Used simplifier rules: disj-in-both: n0 < m, n1 < m ⊦ disj(asar, 0, m) ∧ adr ∈ asar[n0] → (adr ∈ asar[n1] ↔ n0 = n1);