| ∃ P0. P0 ≡ P ∧ ((btree(rp, r, adr, height, dirty, ri, iast, as, alladrs, ok) * P0))(zh) ⊦ ((btree(rp, r, adr, height, dirty, ri, iast, as, alladrs, ok) * P))(zh) |
((btree(rp, r, adr, height, dirty, ri, iast, as, alladrs, ok) * P0))(zh), P0 ≡ P, as ⊆ dom iast, as ⊆ alladrs ⊦ ((btree(rp, r, adr, height, dirty, ri, iast, as, alladrs, ok) * P))(zh)
Used simplifier rules: btree-refed-subseteq-alladrs: ⊦ (( btree(rp, r, adr, height, dirty, fi, iast, as, alladrs, nstat) * P) )(zh) → as ⊆ alladrs;%btree-adrs: ⊦ (( btree (rp, rp0, adr0, height, dirty, fi, iast, as, alladrs, nstat) * P) )(zh) → as ⊆ dom iast;%sep-com: ⊦ P * P2 = P2 * P; from specification heap-sep[zheap]%sep-ass: ⊦ (P * P3) * P4 = P * P3 * P4; from specification heap-sep[zheap]