| ri-inj(ri), key ∈ ri ⊦ (∃ key0. key0 ∈ ri -- key ∧ (ri -- key)[key0] = adr) ↔ adr ≠ ri[key] ∧ adr ∈ ri |
ri-inj(ri), key ∈ ri ⊦ (∃ key0. key0 ≠ key ∧ key0 ∈ ri ∧ ri[key0] = adr) ↔ adr ≠ ri[key] ∧ adr ∈ ri
Used simplifier rules: ⊦ key ≠ key0 → (ri -- key0)[key] = ri[key]; (s)% ⊦ key ∈ ri -- key0 ↔ key ≠ key0 ∧ key ∈ ri; (s)