| ∀ r, st, r0. validFields(r, fis0, st) → (update(r, fis0, st)[r0 -- _length]) = st[r0 -- _length], validFields(r, fv + fis0, st) ⊦ (update(r, fv + fis0, st)[r0 -- _length]) = st[r0 -- _length] |
⊦ update(r, fv ' + fis, st) = (update(r, fis, st)[r -- fv .1, fv .2])
validFields(r, fv ' + fis0, st), ∀ r, st, r0. validFields(r, fis0, st) → (update(r, fis0, st)[r0 -- _length]) = st[r0 -- _length] ⊦ (update(r, fis0, st)[r -- fv .1, fv .2][r0 -- _length]) = st[r0 -- _length]
[[CONCRETESIMPRULES : ([CSIMPSEQ : ⊦ (fis + fis0) + fis1 = fis + fis0 + fis1], [CSIMPSEQ : ⊦ fv + fis = fv ' + fis])]]