferFail)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.invariant#_qkOdAfiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFai}" org.eventb.core.predicate="recvRespTransferFail∈ℙ(respTransferFail)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.invariant#_qkPEEPiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="sendRespTransferFai~" org.eventb.core.predicate="partition(reqTransfer,sendReqTransfer,recvReqTransfer)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.invariant#_sbHAoAZYEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj'" org.eventb.core.predicate="partition(respTransferOk,sendRespTransferOk,recvRespTransferOk)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.invariant#_sbHnsAZYEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="sendRespTransferFaj(" org.eventb.core.predicate="partition(respTransferFail,sendRespTransferFail,recvRespTransferFail)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.invariant#_sbIOwAZYEeC9GJs-VyssYw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="inv12/WD" org.eventb.core.accurate="false" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)∧a∈dom(trAmount)⇒trAmountM∈ATM ⇸ ℤ∧trAmount∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="inv13/WD" org.eventb.core.accurate="false" org.eventb.core.poDesc="Well-definedness of Invariant" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COI"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)∧a∈dom(trAmountM)⇒trAmountB∈ATM ⇸ ℤ∧trAmountM∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COI"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv3/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5PiYAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5PiYAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#INITIALISATION\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv6/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="(∅ ⦂ ℙ(ATM×ℤ))∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5QwgAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5QwgAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#INITIALISATION\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv12/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈dom(∅ ⦂ ℙ(ATM×ℤ))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#INITIALISATION\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COI|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="INITIALISATION/inv13/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  establishment" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaim"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a⦂ATM·a∈(∅ ⦂ ℙ(ATM))∧a∈dom(∅ ⦂ ℙ(ATM×ℤ))⇒a∈dom(∅ ⦂ ℙ(ATM×ℤ))∧(∅ ⦂ ℙ(ATM×ℤ))(a)=(∅ ⦂ ℙ(ATM×ℤ))(a)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#'"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#INITIALISATION\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaim" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#CTXHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="trAmountM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmountB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="sendRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaim" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaim" org.eventb.core.poStamp="1"/>
<org.eventb.core.poSequent name="SendReqTransfer/inv3/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="trAmountM{a ↦ am}∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5PiYAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_cdNYoPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdNYoPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5PiYAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#SendReqTransfer\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/inv12/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom(trAmountM{a ↦ am})⇒a0∈dom(trAmount{a ↦ am})∧(trAmountM{a ↦ am})(a0)=(trAmount{a ↦ am})(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_cdNYoPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdNYoPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#SendReqTransfer\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COI|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendReqTransfer/inv13/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFain"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM{a ↦ am})∧trAmountB(a0)=(trAmountM{a ↦ am})(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_cdNYoPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdNYoPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#SendReqTransfer\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFain" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="trAmountM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="sendReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmount'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFain" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFain" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdNYoPimEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q7PwPifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈ATM" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdNYoPimEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4q8d4fifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="a∉trans" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdNYoPimEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_sbVqIAZYEeC9GJs-VyssYw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RecvReqTransfer/grd3/WD" org.eventb.core.accurate="false" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio)"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmountM)∧trAmountM∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_lun2EwIcEeC4Lrau1Jernw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_lun2EwIcEeC4Lrau1Jernw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio)"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/inv6/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="trAmountB{a ↦ am}∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5QwgAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5QwgAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#RecvReqTransfer\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvReqTransfer/inv13/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaio"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∪{a}∧a0∈dom(trAmountB{a ↦ am})⇒a0∈dom(trAmountM)∧(trAmountB{a ↦ am})(a0)=trAmountM(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#RecvReqTransfer\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaio" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="sendReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="recvReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmountB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFaio)" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaio" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈sendReqTransfer" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#internal1"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(trAmountM)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_J9Rw8QFqEeCIwef1_NBRLw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaio" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFaio)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am=trAmountM(a)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4q4McfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_lun2EwIcEeC4Lrau1Jernw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="SendRespTransferOk/inv6/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ trAmountB∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5QwgAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_cdWikPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdWikPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5QwgAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#SendRespTransferOk\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferOk/inv13/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaip"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ trAmountB)⇒a0∈dom(trAmountM)∧({a} ⩤ trAmountB)(a0)=trAmountM(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_cdWikPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdWikPimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#SendRespTransferOk\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaip" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="transferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trAmountB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="sendRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaip" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaip" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈transferOk" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdWikPimEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_cdXwsPimEd-KyJ1Ywzx_fQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RecvRespTransferOk/inv3/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ trAmountM∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5PiYAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_cdUtYfimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdUtYfimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5PiYAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#RecvRespTransferOk\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/inv12/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ trAmountM)⇒a0∈dom(trAmount)∧({a} ⩤ trAmountM)(a0)=trAmount(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_cdUtYfimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdUtYfimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#RecvRespTransferOk\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COI|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferOk/inv13/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFaiq"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom({a} ⩤ trAmountM)∧trAmountB(a0)=({a} ⩤ trAmountM)(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_cdUtYfimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdUtYfimEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#RecvRespTransferOk\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaiq" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="trAmountM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="recvRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="sendRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaiq" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaiq" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈sendRespTransferOk" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_cdUtYfimEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_cdVUcfimEd-KyJ1Ywzx_fQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="TransferFails/grd16/WD" org.eventb.core.accurate="false" org.eventb.core.poDesc="Well-definedness of Guard" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFair)"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmountB)∧trAmountB∈ATM ⇸ ℤ" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSelHint name="SEQHYS" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFair)"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/inv13/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer ∖ {a}∧a0∈dom(trAmountB)⇒a0∈dom(trAmountM)∧trAmountB(a0)=trAmountM(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#TransferFails\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/grd13/GRD" org.eventb.core.accurate="false" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="a∈dom(trAmount)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fW15EAZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fW15EAZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#TransferFails\/grd13\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="TransferFails/grd16/GRD" org.eventb.core.accurate="false" org.eventb.core.poDesc="Guard strengthening (split)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFair"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="am=trAmount(a)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#TransferFails\/grd16\/GRD|org.eventb.core.poPredicateSet#SEQHYP"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFair" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="am" org.eventb.core.type="ℤ"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvReqTransfer'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTHYPsendRespTransferFair)" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFair" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="am∈ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#internal3"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="a∈dom(trAmountB)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fW15EAZYEeC9GJs-VyssYw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFair" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTHYPsendRespTransferFair)" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="am=trAmountB(a)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_fWzc0AZYEeC9GJs-VyssYw"/>
