| ¬ sks0 ≠ [], unchanged(str, r, st, st0), fits(r, sk ' + sks0, st0), fits(r, sk ' + sks0, st), ∀ r, st0, st, str. fits(r, sks0, st0) ∧ fits(r, sks0, st) ∧ unchanged(str, r, st, st0) → st[r -- sks0] = st0[r -- sks0] ∨ junkref(str, r, st) ∨ junkref(str, r, st0) ⊦ st[r -- (sk ' + sks0)] = st0[r -- (sk ' + sks0)], junkref(str, r, st), junkref(str, r, st0) |
⊦ fits(r, [], st)
unchanged(str, r, st, st0), fits(r, sk ', st0), fits(r, sk ', st) ⊦ st[r -- sk] = st0[r -- sk], junkref(str, r, st), junkref(str, r, st0)
[[CONCRETESIMPRULES : ([CSIMPNAMEDSEQ : javavalue, , inj-03, ⊦ refval(r) = refval(r0) ↔ r = r0], [CSIMPNAMEDSEQ : storefuns, , lookup-empty, ⊦ st[r -- []] = refval(r)], [CSIMPNAMEDSEQ : storefuns, , lookup-one, ⊦ st[r -- sk '] = st[r -- sk]], [CSIMPNAMEDSEQ : list, storekeys, a, ⊦ (sks + sks0) + sks1 = sks + sks0 + sks1], [CSIMPNAMEDSEQ : list, storekeys, app, ⊦ sks + [] = sks])]]