| ((btree(rp, r, adr, height0 +1, dirty, fi, iast, as, alladrs, nstat) * P))(zh), ∀ rp, r, adr, dirty, fi, iast, as, alladrs, nstat, P, zh. ((btree(rp, r, adr, height0, dirty, fi, iast, as, alladrs, nstat) * P))(zh) → as ⊆ alladrs ⊦ as ⊆ alladrs |
((btree(rp, r, adr, height0 + 1, dirty, fi, iast, as, alladrs, nstat) * P))(zh), ∀ rp, r, adr, dirty, fi, iast, as, alladrs, nstat, P, zh. ((btree(rp, r, adr, height0, dirty, fi, iast, as, alladrs, nstat) * P))(zh) → as ⊆ alladrs ⊦ as ⊆ alladrs
Used simplifier rules: ⊦ m +1 = m + 1; (s)