| m3 ∈ used-ecs(wlar, m) ↔ (∃ m1. m1 < m ∧ wlar[m1].status = used ∧ wlar[m1].ec = m3), wlar[m] = wl-entry(m2, stat), wlar[m0] = wl-entry(m3, used), m0 < # wlar, m < # wlar, m0 ≤ m ⊦ stat = used, m3 ∈ used-ecs(wlar, m) |
wlar[m0] = wl-entry(m3, used), wlar[m] = wl-entry(m2, stat), m < # wlar, m0 < # wlar, m0 ≤ m ⊦ stat = used, m3 ∈ used-ecs(wlar, m), ∃ m1. m1 < m ∧ wlar[m1].status = used ∧ wlar[m1].ec = m3