| a = st[a, d0].min ⊦ a0 = a, a0 = st[a, d].min, a ∈ st, (a0 ∈ st[a, d] -- st[a, d].min ↔ a0 ∈ st) ∧ st[a, d][a0] = st[a0] |
a = st[a, d0].min ⊦ a0 = a, a0 = st[a, d].min, a0 ∈ st[a, d] -- st[a, d].min ↔ a0 ∈ st, a ∈ st
Used simplifier rules: At-other: ⊦ a ≠ b → st[b, d][a] = st[a]; from specification store