refsize-cons(st, as), valid-adrs(as), as ⊆ dom nodes(st) ⊦ nodes(st) | as ⊆ nodes(remove-refsize0(st))