| adr = @(m, m0, m1), ∀ as1. # as1 < #(as0 ++ adr) → true → (0 = as1.size ↔ (∀ adr. adr ∈ as1 → adr.size = 0)) ⊦ 0 = as0.size + m1 ↔ (∀ adr0. adr0 = adr ∨ adr0 ∈ as0 → adr0.size = 0), adr ∈ as0 |
∀ as1. # as1 < #(as0 ++ @(m, m0, m1)) → true → (0 = as1.size ↔ (∀ adr. adr ∈ as1 → adr.size = 0)) ⊦ 0 = as0.size + m1 ↔ (∀ adr0. adr0 = @(m, m0, m1) ∨ adr0 ∈ as0 → adr0.size = 0), @(m, m0, m1) ∈ as0