| rs1 ∩ rs0 = ∅, R[rs0, f, g], r ∈ rs0, ∀ r. r ∈ rs1 → g(r) = a0, ∀ r1. (r1 ∈ rs1 ↔ r1 = r) ∧ (r1 ∈ rs1 → f(r1) = (r1 = r ⊃ o;(∅ ++ r)[r1])) ⊦ # rs0 = 0, r = null, r0 = r, rs0 = ∅, R[rs0, f, g(r; a1)], r0 ∈ rs1, (a1[r => o] * R)[rs1 ∪ rs0, f, g(r; a1)] ∧ g(r) = a0 |
Used simplifier rules: int-a: ⊦ (rs ∩ rs0) ∩ rs1 = rs ∩ rs0 ∩ rs1; from specification set-union[refset]%int-c: ⊦ rs ∩ rs0 = rs0 ∩ rs; from specification set-union[refset]% ⊦ rs ∩ rs0 = ∅ ∧ r ∈ rs → (r ∈ rs0 ↔ false); (as) Used terms: r