| validrefs(str, r ' + refs2 + r1 ', st[r -- _type] .type, st), ∀ st, r, str, refs. # refs < # (refs2 + r1 ') → ( validrefs(str, r ' + refs, st[r -- _type] .type, st) → (∃ refs0, r0. ¬ dups(refs0) ∧ r0 ∈ refs0 ∧ refs0 .first = r ∧ validrefs(str, refs0 + r0 ', st[refs0 .first -- _type] .type, st)) ∨ ¬ r ∈ refs ∧ ¬ dups(refs)) ⊦ ∃ refs0, r0. ¬ dups(refs0) ∧ r0 ∈ refs0 ∧ refs0 .first = r ∧ validrefs(str, refs0 + r0 ', st[refs0 .first -- _type] .type, st), ¬ r ∈ refs2 ∧ ¬ dups(refs2) ∧ (r1 = r ∨ r1 ∈ refs2), ¬ r ∈ refs2 ∧ r ≠ r1 ∧ ¬ dups(refs2 + r1 ') |
dups(r ' + refs2), validrefs(str, r ' + refs2 + r1 ', st[r -- _type] .type, st), ∀ st, r, str, refs. # refs < # (refs2 + r1 ') → ( validrefs(str, r ' + refs, st[r -- _type] .type, st) → (∃ refs0, r0. ¬ dups(refs0) ∧ r0 ∈ refs0 ∧ refs0 .first = r ∧ validrefs(str, refs0 + r0 ', st[refs0 .first -- _type] .type, st)) ∨ ¬ r ∈ refs ∧ ¬ dups(refs)) ⊦ ∃ refs0, r0. ¬ dups(refs0) ∧ r0 ∈ refs0 ∧ refs0 .first = r ∧ validrefs(str, refs0 + r0 ', st[refs0 .first -- _type] .type, st), ¬ r ∈ refs2 ∧ ¬ dups(refs2) ∧ (r1 = r ∨ r1 ∈ refs2), ¬ r ∈ refs2 ∧ r ≠ r1 ∧ ¬ dups(refs2 + r1 ')
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ dups(r ' + refs) ↔ dups(refs) ∨ r ∈ refs], [CSIMPSEQ : ⊦ (refs + refs0) + refs1 = refs + refs0 + refs1], [CSIMPSEQ : ⊦ dups(refs + r ') ↔ r ∈ refs ∨ dups(refs)])], [EXTRAFMAS : (dups(r ' + refs2))]]