| ¬ junkref(str, r, st), st ⊆ st0, validrefs(str, r ' + refs, ty, st0), ∀ st, st0, ty, r, str, refs0. # refs0 < # refs → (validrefs(str, r ' + refs0, ty, st0) ∧ st ⊆ st0 ∧ validref(str, r, st[r -- _type] .type, st) → validrefs(str, r ' + refs0, ty, st)) ⊦ validrefs(str, r ' + refs, ty, st) |
validrefs(str, r ' + refs, ty, st0), st ⊆ st0, ∀ st, st0, ty, r, str, refs0. # refs0 < # refs → (validrefs(str, r ' + refs0, ty, st0) ∧ st ⊆ st0 ∧ validref(str, r, st[r -- _type] .type, st) → validrefs(str, r ' + refs0, ty, st)) ⊦ junkref(str, r, st), validrefs(str, r ' + refs, ty, st)
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ (refs + refs0) + refs1 = refs + refs0 + refs1])]]