| ⊦ a = st[a, d].min, (a0 ∈ st[a, d] -- st[a, d].min ↔ a0 ∈ (st -- st.min)[a, d]) ∧ (st[a, d] -- st[a, d].min)[a0] = (st -- st.min)[a, d][a0] |
⊦ a0 = a, a = st[a, d].min, (a0 ∈ st[a, d] -- st[a, d].min ↔ a0 ∈ (st -- st.min)[a, d]) ∧ (st[a, d] -- st[a, d].min)[a0] = (st -- st.min)[a, d][a0]
Used simplifier rules: insin: ⊦ a ∈ st[a, d]; from specification store%Del-in: ⊦ a ∈ st -- b ↔ a ≠ b ∧ a ∈ st; from specification store%Del-at: ⊦ a ≠ b → (st -- b)[a] = st[a]; from specification store%At-same: ⊦ st[a, d][a] = d; from specification store Used formulas: a0 = a