| n < # asar, n < m, adr ∈ asar[n], adr ∈ as, m ≤ # asar, ∀ adr0. ¬ adr0 ∈ as ∩ union(asar, 0, m) ⊦ #(as ∩ asar[n]) = 0, # asar[n] = 0, # as = 0, asar[n] = ∅, as = ∅ |
Used simplifier rules: in-index-in-union: ⊦ adr ∈ asar[n] ∧ n < m → adr ∈ union(asar, 0, m);% ⊦ adr ∈ as ∩ as0 ↔ adr ∈ as ∧ adr ∈ as0; (ws)%int-a: ⊦ (as ∩ as0) ∩ as1 = as ∩ as0 ∩ as1; from specification set-union[address-list-set]%int-c: ⊦ as ∩ as0 = as0 ∩ as; from specification set-union[address-list-set] Used terms: adr