| st[r -- _type] .type ≤ ty, is_obj(str, r, st), ∀ str, ty, st, sk, val. validrefs(str, acc, ty, st[jvmref -- sk, val]) ↔ validrefs(str, acc, ty, st) ⊦ validrefs(str, r ' + acc, ty, st[jvmref -- sk, val]) ↔ acc = [] ∨ (∃ fs. fs ' ∈ instfields(st[r -- _type] .type .class) ∧ is_referencevalue(st[r -- fs ']) ∧ acc .first = st[r -- fs '] .refval ∧ validrefs(str, acc, fs .type, st)), r = jvmref |
⊦ is_obj(str, r, st) ∧ st[r -- _type] .type ≤ ty → ( validrefs(str, r ' + refs, ty, st) ↔ refs = [] ∨ (∃ fs. fs ' ∈ instfields(st[r -- _type] .type .class) ∧ is_referencevalue(st[r -- fs ']) ∧ refs .first = st[r -- fs '] .refval ∧ validrefs(str, refs, fs .type, st)))
is_obj(str, r, st[jvmref -- sk, val]) ∧ (st[jvmref -- sk, val][r -- _type]) .type ≤ ty, st[r -- _type] .type ≤ ty, is_obj(str, r, st), ∀ str, ty, st, sk, val. validrefs(str, acc, ty, st[jvmref -- sk, val]) ↔ validrefs(str, acc, ty, st) ⊦ acc = [] ∨ (∃ fs. fs ' ∈ instfields((st[jvmref -- sk, val][r -- _type]) .type .class) ∧ is_referencevalue(st[jvmref -- sk, val][r -- fs ']) ∧ acc .first = (st[jvmref -- sk, val][r -- fs ']) .refval ∧ validrefs(str, acc, fs .type, st[jvmref -- sk, val])) ↔ acc = [] ∨ (∃ fs. fs ' ∈ instfields(st[r -- _type] .type .class) ∧ is_referencevalue(st[r -- fs ']) ∧ acc .first = st[r -- fs '] .refval ∧ validrefs(str, acc, fs .type, st)), r = jvmref
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ is_obj (str, r, st[jvmref -- sk, val]) ↔ is_obj(str, r, st)], [CSIMPSEQ : ⊦ r ≠ r0 → (st[r0 -- sk0, val][r -- sk]) = st[r -- sk]])], [EXTRATERMS : (st[jvmref -- sk, val], ty, acc, r, str)]]