| ¬ (r ≠ jvmref ∧ (¬ is_valid_ref(str, r, st[r0 -- sk, val]) ∨ ¬ (st[r0 -- sk, val][r -- _type]) .type ≤ ty)), validrefs(str, (r ' + acc) + r0 ', ty, st[r0 -- sk, val]), ∀ str, r0, ty, st, sk, val. ¬ validrefs(str, acc + r0 ', ty, st) ∧ ¬ junkref(str, acc .first, st) ∧ acc ≠ [] ∧ ¬ r0 ∈ acc ∧ sk ≠ _type → ¬ validrefs(str, acc + r0 ', ty, st[r0 -- sk, val]) ⊦ sk = _type, r0 = r, r0 ∈ acc, junkref(str, r, st), validrefs(str, (r ' + acc) + r0 ', ty, st) |
⊦ validrefs(str, jvmref ' + refs, ty, st) ↔ refs = []
validrefs(str, (r ' + acc) + r0 ', ty, st[r0 -- sk, val]), is_valid_ref(str, r, st), st[r -- _type] .type ≤ ty, ∀ str, r0, ty, st, sk, val. ¬ validrefs(str, acc + r0 ', ty, st) ∧ ¬ junkref(str, acc .first, st) ∧ acc ≠ [] ∧ ¬ r0 ∈ acc ∧ sk ≠ _type → ¬ validrefs(str, acc + r0 ', ty, st[r0 -- sk, val]) ⊦ sk = _type, r0 = r, r = jvmref, r0 ∈ acc, junkref(str, r, st), validrefs(str, (r ' + acc) + r0 ', ty, st)
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ (refs + refs0) + refs1 = refs + refs0 + refs1], [CSIMPSEQ : ⊦ r ' ≠ []], [CSIMPSEQ : ⊦ ¬ refs + refs0 ≠ [] ↔ refs = [] ∧ refs0 = []], [CSIMPSEQ : ⊦ sk ≠ sk0 → (st[r -- sk, val][r0 -- sk0]) = st[r0 -- sk0]], [CSIMPSEQ : ⊦ r ≠ r0 → ( is_valid_ref (str, r0, st[r -- sk, val]) ↔ is_valid_ref(str, r0, st))])]]