| ∀ st2, r, st. # st < # st1 → (onlyModified(r, st, st2) → (∃ fis. st2 = update(r, fis, st) ∧ validFields(r, fis, st))) ⊦ ∃ fis. st1 = update(r, fis, st1) ∧ validFields(r, fis, st1) |
⊦ update(r, [], st) = st
⊦ validFields(r, [], st)
[[CONCRETESIMPRULES : ()], [EXTRATERMS : ([])]]