⊦ # zbrar0 = # zbrar1 ∧ n + m ≤ # zbrar0 ∧ # zbrar0 = BRANCH_SIZE ∧ save(zbrar0, n, m) = save(zbrar1, n, m)
→ payload(zbrar0, n, m) = payload(zbrar1, n, m)
Type: A user defined theorem
Validity: The proof is INVALID because
- the proof was set to invalid (continue/load proof to restore)
- the spec theorems have changed