| adr = @(m, m0, m1), adr ∈ st0, ∀ n. n ∈ st0 → n ∈ st1, ∀ n. n ∈ st0 ∧ n ∈ st1 → st0[n].list ⊑ st1[n].list ∧ st0[n].ladrlist ⊑ st1[n].ladrlist ∧ # st0[n].list = # st0[n].ladrlist ∧ # st1[n].list = # st1[n].ladrlist ⊦ adr ∈ st1 |
@(m, m0, m1) ∈ st0, ∀ n. n ∈ st0 ∧ n ∈ st1 → st0[n].list ⊑ st1[n].list ∧ st0[n].ladrlist ⊑ st1[n].ladrlist ∧ # st0[n].list = # st0[n].ladrlist ∧ # st1[n].list = # st1[n].ladrlist, ∀ n. n ∈ st0 → n ∈ st1 ⊦ @(m, m0, m1) ∈ st1