| n < nused, nused ≤ BRANCH_SIZE, # zbrar0 = # zbrar1, # zbrar0 = BRANCH_SIZE ⊦ zbrar0[n] = mkzentry(key, adr0) ∧ unmodified(adr, mkznode(rp0, zbrar0, bv, false, nused), iast) ∧ unmodified(adr, mkznode(rp1, zbrar1, bv, false, nused), iast) → zbrar1[n] = mkzentry(key, adr0) |