| ∀ n, m0, m3, m4, m5. ¬ # lax3 + # lax < n → ( (lax3.to-adr(m0) + @(m0, m1, m2) ' + lax.to-adr(m0))[n] = @(m3, m4, m5) ↔ (∃ lax2, lax1. lax3 + @(m1, m2) ' + lax = lax2 + @(m4, m5) ' + lax1 ∧ m3 = m0 ∧ # lax2 = n)) ⊦ (lax3.to-adr(m) + @(m, m1, m2) ' + lax.to-adr(m))[# lax3] = @(m, m1, m2), ∃ lax0, lax1. lax3 + @(m1, m2) ' + lax = lax0 + @(m1, m2) ' + lax1 ∧ # lax0 = # lax3 |
Used simplifier rules: a: ⊦ (lax + lax0) + lax1 = lax + lax0 + lax1; from specification list[laddress-list] Used terms: lax3, lax