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="a∈recvReqTransfer" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_eHjV0uwJEd-V6twkc9HfSw|org.eventb.core.guard#_sbursAZYEeC9GJs-VyssYw"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="SendRespTransferFail/inv6/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ trAmountB∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5QwgAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5QwgAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#SendRespTransferFail\/inv6\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH|org.eventb.core.poPredicate#PRD1"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="SendRespTransferFail/inv13/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFais"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom({a} ⩤ trAmountB)⇒a0∈dom(trAmountM)∧({a} ⩤ trAmountB)(a0)=trAmountM(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#SendRespTransferFail\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFais" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="transferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="sendRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="trAmountB'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFais" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFais" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈transferFail" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4rPY0PifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_4rQm8PifEd-KyJ1Ywzx_fQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poSequent name="RecvRespTransferFail/inv3/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="{a} ⩤ trAmountM∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5PiYAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_qk39QfiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_qk39QfiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5PiYAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#RecvRespTransferFail\/inv3\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH|org.eventb.core.poPredicate#PRD0"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/inv12/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈dom({a} ⩤ trAmountM)⇒a0∈dom(trAmount)∧({a} ⩤ trAmountM)(a0)=trAmount(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_qk39QfiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_qk39QfiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#RecvRespTransferFail\/inv12\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COI|org.eventb.core.poPredicate#PRD2"/>
</org.eventb.core.poSequent>
<org.eventb.core.poSequent name="RecvRespTransferFail/inv13/INV" org.eventb.core.accurate="false" org.eventb.core.poDesc="Invariant  preservation" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicateSet name="SEQHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTALLHYPsendRespTransferFait"/>
<org.eventb.core.poPredicate name="SEQHYQ" org.eventb.core.predicate="∀a0⦂ATM·a0∈recvReqTransfer∧a0∈dom(trAmountB)⇒a0∈dom({a} ⩤ trAmountM)∧trAmountB(a0)=({a} ⩤ trAmountM)(a0)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSource name="SEQHYR" org.eventb.core.poRole="ABSTRACT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_3.bum|org.eventb.core.machineFile#BalTransfer_3|org.eventb.core.event#_qk39QfiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYS" org.eventb.core.poRole="CONCRETE" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_qk39QfiuEd-KyJ1Ywzx_fQ"/>
<org.eventb.core.poSource name="SEQHYT" org.eventb.core.poRole="DEFAULT" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
<org.eventb.core.poSelHint name="SEQHYU" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poSelHintSnd="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poSequent#RecvRespTransferFail\/inv13\/INV|org.eventb.core.poPredicateSet#SEQHYP"/>
<org.eventb.core.poSelHint name="SEQHYV" org.eventb.core.poSelHintFst="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP|org.eventb.core.poPredicate#PRD3"/>
</org.eventb.core.poSequent>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFait" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="trAmountM'" org.eventb.core.type="ℙ(ATM×ℤ)"/>
<org.eventb.core.poIdentifier name="sendRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFait" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFait" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈sendRespTransferFail" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_qk39QfiuEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_qk4kUfiuEd-KyJ1Ywzx_fQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaiu" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="recvRespTransferOk'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaiu" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaiu" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈recvRespTransferOk" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4rdbQfifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_y87G8PimEd-KyJ1Ywzx_fQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTIDENTsendRespTransferFaiv" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ALLHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poIdentifier name="a" org.eventb.core.type="ATM"/>
<org.eventb.core.poIdentifier name="recvRespTransferFail'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="trans'" org.eventb.core.type="ℙ(ATM)"/>
<org.eventb.core.poIdentifier name="transOkAtm'" org.eventb.core.type="ℙ(ATM×BOOL)"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="EVTALLHYPsendRespTransferFaiv" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#EVTIDENTsendRespTransferFaiv" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="a∈recvRespTransferFail" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.event#_4ri60fifEd-KyJ1Ywzx_fQ|org.eventb.core.guard#_qlH04PiuEd-KyJ1Ywzx_fQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPBalTransfer_COH" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#ABSHYP" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD0" org.eventb.core.predicate="trAmountM∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5PiYAIBEeCA9fu26sgd-Q"/>
<org.eventb.core.poPredicate name="PRD1" org.eventb.core.predicate="trAmountB∈ATM ⇸ ℕ1" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_t5QwgAIBEeCA9fu26sgd-Q"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="HYPBalTransfer_COI" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COH" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD2" org.eventb.core.predicate="∀a⦂ATM·a∈dom(trAmountM)⇒a∈dom(trAmount)∧trAmountM(a)=trAmount(a)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMBN8EeCky5OpqeHuBQ"/>
</org.eventb.core.poPredicateSet>
<org.eventb.core.poPredicateSet name="ALLHYP" org.eventb.core.parentSet="/ATMintegralRefined/BalTransfer_4.bpo|org.eventb.core.poFile#BalTransfer_4|org.eventb.core.poPredicateSet#HYPBalTransfer_COI" org.eventb.core.poStamp="1">
<org.eventb.core.poPredicate name="PRD3" org.eventb.core.predicate="∀a⦂ATM·a∈recvReqTransfer∧a∈dom(trAmountB)⇒a∈dom(trAmountM)∧trAmountB(a)=trAmountM(a)" org.eventb.core.source="/ATMintegralRefined/BalTransfer_4.bum|org.eventb.core.machineFile#BalTransfer_4|org.eventb.core.invariant#_TRLgMRN8EeCky5OpqeHuBQ"/>
</org.eventb.core.poPredicateSet>
</org.eventb.core.poFile>
