| Q0 ⊆ P0, ∃ H0, H1. H0 ⊥ H1 ∧ H = H0 ∪ H1 ∧ Q0(H0) ∧ ((P0 -* P1))(H1) ⊦ P1(H), Q1(H) |
((P0 -* P1))(H0), P0(H1), Q0(H1), Q0 ⊆ P0, H1 ⊥ H0 ⊦ P1(H1 ∪ H0), Q1(H1 ∪ H0)
Used simplifier rules: Imp1: ⊦ P0 ⊆ P1 ∧ P0(H) → P1(H); (forward) from specification heap-sep