| adr ∈ iast0, iast0 | (as ++ adr) ⊆ iast1 ⊦ iast1[adr] = iast0[adr] |
⊦ iast ⊆ iast0 ↔ (∀ adr. adr ∈ iast → adr ∈ iast0 ∧ iast[adr] = iast0[adr])
adr ∈ iast0, ∀ adr0. adr0 ∈ iast0 | (as ++ adr) → adr0 ∈ iast1 ∧ (iast0 | (as ++ adr))[adr0] = iast1[adr0] ⊦ iast1[adr] = iast0[adr]
Used terms: iast1, iast0 | (as ++ adr)