| ∀ r, sks0, st. hasKeys(r, sks1 + sks0, st) ↔ hasKeys(r, sks1, st) ∧ hasKeys(r, sks0, st) ⊦ hasKeys(r, (sk + sks1) + sks0, st) ↔ hasKeys(r, sk + sks1, st) ∧ hasKeys(r, sks0, st) |
⊦ hasKeys(r, sk ' + sks, st) ↔ r -- sk ∈ st ∧ hasKeys(r, sks, st)
∀ r, sks0, st. hasKeys(r, sks1 + sks0, st) ↔ hasKeys(r, sks1, st) ∧ hasKeys(r, sks0, st) ⊦ r -- sk ∈ st ∧ hasKeys(r, sks1 + sks0, st) ↔ hasKeys(r, sk ' + sks1, st) ∧ hasKeys(r, sks0, st)
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ (sks + sks0) + sks1 = sks + sks0 + sks1], [CSIMPSEQ : ⊦ sk + sks = sk ' + sks])]]