| m < # avols[v], ebm-cons(avols), ebm-cons(avols0), v ∈ avols, avols ⊆ avols0 ⊦ ∀ v0. (v0 ∈ avols[v, avols[v][m, unmapped]] ↔ v0 ∈ avols0) ∧ ( v0 ∈ avols[v, avols[v][m, unmapped]] → # avols[v, avols[v][m, unmapped]][v0] = # avols0[v0] ∧ (∀ m0. m0 < # avols[v, avols[v][m, unmapped]][v0] ∧ avols[v, avols[v][m, unmapped]][v0][m0] ≠ unmapped → (avols[v, avols[v][m, unmapped]][v0][m0] = erased → avols0[v0][m0] = erased) ∧ (avols[v, avols[v][m, unmapped]][v0][m0].mapped? → avols0[v0][m0] = avols[v, avols[v][m, unmapped]][v0][m0]))) |
m < # avols[v], ebm-cons(avols0), ebm-cons(avols), v ∈ avols, avols ⊆ avols0 ⊦ (v0 ∈ avols[v, avols[v][m, unmapped]] ↔ v0 ∈ avols0) ∧ ( v0 ∈ avols[v, avols[v][m, unmapped]] → # avols[v, avols[v][m, unmapped]][v0] = # avols0[v0] ∧ ( m0 < # avols[v, avols[v][m, unmapped]][v0] ∧ avols[v, avols[v][m, unmapped]][v0][m0] ≠ unmapped → (avols[v, avols[v][m, unmapped]][v0][m0] = erased → avols0[v0][m0] = erased) ∧ (avols[v, avols[v][m, unmapped]][v0][m0].mapped? → avols0[v0][m0] = avols[v, avols[v][m, unmapped]][v0][m0])))