| adr ∈ replay-log(adr0 + log0, fs, ri), ∀ adr, fs, ri. adr ∈ replay-log(log0, fs, ri) → adr ∈ log0 ∨ adr ∈ ri ⊦ adr ∈ ri, adr ∈ adr0 + log0 |
adr ∈ replay-log(log0, fs, replay-one(adr0, fs[adr0], ri)), ∀ adr, fs, ri. adr ∈ replay-log(log0, fs, ri) → adr ∈ log0 ∨ adr ∈ ri ⊦ adr = adr0, adr ∈ ri, adr ∈ log0
Used simplifier rules: replay-log-rec: ⊦ replay-log(adr ' + log, fs, ri) = replay-log(log, fs, replay-one(adr, fs[adr], ri));% ⊦ adr ∈ adr0 ' + ax ↔ ¬(adr ≠ adr0 ∧ ¬ adr ∈ ax); (ss)%a: ⊦ (ax + ax0) + ax1 = ax + ax0 + ax1; from specification list[address-list-set]% ⊦ adr + ax = adr ' + ax; (s)