| ¬ (r0 ≠ jvmref ∧ (¬ is_valid_ref(str, r0, st) ∨ ¬ st[r0 -- _type] .type ≤ ty)), validrefs(str, r ' + refs0, ty0, st), validrefs(str, (r0 ' + acc) + r ', ty, st), ∀ str, r, refs0, ty0, st, ty. validrefs(str, r ' + refs0, ty0, st) ∧ validrefs(str, acc + r ', ty, st) → validrefs(str, acc + r ' + refs0, ty, st) ⊦ validrefs(str, (r0 ' + acc) + r ' + refs0, ty, st) |
⊦ validrefs(str, jvmref ' + refs, ty, st) ↔ refs = []
validrefs(str, r ' + refs0, ty0, st), validrefs(str, (r0 ' + acc) + r ', ty, st), is_valid_ref(str, r0, st), st[r0 -- _type] .type ≤ ty, ∀ str, r, refs0, ty0, st, ty. validrefs(str, r ' + refs0, ty0, st) ∧ validrefs(str, acc + r ', ty, st) → validrefs(str, acc + r ' + refs0, ty, st) ⊦ r0 = jvmref, validrefs(str, (r0 ' + acc) + r ' + refs0, ty, st)
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ (refs + refs0) + refs1 = refs + refs0 + refs1], [CSIMPSEQ : ⊦ r ' ≠ []], [CSIMPSEQ : ⊦ ¬ refs + refs0 ≠ [] ↔ refs = [] ∧ refs0 = []])]]