| (λ a, d. P) ∧_ st0 = P, ∀ st1, P. # st1 < # st0[a, d] → true → st1 = ∅ ∨ (λ a, d. P) ∧_ st1 = P ⊦ (P ∧ P) = P, st0 = ∅, a ∈ st0 |
Used simplifier rules: ⊦ ((P0 ∧ P1))(H) ↔ P0(H) ∧ P1(H); (s)%and-ass: ⊦ ((P0 ∧ P1) ∧ P2) = (P0 ∧ P1 ∧ P2); from specification heap-sep%and-com: ⊦ (P0 ∧ P1) = (P1 ∧ P0); from specification heap-sep