| 0 = as0.size, @(m1, m2, m3) ∈ as0, ∀ adr. adr ∈ as0 → adr.size = 0, ∀ as1. # as1 < #(as0 ++ @(m, m0, 0)) → true → (0 = as1.size ↔ (∀ adr. adr ∈ as1 → adr.size = 0)) ⊦ # as0 = 0, as0 = ∅, m3 = 0, @(m, m0, 0) ∈ as0 |
Used simplifier rules: ⊦ @(m, m0, m1).size = m1; (s) Used terms: @(m1, m2, m3)