| # ax1 = # ndx, log-cons(log, fs), new(ax1, fs) ⊦ log-cons(log, fs[ax1, ndx]) |
# ax1 = # ndx, new(ax1, fs), adr ∈ log, ∀ adr. adr ∈ log → adr ∈ fs ∧ node-cons(fs[adr].key, fs[adr]) ⊦ (adr ∈ fs ∨ adr ∈ ax1) ∧ node-cons(fs[ax1, ndx][adr].key, fs[ax1, ndx][adr])
Used simplifier rules: log-cons: ⊦ log-cons(log, fs) ↔ (∀ adr. adr ∈ log → adr ∈ fs ∧ node-cons(fs[adr].key, fs[adr]));%# ax = # ndx ⊦ adr ∈ fs[ax, ndx] ↔ adr ∈ fs ∨ adr ∈ ax; (s)