| a0 = a, a = st[a, d0].min ⊦ a0 = st[a, d].min, a ∈ st, (a0 ∈ st[a, d] -- st[a, d].min ↔ a0 ∈ st) ∧ st[a, d][a0] = st[a0] |
a = st[a, d0].min ⊦ a = st[a, d].min, a ∈ st, ¬ a ∈ st[a, (∅)[a]] -- st[a, (∅)[a]].min ∧ d = (∅)[a]
Used simplifier rules: notmemlookup: ⊦ ¬ a ∈ st → st[a] = (∅)[a]; from specification store%At-same: ⊦ st[a, d][a] = d; from specification store