| ri-inj(ri), key ∈ ri ⊦ ∀ adr0. adr0 ∈ range ri[key, adr] ↔ adr0 ∈ (range ri -- ri[key]) ++ adr |
ri-inj(ri), key ∈ ri ⊦ adr0 ∈ ri[key, adr] ↔ adr0 = adr ∨ adr0 ≠ ri[key] ∧ adr0 ∈ ri
Used simplifier rules: ⊦ adr ∈ as -- adr0 ↔ adr ≠ adr0 ∧ adr ∈ as; (s)% ⊦ adr ∈ as ++ adr0 ↔ adr = adr0 ∨ adr ∈ as; (s)% ⊦ adr ∈ range ri ↔ adr ∈ ri; (s)