| m < # avols[v], ebm-cons(avols), v ∈ avols, avols ⊆ avols0, ebm-cons(avols) → ebm-cons(avols0) ⊦ ⟨ebm_unmap#(v, m; avols)⟩ (avols ⊆ avols0 ∧ (ebm-cons(avols) → ebm-cons(avols0))) |
m < # avols[v], ebm-cons(avols0), ebm-cons(avols), v ∈ avols, avols ⊆ avols0 ⊦ ⟨ebm_unmap#(v, m; avols)⟩ (avols ⊆ avols0)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic