| adr = @(m2, m3, m4), adr ∈ as0, ∀ adr0. adr0 = @(m, m0, m1) ∨ adr0 ∈ as0 → adr0.size = 0, ∀ as1. # as1 < #(as0 ++ @(m, m0, m1)) → true → (0 = as1.size ↔ (∀ adr. adr ∈ as1 → adr.size = 0)) ⊦ # as0 = 0, 0 = as0.size + m1, 0 = as0.size, as0 = ∅, m4 = 0, @(m, m0, m1) ∈ as0 |
@(m2, m3, m4) ∈ as0, ∀ adr0. adr0 = @(m, m0, m1) ∨ adr0 ∈ as0 → adr0.size = 0, ∀ as1. # as1 < #(as0 ++ @(m, m0, m1)) → true → (0 = as1.size ↔ (∀ adr. adr ∈ as1 → adr.size = 0)) ⊦ # as0 = 0, 0 = as0.size, 0 = as0.size + m1, as0 = ∅, m4 = 0, @(m, m0, m1) ∈ as0