| st0 = st1, onlyModified(r, st0, st1), ∀ st1, r, st. # st < # st0 → (onlyModified(r, st, st1) → (∃ fis. st1 = update(r, fis, st) ∧ validFields(r, fis, st))) ⊦ ∃ fis. st1 = update(r, fis, st0) ∧ validFields(r, fis, st0) |
∀ st2, r, st. # st < # st1 → (onlyModified(r, st, st2) → (∃ fis. st2 = update(r, fis, st) ∧ validFields(r, fis, st))) ⊦ ∃ fis. st1 = update(r, fis, st1) ∧ validFields(r, fis, st1)
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ onlyModified(r, st, st)])]]