| ⊦ (∀ a. a ∈ st1 → a ∈ st2 ∧ st1[a] = st2[a]) ↔ (∀ a. a ∈ st1 → a ∈ st2 ∧ lookup(a, st1) = lookup(a, st2)) |
a ∈ st1, ∀ a. a ∈ st1 → a ∈ st2 ∧ lookup(a, st1) = lookup(a, st2) ⊦ a ∈ st2 ∧ lookup(a, st1) = lookup(a, st2)
Used simplifier rules: lookup-def: ⊦ st[a] = lookup(a, st); from specification lookup