| @(m, m0, m1) ' = lax.to-adr(n), lax = ladr + lax0 ⊦ lax = @(m0, m1) ' ∧ m = n |
⊦ @(ladr.off, ladr.size) = ladr
Used simplifier rules: adrs-rec: ⊦ (ladr ' + lax).to-adr(n) = @(n, ladr.off, ladr.size) + lax.to-adr(n);%to-adrs-eq-empty: ⊦ lax.to-adr(n) = [] ↔ lax = [];% ⊦ ladr ' = ladr0 ' + lax ↔ ladr = ladr0 ∧ lax = []; (ws)% ⊦ @(m, m0, m1) = @(m2, m3, m4) ↔ m = m2 ∧ m0 = m3 ∧ m1 = m4; (ws)%a: ⊦ (ax + ax0) + ax1 = ax + ax0 + ax1; from specification list[address-list-set]% ⊦ adr ' = adr0 ' + ax ↔ adr = adr0 ∧ ax = []; (ws)%a: ⊦ (lax + lax0) + lax1 = lax + lax0 + lax1; from specification list[laddress-list]% ⊦ adr + ax = adr ' + ax; (s)% ⊦ ladr + lax = ladr ' + lax; (s)