| ⊦ replay-safe(log, fs -- adr, ri) ↔ replay-safe(log, fs, ri), adr ∈ log |
∀ fs, adr, ri. (replay-safe(log0, fs -- adr, ri) ↔ replay-safe(log0, fs, ri)) ∨ adr ∈ log0 ⊦ replay-safe(adr0 + log0, fs -- adr, ri) ↔ replay-safe(adr0 + log0, fs, ri), adr ∈ adr0 + log0
Used simplifier rules: replay-safe-empty: ⊦ replay-safe([], fs, fi);%address-list freely generated by [], +;;