| n < nused, nused ≤ BRANCH_SIZE, # zbrar0 = # zbrar1, # zbrar0 = BRANCH_SIZE ⊦ zbrar0[n] = mkzbranch(key, adr0, r2) ∧ unmodified(adr, mkznode(rp0, zbrar0, bv, false, nused), iast) ∧ unmodified(adr, mkznode(rp1, zbrar1, bv, false, nused), iast) → (∃ r0. zbrar1[n] = mkzbranch(key, adr0, r0)) |