| refsize-cons(st, as), valid-adrs(as), as ⊆ dom nodes(st) ⊦ nodes(st) | as ⊆ nodes(remove-refsize0(st)) |
as ⊆ dom nodes(st), ∀ adr. adr ∈ as → adr.size ≠ 0, ∀ n. n ∈ st → st[n].ref-size = (as | n).size ⊦ nodes(st) | as ⊆ nodes(remove-refsize0(st))
Used simplifier rules: valid-adrs: ⊦ valid-adrs(as) ↔ (∀ adr. adr ∈ as → adr.size ≠ 0);%refsize-cons-def: ⊦ refsize-cons(st, as) ↔ (∀ n. n ∈ st → st[n].ref-size = (as | n).size);