| #(key + kx0) = # ax, adr ∈ ri[key + kx0, ax], ∀ ax, adr, ri. # kx0 = # ax ∧ adr ∈ ri[kx0, ax] → adr ∈ ax ∨ adr ∈ ri ⊦ adr ∈ ri, adr ∈ ax |
# kx0 + 1 = # ax, adr ∈ ri[key ' + kx0, ax], ∀ ax, adr, ri. # kx0 = # ax ∧ adr ∈ ri[kx0, ax] → adr ∈ ax ∨ adr ∈ ri ⊦ adr ∈ ax, adr ∈ ri
Used simplifier rules: a: ⊦ (kx + kx0) + kx1 = kx + kx0 + kx1; from specification list[key-list-set]% ⊦ m +1 = m + 1; (s)% ⊦ #(key ' + kx) = (# kx)+1; (s)% ⊦ key + kx = key ' + kx; (s)