| 0 = as0.size ↔ (∀ adr. adr ∈ as0 → adr.size = 0), ∀ as1. # as1 < #(as0 ++ @(m, m0, m1)) → true → (0 = as1.size ↔ (∀ adr. adr ∈ as1 → adr.size = 0)) ⊦ 0 = as0.size + m1 ↔ (∀ adr0. adr0 = @(m, m0, m1) ∨ adr0 ∈ as0 → adr0.size = 0), @(m, m0, m1) ∈ as0 |
∀ as1. # as1 < #(as0 ++ @(m, m0, m1)) → true → (0 = as1.size ↔ (∀ adr. adr ∈ as1 → adr.size = 0)) ⊦ 0 = as0.size + m1 ↔ (∀ adr0. adr0 = @(m, m0, m1) ∨ adr0 ∈ as0 → adr0.size = 0), 0 = as0.size, @(m, m0, m1) ∈ as0, ∀ adr. adr ∈ as0 → adr.size = 0
0 = as0.size, ∀ adr. adr ∈ as0 → adr.size = 0, ∀ as1. # as1 < #(as0 ++ @(m, m0, m1)) → true → (0 = as1.size ↔ (∀ adr. adr ∈ as1 → adr.size = 0)) ⊦ 0 = as0.size + m1 ↔ (∀ adr0. adr0 = @(m, m0, m1) ∨ adr0 ∈ as0 → adr0.size = 0), @(m, m0, m1) ∈ as0