| log-cons(log, fs), new(ax, fs) ⊦ dups(log + ax) ↔ false, dups(log), dups(ax) |
dups(log + ax), new(ax, fs), ∀ adr. adr ∈ log → adr ∈ fs ∧ node-cons(fs[adr].key, fs[adr]) ⊦ dups(ax), dups(log)
Used simplifier rules: log-cons: ⊦ log-cons(log, fs) ↔ (∀ adr. adr ∈ log → adr ∈ fs ∧ node-cons(fs[adr].key, fs[adr]));