Formal Modelling of PBFT Consensus Algorithm in Event-B

Listing 8

Invariant of M0.

Theorem @inv17 ∀i,j·i∈corr∧j∈dom(G(i))

      ⇒G(i)(j)=True_execute(j)