| # ax = # kx, new(ax, fs), ri-cons(ri, fs), kx.toSet ⊆ dom ri ⊦ dups(ax), dups(kx), ri-cons(ri[kx, ax], fs[ax, fs[ri[kx]]]) |
# ax = # kx, new(ax, fs), key ∈ ri[kx, ax], kx.toSet ⊆ dom ri, ∀ key. key ∈ ri → ri[key] ∈ fs ∧ key-cons(key, fs[ri[key]]) ⊦ dups(kx), dups(ax), (ri[kx, ax][key] ∈ fs ∨ ri[kx, ax][key] ∈ ax) ∧ key-cons(key, fs[ax, fs[ri[kx]]][ri[kx, ax][key]])
Used simplifier rules: ri-cons: ⊦ ri-cons(ri, fs) ↔ (∀ key. key ∈ ri → ri[key] ∈ fs ∧ key-cons(key, fs[ri[key]]));%# ax = # ndx ⊦ adr ∈ fs[ax, ndx] ↔ adr ∈ fs ∨ adr ∈ ax; (s)% ⊦ # ri[kx] = # kx; (s)% ⊦ # fs[ax] = # ax; (s)