| ∀ r, r0, st, sk, val. r = r0 ∨ (hasKeys(r, sks0, st[r0 -- sk, val]) ↔ hasKeys(r, sks0, st)) ⊦ r = r0, hasKeys(r, sk0 + sks0, st[r0 -- sk, val]) ↔ hasKeys(r, sk0 + sks0, st) |
⊦ hasKeys(r, sks + sks0, st) ↔ hasKeys(r, sks, st) ∧ hasKeys(r, sks0, st)
⊦ hasKeys(r, sk ', st) ↔ r -- sk ∈ st
∀ r, r0, st, sk, val. r = r0 ∨ (hasKeys(r, sks0, st[r0 -- sk, val]) ↔ hasKeys(r, sks0, st)) ⊦ r = r0, r -- sk0 ∈ st ∧ hasKeys(r, sks0, st[r0 -- sk, val]) ↔ hasKeys(r, sk0 ' + sks0, st)
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ (sks + sks0) + sks1 = sks + sks0 + sks1], [CSIMPSEQ : ⊦ r ≠ r0 → ( r -- sk ∈ st[r0 -- sk0, val] ↔ r -- sk ∈ st)], [CSIMPSEQ : ⊦ sk + sks = sk ' + sks])]]