| m + nused ≤ BRANCH_SIZE ⊦ save(load(save(zbrar, m, nused), m, nused), m, nused) = save(zbrar, m, nused) |
⊦ brar = brar0 ↔ # brar = # brar0 ∧ (∀ n. n < # brar → brar[n] = brar0[n])
m + nused ≤ BRANCH_SIZE ⊦ # save(load(save(zbrar, m, nused), m, nused), m, nused) = # save(zbrar, m, nused) ∧ (∀ n. n < # save(load(save(zbrar, m, nused), m, nused), m, nused) → save(load(save(zbrar, m, nused), m, nused), m, nused)[n] = save(zbrar, m, nused)[n])
Used terms: save(zbrar, m, nused), save(load(save(zbrar, m, nused), m, nused), m, nused)