| ⊦ ∀ a0. (a0 ∈ (st -- a) \ s ↔ a0 ∈ (st \ s) -- a) ∧ (a0 ∈ (st -- a) \ s → ((st -- a) \ s)[a0] = ((st \ s) -- a)[a0]) |
⊦ (a0 ∈ (st -- a) \ s ↔ a0 ∈ (st \ s) -- a) ∧ (a0 ∈ (st -- a) \ s → ((st -- a) \ s)[a0] = (st \ s)[a0])
Used simplifier rules: Del-at-strong: a ≠ b ⊦ (st -- b)[a] = st[a]; from specification store%Del-notin: ⊦ ¬ a ∈ st -- a; from specification store