Used simplifier rules: ⊦ replay-safe(adr ', fs, ri) ↔ adr ∈ fs ∧ ¬ adr ∈ ri ∧ node-cons(fs[adr].key, fs[adr]); (s)