| m3 ∈ used-ecs(wlar, m) ↔ (∃ m1. m1 < m ∧ wlar[m1].status = used ∧ wlar[m1].ec = m3), wlar[m] = wl-entry(m2, stat), wlar[m0] = wl-entry(m3, stat0), stat0 = used, m0 < # wlar, m < # wlar, m0 ≤ m ⊦ m3 ∈ (stat = used ⊃ used-ecs(wlar, m) ++ m2;used-ecs(wlar, m)) |
m3 ∈ used-ecs(wlar, m) ↔ (∃ m1. m1 < m ∧ wlar[m1].status = used ∧ wlar[m1].ec = m3), wlar[m0] = wl-entry(m3, used), wlar[m] = wl-entry(m2, stat), m < # wlar, m0 < # wlar, m0 ≤ m ⊦ m3 ∈ (stat = used ⊃ used-ecs(wlar, m) ++ m2;used-ecs(wlar, m))