| ri-inj(ri), key ∈ ri ⊦ range ri[key, adr] = (range ri -- ri[key]) ++ adr |
⊦ as = as0 ↔ (∀ adr. adr ∈ as ↔ adr ∈ as0)
ri-inj(ri), key ∈ ri ⊦ ∀ adr0. adr0 ∈ range ri[key, adr] ↔ adr0 ∈ (range ri -- ri[key]) ++ adr
Used terms: (range ri -- ri[key]) ++ adr, range ri[key, adr]