| ∀ str, ty, st, fs, r0, val. ¬ validrefs(str, acc, ty, st) ∧ ¬ junkref(str, acc .first, st) ∧ fs ' ≠ _type ∧ is_classtype(st[r0 -- _type] .type) ∧ ¬ fs ' ∈ instfields(st[r0 -- _type] .type .class) ∧ acc ≠ [] ∧ ¬ dups(acc .butlast) → ¬ validrefs(str, acc, ty, st[r0 -- fs ', val]) ⊦ ¬ validrefs(str, r + acc, ty, st) ∧ ¬ junkref(str, (r + acc) .first, st) ∧ fs ' ≠ _type ∧ is_classtype(st[r0 -- _type] .type) ∧ ¬ fs ' ∈ instfields(st[r0 -- _type] .type .class) ∧ r + acc ≠ [] ∧ ¬ dups((r + acc) .butlast) → ¬ validrefs(str, r + acc, ty, st[r0 -- fs ', val]) |
is_classtype(st[r0 -- _type] .type), validrefs(str, r ' + acc, ty, st[r0 -- fs ', val]), ∀ str, ty, st, fs, r0, val. ¬ validrefs(str, acc, ty, st) ∧ ¬ junkref(str, acc .first, st) ∧ fs ' ≠ _type ∧ is_classtype(st[r0 -- _type] .type) ∧ ¬ fs ' ∈ instfields(st[r0 -- _type] .type .class) ∧ acc ≠ [] ∧ ¬ dups(acc .butlast) → ¬ validrefs(str, acc, ty, st[r0 -- fs ', val]) ⊦ fs ' = _type, dups((r ' + acc) .butlast), fs ' ∈ instfields(st[r0 -- _type] .type .class), junkref(str, r, st), validrefs(str, r ' + acc, ty, st)
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ (r ' + refs) .first = r], [CSIMPSEQ : ⊦ (refs + refs0) + refs1 = refs + refs0 + refs1], [CSIMPSEQ : ⊦ r ' + refs ≠ []], [CSIMPSEQ : ⊦ r + refs = r ' + refs])]]