| H1[r, o1] = H0 ∪ H, ((r => o1 * P))(H0), P0(H), rely(me, O1, H1[r, o1], O2, H2), r ∈ H1, r ∈ H0, H0 ⊥ H, ∀ r. r ∈ H0 → O2(r) = me ⊦ (H1[r] = H1[r] ∧ ((r =>_ * P))(H0)) ∧ (r0 ∈ H0 → O2(r0) = me) |
H1[r, o1] = H0 ∪ H, ((r => o1 * P))(H0), P0(H), rely(me, O1, H1[r, o1], O2, H2), r ∈ H1, r0 ∈ H0, H0 ⊥ H, ∀ r. r ∈ H0 → O2(r) = me ⊦ O2(r0) = me
Used simplifier rules: ⊦ ((r => o * P))(H) → ((r =>_ * P))(H); (s)% ⊦ ((r => o * P))(H) → r ∈ H; (s)%sep-com: ⊦ P0 * P1 = P1 * P0; from specification heap-sep%sep-ass: ⊦ (P0 * P1) * P2 = P0 * P1 * P2; from specification heap-sep