| ¬ a0 ≠ st[a, d].min, a = st[a, d0].min ⊦ a ∈ st, (a0 ∈ st[a, d] -- st[a, d].min ↔ a0 ∈ st) ∧ (st[a, d] -- st[a, d].min)[a0] = st[a0] |
a = st[a, d0].min ⊦ a ∈ st, (st[a, d].min ∈ st[a, d] -- st[a, d].min ↔ st[a, d].min ∈ st) ∧ (∅)[st[a, d].min] = st[st[a, d].min]
Used simplifier rules: lookupisempty: ⊦ (st -- a)[a] = (∅)[a]; from specification store