| @(m, m0, m1) ∈ as ⊦ (as ++ @(m, m0, m1)).size = (as.size - m1) + m1 |
@(m, m0, m1) ∈ as ⊦ # as = 0, as.size = (as.size - m1) + m1, as = ∅
Used simplifier rules: size-zero-01: ⊦ as ≠ ∅ → # as ≠ 0; (forward) from specification set-basic[address-store]%ne-01: ⊦ adr ∈ as → as ≠ ∅; (forward) from specification set-basic[address-store]% ⊦ adr ∈ as → as ++ adr = as; (s)