| ∀ ax1, fs. new(ax + ax1, fs) ↔ new(ax, fs) ∧ new(ax1, fs) ⊦ new((adr + ax) + ax1, fs) ↔ new(adr + ax, fs) ∧ new(ax1, fs) |
∀ ax1, fs. new(ax + ax1, fs) ↔ new(ax, fs) ∧ new(ax1, fs) ⊦ new(ax + ax1, fs) ↔ new(ax, fs) ∧ new(ax1, fs), adr ∈ fs
Used simplifier rules: new-rec: ⊦ new(adr ' + log, fs) ↔ ¬ adr ∈ fs ∧ new(log, fs);%a: ⊦ (ax + ax0) + ax1 = ax + ax0 + ax1; from specification list[address-list-set]% ⊦ adr + ax = adr ' + ax; (s)